$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a376ad6c-f011-4c0c-850e-ba1508e41fe7.roa File: a376ad6c-f011-4c0c-850e-ba1508e41fe7.roa (raw, json) Hash identifier: H4eK+M2RSvyWXNWFvLnDYp8ITzA5SeR2w8m6cTeDgNI= Subject key identifier: 9B:1F:1F:1E:7E:FD:00:14:60:B8:E9:E5:ED:49:8B:5A:D3:DD:F0:D5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 043E0AC8E8914B49FF8404315A023AC30E572601 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a376ad6c-f011-4c0c-850e-ba1508e41fe7.roa Signing time: Fri 19 Sep 2025 00:00:39 +0000 ROA not before: Fri 19 Sep 2025 00:00:39 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 126.210.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3e:0a:c8:e8:91:4b:49:ff:84:04:31:5a:02:3a:c3:0e:57:26:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 19 00:00:39 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=3311c098f63a4852f83562c79f9c01c38a00910f2b2557dee14a36448132a64d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:1b:e0:93:6f:81:26:88:3e:81:7f:4e:74: ff:1a:e2:c3:85:dd:45:29:a5:71:e8:ab:28:9b:2a: 82:e2:2a:54:43:2c:33:d8:ea:e8:62:8b:cc:73:75: 0b:09:e3:1b:67:0f:25:1a:73:2b:43:8a:4a:10:f7: ea:0d:c9:61:b8:74:64:0f:e8:65:74:9d:c4:a9:bf: 84:2a:0d:2c:cc:c9:d0:1b:91:de:da:52:1e:84:aa: 41:46:92:41:54:56:45:ba:f9:11:1f:31:6f:df:f6: 7a:88:e9:92:26:3a:24:52:40:4a:f5:07:49:5c:e5: 89:d9:1b:71:ee:41:11:75:a7:8e:0d:92:85:38:4e: fc:f2:6e:00:c5:67:1b:46:10:8f:46:cb:bb:06:24: 1c:28:75:38:c6:9e:9f:2f:62:97:76:3d:3c:11:38: 90:a9:30:56:b4:ef:c9:86:27:f1:d6:7b:ce:43:c1: 33:86:96:5b:5b:ce:8f:ac:f4:9e:65:f9:8e:e0:76: f8:b0:3d:92:f7:8e:90:f6:22:fe:5f:d7:91:ef:7c: 12:7a:7e:e4:cf:c9:a4:a1:40:a1:9e:7e:4b:7d:92: 45:ca:e8:af:22:e4:a9:cb:73:9c:15:6d:ab:dd:0a: 0c:f0:ef:40:21:37:02:3c:7b:a1:ff:e4:58:c9:c7: df:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1F:1F:1E:7E:FD:00:14:60:B8:E9:E5:ED:49:8B:5A:D3:DD:F0:D5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a376ad6c-f011-4c0c-850e-ba1508e41fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 126.210.0.0/16 Signature Algorithm: sha256WithRSAEncryption b1:e4:70:a8:50:5d:9e:b4:0e:a6:4f:32:d9:66:63:eb:d8:c2: 54:f0:45:66:97:aa:13:84:ac:6b:f1:71:38:e9:14:5a:85:fa: 81:90:86:12:12:38:7a:b8:e5:a1:f5:c7:22:a6:49:de:61:62: 41:08:3c:46:c8:67:71:b9:ae:cf:90:28:45:32:00:3e:fa:15: 4a:d0:07:e7:39:ea:c2:43:88:a3:c9:a5:62:0a:e7:02:43:ac: a9:db:df:72:76:35:6b:6d:88:b7:cd:39:54:35:c4:be:d0:8e: cf:f4:ce:9a:37:7f:8a:b6:38:21:18:77:98:f2:c9:7f:eb:cf: fa:b9:11:2c:8f:7f:5c:e7:4b:9d:2f:1c:c3:1c:83:3f:f7:12: 88:dc:18:ba:cb:e2:13:eb:ec:e5:b9:66:c1:0d:cf:63:a9:c5: 6f:7b:47:16:1f:f9:18:79:25:cd:26:a6:d1:ff:ae:68:db:7d: ad:34:61:24:42:53:2a:3e:c2:7d:ee:06:11:44:02:8c:48:1c: 07:bf:b9:bb:da:b6:b4:d0:e6:4c:77:27:b4:d0:43:ad:76:84: 98:4a:f2:ee:d2:dc:04:c4:72:76:8f:e3:7a:17:e6:b2:ce:2d: e0:4e:19:17:4d:6b:c9:78:e7:38:19:34:ff:5e:cf:df:88:df: 63:a6:2a:85 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUBD4KyOiRS0n/hAQxWgI6ww5XJgEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkxOTAwMDAzOVoX DTI1MTAyNDIzNTk1OVowejFJMEcGA1UEBRNAMzMxMWMwOThmNjNhNDg1MmY4MzU2 MmM3OWY5YzAxYzM4YTAwOTEwZjJiMjU1N2RlZTE0YTM2NDQ4MTMyYTY0ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshIb4JNvgSaIPoF/TnT/GuLDhd1F KaVx6KsomyqC4ipUQywz2OroYovMc3ULCeMbZw8lGnMrQ4pKEPfqDclhuHRkD+hl dJ3Eqb+EKg0szMnQG5He2lIehKpBRpJBVFZFuvkRHzFv3/Z6iOmSJjokUkBK9QdJ XOWJ2Rtx7kERdaeODZKFOE788m4AxWcbRhCPRsu7BiQcKHU4xp6fL2KXdj08ETiQ qTBWtO/Jhifx1nvOQ8EzhpZbW86PrPSeZfmO4Hb4sD2S946Q9iL+X9eR73wSen7k z8mkoUChnn5LfZJFyuivIuSpy3OcFW2r3QoM8O9AITcCPHuh/+RYycfflQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFJsfHx5+/QAUYLjp5e1Ji1rT3fDVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EzNzZhZDZjLWYwMTEtNGMwYy04NTBlLWJhMTUwOGU0MWZlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAftIwDQYJKoZIhvcNAQELBQADggEBALHkcKhQXZ60DqZPMtlmY+vY wlTwRWaXqhOErGvxcTjpFFqF+oGQhhISOHq45aH1xyKmSd5hYkEIPEbIZ3G5rs+Q KEUyAD76FUrQB+c56sJDiKPJpWIK5wJDrKnb33J2NWttiLfNOVQ1xL7Qjs/0zpo3 f4q2OCEYd5jyyX/rz/q5ESyPf1znS50vHMMcgz/3EojcGLrL4hPr7OW5ZsENz2Op xW97RxYf+Rh5Jc0mptH/rmjbfa00YSRCUyo+wn3uBhFEAoxIHAe/ubvatrTQ5kx3 J7TQQ612hJhK8u7S3ATEcnaP43oX5rLOLeBOGRdNa8l45zgZNP9ez9+I32OmKoU= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:35 2025 by rpki-client