$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa File: e120613f-4f08-405b-bea7-3ea01da9b0df.roa (raw, json) Hash identifier: acnyxRwsS+vIQj/wQbpkRg2DEhv/FY1CTozY7zaIkHc= Subject key identifier: 92:F0:C6:23:69:42:A2:7D:CE:59:18:3C:00:0B:EC:A7:18:96:6B:11 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 10BABE443D53E9CED1F0053EC34529CF58309FF1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa Signing time: Tue 24 Feb 2026 00:00:27 +0000 ROA not before: Tue 24 Feb 2026 00:00:27 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ba:be:44:3d:53:e9:ce:d1:f0:05:3e:c3:45:29:cf:58:30:9f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 24 00:00:27 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=2af4497eb435320cfd7d4068f404c630e371d719690213005aaf64b4db385975, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:19:85:84:55:65:1f:9d:1a:0f:f0:27:97:6a: cd:eb:68:8f:86:61:74:4b:06:d5:f1:01:72:ae:0b: 04:fc:b2:3e:3e:b1:5b:d6:f1:03:c5:04:a6:8d:ad: 1c:ed:c2:f6:70:e5:1a:0c:bc:32:18:00:f6:e0:9d: c0:2f:67:bf:b6:f4:fc:c0:91:fc:d8:51:81:b9:c4: 9d:73:d7:83:ee:d0:72:c3:d1:7a:a9:58:28:0c:c9: fe:4e:95:af:34:06:6f:a0:a7:5e:9e:c0:be:63:95: 3b:d0:a4:68:30:8d:96:8f:6b:79:3f:7a:bd:55:eb: 9f:e2:eb:78:96:88:8b:10:a7:52:7c:a9:8a:d5:b5: 5f:e0:35:5e:0c:40:37:49:e8:c8:23:1c:ce:f8:1f: b9:b1:bc:88:ca:7b:48:de:07:5e:db:cd:62:e0:f4: a7:2b:3e:d1:38:0f:92:e6:b8:2a:c3:8e:0e:47:e1: a3:68:a6:39:3e:d8:a3:80:45:f2:88:0e:91:c3:bf: 20:1a:64:c9:dc:7a:69:45:b3:a6:00:99:01:20:47: f5:85:e8:14:d2:10:5f:d9:53:22:f8:14:79:09:f3: b2:0c:d3:99:6f:a5:33:b6:e9:9b:6b:3e:b2:73:e6: 15:fa:fc:1b:d4:2e:43:35:8b:94:da:05:20:6e:54: 42:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F0:C6:23:69:42:A2:7D:CE:59:18:3C:00:0B:EC:A7:18:96:6B:11 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.64.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:e7:cc:e6:72:bb:8a:87:75:31:98:5c:8b:c8:38:c6:3a:de: f4:8c:f2:4d:de:ed:e1:b9:c7:57:a2:79:b5:39:94:d1:b8:26: bb:7b:11:03:8e:5a:80:62:bc:88:a2:12:a8:af:e4:53:e4:7b: da:e6:f1:c6:b7:25:9e:16:28:cb:9c:d5:fe:06:b6:fd:c9:ab: 55:66:0e:44:d6:b0:bd:e8:d4:17:73:34:9e:87:7a:93:b1:f9: 0e:95:d5:94:8a:b5:a8:37:c3:3c:74:cd:90:a0:d0:1e:55:ba: d4:de:f9:bd:4f:02:25:10:cd:7e:a5:b4:e4:9e:b0:2f:fe:df: f7:24:48:7e:b1:68:8b:ba:e3:9c:fb:e9:2c:6d:77:fa:e2:41: 57:33:d1:d7:6e:e6:87:d0:1c:48:c2:0d:d4:15:35:0f:58:74: af:6f:c7:20:53:af:54:5a:a9:b3:be:30:ad:6b:3e:ba:88:4d: 25:17:4c:27:54:a2:f4:f8:4a:79:03:5e:5c:93:67:c6:38:8b: b7:94:89:57:36:77:e3:48:76:4c:82:5a:82:3b:b7:07:94:71: 99:c9:e7:cf:a5:78:9c:bf:1b:51:2c:ee:27:b8:60:31:97:46: dd:64:f5:3c:a9:6c:f8:de:4f:3c:97:6c:a2:66:6d:79:61:0f: 28:33:b7:d8 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUELq+RD1T6c7R8AU+w0Upz1gwn/EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIyNDAwMDAyN1oX DTI2MDUyNTIzNTk1OVowejFJMEcGA1UEBRNAMmFmNDQ5N2ViNDM1MzIwY2ZkN2Q0 MDY4ZjQwNGM2MzBlMzcxZDcxOTY5MDIxMzAwNWFhZjY0YjRkYjM4NTk3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxmFhFVlH50aD/Anl2rN62iPhmF0 SwbV8QFyrgsE/LI+PrFb1vEDxQSmja0c7cL2cOUaDLwyGAD24J3AL2e/tvT8wJH8 2FGBucSdc9eD7tByw9F6qVgoDMn+TpWvNAZvoKdensC+Y5U70KRoMI2Wj2t5P3q9 Veuf4ut4loiLEKdSfKmK1bVf4DVeDEA3SejIIxzO+B+5sbyIyntI3gde281i4PSn Kz7ROA+S5rgqw44OR+GjaKY5PtijgEXyiA6Rw78gGmTJ3HppRbOmAJkBIEf1hegU 0hBf2VMi+BR5CfOyDNOZb6Uztumbaz6yc+YV+vwb1C5DNYuU2gUgblRCSwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJLwxiNpQqJ9zlkYPAAL7KcYlmsRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxMjA2MTNmLTRmMDgtNDA1Yi1iZWE3LTNlYTAxZGE5YjBkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9hAMA0GCSqGSIb3DQEBCwUAA4IBAQAu58zmcruKh3UxmFyLyDjG Ot70jPJN3u3hucdXonm1OZTRuCa7exEDjlqAYryIohKor+RT5Hva5vHGtyWeFijL nNX+Brb9yatVZg5E1rC96NQXczSeh3qTsfkOldWUirWoN8M8dM2QoNAeVbrU3vm9 TwIlEM1+pbTknrAv/t/3JEh+sWiLuuOc++ksbXf64kFXM9HXbuaH0BxIwg3UFTUP WHSvb8cgU69UWqmzvjCtaz66iE0lF0wnVKL0+Ep5A15ck2fGOIu3lIlXNnfjSHZM glqCO7cHlHGZyefPpXicvxtRLO4nuGAxl0bdZPU8qWz43k88l2yiZm15YQ8oM7fY -----END CERTIFICATE-----Generated at Sun Mar 1 23:48:06 2026 by rpki-client