$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa File: e120613f-4f08-405b-bea7-3ea01da9b0df.roa (raw, json) Hash identifier: gpTwRhH55ev+3HXNw1sSOrfe1siRhFEG1J1A59O13J0= Subject key identifier: 9F:57:30:F5:9A:2A:F0:45:D3:4C:9E:AD:4A:F4:72:CC:AC:69:46:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 07464B5450D48D9FA3F063CC1780990F881B1E46 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa Signing time: Fri 15 May 2026 00:00:48 +0000 ROA not before: Fri 15 May 2026 00:00:48 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:46:4b:54:50:d4:8d:9f:a3:f0:63:cc:17:80:99:0f:88:1b:1e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 15 00:00:48 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=30296471ba211574e24e2c1df98a764389113b187012873e8bcb238ec60fd64d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:48:76:1d:2f:55:5a:bf:46:df:63:65:2d: e3:26:83:f9:49:3b:82:b5:c5:88:43:26:01:13:bc: f3:ae:d6:23:62:6d:a7:5e:29:6c:f1:fb:9e:81:c2: 8c:22:53:4d:fd:4c:9a:43:53:82:eb:cf:cd:d9:8d: 38:23:3a:68:8f:82:57:84:d8:bb:32:40:84:3c:79: 5d:02:46:8e:aa:62:1f:4c:e4:15:7b:4c:29:a3:ca: 5a:ef:72:3f:ee:0b:8c:1e:33:77:e3:70:56:e9:a2: 97:e6:6d:4a:86:05:14:53:0e:f3:11:39:01:6f:02: 03:92:39:36:86:6c:92:a5:dd:64:d0:6c:fe:85:68: 37:d3:79:19:01:fb:26:a5:db:84:cf:64:ca:37:8e: 5a:fd:14:28:1e:72:16:51:76:58:12:3c:b5:db:36: b7:ca:2e:b3:f7:cf:8a:10:30:d0:53:5b:32:84:cb: ee:6d:3b:f2:96:16:29:50:d6:55:d1:ca:f5:60:e1: 5c:a5:ef:75:e5:01:7c:15:52:df:e7:3d:79:c3:dd: cd:97:a1:97:4b:cb:36:06:bf:bc:df:0f:dd:32:59: 75:e4:8d:27:9b:4e:80:7e:c3:7f:3b:84:4f:2a:1a: dc:2d:f0:f3:91:c6:8d:90:de:a8:d5:4b:99:d4:a0: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:57:30:F5:9A:2A:F0:45:D3:4C:9E:AD:4A:F4:72:CC:AC:69:46:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.64.0/24 Signature Algorithm: sha256WithRSAEncryption 29:75:e1:f7:c5:c4:30:52:ef:23:6d:20:cd:24:3e:73:26:d6: 97:70:03:dc:49:d0:f0:ee:0e:3b:92:36:ed:92:e2:81:85:87: 10:5e:dc:a5:09:be:b7:7b:d1:e5:9b:3f:c8:99:3a:cf:b3:7d: 18:6d:74:5a:e9:35:b4:d4:7e:34:e9:ce:32:cf:38:6a:db:4d: 9e:6f:8f:21:9a:9f:6e:63:16:24:cd:ca:27:12:ae:ca:1d:67: 5f:18:6e:59:65:aa:4f:95:bb:3d:a0:e6:35:15:27:1b:6a:38: 05:d5:5a:67:7e:3c:67:4c:0f:65:69:9b:eb:3a:c9:5e:89:c5: fe:36:2a:53:77:ec:30:e1:46:a6:93:1c:01:7b:5e:92:c2:74: 94:18:67:1d:f9:90:e8:07:48:a7:83:fc:32:f9:a6:8a:e0:de: 8e:72:bd:25:4f:9f:fa:64:97:d5:3c:25:79:77:41:c9:35:36: f8:59:5e:b5:3a:1e:5b:fd:7d:eb:86:09:83:dc:47:95:f6:f2: 99:95:6d:d2:51:21:28:14:3a:62:15:8d:08:38:3f:eb:6f:68: 3a:4d:f1:df:ce:93:c6:7d:ee:a4:20:c2:1b:85:e8:a9:f3:3e: 70:ec:d6:68:a5:ee:0b:61:c1:4c:c6:db:a7:b2:ed:a1:6e:1e: 64:b1:d7:8e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUB0ZLVFDUjZ+j8GPMF4CZD4gbHkYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxNTAwMDA0OFoX DTI2MDgxMzIzNTk1OVowejFJMEcGA1UEBRNAMzAyOTY0NzFiYTIxMTU3NGUyNGUy YzFkZjk4YTc2NDM4OTExM2IxODcwMTI4NzNlOGJjYjIzOGVjNjBmZDY0ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4JIdh0vVVq/Rt9jZS3jJoP5STuC tcWIQyYBE7zzrtYjYm2nXils8fuegcKMIlNN/UyaQ1OC68/N2Y04Izpoj4JXhNi7 MkCEPHldAkaOqmIfTOQVe0wpo8pa73I/7guMHjN343BW6aKX5m1KhgUUUw7zETkB bwIDkjk2hmySpd1k0Gz+hWg303kZAfsmpduEz2TKN45a/RQoHnIWUXZYEjy12za3 yi6z98+KEDDQU1syhMvubTvylhYpUNZV0cr1YOFcpe915QF8FVLf5z15w93Nl6GX S8s2Br+83w/dMll15I0nm06AfsN/O4RPKhrcLfDzkcaNkN6o1UuZ1KB32QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJ9XMPWaKvBF00yerUr0csysaUZYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxMjA2MTNmLTRmMDgtNDA1Yi1iZWE3LTNlYTAxZGE5YjBkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9hAMA0GCSqGSIb3DQEBCwUAA4IBAQApdeH3xcQwUu8jbSDNJD5z JtaXcAPcSdDw7g47kjbtkuKBhYcQXtylCb63e9Hlmz/ImTrPs30YbXRa6TW01H40 6c4yzzhq202eb48hmp9uYxYkzconEq7KHWdfGG5ZZapPlbs9oOY1FScbajgF1Vpn fjxnTA9laZvrOsleicX+NipTd+ww4UamkxwBe16SwnSUGGcd+ZDoB0ing/wy+aaK 4N6Ocr0lT5/6ZJfVPCV5d0HJNTb4WV61Oh5b/X3rhgmD3EeV9vKZlW3SUSEoFDpi FY0IOD/rb2g6TfHfzpPGfe6kIMIbheip8z5w7NZope4LYcFMxtunsu2hbh5ksdeO -----END CERTIFICATE-----Generated at Sun May 24 12:22:01 2026 by rpki-client