$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa File: e4a99edb-d5fe-48fe-a94d-645381e8080f.roa (raw, json) Hash identifier: PtleZaZqWqR8tM2E6dswIe0iEpdqiWlIUI2ZDEK+FSg= Subject key identifier: 67:E9:84:17:33:4F:DE:AA:D2:BE:B0:5E:B0:30:FB:71:1C:68:28:0E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7B45AC585EB025A8B2DEFE2E154DC77BC14CB539 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa Signing time: Tue 20 Oct 2026 00:10:05 +0000 ROA not before: Tue 20 Oct 2026 00:10:05 +0000 ROA not after: Mon 18 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 43.219.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:45:ac:58:5e:b0:25:a8:b2:de:fe:2e:15:4d:c7:7b:c1:4c:b5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 20 00:10:05 2026 GMT Not After : Jan 18 23:59:59 2027 GMT Subject: serialNumber=6f75ee1624ea13f045491954014b6ec9c3e83cd82b441e753091be424d64ae4f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:fa:5c:41:67:06:04:02:f8:e0:b1:b2:bf: 05:73:0f:ca:51:bf:5d:f8:6c:cc:f0:50:73:70:a8: 46:7b:0f:2c:3c:08:6a:30:a9:21:0c:57:b3:c8:9d: ea:12:7b:64:18:91:6b:52:af:99:6b:ae:66:b0:2e: 71:bb:8c:78:f8:c9:cc:a5:c1:0f:3a:0d:e6:b1:3f: 0e:ac:f5:4d:9a:d6:16:89:f4:fa:8d:7e:f4:74:a1: f8:e8:39:0e:79:70:b7:43:df:29:01:1d:0e:96:ef: 62:ca:68:55:a4:ed:b9:ad:75:f4:cb:11:09:0c:1c: fa:44:47:34:71:18:ee:89:56:9c:71:e2:e8:08:91: 42:13:28:2b:42:24:59:02:2e:5d:f9:a4:b5:9c:b2: f5:71:ad:35:08:a1:f7:c2:81:e6:ed:db:92:35:3d: 1b:1e:a6:e8:74:1e:7c:0b:cc:b2:ff:70:e0:a9:90: a2:88:4a:44:bf:55:7e:32:f4:93:e8:e3:db:55:50: 33:1e:a4:34:a8:7f:63:03:ae:d7:cd:21:b2:2b:dc: 87:a9:32:9b:6f:24:d9:50:23:75:2d:b9:31:cc:2b: 8a:ef:e0:19:7f:d9:f0:84:b0:1d:76:49:27:c1:61: 3c:5b:ae:47:c9:7b:4a:f5:c4:82:1d:64:e1:7c:aa: 5c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E9:84:17:33:4F:DE:AA:D2:BE:B0:5E:B0:30:FB:71:1C:68:28:0E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.219.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6f:b9:5e:f1:48:53:29:2f:42:60:51:bd:d6:ca:9a:6f:51:f8: de:bc:38:58:da:6c:b2:f3:4c:0d:74:59:3d:51:4d:9b:5f:0a: fa:9a:c4:db:30:c0:75:83:0a:e0:e0:bf:a8:8f:fd:d4:e7:b2: 38:fb:21:e8:ec:fe:47:fc:44:e8:9f:66:f1:92:05:ad:4e:b7: 66:66:10:00:45:1d:2f:5b:5c:bc:88:3c:74:d4:35:c8:e4:96: 14:d0:e0:5f:00:55:dd:24:9c:7c:3a:f8:48:61:f0:b2:18:83: a9:2d:3f:01:42:af:21:98:2c:9d:fe:40:98:68:98:fe:06:26: 60:b8:b1:44:77:66:3d:ee:60:b4:12:49:71:21:41:6f:d7:94: fe:f9:2b:c9:51:ec:73:d3:88:ea:f2:d9:10:d5:d1:29:63:ff: 61:6f:c1:07:df:35:e7:da:60:09:6a:11:fd:14:ba:b9:7e:15: 0a:9a:a4:17:1c:58:d3:e9:73:3d:86:4c:19:ac:ec:4f:c1:de: cf:fb:fc:ca:39:5f:c1:30:e4:45:bb:c8:87:09:54:b4:36:26: 62:9b:c5:72:5a:cb:6d:cf:16:dd:9d:8b:5b:d6:a4:3c:7c:67: b4:ae:1f:15:f6:e9:7e:90:37:72:88:56:4c:53:a5:37:10:fa: b0:52:a2:a9 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUe0WsWF6wJaiy3v4uFU3He8FMtTkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAyMDAwMTAwNVoX DTI3MDExODIzNTk1OVowejFJMEcGA1UEBRNANmY3NWVlMTYyNGVhMTNmMDQ1NDkx OTU0MDE0YjZlYzljM2U4M2NkODJiNDQxZTc1MzA5MWJlNDI0ZDY0YWU0ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPT6XEFnBgQC+OCxsr8Fcw/KUb9d +GzM8FBzcKhGew8sPAhqMKkhDFezyJ3qEntkGJFrUq+Za65msC5xu4x4+MnMpcEP Og3msT8OrPVNmtYWifT6jX70dKH46DkOeXC3Q98pAR0Olu9iymhVpO25rXX0yxEJ DBz6REc0cRjuiVacceLoCJFCEygrQiRZAi5d+aS1nLL1ca01CKH3woHm7duSNT0b HqbodB58C8yy/3DgqZCiiEpEv1V+MvST6OPbVVAzHqQ0qH9jA67XzSGyK9yHqTKb byTZUCN1LbkxzCuK7+AZf9nwhLAddkknwWE8W65HyXtK9cSCHWThfKpckwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFGfphBczT96q0r6wXrAw+3EcaCgOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U0YTk5ZWRiLWQ1ZmUtNDhmZS1hOTRkLTY0NTM4MWU4MDgwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9swDQYJKoZIhvcNAQELBQADggEBAG+5XvFIUykvQmBRvdbKmm9R +N68OFjabLLzTA10WT1RTZtfCvqaxNswwHWDCuDgv6iP/dTnsjj7Iejs/kf8ROif ZvGSBa1Ot2ZmEABFHS9bXLyIPHTUNcjklhTQ4F8AVd0knHw6+Ehh8LIYg6ktPwFC ryGYLJ3+QJhomP4GJmC4sUR3Zj3uYLQSSXEhQW/XlP75K8lR7HPTiOry2RDV0Slj /2FvwQffNefaYAlqEf0Uurl+FQqapBccWNPpcz2GTBms7E/B3s/7/Mo5X8Ew5EW7 yIcJVLQ2JmKbxXJay23PFt2di1vWpDx8Z7SuHxX26X6QN3KIVkxTpTcQ+rBSoqk= -----END CERTIFICATE-----Generated at Wed Nov 11 09:18:22 2026 by rpki-client