$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9489db20-95e0-4921-9118-b2516a901b12.roa File: 9489db20-95e0-4921-9118-b2516a901b12.roa (raw, json) Hash identifier: J9FsoIobGaOm9qD+1wbXbyi60+Zco3D9Hi3xMFa36tM= Subject key identifier: D0:98:34:77:81:C2:B9:E0:BD:C0:52:E5:9C:DA:16:39:9D:FF:34:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0B8AA3BDB08FD11535F4BE5855C55331883D7771 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9489db20-95e0-4921-9118-b2516a901b12.roa Signing time: Mon 03 Aug 2026 00:00:05 +0000 ROA not before: Mon 03 Aug 2026 00:00:05 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8a:a3:bd:b0:8f:d1:15:35:f4:be:58:55:c5:53:31:88:3d:77:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 3 00:00:05 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=3f1b6150e350c00195b219e2231598b2d2c2e87ebb794cd439988d2ac72b0529, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:37:f7:65:44:b9:c9:fd:25:27:da:fb:c4: 35:ff:24:fa:9a:17:0d:6e:9b:69:3d:8e:01:49:6e: b5:6a:f4:90:7c:72:e9:31:ac:b1:d6:06:98:9b:09: 61:58:39:a7:85:9d:a5:38:6f:42:31:5c:18:11:f1: ad:b7:df:36:44:c1:28:b4:37:6a:0c:c3:c1:d8:ef: 7b:43:fb:91:7d:fa:bf:2a:16:17:54:60:16:dd:a2: da:f5:9e:be:a7:60:65:70:11:43:f3:ff:9b:d8:09: d8:f2:78:e3:08:c3:c0:0a:a9:c7:f6:a4:4b:d8:1c: 08:4e:c9:12:2e:01:54:dc:1e:cf:63:6f:73:b8:2f: 67:7b:fb:ed:87:4b:5d:44:66:55:1b:14:5d:2a:21: cf:6c:ab:e3:2c:ad:b7:6f:2a:c7:9a:be:21:e8:89: 44:4a:73:1c:d9:96:40:78:04:1d:a0:25:81:5c:d5: 25:b3:f7:53:c6:18:94:ba:18:65:a8:fa:4b:29:24: 47:6d:57:fc:ba:bd:09:de:1f:b1:8a:54:98:69:cc: f7:d7:1b:dd:73:56:e1:b5:17:45:12:11:c7:57:b8: 00:d4:2c:8f:0f:c5:48:37:83:b2:80:cc:53:b3:ac: f0:fe:e7:44:e4:37:de:1f:02:20:79:d2:28:ad:c2: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:98:34:77:81:C2:B9:E0:BD:C0:52:E5:9C:DA:16:39:9D:FF:34:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9489db20-95e0-4921-9118-b2516a901b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.72.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:bc:99:fc:fc:f4:5d:de:42:c3:c7:0d:d0:3c:f9:ff:b6:75: cb:75:05:68:6c:af:32:99:c9:e1:db:1e:52:ea:21:77:9a:55: f7:5c:c5:4b:01:44:53:f9:9c:5c:c6:66:21:31:34:b4:bf:e0: b1:f3:68:ba:44:a0:cd:49:d7:e9:3d:c8:34:a2:0b:1f:c4:35: 0a:91:10:ea:bb:e1:b1:ef:d6:cc:2f:32:44:15:a1:2e:51:ea: 62:16:0e:c0:c4:88:34:69:90:a8:3a:59:fe:c6:4d:11:39:f4: 67:13:d8:bb:7b:a9:0c:3c:4c:bb:c1:b1:c8:b1:f5:73:2e:f8: e9:92:c9:c0:7e:62:40:0e:b8:07:50:e6:13:96:63:07:0a:4a: e1:8c:65:bc:25:9d:5a:0f:b0:ef:9b:f1:2c:13:7a:d5:91:75: fe:41:b3:65:90:fe:a3:e2:cd:99:19:bc:68:69:8a:03:7a:b8: 86:65:c5:53:03:d4:b6:bd:82:5e:e9:2e:2e:b5:05:e5:31:bb: ce:33:48:38:ee:95:d2:5f:45:38:2e:6d:2a:7e:48:d1:38:32: 5d:75:89:77:1c:2d:d5:75:21:47:e0:4c:9b:e6:8d:a8:5f:88: 76:41:2c:c8:e5:8e:cd:74:a0:37:5c:20:63:8d:36:91:79:66: ba:1e:2f:c5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUC4qjvbCP0RU19L5YVcVTMYg9d3EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMzAwMDAwNVoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAM2YxYjYxNTBlMzUwYzAwMTk1YjIx OWUyMjMxNTk4YjJkMmMyZTg3ZWJiNzk0Y2Q0Mzk5ODhkMmFjNzJiMDUyOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI0392VEucn9JSfa+8Q1/yT6mhcN bptpPY4BSW61avSQfHLpMayx1gaYmwlhWDmnhZ2lOG9CMVwYEfGtt982RMEotDdq DMPB2O97Q/uRffq/KhYXVGAW3aLa9Z6+p2BlcBFD8/+b2AnY8njjCMPACqnH9qRL 2BwITskSLgFU3B7PY29zuC9ne/vth0tdRGZVGxRdKiHPbKvjLK23byrHmr4h6IlE SnMc2ZZAeAQdoCWBXNUls/dTxhiUuhhlqPpLKSRHbVf8ur0J3h+xilSYacz31xvd c1bhtRdFEhHHV7gA1CyPD8VIN4OygMxTs6zw/udE5DfeHwIgedIorcIgXQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNCYNHeBwrngvcBS5ZzaFjmd/zRlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk0ODlkYjIwLTk1ZTAtNDkyMS05MTE4LWIyNTE2YTkwMWIxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9hIMA0GCSqGSIb3DQEBCwUAA4IBAQA8vJn8/PRd3kLDxw3QPPn/ tnXLdQVobK8ymcnh2x5S6iF3mlX3XMVLAURT+ZxcxmYhMTS0v+Cx82i6RKDNSdfp Pcg0ogsfxDUKkRDqu+Gx79bMLzJEFaEuUepiFg7AxIg0aZCoOln+xk0ROfRnE9i7 e6kMPEy7wbHIsfVzLvjpksnAfmJADrgHUOYTlmMHCkrhjGW8JZ1aD7Dvm/EsE3rV kXX+QbNlkP6j4s2ZGbxoaYoDeriGZcVTA9S2vYJe6S4utQXlMbvOM0g47pXSX0U4 Lm0qfkjRODJddYl3HC3VdSFH4Eyb5o2oX4h2QSzI5Y7NdKA3XCBjjTaReWa6Hi/F -----END CERTIFICATE-----Generated at Wed Aug 26 11:28:11 2026 by rpki-client