$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a84c5fb-d075-40ae-afad-ad59b3e2ebf0.roa File: 9a84c5fb-d075-40ae-afad-ad59b3e2ebf0.roa (raw, json) Hash identifier: nacZoSomtmL3VSCsU/PPitBRCUYEtGicLB3KYICDgXo= Subject key identifier: 53:32:BB:4D:AB:6D:DD:2E:2D:2E:23:C9:CA:EB:76:D2:11:6E:7A:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 02CFA0E9B37BA50A0A796BAF209F82E2F5FC8B6A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a84c5fb-d075-40ae-afad-ad59b3e2ebf0.roa Signing time: Wed 05 Aug 2026 00:00:18 +0000 ROA not before: Wed 05 Aug 2026 00:00:18 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.210.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cf:a0:e9:b3:7b:a5:0a:0a:79:6b:af:20:9f:82:e2:f5:fc:8b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 5 00:00:18 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=6395acec8251d747b28a67a3506ac9db934ea3714f0498cd7f3128dec30e0525, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8d:11:83:15:fd:f2:d7:ae:bb:8c:75:f0:28: f3:5d:9a:f5:40:02:d7:d1:19:b5:fa:dd:07:29:19: f0:89:0b:e6:e9:0a:49:31:36:c4:c1:db:91:47:2c: 41:db:60:2d:e9:17:ea:b1:5b:b1:e9:42:e0:dc:4f: 50:ec:3f:55:4b:d1:ba:50:cf:38:ec:78:cf:f7:ee: 10:62:f2:36:32:eb:d2:77:1d:66:35:cf:eb:16:16: 12:7f:67:1b:7a:33:04:49:cc:91:2c:40:4d:22:e5: b9:3c:11:2f:2c:f4:cd:6e:79:b4:72:48:2c:22:29: b5:8e:c4:e6:76:a0:9c:db:10:36:15:15:8d:75:90: d0:49:b5:93:bb:4d:7a:aa:16:8d:ad:df:76:f1:a2: 6e:8e:34:6d:f3:c1:eb:2b:0f:b5:e7:ab:ac:ce:93: 63:96:7c:4f:cb:89:fd:5d:a9:a0:a3:cd:b9:30:8d: ca:a2:50:eb:1c:3d:aa:73:6c:0f:b5:d6:49:ac:7b: aa:c4:80:e6:df:32:20:b0:09:6d:d5:f1:f9:ea:70: c8:f4:32:7d:b6:24:b0:a4:25:c0:e2:7d:42:e3:3b: 7a:ec:d7:81:74:b8:30:2e:43:be:48:5e:f1:10:fa: 88:9e:9e:1f:11:11:4d:a3:21:5d:9d:7d:29:d6:2e: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:32:BB:4D:AB:6D:DD:2E:2D:2E:23:C9:CA:EB:76:D2:11:6E:7A:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a84c5fb-d075-40ae-afad-ad59b3e2ebf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.210.0.0/15 Signature Algorithm: sha256WithRSAEncryption cb:68:6a:55:15:eb:75:96:ec:e6:6f:c4:e3:59:6c:20:4f:94: bd:5f:bb:87:b1:13:b5:31:12:c0:ac:d5:55:2b:ba:3f:45:f2: 4d:b9:50:7c:40:ff:84:8f:81:ee:b1:d8:34:bd:79:54:af:b5: 11:d2:a3:bd:25:b9:96:16:75:46:a7:7a:5f:f2:24:ed:ad:a9: da:d4:b4:29:00:6d:74:47:91:b1:9a:a2:d3:f6:07:53:1a:42: d6:3f:3e:ef:7a:f1:e3:16:8a:dc:b6:6e:76:a1:2a:98:4c:1d: 84:cc:b5:31:ae:e7:5a:7e:eb:8f:44:b7:82:26:51:d8:72:0f: c3:33:8b:b6:66:31:3a:8b:25:46:bf:66:19:2e:e0:24:40:e4: 7d:6f:f8:a5:35:7c:49:73:4b:36:e2:a0:d4:3d:ff:14:4d:5a: 8f:09:74:d5:18:f9:07:88:97:05:bc:c5:ce:41:0c:27:78:6d: 57:1d:96:ed:03:17:1c:d1:29:fe:39:ab:03:85:1c:72:2a:fd: ab:f8:57:58:17:94:58:e4:26:3f:53:d1:9a:5e:05:d0:b8:b2: 48:a4:98:51:60:2d:18:19:6a:25:86:3a:8c:61:3f:29:bf:4e: 8b:77:18:75:f1:c3:63:e6:98:09:a5:cb:92:81:1a:ba:f8:44: 59:50:64:05 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUAs+g6bN7pQoKeWuvIJ+C4vX8i2owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNTAwMDAxOFoX DTI2MTEwMzIzNTk1OVowejFJMEcGA1UEBRNANjM5NWFjZWM4MjUxZDc0N2IyOGE2 N2EzNTA2YWM5ZGI5MzRlYTM3MTRmMDQ5OGNkN2YzMTI4ZGVjMzBlMDUyNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Y0RgxX98teuu4x18CjzXZr1QALX 0Rm1+t0HKRnwiQvm6QpJMTbEwduRRyxB22At6RfqsVux6ULg3E9Q7D9VS9G6UM84 7HjP9+4QYvI2MuvSdx1mNc/rFhYSf2cbejMEScyRLEBNIuW5PBEvLPTNbnm0ckgs Iim1jsTmdqCc2xA2FRWNdZDQSbWTu016qhaNrd928aJujjRt88HrKw+156uszpNj lnxPy4n9Xamgo825MI3KolDrHD2qc2wPtdZJrHuqxIDm3zIgsAlt1fH56nDI9DJ9 tiSwpCXA4n1C4zt67NeBdLgwLkO+SF7xEPqInp4fERFNoyFdnX0p1i4teQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFFMyu02rbd0uLS4jycrrdtIRbnr0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlhODRjNWZiLWQwNzUtNDBhZS1hZmFkLWFkNTliM2UyZWJmMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9IwDQYJKoZIhvcNAQELBQADggEBAMtoalUV63WW7OZvxONZbCBP lL1fu4exE7UxEsCs1VUruj9F8k25UHxA/4SPge6x2DS9eVSvtRHSo70luZYWdUan el/yJO2tqdrUtCkAbXRHkbGaotP2B1MaQtY/Pu968eMWity2bnahKphMHYTMtTGu 51p+649Et4ImUdhyD8Mzi7ZmMTqLJUa/Zhku4CRA5H1v+KU1fElzSzbioNQ9/xRN Wo8JdNUY+QeIlwW8xc5BDCd4bVcdlu0DFxzRKf45qwOFHHIq/av4V1gXlFjkJj9T 0ZpeBdC4skikmFFgLRgZaiWGOoxhPym/Tot3GHXxw2PmmAmly5KBGrr4RFlQZAU= -----END CERTIFICATE-----Generated at Wed Aug 26 18:16:55 2026 by rpki-client