$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c47a085f-3a6d-428f-b77e-f521e9f0d040.roa File: c47a085f-3a6d-428f-b77e-f521e9f0d040.roa (raw, json) Hash identifier: HT44QWh4HYbPfCGZajzG4hvkGUnHhep+VsyVQ6bLu80= Subject key identifier: 02:A5:B3:5A:8F:B9:A5:10:FA:27:3F:CE:4D:4E:8B:B6:1E:7E:7D:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7E2ED709BB10864443817368DFAF5CF1B2EE42F4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c47a085f-3a6d-428f-b77e-f521e9f0d040.roa Signing time: Tue 12 May 2026 00:01:13 +0000 ROA not before: Tue 12 May 2026 00:01:13 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 103.78.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2e:d7:09:bb:10:86:44:43:81:73:68:df:af:5c:f1:b2:ee:42:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:01:13 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=fabcfd8f3a941c07612b47217f741e09b4b34a5baf254a83bb55f56c974f052c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f2:09:3b:4d:c7:e3:2b:97:f5:59:ab:9a:59: 5e:07:84:e4:f3:ea:b7:85:70:eb:e2:7a:bb:f4:e2: 53:af:d2:b6:be:a7:12:bb:73:81:71:d4:0c:b6:d8: f2:ec:ce:56:a8:c5:bc:35:a7:56:64:5f:d1:57:19: 1e:4a:1b:58:cf:72:58:b7:79:47:5e:e7:c0:9d:6a: e1:98:65:6c:5b:5e:a6:e9:ee:ea:6b:1b:2e:b5:17: 46:8e:9d:d1:74:8a:fe:88:b3:f2:0c:bc:e7:5b:9f: b8:a9:12:4d:c7:9d:73:39:82:cf:13:ec:28:86:7e: ef:77:44:dd:fd:4c:95:2b:dd:9a:a0:2e:a1:cd:1c: bc:00:77:2b:ce:c6:e9:1d:47:d6:bd:2a:e1:96:5a: c4:cc:98:1e:2b:93:42:b6:bd:5d:bb:0a:33:70:8a: 04:04:37:26:cc:7c:66:dc:06:62:49:00:f8:65:93: ec:ae:55:ab:1a:35:0c:20:50:7c:85:09:09:96:92: 3b:b1:d9:55:98:2f:13:9c:ee:79:9b:f9:39:33:8f: a1:a8:0a:df:c8:d2:d7:f3:c0:17:87:cd:83:eb:28: f3:a0:a7:ad:4b:3e:82:dc:94:22:ad:b3:4f:bd:d6: be:43:ae:9f:6c:b7:4e:be:af:c8:11:7e:8c:29:c5: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A5:B3:5A:8F:B9:A5:10:FA:27:3F:CE:4D:4E:8B:B6:1E:7E:7D:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c47a085f-3a6d-428f-b77e-f521e9f0d040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.78.120.0/22 Signature Algorithm: sha256WithRSAEncryption 13:b9:5e:43:64:b7:3b:e1:3d:c3:95:0e:1a:d4:51:bb:83:84: d4:1f:f3:68:e2:af:15:be:84:b3:99:d0:bb:80:c5:ce:dc:d5: fe:7e:6a:56:a3:99:5d:84:29:ba:39:9d:54:b4:76:d6:c3:93: 2f:a6:b9:1b:d3:98:50:a4:42:c2:a3:1a:5f:d4:03:a2:ce:39: 9c:06:d5:60:57:c9:a8:b7:0d:08:cf:ef:27:d2:61:24:ab:f1: 09:07:00:4e:e2:28:b1:40:2a:4f:b3:13:83:d7:c8:ca:03:c5: d2:c2:8d:18:19:4b:d5:33:d6:fc:ca:ed:0f:ff:a4:95:2c:d3: 7e:33:3c:77:de:25:dd:19:eb:5c:98:5d:97:81:62:f3:d2:db: f5:61:30:d0:75:27:dd:97:0e:03:70:ea:fb:4c:39:be:f5:67: a5:62:2a:29:5a:31:d2:a2:5c:a8:be:6a:d4:aa:f3:fb:6b:55: 1f:c6:18:40:65:11:0a:8e:6c:82:c7:38:f5:6f:80:1e:e8:4f: aa:d3:fe:cb:74:00:3a:49:e5:c6:51:f9:2c:39:d4:91:5e:9d: 3f:42:87:36:18:09:9d:20:fe:ed:2f:96:77:9d:9a:fd:30:dd: 86:f3:3e:aa:a2:50:ba:27:c9:2d:f0:dd:a1:7e:32:be:bf:d3: cc:4f:0e:ee -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUfi7XCbsQhkRDgXNo369c8bLuQvQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDExM1oX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAZmFiY2ZkOGYzYTk0MWMwNzYxMmI0 NzIxN2Y3NDFlMDliNGIzNGE1YmFmMjU0YTgzYmI1NWY1NmM5NzRmMDUyYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfIJO03H4yuX9VmrmlleB4Tk8+q3 hXDr4nq79OJTr9K2vqcSu3OBcdQMttjy7M5WqMW8NadWZF/RVxkeShtYz3JYt3lH XufAnWrhmGVsW16m6e7qaxsutRdGjp3RdIr+iLPyDLznW5+4qRJNx51zOYLPE+wo hn7vd0Td/UyVK92aoC6hzRy8AHcrzsbpHUfWvSrhllrEzJgeK5NCtr1duwozcIoE BDcmzHxm3AZiSQD4ZZPsrlWrGjUMIFB8hQkJlpI7sdlVmC8TnO55m/k5M4+hqArf yNLX88AXh82D6yjzoKetSz6C3JQirbNPvda+Q66fbLdOvq/IEX6MKcWVawIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFAKls1qPuaUQ+ic/zk1Oi7Yefn0XMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M0N2EwODVmLTNhNmQtNDI4Zi1iNzdlLWY1MjFlOWYwZDA0MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ054MA0GCSqGSIb3DQEBCwUAA4IBAQATuV5DZLc74T3DlQ4a1FG7 g4TUH/No4q8VvoSzmdC7gMXO3NX+fmpWo5ldhCm6OZ1UtHbWw5Mvprkb05hQpELC oxpf1AOizjmcBtVgV8motw0Iz+8n0mEkq/EJBwBO4iixQCpPsxOD18jKA8XSwo0Y GUvVM9b8yu0P/6SVLNN+Mzx33iXdGetcmF2XgWLz0tv1YTDQdSfdlw4DcOr7TDm+ 9WelYiopWjHSolyovmrUqvP7a1UfxhhAZREKjmyCxzj1b4Ae6E+q0/7LdAA6SeXG UfksOdSRXp0/Qoc2GAmdIP7tL5Z3nZr9MN2G8z6qolC6J8kt8N2hfjK+v9PMTw7u -----END CERTIFICATE-----Generated at Wed May 13 01:45:59 2026 by rpki-client