$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a3607965-9901-471c-8ed4-712d48b362f1.roa File: a3607965-9901-471c-8ed4-712d48b362f1.roa (raw, json) Hash identifier: 4w+P6h5LPT+p9J7EJ36AYKasJL5ng2wenoJ5BJVAEXI= Subject key identifier: 3D:84:D8:B8:CD:25:70:C9:5E:33:26:67:FF:E0:15:2F:1D:23:04:44 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 454F9D42FC13D4FBF93EECCD03A05F542C2F291D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a3607965-9901-471c-8ed4-712d48b362f1.roa Signing time: Tue 04 Aug 2026 00:00:37 +0000 ROA not before: Tue 04 Aug 2026 00:00:37 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4f:9d:42:fc:13:d4:fb:f9:3e:ec:cd:03:a0:5f:54:2c:2f:29:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 4 00:00:37 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=6f046f6a7e2a37a2367b279cd87e20ea55ce9c74da1832626598882b26676024, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:2f:d6:df:2f:57:b8:5b:e1:e4:e3:38:7e: 78:14:09:72:3b:1f:50:eb:fd:f4:17:d0:ba:1a:2f: 5a:82:a0:0e:12:eb:d0:02:f8:bc:35:47:96:d9:ec: 55:14:a8:98:e0:48:67:d5:b5:12:93:68:71:e4:72: 6e:84:6a:f6:4a:c4:ee:02:26:89:b2:8e:05:28:ed: 79:8d:f6:32:7b:64:c0:60:d5:82:0a:5e:8a:9e:49: e9:27:3e:81:cc:8e:ae:7b:63:eb:bc:fc:86:bc:ee: de:1f:ff:5b:4d:67:6e:a4:db:ae:38:7f:22:92:07: 8d:33:4a:35:b5:fe:fc:7c:c1:c0:3c:d2:ef:63:0f: 51:2d:3a:78:4a:05:1d:19:17:2d:42:c5:1f:ec:80: b1:a0:c2:23:01:fb:b7:71:fd:bf:df:b6:95:61:6a: 6a:30:43:42:c7:58:b2:10:bb:67:8a:0d:ee:a0:cc: d0:6a:e4:08:66:b0:1f:69:84:31:60:d2:bf:ee:c8: 52:06:ce:cf:9d:ae:42:28:6b:6e:7b:c1:a3:b1:0f: 1c:08:f4:b2:11:47:2d:6e:0b:62:5a:cd:0d:00:dc: 02:ab:8d:86:15:2a:77:2e:33:1d:4a:fa:3e:43:2f: 7c:cd:ab:cc:13:be:e5:5c:e3:58:70:72:64:ed:a9: 81:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:84:D8:B8:CD:25:70:C9:5E:33:26:67:FF:E0:15:2F:1D:23:04:44 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a3607965-9901-471c-8ed4-712d48b362f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.55.0/24 Signature Algorithm: sha256WithRSAEncryption 19:b8:88:ac:9a:d1:27:e9:10:ff:a2:25:0e:49:53:fa:69:d1: cc:41:19:bf:ba:db:a6:48:b7:92:9d:ea:35:7e:65:a9:0d:45: c5:03:f2:ba:77:46:e8:a7:b7:d2:39:bd:67:93:8a:32:8b:dd: b1:27:67:65:4c:70:2f:5f:20:8b:82:8d:c8:41:19:f7:d7:5a: c1:40:2c:e2:39:8d:64:4c:2e:86:2a:a9:8f:f9:fa:17:30:58: 1d:a3:e6:1f:e6:a1:19:54:6e:fa:a1:09:2f:ed:54:21:48:26: d8:40:b0:a9:f7:6d:7c:37:e4:0d:ef:02:b8:53:e7:f3:01:19: ff:3c:b1:20:d1:ac:b8:6d:c7:54:c1:fb:c1:6e:13:28:95:da: dd:f7:0b:62:0c:ac:a3:63:bf:56:01:6f:2a:31:a4:7d:41:f1: 90:00:83:aa:39:e0:60:41:c7:62:85:d5:c7:c7:36:f7:a1:1a: 70:89:b4:4f:f3:fa:98:9c:3c:60:17:c5:6f:6f:f5:d5:ca:9d: 77:6f:55:71:05:10:7e:37:65:99:35:8e:0a:44:68:a8:88:d6: ac:3a:96:b9:da:a3:c6:b0:53:5a:cf:bf:8b:5d:da:7c:b2:1f: d0:d6:78:69:66:a7:9a:13:b3:ed:ee:9b:c8:7a:d9:f5:f7:53: 94:c9:b8:87 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIURU+dQvwT1Pv5PuzNA6BfVCwvKR0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwNDAwMDAzN1oX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNANmYwNDZmNmE3ZTJhMzdhMjM2N2Iy NzljZDg3ZTIwZWE1NWNlOWM3NGRhMTgzMjYyNjU5ODg4MmIyNjY3NjAyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobgv1t8vV7hb4eTjOH54FAlyOx9Q 6/30F9C6Gi9agqAOEuvQAvi8NUeW2exVFKiY4Ehn1bUSk2hx5HJuhGr2SsTuAiaJ so4FKO15jfYye2TAYNWCCl6KnknpJz6BzI6ue2PrvPyGvO7eH/9bTWdupNuuOH8i kgeNM0o1tf78fMHAPNLvYw9RLTp4SgUdGRctQsUf7ICxoMIjAfu3cf2/37aVYWpq MENCx1iyELtnig3uoMzQauQIZrAfaYQxYNK/7shSBs7Pna5CKGtue8GjsQ8cCPSy EUctbgtiWs0NANwCq42GFSp3LjMdSvo+Qy98zavME77lXONYcHJk7amBoQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFD2E2LjNJXDJXjMmZ//gFS8dIwREMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EzNjA3OTY1LTk5MDEtNDcxYy04ZWQ0LTcxMmQ0OGIzNjJmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9A3MA0GCSqGSIb3DQEBCwUAA4IBAQAZuIismtEn6RD/oiUOSVP6 adHMQRm/utumSLeSneo1fmWpDUXFA/K6d0bop7fSOb1nk4oyi92xJ2dlTHAvXyCL go3IQRn311rBQCziOY1kTC6GKqmP+foXMFgdo+Yf5qEZVG76oQkv7VQhSCbYQLCp 9218N+QN7wK4U+fzARn/PLEg0ay4bcdUwfvBbhMoldrd9wtiDKyjY79WAW8qMaR9 QfGQAIOqOeBgQcdihdXHxzb3oRpwibRP8/qYnDxgF8Vvb/XVyp13b1VxBRB+N2WZ NY4KRGioiNasOpa52qPGsFNaz7+LXdp8sh/Q1nhpZqeaE7Pt7pvIetn191OUybiH -----END CERTIFICATE-----Generated at Wed Aug 26 16:09:30 2026 by rpki-client