$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f77a548-22e5-4e9b-84af-0a2ac1d117b6.roa File: 2f77a548-22e5-4e9b-84af-0a2ac1d117b6.roa (raw, json) Hash identifier: rT71mNNQ5qTeiRv5t897X/PZFR9Zyw/OXENWL4C4/6k= Subject key identifier: F4:EA:1E:97:AA:51:42:72:71:90:BC:28:6C:23:FA:EE:EC:90:96:F3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2FD39D4CC0C3791FBD3799AD81D03230682FCC1C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f77a548-22e5-4e9b-84af-0a2ac1d117b6.roa Signing time: Tue 12 May 2026 00:00:15 +0000 ROA not before: Tue 12 May 2026 00:00:15 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 103.102.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d3:9d:4c:c0:c3:79:1f:bd:37:99:ad:81:d0:32:30:68:2f:cc:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:00:15 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=01ff2fca2bada9b10a212a9df39231ef2fb8a64cb62c0130b4934f66b289fa22, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:46:f7:8f:2b:0d:b6:3b:6c:ed:ab:21:12: f1:4f:07:5c:3c:fa:d8:d1:91:26:ec:2f:6e:a6:10: 46:ce:bd:ca:1a:4b:85:b1:bb:61:b0:73:b0:a5:76: 5d:23:79:eb:e0:d9:62:5e:1a:8b:14:15:32:43:ff: 7e:39:07:e3:ca:5c:bd:5e:b8:de:48:b2:60:2b:44: 67:c3:4d:c4:0e:87:16:fd:db:97:55:cf:73:b8:ba: a5:39:4d:8d:e6:e5:46:e6:e3:a8:69:d4:12:b8:76: b2:c7:ba:d5:21:41:ec:c1:7f:35:8b:93:b7:e4:88: 20:84:51:10:2f:03:ce:15:30:95:95:ce:55:a3:d1: 0b:75:e2:95:4e:c2:74:f4:55:61:06:97:2e:b7:f3: 28:db:ef:55:53:16:1e:19:fc:cf:c3:26:ab:66:98: 34:23:0e:7b:c1:11:64:09:f2:6b:4c:f2:43:0a:82: a8:d5:37:be:ce:57:23:48:18:3f:60:a8:64:d0:05: 4b:9e:a0:02:cb:a3:c4:81:71:c4:21:7c:f2:31:b6: 68:a2:bd:ee:36:ca:8f:fd:33:5d:a3:45:08:57:17: 01:95:ce:22:5f:e4:6e:3b:bb:fe:c6:f1:f5:1b:46: 40:b2:be:9d:31:d8:57:14:61:9a:27:1c:f3:d5:32: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EA:1E:97:AA:51:42:72:71:90:BC:28:6C:23:FA:EE:EC:90:96:F3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f77a548-22e5-4e9b-84af-0a2ac1d117b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.160.0/22 Signature Algorithm: sha256WithRSAEncryption 17:16:7e:9e:8d:1c:78:15:cf:bd:08:df:52:3f:e1:99:c6:2d: fd:c9:3a:83:e7:1d:1e:ee:d0:da:72:f0:c9:4b:a7:bc:f4:c8: 27:c0:89:d9:6c:52:7f:2b:77:8e:18:2d:f1:e1:a5:00:8b:43: ae:88:3c:93:dd:04:93:e1:ba:15:a8:b7:96:c6:a9:86:9f:bf: 14:64:c8:0e:25:2d:bb:0b:d5:3b:56:98:6e:a4:78:f9:24:ff: 33:e0:ff:21:44:f2:29:5d:2c:96:66:84:d9:be:fe:46:78:93: 11:19:bc:4c:f4:b0:c4:a7:ac:6e:a8:61:9e:f9:55:73:cb:4f: 9d:0e:2a:aa:18:c3:16:f0:82:92:d8:73:cc:06:35:9c:13:d4: 82:92:11:44:81:54:91:23:af:5b:98:5e:89:e0:79:3d:d1:a6: 37:f9:6d:3f:1e:35:36:53:be:c7:9c:b1:32:45:aa:38:2b:33: 9b:f8:bb:36:ea:02:09:ca:a9:1e:75:58:2e:9a:95:87:23:b5: 34:0c:7b:21:e5:e2:9c:e9:3e:0a:a2:e7:2b:98:89:4e:b6:e3: 4d:ab:cf:30:ad:5b:9d:7e:a8:db:02:a1:9f:05:44:a8:dd:6c: d9:0e:3d:fe:f0:d1:f1:3f:25:55:44:ad:f1:59:23:09:5d:a5: 12:08:d7:cf -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUL9OdTMDDeR+9N5mtgdAyMGgvzBwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDAxNVoX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAMDFmZjJmY2EyYmFkYTliMTBhMjEy YTlkZjM5MjMxZWYyZmI4YTY0Y2I2MmMwMTMwYjQ5MzRmNjZiMjg5ZmEyMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9JG948rDbY7bO2rIRLxTwdcPPrY 0ZEm7C9uphBGzr3KGkuFsbthsHOwpXZdI3nr4NliXhqLFBUyQ/9+OQfjyly9Xrje SLJgK0Rnw03EDocW/duXVc9zuLqlOU2N5uVG5uOoadQSuHayx7rVIUHswX81i5O3 5IgghFEQLwPOFTCVlc5Vo9ELdeKVTsJ09FVhBpcut/Mo2+9VUxYeGfzPwyarZpg0 Iw57wRFkCfJrTPJDCoKo1Te+zlcjSBg/YKhk0AVLnqACy6PEgXHEIXzyMbZoor3u NsqP/TNdo0UIVxcBlc4iX+RuO7v+xvH1G0ZAsr6dMdhXFGGaJxzz1TKMxwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPTqHpeqUUJycZC8KGwj+u7skJbzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmNzdhNTQ4LTIyZTUtNGU5Yi04NGFmLTBhMmFjMWQxMTdiNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2agMA0GCSqGSIb3DQEBCwUAA4IBAQAXFn6ejRx4Fc+9CN9SP+GZ xi39yTqD5x0e7tDacvDJS6e89MgnwInZbFJ/K3eOGC3x4aUAi0OuiDyT3QST4boV qLeWxqmGn78UZMgOJS27C9U7VphupHj5JP8z4P8hRPIpXSyWZoTZvv5GeJMRGbxM 9LDEp6xuqGGe+VVzy0+dDiqqGMMW8IKS2HPMBjWcE9SCkhFEgVSRI69bmF6J4Hk9 0aY3+W0/HjU2U77HnLEyRao4KzOb+Ls26gIJyqkedVgumpWHI7U0DHsh5eKc6T4K oucrmIlOtuNNq88wrVudfqjbAqGfBUSo3WzZDj3+8NHxPyVVRK3xWSMJXaUSCNfP -----END CERTIFICATE-----Generated at Wed May 13 00:25:43 2026 by rpki-client