$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa File: ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa (raw, json) Hash identifier: IZyvClCc6JgAyge5GfHVP3n5OivuNFau51zyuYz9g2I= Subject key identifier: C8:C6:35:53:B5:D9:1B:0F:67:8B:1C:84:EB:72:14:90:16:38:8F:56 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: F29BD7722A45084CE2F556945042B45F964D21 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa Signing time: Wed 13 May 2026 00:20:35 +0000 ROA not before: Wed 13 May 2026 00:20:35 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.220.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f2:9b:d7:72:2a:45:08:4c:e2:f5:56:94:50:42:b4:5f:96:4d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:20:35 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=cfdd5e6b5c4504478b768993615a99a333d7adfde96af61e97f958b569534464, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:5c:56:26:4f:2a:a5:8f:79:b0:ee:ee:4f: 9e:23:36:6b:49:d5:89:ac:38:e4:87:bb:bc:b8:ad: 3f:bf:10:d2:b7:46:a2:5d:64:93:65:27:c4:da:c0: 9e:11:43:ed:ed:84:11:4c:b2:1c:5f:20:94:bb:ef: 79:8e:7b:9a:4a:01:9f:41:e1:09:c2:5c:dd:07:46: 8b:86:b6:92:7a:6c:31:9e:6e:f5:0d:61:20:58:23: ef:8a:11:0d:24:71:5e:df:8c:da:c7:ca:c2:e1:ea: 19:0e:19:73:d8:ab:d6:16:64:47:47:e6:1c:68:4f: c6:43:8e:5f:c4:21:4a:e6:d9:9f:ab:11:0e:7d:a5: f3:9a:d8:d2:d0:14:cb:43:6b:dd:0a:4a:51:5c:90: b5:79:f1:cb:91:9a:be:20:78:ee:17:00:37:6c:9a: 6d:5d:b4:bc:9b:0b:e2:22:0d:a9:e6:3d:0e:3e:a7: 7d:08:e8:b8:03:ea:64:ef:4b:e9:a7:f3:9b:b4:b6: c6:52:14:5e:5f:d4:43:cb:6e:c3:d3:e2:d2:a4:a7: 17:b9:6c:74:f2:54:e1:09:1e:ee:84:69:33:fd:0f: 78:9d:47:41:20:67:97:6a:b6:8a:14:82:89:d5:3d: c1:50:b0:72:86:70:cd:27:32:07:3d:4e:37:96:b1: 81:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C6:35:53:B5:D9:1B:0F:67:8B:1C:84:EB:72:14:90:16:38:8F:56 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7f:87:0f:8e:94:d2:b0:de:91:4e:76:f4:f4:14:26:77:da:be: ac:32:b3:bb:51:36:46:5c:82:63:55:18:a3:03:c1:01:43:c4: 48:d2:02:45:e4:f9:40:89:f0:71:d4:b4:47:b3:dd:13:1c:2d: bd:9d:0c:72:01:3a:45:56:26:15:78:bb:9f:40:f2:69:f2:a4: c0:2e:90:ee:19:f2:e2:61:f3:17:53:34:03:0d:92:92:a1:6e: 45:4b:94:b8:b9:16:07:89:71:6a:09:ac:cc:b6:bc:70:f3:ed: 2c:8e:04:60:4d:f1:e7:cc:b4:45:49:bc:de:09:bd:37:36:6e: ea:ff:a1:56:ed:c2:e2:54:12:9c:6d:7f:3c:49:2c:3c:68:f8: 6d:bd:09:68:ec:e4:e6:88:70:3f:7d:fe:61:fd:c7:3e:1e:bf: 82:6c:5d:49:91:cd:8f:1e:49:c3:24:09:f3:ca:0e:85:2a:b8: f5:2f:ed:9d:ff:ed:26:af:e6:24:7c:f1:e4:c2:f7:53:e3:38: 92:c4:30:94:c2:0f:cb:05:99:67:68:82:c6:55:32:07:81:f5: 1a:22:2b:8a:7c:e5:4d:17:e8:79:08:85:4f:f4:0c:b6:3b:f9: c7:54:42:a5:d9:92:44:9e:86:8d:87:ea:b7:86:57:e6:31:4c: c8:3c:07:b1 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUAPKb13IqRQhM4vVWlFBCtF+WTSEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMjAzNVoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAY2ZkZDVlNmI1YzQ1MDQ0NzhiNzY4 OTkzNjE1YTk5YTMzM2Q3YWRmZGU5NmFmNjFlOTdmOTU4YjU2OTUzNDQ2NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JJcViZPKqWPebDu7k+eIzZrSdWJ rDjkh7u8uK0/vxDSt0aiXWSTZSfE2sCeEUPt7YQRTLIcXyCUu+95jnuaSgGfQeEJ wlzdB0aLhraSemwxnm71DWEgWCPvihENJHFe34zax8rC4eoZDhlz2KvWFmRHR+Yc aE/GQ45fxCFK5tmfqxEOfaXzmtjS0BTLQ2vdCkpRXJC1efHLkZq+IHjuFwA3bJpt XbS8mwviIg2p5j0OPqd9COi4A+pk70vpp/ObtLbGUhReX9RDy27D0+LSpKcXuWx0 8lThCR7uhGkz/Q94nUdBIGeXaraKFIKJ1T3BULByhnDNJzIHPU43lrGBLQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFMjGNVO12RsPZ4schOtyFJAWOI9WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VjYjg1ZGE1LTA3ZDItNGM1My04NzVkLWViZjMxNWIxZTU4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9wwDQYJKoZIhvcNAQELBQADggEBAH+HD46U0rDekU529PQUJnfa vqwys7tRNkZcgmNVGKMDwQFDxEjSAkXk+UCJ8HHUtEez3RMcLb2dDHIBOkVWJhV4 u59A8mnypMAukO4Z8uJh8xdTNAMNkpKhbkVLlLi5FgeJcWoJrMy2vHDz7SyOBGBN 8efMtEVJvN4JvTc2bur/oVbtwuJUEpxtfzxJLDxo+G29CWjs5OaIcD99/mH9xz4e v4JsXUmRzY8eScMkCfPKDoUquPUv7Z3/7Sav5iR88eTC91PjOJLEMJTCD8sFmWdo gsZVMgeB9RoiK4p85U0X6HkIhU/0DLY7+cdUQqXZkkSeho2H6reGV+YxTMg8B7E= -----END CERTIFICATE-----Generated at Sat Jun 13 08:01:25 2026 by rpki-client