$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0384c943-d0ac-4d4c-b5c3-a670c7e33c51.roa File: 0384c943-d0ac-4d4c-b5c3-a670c7e33c51.roa (raw, json) Hash identifier: CMTXVJU/jPK9nIKIFZ1FWeUU1b1VFdY6Bt8L/quzt/g= Subject key identifier: B0:FC:E7:7A:14:C8:AC:54:AD:69:76:97:52:B6:14:34:B0:7D:66:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 29F8F208CA230898FA2A4BB7B3E7FF3B2315F097 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0384c943-d0ac-4d4c-b5c3-a670c7e33c51.roa Signing time: Mon 03 Aug 2026 00:00:41 +0000 ROA not before: Mon 03 Aug 2026 00:00:41 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f8:f2:08:ca:23:08:98:fa:2a:4b:b7:b3:e7:ff:3b:23:15:f0:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 3 00:00:41 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=5c0911e531a891918c8a5a125f4f1e1a0658c7d2a25c93b8bc85a7dfecc107d3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:e1:12:2b:3d:56:4c:e2:dd:2f:3f:98:22: bf:eb:ea:b4:e5:b8:c5:ee:90:cd:05:46:fd:03:83: 87:37:3a:29:33:27:1d:aa:78:a3:18:06:e0:f8:b1: 31:81:d3:70:66:6e:ee:52:fa:0d:7b:30:20:e1:cb: 00:c7:82:6b:ae:29:c5:e3:2d:4e:a2:55:fa:f2:6f: 97:73:db:5e:c0:40:8c:48:a1:6e:3f:ad:3f:93:53: b7:48:b1:ac:0f:cb:ca:89:4f:0d:26:3b:d9:bd:c7: a6:bf:23:35:66:93:71:bc:02:10:6c:9e:e7:91:9a: 56:0b:6a:0f:4b:ba:73:e1:82:49:e7:3c:68:7b:07: 76:40:0a:df:b6:22:03:01:33:f4:42:54:eb:dd:e3: 85:5f:e9:ed:92:80:72:6d:43:00:3d:eb:4a:03:d2: d8:81:23:12:00:94:bd:db:eb:ab:a8:46:bb:53:dc: c9:7b:ef:ff:09:d4:c7:7b:83:2a:bb:2b:ff:ad:77: 13:44:1a:be:76:bf:41:c7:a8:4d:18:00:30:9e:8e: a6:3a:db:ad:21:68:15:91:eb:8d:7a:fb:be:92:98: 7b:42:3e:72:85:0f:92:44:00:8d:1b:f2:b2:68:07: a7:9a:c8:6f:82:3d:73:73:0f:03:64:5d:9d:e5:d9: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FC:E7:7A:14:C8:AC:54:AD:69:76:97:52:B6:14:34:B0:7D:66:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0384c943-d0ac-4d4c-b5c3-a670c7e33c51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.0.0/15 Signature Algorithm: sha256WithRSAEncryption 44:e0:b6:af:72:fd:07:c4:f3:78:40:e1:2b:b0:50:47:39:e6: 50:37:f2:5e:b5:18:3b:e9:b7:db:35:41:e0:fe:1f:51:b7:f3: 8d:a6:0e:0a:22:ac:6b:dc:ab:04:15:2f:7a:f5:6f:1d:d5:9e: 91:39:92:27:3d:11:a1:4c:94:96:d4:b9:d8:03:dc:3a:ac:60: 2a:0d:b0:1e:b5:ec:2a:7e:0e:01:0c:14:25:07:da:12:26:c6: e3:0f:fb:ed:ad:4f:00:9c:8e:53:61:f5:c5:70:dd:7a:f2:29: b8:4a:16:81:97:1f:d9:84:9a:8a:a7:49:0a:06:6a:07:6d:d6: 78:92:5e:cf:9b:be:ab:d9:69:cb:47:93:e8:a8:90:da:6d:cc: 04:2d:0d:b9:cd:fb:6f:16:d1:42:b3:cf:b4:57:df:0c:c4:83: 94:42:cf:04:c1:95:f0:f7:3a:ea:3e:5a:51:73:7d:a6:f5:7b: b7:11:bd:68:c2:d5:fa:ed:ef:0a:40:ef:31:97:9a:a5:5a:a7: 18:70:4c:33:b6:14:f7:9c:d4:10:bf:14:1f:0b:cf:d5:85:f2: 1f:fa:89:f6:88:48:3e:e3:b2:b0:94:8f:5b:27:29:9c:08:17: 7d:a4:f4:0e:c3:42:de:14:cd:0d:aa:8e:fa:a4:be:3a:b9:c2: e3:ac:22:78 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUKfjyCMojCJj6Kku3s+f/OyMV8JcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMzAwMDA0MVoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNANWMwOTExZTUzMWE4OTE5MThjOGE1 YTEyNWY0ZjFlMWEwNjU4YzdkMmEyNWM5M2I4YmM4NWE3ZGZlY2MxMDdkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrbhEis9Vkzi3S8/mCK/6+q05bjF 7pDNBUb9A4OHNzopMycdqnijGAbg+LExgdNwZm7uUvoNezAg4csAx4JrrinF4y1O olX68m+Xc9tewECMSKFuP60/k1O3SLGsD8vKiU8NJjvZvcemvyM1ZpNxvAIQbJ7n kZpWC2oPS7pz4YJJ5zxoewd2QArftiIDATP0QlTr3eOFX+ntkoBybUMAPetKA9LY gSMSAJS92+urqEa7U9zJe+//CdTHe4Mquyv/rXcTRBq+dr9Bx6hNGAAwno6mOtut IWgVkeuNevu+kph7Qj5yhQ+SRACNG/KyaAenmshvgj1zcw8DZF2d5dmAqwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFLD853oUyKxUrWl2l1K2FDSwfWZpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzODRjOTQzLWQwYWMtNGQ0Yy1iNWMzLWE2NzBjN2UzM2M1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9gwDQYJKoZIhvcNAQELBQADggEBAETgtq9y/QfE83hA4SuwUEc5 5lA38l61GDvpt9s1QeD+H1G3842mDgoirGvcqwQVL3r1bx3VnpE5kic9EaFMlJbU udgD3DqsYCoNsB617Cp+DgEMFCUH2hImxuMP++2tTwCcjlNh9cVw3XryKbhKFoGX H9mEmoqnSQoGagdt1niSXs+bvqvZactHk+iokNptzAQtDbnN+28W0UKzz7RX3wzE g5RCzwTBlfD3Ouo+WlFzfab1e7cRvWjC1frt7wpA7zGXmqVapxhwTDO2FPec1BC/ FB8Lz9WF8h/6ifaISD7jsrCUj1snKZwIF32k9A7DQt4UzQ2qjvqkvjq5wuOsIng= -----END CERTIFICATE-----Generated at Wed Aug 26 08:04:35 2026 by rpki-client