$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa File: 3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa (raw, json) Hash identifier: bMDBkAxCiS9BzKXeC2ZCHXmtU3sBM+SuYV6ckNgstWM= Subject key identifier: 20:FB:E6:15:30:6A:08:FF:7B:28:EC:4A:9C:9D:53:AD:CA:29:D8:A3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 47545A0B1FF259DAB120D2EB42A00F13648219D3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa Signing time: Wed 13 May 2026 00:10:26 +0000 ROA not before: Wed 13 May 2026 00:10:26 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:54:5a:0b:1f:f2:59:da:b1:20:d2:eb:42:a0:0f:13:64:82:19:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:10:26 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=10ce4aa6bb5075f05c8f1ad07f151e40286bacd7691195cd9777e39969629a9c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:29:1a:76:8a:ca:f8:8e:6e:3c:54:93:15:27: 93:61:ba:f2:33:6c:e4:f6:d9:28:0d:53:a5:b3:78: 2f:c7:8d:dc:8b:7e:af:a0:e0:1e:36:7f:fe:ae:38: f7:7c:15:5a:2a:79:f4:a7:a4:2c:7a:37:7c:3d:ec: e1:0c:04:bf:44:88:9e:d6:0e:89:7e:5a:25:c6:f8: c4:c6:96:22:21:33:10:a8:6f:36:4c:8b:1a:74:3b: cb:e6:95:98:9f:89:63:b5:4f:02:4f:f9:7d:52:a6: 72:9c:7e:e3:43:aa:34:1c:a6:19:03:cb:d7:4f:e9: 9a:88:0c:53:b0:b1:84:e8:f2:b1:41:d4:2f:15:a0: 95:a6:f2:b4:e8:61:39:c7:20:b1:ca:14:42:1a:e8: 81:05:70:36:40:b0:76:04:08:19:91:72:6c:eb:a2: cb:65:dd:48:78:f7:26:4a:2f:5c:c5:a5:08:d1:7d: 24:52:27:87:35:f9:61:e5:07:d2:2e:82:97:a7:59: ae:05:07:2c:ba:6c:61:f5:93:c5:78:57:d4:4d:da: 6d:b5:c5:b5:dc:ae:9c:1f:1d:1c:21:99:fb:66:82: 07:d1:45:f4:8a:30:d0:9a:bb:21:84:99:30:e1:f4: df:88:9e:05:31:94:18:d4:f9:a8:12:e0:75:2a:90: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FB:E6:15:30:6A:08:FF:7B:28:EC:4A:9C:9D:53:AD:CA:29:D8:A3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.0.0/15 Signature Algorithm: sha256WithRSAEncryption 85:1b:29:27:d1:85:0e:c1:c0:91:44:13:31:58:b7:09:7f:78: 50:97:6d:22:e3:5f:22:b4:a2:44:0b:83:3b:9d:84:26:d9:2a: 4d:34:0a:c2:86:47:c9:04:e7:b9:03:05:af:0d:e6:5d:f3:c9: f2:4a:8e:98:6d:98:7a:07:4c:c8:3c:9e:38:01:7c:4c:bf:98: c0:7f:e7:0c:5e:4b:6e:aa:30:5f:4e:6e:a8:ba:74:7b:d6:bf: 7f:96:00:78:43:18:48:e8:20:34:3a:50:dd:b4:80:39:89:20: cd:a2:7a:56:56:28:e8:a9:45:1f:9f:66:9f:63:26:d0:c6:68: 65:d2:e2:05:b4:1b:fd:d8:1f:f4:98:bf:75:0c:7b:0f:ac:5b: f7:58:ed:f8:88:85:0e:ca:f4:b1:17:1c:82:42:da:3e:72:95: 17:93:94:8c:e6:e2:e6:95:bd:40:97:72:2f:eb:4c:12:f1:74: 14:47:1a:1a:b2:ec:5a:42:9b:34:48:05:3f:a3:77:28:ac:64: 77:3f:57:9a:e6:bc:0e:cd:c8:ec:5c:5b:5e:87:c3:20:9b:35: 18:80:78:81:df:fb:0f:6b:72:de:91:3f:6f:a9:0a:61:0c:1c: a1:ad:83:df:4a:10:9b:42:27:70:43:b9:39:5f:2b:3b:82:0b: 66:e7:d3:66 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUR1RaCx/yWdqxINLrQqAPE2SCGdMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMTAyNloX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAMTBjZTRhYTZiYjUwNzVmMDVjOGYx YWQwN2YxNTFlNDAyODZiYWNkNzY5MTE5NWNkOTc3N2UzOTk2OTYyOWE5YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoykadorK+I5uPFSTFSeTYbryM2zk 9tkoDVOls3gvx43ci36voOAeNn/+rjj3fBVaKnn0p6Qsejd8PezhDAS/RIie1g6J flolxvjExpYiITMQqG82TIsadDvL5pWYn4ljtU8CT/l9UqZynH7jQ6o0HKYZA8vX T+maiAxTsLGE6PKxQdQvFaCVpvK06GE5xyCxyhRCGuiBBXA2QLB2BAgZkXJs66LL Zd1IePcmSi9cxaUI0X0kUieHNflh5QfSLoKXp1muBQcsumxh9ZPFeFfUTdpttcW1 3K6cHx0cIZn7ZoIH0UX0ijDQmrshhJkw4fTfiJ4FMZQY1PmoEuB1KpDIFQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFCD75hUwagj/eyjsSpydU63KKdijMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhMmJjMmNjLTkyNzItNDFlYi1hM2U0LTIwNzYxZDE3MjlmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9QwDQYJKoZIhvcNAQELBQADggEBAIUbKSfRhQ7BwJFEEzFYtwl/ eFCXbSLjXyK0okQLgzudhCbZKk00CsKGR8kE57kDBa8N5l3zyfJKjphtmHoHTMg8 njgBfEy/mMB/5wxeS26qMF9Obqi6dHvWv3+WAHhDGEjoIDQ6UN20gDmJIM2ielZW KOipRR+fZp9jJtDGaGXS4gW0G/3YH/SYv3UMew+sW/dY7fiIhQ7K9LEXHIJC2j5y lReTlIzm4uaVvUCXci/rTBLxdBRHGhqy7FpCmzRIBT+jdyisZHc/V5rmvA7NyOxc W16HwyCbNRiAeIHf+w9rct6RP2+pCmEMHKGtg99KEJtCJ3BDuTlfKzuCC2bn02Y= -----END CERTIFICATE-----Generated at Sun May 24 12:21:35 2026 by rpki-client