$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa File: ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa (raw, json) Hash identifier: o92PaHjwzXJH85EGGfLZ93g27Y+C14Rx4iHPigDmhQc= Subject key identifier: 0F:6F:1B:48:56:DA:A7:09:CC:90:0D:E7:30:DC:E1:2D:9A:DD:49:4F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3ACC46348C0CC297B987E6E74036675FDE3D1DA5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa Signing time: Sat 01 Aug 2026 00:21:23 +0000 ROA not before: Sat 01 Aug 2026 00:21:23 +0000 ROA not after: Fri 30 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.220.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cc:46:34:8c:0c:c2:97:b9:87:e6:e7:40:36:67:5f:de:3d:1d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:21:23 2026 GMT Not After : Oct 30 23:59:59 2026 GMT Subject: serialNumber=c6904314cfbc7fe8e4833f807f47117b9f18ad4d93558aabf7bcdf7792510db5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:cf:26:b0:db:dd:2f:ff:70:ba:94:8d:5b: 53:9c:09:77:87:41:ae:28:0f:98:7b:40:d8:ed:35: 7a:90:c3:78:07:98:b4:d2:a3:26:41:59:11:5a:6f: cf:4e:94:51:fa:e0:30:0e:05:9c:0f:9f:c6:93:91: 51:bf:4a:4b:b3:2e:9a:80:85:c7:36:de:b0:0a:12: 14:0b:eb:a4:aa:78:d9:92:05:8c:4b:08:fc:79:ee: 40:9a:0e:8e:76:84:0c:d5:3b:63:de:66:f3:7a:4b: 4f:b8:0c:dc:0b:f8:2a:5d:d0:2f:f7:59:2f:c8:47: 07:40:95:b4:82:f7:c5:df:e0:10:15:68:3c:92:22: f8:03:e4:e9:d0:4d:3d:c6:35:fb:a5:af:6e:6e:f3: d9:7c:b8:ef:76:39:9d:f7:52:0a:21:ab:a2:95:ae: 12:ac:f7:36:49:07:eb:e8:a7:8e:63:31:ce:e4:fa: 7d:a5:dd:d0:ed:31:d1:17:2e:46:23:55:28:08:d2: b5:2c:7e:28:45:01:e3:e3:03:f3:d2:d1:cd:61:9b: 95:2f:ea:73:5d:05:34:3e:36:cb:2e:0a:a6:ad:a0: 79:27:11:ec:09:95:65:5e:af:49:ca:ef:6e:bb:cb: 27:be:79:62:ae:f3:2e:e2:9b:d1:b2:12:8b:73:27: b3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6F:1B:48:56:DA:A7:09:CC:90:0D:E7:30:DC:E1:2D:9A:DD:49:4F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 72:17:59:d7:ed:2b:01:81:42:ba:4f:58:c5:d4:f5:ef:b7:e2: 90:8e:06:49:87:ab:7b:56:c0:8c:7a:81:47:ed:71:44:e3:ec: ad:65:52:fb:3e:24:8b:fc:9b:3e:5f:1a:d4:0f:82:7b:19:8e: 18:f9:b6:bb:b8:54:96:6b:fb:c1:7e:4c:b4:89:de:04:fd:0b: 0f:1f:81:5f:e6:62:14:d8:ac:a6:57:55:d7:1f:54:31:57:d6: 48:ee:41:1c:75:05:25:b8:18:23:f7:f7:a5:c8:62:b7:e8:ba: 9f:32:27:cf:ba:c7:8d:5c:a9:8f:9e:60:05:2b:3f:4a:1b:1d: bb:da:cd:81:7b:ef:e6:6d:82:cb:c7:d7:18:93:3c:c2:1f:68: 5f:3d:e3:e2:56:0a:96:7b:79:c3:90:04:64:f1:23:d2:8a:17: 66:5e:04:c7:a9:6d:ef:c3:83:fb:44:b7:86:be:6e:26:bb:d0: 2b:94:7f:21:22:59:71:50:ca:c9:61:4d:6e:62:16:08:3c:71: 5f:79:6e:a1:a8:a6:3f:52:8d:59:fb:41:57:14:3e:4f:39:80: d0:0d:bd:f1:e3:2c:05:67:92:a8:c9:7e:d9:c8:51:19:ad:a0: cf:fa:4a:08:2d:c8:1e:7b:95:99:6a:6d:39:9a:af:b7:13:84: 75:c4:b9:42 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUOsxGNIwMwpe5h+bnQDZnX949HaUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDgwMTAwMjEyM1oX DTI2MTAzMDIzNTk1OVowejFJMEcGA1UEBRNAYzY5MDQzMTRjZmJjN2ZlOGU0ODMz ZjgwN2Y0NzExN2I5ZjE4YWQ0ZDkzNTU4YWFiZjdiY2RmNzc5MjUxMGRiNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs73PJrDb3S//cLqUjVtTnAl3h0Gu KA+Ye0DY7TV6kMN4B5i00qMmQVkRWm/PTpRR+uAwDgWcD5/Gk5FRv0pLsy6agIXH Nt6wChIUC+ukqnjZkgWMSwj8ee5Amg6OdoQM1Ttj3mbzektPuAzcC/gqXdAv91kv yEcHQJW0gvfF3+AQFWg8kiL4A+Tp0E09xjX7pa9ubvPZfLjvdjmd91IKIauila4S rPc2SQfr6KeOYzHO5Pp9pd3Q7THRFy5GI1UoCNK1LH4oRQHj4wPz0tHNYZuVL+pz XQU0PjbLLgqmraB5JxHsCZVlXq9Jyu9uu8snvnlirvMu4pvRshKLcyezDwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFA9vG0hW2qcJzJAN5zDc4S2a3UlPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VjYjg1ZGE1LTA3ZDItNGM1My04NzVkLWViZjMxNWIxZTU4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9wwDQYJKoZIhvcNAQELBQADggEBAHIXWdftKwGBQrpPWMXU9e+3 4pCOBkmHq3tWwIx6gUftcUTj7K1lUvs+JIv8mz5fGtQPgnsZjhj5tru4VJZr+8F+ TLSJ3gT9Cw8fgV/mYhTYrKZXVdcfVDFX1kjuQRx1BSW4GCP396XIYrfoup8yJ8+6 x41cqY+eYAUrP0obHbvazYF77+ZtgsvH1xiTPMIfaF894+JWCpZ7ecOQBGTxI9KK F2ZeBMepbe/Dg/tEt4a+bia70CuUfyEiWXFQyslhTW5iFgg8cV95bqGopj9SjVn7 QVcUPk85gNANvfHjLAVnkqjJftnIURmtoM/6SggtyB57lZlqbTmar7cThHXEuUI= -----END CERTIFICATE-----Generated at Wed Aug 26 12:15:44 2026 by rpki-client