$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4eebfe87-ebaa-4640-b26f-714c512d27da.roa File: 4eebfe87-ebaa-4640-b26f-714c512d27da.roa (raw, json) Hash identifier: HPt55RZny3KwctwAyS9N70ryLzBoBIZwHFMjiCL2zow= Subject key identifier: 2F:AD:A1:BC:09:18:B1:18:8A:2A:2B:B5:92:06:86:F2:19:02:E1:52 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 15B092A6D1090DE49944A82A14A0A7D967F88E9D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4eebfe87-ebaa-4640-b26f-714c512d27da.roa Signing time: Sun 04 Oct 2026 00:00:33 +0000 ROA not before: Sun 04 Oct 2026 00:00:33 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 43.217.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b0:92:a6:d1:09:0d:e4:99:44:a8:2a:14:a0:a7:d9:67:f8:8e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 4 00:00:33 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=11efe97f4d94d3343664a1c967f997c91dcb8480abe91f4bc6d16ab375f754f8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a4:97:89:e5:d1:61:f0:40:2e:ea:8e:ed:48: 49:20:3f:89:d4:9d:3a:d6:70:02:8d:2a:87:82:85: f1:05:c5:7b:b2:16:88:37:75:b7:61:37:d6:0b:1a: 72:28:a8:c3:06:25:43:0d:f0:fc:8c:df:d6:21:78: 39:a4:63:1a:3f:7d:c8:05:60:b9:f2:47:08:20:45: b8:d4:42:a5:af:4b:18:ff:5e:5e:ce:53:47:1d:05: 0e:23:03:01:da:99:e7:b6:23:02:4e:eb:ad:af:da: 8f:14:c0:74:fe:be:d9:1e:d2:3e:0e:30:32:1f:d5: 04:d7:46:7e:58:8b:23:ad:ff:01:2f:53:5a:6f:75: 65:5f:b4:1a:bd:5a:11:de:ab:dd:71:ca:b3:2b:71: 5c:92:49:1f:cd:0f:ef:e4:e5:ff:21:97:25:4c:01: 7c:45:d3:dd:f3:9c:7d:1e:8f:81:21:05:2d:af:60: d7:43:d8:b6:03:cb:78:9f:db:16:03:dd:c9:06:66: 0e:79:41:d8:6d:66:29:73:6e:83:5f:e3:2e:79:07: c6:cc:34:70:e1:30:4b:59:dc:be:0d:8b:60:2f:a3: 6a:ed:6f:ef:30:91:c5:77:7d:79:ef:c9:1d:e5:85: ed:63:5d:03:67:95:5d:30:c4:be:7d:97:41:14:3e: 1e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AD:A1:BC:09:18:B1:18:8A:2A:2B:B5:92:06:86:F2:19:02:E1:52 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4eebfe87-ebaa-4640-b26f-714c512d27da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.217.174.0/23 Signature Algorithm: sha256WithRSAEncryption 65:0e:af:b4:97:3a:c1:fe:cc:c1:b9:ff:fb:3d:5e:45:cd:19: 59:96:13:b1:78:d0:3b:d0:dc:4a:e1:56:7d:02:38:7e:8b:94: 25:41:a5:89:fb:1c:41:85:1b:52:ec:84:33:15:c6:ea:29:14: a7:61:d3:64:9f:b2:cd:6a:fb:37:c0:a6:fd:87:3d:81:d1:2f: 4d:09:3f:fb:2e:00:da:3e:c7:6e:1d:5b:23:ef:c6:02:87:a8: ba:29:f1:e5:58:15:16:f2:c8:3e:53:07:c5:ff:13:2b:bf:61: 33:ab:15:c3:48:5e:d4:6d:f7:3a:18:4a:0f:8e:82:91:90:11: f6:95:c7:b4:bb:90:a7:cd:7b:24:c1:1b:93:71:9a:45:e5:d2: 7e:f3:17:01:53:c1:82:4f:57:41:4f:a4:08:7b:c9:de:5a:fe: cd:0f:a1:45:41:05:b9:d9:4f:b1:78:70:7c:30:03:3e:f7:19: 81:6a:3d:f1:3e:84:65:02:32:f7:f0:7a:a2:b8:e8:05:e8:00: 24:6d:43:3a:f6:73:ff:fd:23:ec:22:f9:94:7e:cd:b9:c2:31: c8:ba:d4:ad:40:3b:fb:a1:ef:b3:be:68:21:32:67:69:cc:07: 55:b6:13:08:79:e4:73:19:cb:f1:01:80:7b:45:d2:be:21:3d: 08:1f:c4:84 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUFbCSptEJDeSZRKgqFKCn2Wf4jp0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAwNDAwMDAzM1oX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNAMTFlZmU5N2Y0ZDk0ZDMzNDM2NjRh MWM5NjdmOTk3YzkxZGNiODQ4MGFiZTkxZjRiYzZkMTZhYjM3NWY3NTRmODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KSXieXRYfBALuqO7UhJID+J1J06 1nACjSqHgoXxBcV7shaIN3W3YTfWCxpyKKjDBiVDDfD8jN/WIXg5pGMaP33IBWC5 8kcIIEW41EKlr0sY/15ezlNHHQUOIwMB2pnntiMCTuutr9qPFMB0/r7ZHtI+DjAy H9UE10Z+WIsjrf8BL1Nab3VlX7QavVoR3qvdccqzK3FckkkfzQ/v5OX/IZclTAF8 RdPd85x9Ho+BIQUtr2DXQ9i2A8t4n9sWA93JBmYOeUHYbWYpc26DX+MueQfGzDRw 4TBLWdy+DYtgL6Nq7W/vMJHFd31578kd5YXtY10DZ5VdMMS+fZdBFD4eEQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFC+tobwJGLEYiiortZIGhvIZAuFSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRlZWJmZTg3LWViYWEtNDY0MC1iMjZmLTcxNGM1MTJkMjdkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9muMA0GCSqGSIb3DQEBCwUAA4IBAQBlDq+0lzrB/szBuf/7PV5F zRlZlhOxeNA70NxK4VZ9Ajh+i5QlQaWJ+xxBhRtS7IQzFcbqKRSnYdNkn7LNavs3 wKb9hz2B0S9NCT/7LgDaPsduHVsj78YCh6i6KfHlWBUW8sg+UwfF/xMrv2EzqxXD SF7Ubfc6GEoPjoKRkBH2lce0u5CnzXskwRuTcZpF5dJ+8xcBU8GCT1dBT6QIe8ne Wv7ND6FFQQW52U+xeHB8MAM+9xmBaj3xPoRlAjL38HqiuOgF6AAkbUM69nP//SPs IvmUfs25wjHIutStQDv7oe+zvmghMmdpzAdVthMIeeRzGcvxAYB7RdK+IT0IH8SE -----END CERTIFICATE-----Generated at Sun Oct 11 23:10:10 2026 by rpki-client