$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f25672a7-b221-4701-959a-7ba11013fac0.roa File: f25672a7-b221-4701-959a-7ba11013fac0.roa (raw, json) Hash identifier: fyLNj0JOlYf7UFq8mJQ1cflDfu0qPGE1Qj2ff3L4/eI= Subject key identifier: DA:5D:15:1E:3B:8D:5F:4D:2F:16:D9:47:E6:59:CD:73:FB:E2:5F:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6CE27D7FA49457F690A64E36032024093435DFBB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f25672a7-b221-4701-959a-7ba11013fac0.roa Signing time: Fri 31 Jul 2026 00:00:44 +0000 ROA not before: Fri 31 Jul 2026 00:00:44 +0000 ROA not after: Thu 29 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.251.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Aug 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e2:7d:7f:a4:94:57:f6:90:a6:4e:36:03:20:24:09:34:35:df:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 31 00:00:44 2026 GMT Not After : Oct 29 23:59:59 2026 GMT Subject: serialNumber=fa32f295ee8d3d29e1f4af3f731a9b34ebb8d54e110e4aef3d5f3d3e63e2ad82, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:e8:8b:cc:b9:70:be:0d:02:ae:42:4c:85: 59:08:b8:da:f5:95:46:d3:0e:1a:c3:7e:27:b2:6d: 11:91:7d:6e:29:10:97:73:bd:3e:d4:b3:ef:ee:75: f9:28:f6:e9:fd:99:bf:0f:3b:8e:be:62:d2:4b:c2: 58:4d:ae:16:b4:a1:f7:ce:17:c7:af:06:97:9a:d1: 44:81:3b:e7:df:df:9a:d0:77:3a:fa:76:00:4f:15: 16:ad:e0:74:8b:5c:a0:81:df:ca:85:1c:f8:9c:92: 9f:4f:53:07:27:d4:96:68:98:f4:17:34:5d:4d:0e: 50:1d:b6:3b:3a:03:67:fe:e0:3e:f1:15:28:6f:b9: e6:ac:75:b9:f0:ad:a2:c9:f3:ec:2a:e4:4b:92:97: 9c:1a:91:d7:dc:b1:93:44:1c:a6:3f:56:57:a6:58: bf:78:ee:8b:0f:de:0f:88:8b:61:01:3b:df:6e:ed: 04:2b:ef:56:ea:8f:33:e0:46:e1:a1:e3:2c:ee:d4: f8:2b:0d:ef:9b:4a:3f:f0:2f:a1:1d:5c:40:1d:99: 8e:e7:e4:f6:44:f9:87:42:fc:94:cf:e5:9f:df:72: 68:94:3f:4a:e9:54:a8:9a:47:97:de:7c:1f:b6:1f: d0:bb:3c:4c:ac:0f:7d:ee:1f:52:5b:38:5a:d5:50: ba:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5D:15:1E:3B:8D:5F:4D:2F:16:D9:47:E6:59:CD:73:FB:E2:5F:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f25672a7-b221-4701-959a-7ba11013fac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.251.180.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:25:f7:86:21:16:a9:fa:bf:a8:1d:e5:bb:9e:1d:38:c8:83: 90:39:4b:b8:24:3a:28:d1:17:a0:14:2a:81:b7:8d:c1:46:83: e7:92:b0:c1:78:b7:88:df:44:f6:e9:77:3b:fa:aa:21:05:0b: a7:da:5d:a8:27:16:06:9a:ca:3a:83:01:d9:8e:c7:5e:31:b0: bd:97:0b:fb:78:64:cc:27:59:04:0d:26:cb:c0:13:1d:7b:86: e4:7c:c3:51:df:25:63:ea:23:b2:71:09:a8:3c:81:74:e0:32: 90:d6:16:28:cd:f8:d0:d1:b4:7b:cf:86:4e:02:4e:00:cd:5d: 81:ec:e1:03:9a:25:f1:a7:79:fd:33:bb:e6:a9:de:bb:e5:30: 94:20:ec:1e:e7:d8:de:71:3b:54:fd:de:05:2f:e7:b9:de:6e: c8:03:6d:3e:79:cf:55:0e:c0:05:4e:aa:6b:fe:9c:ed:fd:c4: d5:89:49:b2:34:5d:51:fc:c9:8e:bd:fc:2a:d6:da:50:d5:24: 02:d8:00:c7:2c:f2:4e:9d:d4:db:bb:0c:87:b2:55:3c:89:f5: f8:5e:d4:38:87:0b:24:d8:c0:22:49:7a:de:f8:7a:88:4a:d8: 9b:3d:25:f1:f0:08:85:cd:82:a2:44:a8:44:04:df:e7:51:2a: a1:05:cd:c6 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUbOJ9f6SUV/aQpk42AyAkCTQ137swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDczMTAwMDA0NFoX DTI2MTAyOTIzNTk1OVowejFJMEcGA1UEBRNAZmEzMmYyOTVlZThkM2QyOWUxZjRh ZjNmNzMxYTliMzRlYmI4ZDU0ZTExMGU0YWVmM2Q1ZjNkM2U2M2UyYWQ4MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0foi8y5cL4NAq5CTIVZCLja9ZVG 0w4aw34nsm0RkX1uKRCXc70+1LPv7nX5KPbp/Zm/DzuOvmLSS8JYTa4WtKH3zhfH rwaXmtFEgTvn39+a0Hc6+nYATxUWreB0i1yggd/KhRz4nJKfT1MHJ9SWaJj0FzRd TQ5QHbY7OgNn/uA+8RUob7nmrHW58K2iyfPsKuRLkpecGpHX3LGTRBymP1ZXpli/ eO6LD94PiIthATvfbu0EK+9W6o8z4EbhoeMs7tT4Kw3vm0o/8C+hHVxAHZmO5+T2 RPmHQvyUz+Wf33JolD9K6VSomkeX3nwfth/QuzxMrA997h9SWzha1VC6twIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNpdFR47jV9NLxbZR+ZZzXP74l/LMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YyNTY3MmE3LWIyMjEtNDcwMS05NTlhLTdiYTExMDEzZmFjMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/u0MA0GCSqGSIb3DQEBCwUAA4IBAQBNJfeGIRap+r+oHeW7nh04 yIOQOUu4JDoo0RegFCqBt43BRoPnkrDBeLeI30T26Xc7+qohBQun2l2oJxYGmso6 gwHZjsdeMbC9lwv7eGTMJ1kEDSbLwBMde4bkfMNR3yVj6iOycQmoPIF04DKQ1hYo zfjQ0bR7z4ZOAk4AzV2B7OEDmiXxp3n9M7vmqd675TCUIOwe59jecTtU/d4FL+e5 3m7IA20+ec9VDsAFTqpr/pzt/cTViUmyNF1R/MmOvfwq1tpQ1SQC2ADHLPJOndTb uwyHslU8ifX4XtQ4hwsk2MAiSXre+HqIStibPSXx8AiFzYKiRKhEBN/nUSqhBc3G -----END CERTIFICATE-----Generated at Wed Aug 26 18:17:39 2026 by rpki-client