$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/efd2ac3d-dc38-4d93-aaac-4cbd6cc911c4.roa File: efd2ac3d-dc38-4d93-aaac-4cbd6cc911c4.roa (raw, json) Hash identifier: h3i7L4dUgflTvC96C5a2bryxc9LWLOJhRSHBpX3YESs= Subject key identifier: 8F:4B:39:14:90:FE:EB:49:1A:C6:E6:9D:3F:9C:50:9D:A0:AE:70:DD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 51329D359C91E2487CDDE9F4E94F41BCEDCF6A72 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/efd2ac3d-dc38-4d93-aaac-4cbd6cc911c4.roa Signing time: Mon 19 Oct 2026 00:10:33 +0000 ROA not before: Mon 19 Oct 2026 00:10:33 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 203.83.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 00:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:32:9d:35:9c:91:e2:48:7c:dd:e9:f4:e9:4f:41:bc:ed:cf:6a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 19 00:10:33 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=6fb4a824d63853ace576b8cb390d97c47194133e51e8901f7257591baabdc5d0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:53:e2:2d:ed:24:5a:36:3b:4a:98:ad:92: 2a:35:15:b4:dc:0d:73:06:a5:f1:ea:3b:8b:bd:af: 73:ac:26:55:40:af:53:ec:e6:42:46:c0:2a:97:d0: b1:a9:a3:a0:e6:8a:7f:3f:8c:32:b6:ec:9b:72:56: f0:dc:e6:54:cf:e8:54:39:c2:2f:4c:9a:12:3b:c5: ea:12:34:0c:35:66:74:26:1a:fe:7b:f2:e3:ad:f3: 58:99:a9:55:01:20:b7:9f:af:30:59:fc:58:0a:c6: 77:7a:d4:e9:76:f7:5f:81:b8:e6:a4:ec:4f:f1:8a: 37:c1:8c:39:13:bf:ac:2d:f2:e3:53:36:05:77:f6: c6:00:4b:bb:ba:8b:04:25:14:1b:90:81:2a:17:ef: 55:24:b9:44:f1:f7:7d:72:17:ce:f1:6f:d7:69:a0: 5a:26:d3:ed:fa:18:8c:d6:9e:e0:22:b4:f0:48:0b: 76:3e:14:93:b1:94:79:33:2a:80:41:16:59:6c:7b: 54:90:a6:06:0a:24:a0:34:74:19:f6:b2:e8:57:86: 3a:3e:6a:24:a9:41:42:77:d6:df:cb:ce:10:2a:d2: bb:ac:81:32:78:72:8d:b1:08:9c:5b:57:cd:66:3e: e6:eb:4c:84:0c:c2:77:fa:70:c7:ae:61:84:ac:5d: 1d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4B:39:14:90:FE:EB:49:1A:C6:E6:9D:3F:9C:50:9D:A0:AE:70:DD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/efd2ac3d-dc38-4d93-aaac-4cbd6cc911c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.83.220.0/22 Signature Algorithm: sha256WithRSAEncryption 29:90:27:c6:19:15:66:32:6e:45:2e:5b:85:f0:c2:19:77:97: fe:9f:ba:5c:51:86:06:7d:f7:ef:57:70:31:6c:72:84:0b:b9: 46:d7:34:49:0c:ef:22:30:42:5b:3a:1a:4a:0f:c1:c0:99:11: 65:d2:f9:7f:43:78:6d:7f:c1:ed:ef:32:ce:82:96:89:bd:96: a1:20:33:46:49:e7:82:42:ff:03:2a:e0:9f:ea:a1:81:36:5a: f8:33:5b:1e:84:8f:af:38:bd:97:db:46:2e:7e:e0:9c:c6:d3: 71:7e:c6:a4:4b:6c:a4:55:66:e0:08:a5:28:9e:ba:c7:60:22: c9:b0:a1:89:2d:60:65:52:f0:54:2f:57:39:90:fa:5f:b0:85: 31:3b:b8:70:9e:dc:7c:0e:4d:15:99:48:5b:39:c0:0e:e2:d4: 16:94:ff:9a:f8:ba:67:ee:e9:53:1a:2c:0e:ad:2d:f1:67:5a: 01:04:2b:e8:90:9d:ca:8f:51:8d:9c:80:8f:0a:13:b7:7f:b2: 55:09:4a:00:a2:a4:c8:b7:14:55:14:3b:d1:a4:86:70:2c:2e: 8d:5c:04:83:e3:b4:29:97:29:d3:59:8d:4b:0d:28:7e:5e:86: d7:84:fa:4b:3d:3b:b7:23:5e:76:70:9b:06:20:60:e5:29:6c: 13:94:66:03 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUUTKdNZyR4kh83en06U9BvO3PanIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMTAzM1oX DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNANmZiNGE4MjRkNjM4NTNhY2U1NzZi OGNiMzkwZDk3YzQ3MTk0MTMzZTUxZTg5MDFmNzI1NzU5MWJhYWJkYzVkMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwklT4i3tJFo2O0qYrZIqNRW03A1z BqXx6juLva9zrCZVQK9T7OZCRsAql9CxqaOg5op/P4wytuybclbw3OZUz+hUOcIv TJoSO8XqEjQMNWZ0Jhr+e/LjrfNYmalVASC3n68wWfxYCsZ3etTpdvdfgbjmpOxP 8Yo3wYw5E7+sLfLjUzYFd/bGAEu7uosEJRQbkIEqF+9VJLlE8fd9chfO8W/XaaBa JtPt+hiM1p7gIrTwSAt2PhSTsZR5MyqAQRZZbHtUkKYGCiSgNHQZ9rLoV4Y6Pmok qUFCd9bfy84QKtK7rIEyeHKNsQicW1fNZj7m60yEDMJ3+nDHrmGErF0dLQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFI9LORSQ/utJGsbmnT+cUJ2grnDdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VmZDJhYzNkLWRjMzgtNGQ5My1hYWFjLTRjYmQ2Y2M5MTFjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCy1PcMA0GCSqGSIb3DQEBCwUAA4IBAQApkCfGGRVmMm5FLluF8MIZ d5f+n7pcUYYGfffvV3AxbHKEC7lG1zRJDO8iMEJbOhpKD8HAmRFl0vl/Q3htf8Ht 7zLOgpaJvZahIDNGSeeCQv8DKuCf6qGBNlr4M1sehI+vOL2X20YufuCcxtNxfsak S2ykVWbgCKUonrrHYCLJsKGJLWBlUvBUL1c5kPpfsIUxO7hwntx8Dk0VmUhbOcAO 4tQWlP+a+Lpn7ulTGiwOrS3xZ1oBBCvokJ3Kj1GNnICPChO3f7JVCUoAoqTItxRV FDvRpIZwLC6NXASD47QplynTWY1LDSh+XobXhPpLPTu3I152cJsGIGDlKWwTlGYD -----END CERTIFICATE-----Generated at Tue Oct 27 22:59:40 2026 by rpki-client