$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/274d0851-dfbc-451f-87dd-a89a7d93e743.roa File: 274d0851-dfbc-451f-87dd-a89a7d93e743.roa (raw, json) Hash identifier: 8668TOrDvje9nJizOxg+J1Jko9EXyp6ObJC78o5d6Vc= Subject key identifier: 7F:52:3C:2E:C3:CB:92:E8:BA:DC:21:BF:53:8B:8E:AE:A0:44:AD:9E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2D5644A5553E8A112578BE68312375160D6EAA61 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/274d0851-dfbc-451f-87dd-a89a7d93e743.roa Signing time: Tue 21 Jul 2026 00:10:39 +0000 ROA not before: Tue 21 Jul 2026 00:10:39 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.210.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:56:44:a5:55:3e:8a:11:25:78:be:68:31:23:75:16:0d:6e:aa:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:10:39 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=a83490e36c16c66fe2056c3113c65cd49ea44bde65297cd2a0b81f220f14caf9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:99:6f:ac:9a:fb:fd:12:94:79:ce:22:ed:5b: 87:09:27:b2:ef:39:b3:b9:47:1e:05:7d:db:b3:ff: a6:50:2d:5f:75:d8:d9:c6:fa:5a:db:ae:79:ad:8a: d4:78:61:29:b5:1b:0e:53:8f:3c:35:a7:e3:32:c3: 90:20:f0:d1:51:ca:b8:db:7f:34:a4:18:5b:d5:a8: 93:ac:cb:83:5e:eb:b9:be:d7:06:7e:fc:9c:f4:d8: f9:2b:a1:37:8e:a0:ea:4f:d5:aa:80:4d:67:e6:56: 23:d4:e0:bd:7a:c3:95:8e:8e:64:e5:fd:09:0a:26: de:41:da:9d:57:e8:5c:c0:49:1d:af:29:97:b4:24: 0e:d0:fe:fa:9c:03:f4:3d:ca:9c:26:63:66:8f:10: 77:f5:72:fd:51:20:43:7d:0b:79:ac:f6:4c:d9:4f: 13:e9:04:71:e6:3b:ba:6b:cf:45:e0:45:45:13:62: 72:6c:d7:d4:72:ee:c1:ab:6f:4e:86:a2:2e:12:98: 4c:6c:5a:75:f4:25:4e:19:38:28:93:b9:86:42:a1: 26:ba:78:8e:72:42:cf:0d:3f:50:a9:f7:b3:1a:e6: 82:68:8b:1f:63:68:d9:b2:11:96:8f:33:77:81:ad: 33:f1:12:88:e4:82:e5:30:bd:b3:74:89:be:29:cc: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:52:3C:2E:C3:CB:92:E8:BA:DC:21:BF:53:8B:8E:AE:A0:44:AD:9E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/274d0851-dfbc-451f-87dd-a89a7d93e743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.210.12.0/23 Signature Algorithm: sha256WithRSAEncryption bc:8b:e8:4a:49:bf:a1:9c:94:2e:c4:44:22:49:88:62:10:ab: 14:d4:6e:46:c1:5b:e0:0f:ff:a6:a7:38:6d:d6:76:73:20:ff: 67:24:78:53:99:5e:d8:c2:31:1e:ed:93:54:10:18:0d:bf:dc: c2:87:85:74:e7:77:30:4b:0c:57:e3:79:5b:cd:b2:15:34:9c: 2c:6f:23:99:e3:9a:43:2e:c3:dc:7b:5d:1b:9f:b7:bf:f1:33: a3:83:f5:ab:5d:2e:45:20:bc:9f:5e:58:d3:6d:76:23:93:df: 51:36:41:df:64:58:db:14:dd:a4:d5:f1:f8:e9:d3:2d:13:59: 75:6d:c8:2b:23:ff:1f:f4:ce:6e:d0:90:02:66:78:78:eb:bd: 93:31:4a:3c:60:ca:85:a8:7e:fa:9a:e9:c0:84:38:00:4e:e3: 38:3a:8b:07:2e:a9:e5:98:a6:98:b5:e3:88:c1:86:c6:12:7e: a6:11:0f:9f:b7:80:c0:5e:2f:4c:61:f1:62:78:75:6a:50:98: 5c:18:e6:a6:c5:b1:e2:64:20:ee:45:6f:3b:49:80:31:9b:8d: 77:90:63:ce:7f:71:50:65:83:7a:33:ee:b4:75:0d:39:8c:3a: 34:79:7c:57:d0:61:43:18:de:da:d4:d4:8e:b6:d7:65:a0:ea: 00:43:3c:63 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIULVZEpVU+ihEleL5oMSN1Fg1uqmEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTAzOVoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAYTgzNDkwZTM2YzE2YzY2ZmUyMDU2 YzMxMTNjNjVjZDQ5ZWE0NGJkZTY1Mjk3Y2QyYTBiODFmMjIwZjE0Y2FmOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5lvrJr7/RKUec4i7VuHCSey7zmz uUceBX3bs/+mUC1fddjZxvpa2655rYrUeGEptRsOU488NafjMsOQIPDRUcq42380 pBhb1aiTrMuDXuu5vtcGfvyc9Nj5K6E3jqDqT9WqgE1n5lYj1OC9esOVjo5k5f0J CibeQdqdV+hcwEkdrymXtCQO0P76nAP0PcqcJmNmjxB39XL9USBDfQt5rPZM2U8T 6QRx5ju6a89F4EVFE2JybNfUcu7Bq29OhqIuEphMbFp19CVOGTgok7mGQqEmuniO ckLPDT9QqfezGuaCaIsfY2jZshGWjzN3ga0z8RKI5ILlML2zdIm+KcxKwQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFH9SPC7Dy5Loutwhv1OLjq6gRK2eMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI3NGQwODUxLWRmYmMtNDUxZi04N2RkLWE4OWE3ZDkzZTc0My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9IMMA0GCSqGSIb3DQEBCwUAA4IBAQC8i+hKSb+hnJQuxEQiSYhi EKsU1G5GwVvgD/+mpzht1nZzIP9nJHhTmV7YwjEe7ZNUEBgNv9zCh4V053cwSwxX 43lbzbIVNJwsbyOZ45pDLsPce10bn7e/8TOjg/WrXS5FILyfXljTbXYjk99RNkHf ZFjbFN2k1fH46dMtE1l1bcgrI/8f9M5u0JACZnh4672TMUo8YMqFqH76munAhDgA TuM4OosHLqnlmKaYteOIwYbGEn6mEQ+ft4DAXi9MYfFieHVqUJhcGOamxbHiZCDu RW87SYAxm413kGPOf3FQZYN6M+60dQ05jDo0eXxX0GFDGN7a1NSOttdloOoAQzxj -----END CERTIFICATE-----Generated at Fri Jul 24 03:43:51 2026 by rpki-client