$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/274d0851-dfbc-451f-87dd-a89a7d93e743.roa File: 274d0851-dfbc-451f-87dd-a89a7d93e743.roa (raw, json) Hash identifier: w7MbgRV+FtQgSrnkdu2YdiUjZ/XwAsZHM27uR0LGCIM= Subject key identifier: A3:0B:2C:84:35:38:81:7C:E3:0A:F5:3D:77:A6:91:09:00:3F:05:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 37738CBD1E2A1DF1D6B071FAC307A7CD2D942755 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/274d0851-dfbc-451f-87dd-a89a7d93e743.roa Signing time: Fri 09 Oct 2026 00:10:32 +0000 ROA not before: Fri 09 Oct 2026 00:10:32 +0000 ROA not after: Thu 07 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 43.210.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:73:8c:bd:1e:2a:1d:f1:d6:b0:71:fa:c3:07:a7:cd:2d:94:27:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 9 00:10:32 2026 GMT Not After : Jan 7 23:59:59 2027 GMT Subject: serialNumber=c93fad01fe5b4b8c93886dcb751550dd9e43636401fdd380896ad28d9a3146ee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:89:b0:99:14:c4:45:30:db:36:31:bd:64: dc:5e:90:77:38:b0:87:aa:5c:6b:ce:de:23:81:91: 68:f4:29:ae:97:46:12:42:38:04:22:d9:60:48:3f: 12:51:83:ee:a3:7e:24:b7:17:f1:9f:4a:ac:b0:49: 6d:ca:30:f8:62:15:f6:83:92:f7:a5:65:22:18:f4: 12:af:68:01:f5:e9:b9:ce:3b:59:27:dc:71:6d:79: d7:14:eb:ee:c3:76:fd:e9:ae:af:7d:05:9d:6d:60: e9:ec:8f:b7:e3:64:c2:76:74:99:42:d9:64:b2:13: f4:20:e7:a6:ee:9f:f0:35:94:ff:73:31:5c:33:31: 50:0c:4a:20:af:e5:22:48:05:55:88:27:f0:b9:69: f7:49:29:26:06:c1:7a:c6:b6:4b:81:14:b1:83:db: 61:ec:8e:e4:76:a8:fe:29:91:48:82:27:ae:ea:e5: ef:26:f4:1b:e5:07:42:bf:91:c1:d6:36:31:de:9b: 4e:c9:74:fc:07:74:9c:3f:d6:45:1b:02:b5:91:d0: e7:b4:f6:17:1e:02:f2:95:87:47:66:37:fd:dc:a5: 3f:22:46:d5:13:1f:db:44:fe:7b:c7:77:88:c8:74: b4:65:41:2e:27:ad:da:6b:9b:9e:db:87:30:38:78: 8f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0B:2C:84:35:38:81:7C:E3:0A:F5:3D:77:A6:91:09:00:3F:05:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/274d0851-dfbc-451f-87dd-a89a7d93e743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.210.12.0/23 Signature Algorithm: sha256WithRSAEncryption c3:a1:05:2d:5b:1f:d5:97:4c:c3:a4:33:89:10:5b:d1:14:c2: 75:e7:69:cd:d0:97:1b:ae:e9:69:72:5d:f1:ce:01:33:8d:94: 86:4a:d4:96:98:4f:3c:36:94:4c:fd:b9:ff:6d:ae:ce:f4:f1: 28:a8:6d:77:7b:7e:af:3f:0a:95:8c:d0:8d:ee:50:3e:a4:a4: a4:d2:d0:1d:c9:f6:f0:db:0d:cd:4a:d6:b2:f0:da:0b:32:98: 32:5d:06:9a:d9:e9:88:6d:ae:6a:ed:bc:1d:3b:cc:4f:58:13: 27:cc:39:93:2d:1c:ae:ea:c3:42:b9:19:42:85:7c:52:e8:3b: a7:79:66:a2:ea:aa:21:8a:26:31:05:7f:91:d7:22:30:7e:97: fb:6b:38:d6:88:f0:2d:b1:5c:fb:20:ff:cb:44:de:a4:12:d6: 34:96:66:4c:0f:84:b2:f5:fb:33:8b:58:47:36:4a:eb:f5:cb: 16:9e:42:75:c1:c1:70:cc:ce:38:0f:77:f6:96:b4:6d:95:b4: ba:71:17:28:be:02:ad:2e:1e:f1:1c:38:bd:0e:35:bd:99:d1: 67:71:fa:6a:4b:f6:5e:ef:ec:9e:f7:17:ae:f8:cc:f0:1c:25: 66:89:d0:e4:e4:9f:65:fb:84:56:54:c8:07:3c:4b:bc:8d:e8: 07:aa:b3:93 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUN3OMvR4qHfHWsHH6wwenzS2UJ1UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwOTAwMTAzMloX DTI3MDEwNzIzNTk1OVowejFJMEcGA1UEBRNAYzkzZmFkMDFmZTViNGI4YzkzODg2 ZGNiNzUxNTUwZGQ5ZTQzNjM2NDAxZmRkMzgwODk2YWQyOGQ5YTMxNDZlZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpOJsJkUxEUw2zYxvWTcXpB3OLCH qlxrzt4jgZFo9Cmul0YSQjgEItlgSD8SUYPuo34ktxfxn0qssEltyjD4YhX2g5L3 pWUiGPQSr2gB9em5zjtZJ9xxbXnXFOvuw3b96a6vfQWdbWDp7I+342TCdnSZQtlk shP0IOem7p/wNZT/czFcMzFQDEogr+UiSAVViCfwuWn3SSkmBsF6xrZLgRSxg9th 7I7kdqj+KZFIgieu6uXvJvQb5QdCv5HB1jYx3ptOyXT8B3ScP9ZFGwK1kdDntPYX HgLylYdHZjf93KU/IkbVEx/bRP57x3eIyHS0ZUEuJ63aa5ue24cwOHiPWQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKMLLIQ1OIF84wr1PXemkQkAPwWZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI3NGQwODUxLWRmYmMtNDUxZi04N2RkLWE4OWE3ZDkzZTc0My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9IMMA0GCSqGSIb3DQEBCwUAA4IBAQDDoQUtWx/Vl0zDpDOJEFvR FMJ152nN0Jcbrulpcl3xzgEzjZSGStSWmE88NpRM/bn/ba7O9PEoqG13e36vPwqV jNCN7lA+pKSk0tAdyfbw2w3NStay8NoLMpgyXQaa2emIba5q7bwdO8xPWBMnzDmT LRyu6sNCuRlChXxS6DuneWai6qohiiYxBX+R1yIwfpf7azjWiPAtsVz7IP/LRN6k EtY0lmZMD4Sy9fszi1hHNkrr9csWnkJ1wcFwzM44D3f2lrRtlbS6cRcovgKtLh7x HDi9DjW9mdFncfpqS/Ze7+ye9xeu+MzwHCVmidDk5J9l+4RWVMgHPEu8jegHqrOT -----END CERTIFICATE-----Generated at Mon Oct 12 00:48:59 2026 by rpki-client