$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa File: ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa (raw, json) Hash identifier: k2IuwrDJKrG5rxPwkutvzXzcLVbykcLZwuStamKTC7U= Subject key identifier: B2:D5:45:76:9D:6F:C1:CF:99:D7:9C:D4:2F:C1:0F:B4:2E:BC:37:98 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 041AAA2D78A208B96AB0FFA862943EF7874545F6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa Signing time: Tue 20 Oct 2026 00:20:32 +0000 ROA not before: Tue 20 Oct 2026 00:20:32 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 43.220.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1a:aa:2d:78:a2:08:b9:6a:b0:ff:a8:62:94:3e:f7:87:45:45:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:20:32 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=e5e924aec242cbb4c6d2104973505ff0bb6b64fd05f050ed70fb197ed77068e8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:15:76:9b:68:c3:de:f3:af:79:67:34:05: f6:fb:79:54:bc:0e:9c:f2:38:c8:64:9a:a1:af:76: 31:1d:b1:f7:c5:2f:64:6c:a6:78:bc:38:bf:e2:46: 63:1a:e7:90:89:e9:e9:36:08:25:7d:42:1e:05:99: f2:97:20:52:ef:30:82:7f:29:a6:07:d7:cb:34:f1: f5:06:57:24:9e:8a:41:e0:ca:63:a4:6d:3d:2a:da: a4:de:63:81:80:67:b8:79:e8:c5:b4:f5:2a:fe:cd: 41:64:a0:6f:ff:3e:f7:fa:8f:6c:b4:b2:04:12:6c: b4:72:a4:74:f6:16:f0:4c:67:57:bf:b4:59:44:1f: 5b:65:40:78:cf:ff:a3:e7:c7:8d:c7:e7:ca:20:03: e7:5f:ce:a4:b9:cf:32:a3:98:34:9c:93:bf:48:ac: 17:25:d1:a5:91:57:5a:37:fb:13:a0:9b:ff:c6:35: 36:2b:90:83:ac:c9:82:59:9f:62:d7:0a:d4:bf:cb: 09:3e:1e:19:e6:e5:cf:e8:bd:48:8e:1f:ed:a7:99: f5:ab:ab:10:57:5e:a7:04:90:1d:b7:6b:58:a2:ed: 99:61:7e:dc:06:bc:a7:9c:ec:64:02:56:06:98:6f: e2:45:cf:ac:16:da:9b:63:df:9d:ef:63:7b:73:aa: bd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D5:45:76:9D:6F:C1:CF:99:D7:9C:D4:2F:C1:0F:B4:2E:BC:37:98 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 17:9f:26:3c:01:2d:24:32:45:26:c4:05:07:11:1d:37:e5:ca: 1e:9f:4f:6a:43:ff:b6:41:22:8f:13:42:13:2c:3d:e1:8f:74: c1:2f:ad:40:92:5a:6c:c8:91:f6:e2:4f:25:af:fe:36:cf:26: 43:bb:6e:03:87:81:03:c7:61:f5:c6:0e:9d:21:b2:35:c9:62: ef:2b:60:6a:3a:14:f9:bd:ec:da:a1:d6:cc:85:da:e3:ae:72: 62:24:00:ca:54:3b:5f:29:ec:63:27:67:d7:8d:54:20:a7:8b: f1:8c:4c:a8:de:50:6c:88:f4:18:41:46:04:9f:e7:d2:82:84: 30:df:84:f8:fc:df:f6:99:34:fb:38:60:7f:a8:1d:ed:5d:27: 25:b1:cb:4b:6f:28:71:f2:94:91:27:9e:13:49:fe:c3:d8:e1: 40:a4:85:b2:bf:a5:c6:8f:3e:26:1c:93:6a:31:35:f9:b6:b5: cb:2e:34:b9:d8:30:06:40:de:92:8a:e3:0b:87:d1:3e:5d:d3: 1e:53:30:50:20:c3:20:08:15:2c:81:25:8d:e9:29:16:9c:aa: ed:3d:bc:9c:af:b1:b6:64:f9:9e:2e:e5:db:1a:e8:44:49:2f: 12:a3:43:1f:52:65:96:98:ee:40:1d:cb:8e:7f:f4:6c:c8:ad: 07:46:ab:b6 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUBBqqLXiiCLlqsP+oYpQ+94dFRfYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMjAzMloX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNAZTVlOTI0YWVjMjQyY2JiNGM2ZDIx MDQ5NzM1MDVmZjBiYjZiNjRmZDA1ZjA1MGVkNzBmYjE5N2VkNzcwNjhlODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpsVdptow97zr3lnNAX2+3lUvA6c 8jjIZJqhr3YxHbH3xS9kbKZ4vDi/4kZjGueQienpNgglfUIeBZnylyBS7zCCfymm B9fLNPH1BlcknopB4MpjpG09Ktqk3mOBgGe4eejFtPUq/s1BZKBv/z73+o9stLIE Emy0cqR09hbwTGdXv7RZRB9bZUB4z/+j58eNx+fKIAPnX86kuc8yo5g0nJO/SKwX JdGlkVdaN/sToJv/xjU2K5CDrMmCWZ9i1wrUv8sJPh4Z5uXP6L1Ijh/tp5n1q6sQ V16nBJAdt2tYou2ZYX7cBrynnOxkAlYGmG/iRc+sFtqbY9+d72N7c6q9lQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFLLVRXadb8HPmdec1C/BD7QuvDeYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VjYjg1ZGE1LTA3ZDItNGM1My04NzVkLWViZjMxNWIxZTU4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9wwDQYJKoZIhvcNAQELBQADggEBABefJjwBLSQyRSbEBQcRHTfl yh6fT2pD/7ZBIo8TQhMsPeGPdMEvrUCSWmzIkfbiTyWv/jbPJkO7bgOHgQPHYfXG Dp0hsjXJYu8rYGo6FPm97Nqh1syF2uOucmIkAMpUO18p7GMnZ9eNVCCni/GMTKje UGyI9BhBRgSf59KChDDfhPj83/aZNPs4YH+oHe1dJyWxy0tvKHHylJEnnhNJ/sPY 4UCkhbK/pcaPPiYck2oxNfm2tcsuNLnYMAZA3pKK4wuH0T5d0x5TMFAgwyAIFSyB JY3pKRacqu09vJyvsbZk+Z4u5dsa6ERJLxKjQx9SZZaY7kAdy45/9GzIrQdGq7Y= -----END CERTIFICATE-----Generated at Sat Nov 7 10:01:04 2026 by rpki-client