$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0e0735d-a91e-478d-82d2-a3f04ee435d2.roa File: c0e0735d-a91e-478d-82d2-a3f04ee435d2.roa (raw, json) Hash identifier: M/+3NcLPopg9LucKIjFL9CBuI3A8XSamVSts+VQR3hE= Subject key identifier: 7B:E1:B3:E4:91:ED:CB:F2:31:8A:07:4E:A9:3C:CB:69:97:5E:DA:90 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 726AEC36B2043B83A8ADBEC793034237B71F29D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0e0735d-a91e-478d-82d2-a3f04ee435d2.roa Signing time: Mon 03 Aug 2026 00:00:43 +0000 ROA not before: Mon 03 Aug 2026 00:00:43 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.218.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Aug 2026 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:6a:ec:36:b2:04:3b:83:a8:ad:be:c7:93:03:42:37:b7:1f:29:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 3 00:00:43 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=836550cce6374debebcd8790ec1ed76cd3b213e2aa6094707a3bc504d4e2f097, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:aa:e3:d2:d2:61:30:dc:2a:0e:86:01:b9:3b: e3:6c:25:17:c3:10:bd:9d:c3:3f:9b:62:39:62:22: 2d:c8:99:c7:50:fc:2c:ea:55:a5:90:e2:01:d2:25: 5f:24:20:79:8e:98:f1:62:9b:e6:98:4a:42:1e:58: 71:49:16:ae:3e:0c:f0:a1:a5:99:01:4c:a2:1c:c3: e4:53:6d:b4:f9:99:cf:73:66:bd:3c:5f:97:96:26: 2b:98:2d:90:6b:c0:9c:bf:23:72:1c:67:87:49:d9: e6:4a:2c:4d:32:bf:2d:ca:cb:f9:f1:46:3f:c5:9c: b1:54:57:57:db:36:d8:fb:78:3d:96:34:5f:20:24: ec:b8:7c:3b:60:c3:48:d0:74:b6:3f:5e:3a:bd:4d: 56:7a:4c:9f:00:3c:23:6d:0d:96:6f:ca:43:be:56: 27:fe:67:4a:4b:5b:34:1f:5a:ef:f8:40:04:70:c9: 11:e2:c6:d5:8b:1a:c2:8c:8d:89:22:22:1a:26:23: 40:68:ec:fb:3a:71:24:0d:be:d3:07:1d:cd:1e:d9: b0:b5:94:43:d3:87:c4:75:08:e9:26:a2:d4:06:84: db:6b:49:c5:d0:4d:df:7b:49:43:0d:5b:45:c1:a5: b4:9f:3c:fb:1a:be:e1:18:6b:7b:df:f7:ab:c4:c8: 8c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E1:B3:E4:91:ED:CB:F2:31:8A:07:4E:A9:3C:CB:69:97:5E:DA:90 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0e0735d-a91e-478d-82d2-a3f04ee435d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.218.158.0/23 Signature Algorithm: sha256WithRSAEncryption 37:97:6c:e9:67:96:8b:4f:77:e8:ac:cc:35:86:e7:90:d1:80: a0:9f:c0:fd:6f:d6:9a:88:31:24:06:bd:e0:3b:f2:b2:e3:46: 11:bb:ab:55:e3:97:ea:9e:ea:1d:fb:ef:d4:a9:a4:d4:0e:2a: 83:bc:21:67:23:f0:61:15:52:b6:a1:b4:8b:58:2d:18:85:e8: ff:b8:49:3a:da:35:98:e2:cc:25:6c:d2:b7:d4:7d:3f:31:94: 0b:04:76:27:11:5e:34:fb:16:9c:45:7f:a9:fd:1a:4f:77:d6: d1:91:4d:f4:e2:c0:9e:19:6e:75:68:8a:cc:5e:b4:39:19:0a: b2:5d:17:3e:8b:5d:5e:50:3b:b8:fb:08:46:1a:ff:eb:d6:ee: 80:50:2c:e2:f1:3a:7c:ea:11:0a:04:ef:ef:96:99:59:fc:ee: ae:c7:e4:04:b9:97:38:70:5e:2e:3e:83:39:ae:72:38:1a:6f: 3b:71:06:95:1c:6d:c2:c9:d6:dd:57:8e:45:af:0d:5f:3b:7c: 33:09:d8:73:e8:05:5c:43:9a:4e:09:64:d1:53:07:1b:0e:6a: 1b:f7:b5:1f:ce:c4:3b:00:9f:a0:73:23:71:4a:35:8b:6b:5d: 49:80:76:87:99:96:14:e4:3d:82:1e:99:d0:9c:10:76:e0:94: bd:97:c7:64 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUcmrsNrIEO4Oorb7HkwNCN7cfKdcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMzAwMDA0M1oX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAODM2NTUwY2NlNjM3NGRlYmViY2Q4 NzkwZWMxZWQ3NmNkM2IyMTNlMmFhNjA5NDcwN2EzYmM1MDRkNGUyZjA5NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkarj0tJhMNwqDoYBuTvjbCUXwxC9 ncM/m2I5YiItyJnHUPws6lWlkOIB0iVfJCB5jpjxYpvmmEpCHlhxSRauPgzwoaWZ AUyiHMPkU220+ZnPc2a9PF+XliYrmC2Qa8CcvyNyHGeHSdnmSixNMr8tysv58UY/ xZyxVFdX2zbY+3g9ljRfICTsuHw7YMNI0HS2P146vU1WekyfADwjbQ2Wb8pDvlYn /mdKS1s0H1rv+EAEcMkR4sbVixrCjI2JIiIaJiNAaOz7OnEkDb7TBx3NHtmwtZRD 04fEdQjpJqLUBoTba0nF0E3fe0lDDVtFwaW0nzz7Gr7hGGt73/erxMiMWwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFHvhs+SR7cvyMYoHTqk8y2mXXtqQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MwZTA3MzVkLWE5MWUtNDc4ZC04MmQyLWEzZjA0ZWU0MzVkMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9qeMA0GCSqGSIb3DQEBCwUAA4IBAQA3l2zpZ5aLT3forMw1hueQ 0YCgn8D9b9aaiDEkBr3gO/Ky40YRu6tV45fqnuod++/UqaTUDiqDvCFnI/BhFVK2 obSLWC0Yhej/uEk62jWY4swlbNK31H0/MZQLBHYnEV40+xacRX+p/RpPd9bRkU30 4sCeGW51aIrMXrQ5GQqyXRc+i11eUDu4+whGGv/r1u6AUCzi8Tp86hEKBO/vlplZ /O6ux+QEuZc4cF4uPoM5rnI4Gm87cQaVHG3CydbdV45Frw1fO3wzCdhz6AVcQ5pO CWTRUwcbDmob97UfzsQ7AJ+gcyNxSjWLa11JgHaHmZYU5D2CHpnQnBB24JS9l8dk -----END CERTIFICATE-----Generated at Wed Aug 26 02:09:10 2026 by rpki-client