$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/b0c38f03-3ced-484e-aa5b-7b06f125ad74.roa File: b0c38f03-3ced-484e-aa5b-7b06f125ad74.roa (raw, json) Hash identifier: +wtFIVUrbvhRpJUfCRayIT9lxSEfsuwljHNqTJzdvUU= Subject key identifier: BC:D0:28:FD:13:35:B2:C4:3F:26:AA:AC:09:09:65:9F:3F:0E:94:F1 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 4647B614A3A3AE8531B06ED1282182BFC4F7BF38 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/b0c38f03-3ced-484e-aa5b-7b06f125ad74.roa Signing time: Mon 05 Oct 2026 00:00:05 +0000 ROA not before: Mon 05 Oct 2026 00:00:05 +0000 ROA not after: Sun 03 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 43.224.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 00:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:47:b6:14:a3:a3:ae:85:31:b0:6e:d1:28:21:82:bf:c4:f7:bf:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 5 00:00:05 2026 GMT Not After : Jan 3 23:59:59 2027 GMT Subject: serialNumber=696d3cc38c233a4597d5e51236481e17e03f32280a485e6a69943b348cf758e4, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:92:06:9e:25:20:e2:e0:ee:df:74:0b:22:05: f5:6b:13:b6:a3:cc:f4:58:b2:f0:48:5d:52:1c:f1: b3:9e:c2:47:b2:f3:f9:9f:84:b6:e6:5e:c9:a9:03: 04:73:1c:7a:3b:66:83:9d:11:a6:82:ea:0c:a5:08: 79:16:bd:e5:5a:d2:eb:ac:d4:13:f6:37:5c:c1:ad: 60:38:6b:f5:02:e3:29:cc:c5:55:ec:39:9c:c7:c2: 5b:7a:20:ec:30:94:53:ac:43:be:52:bd:aa:a9:f3: 29:c0:9f:08:38:af:80:d6:41:0e:c0:bb:ab:38:ad: 70:2b:66:89:fe:09:a5:29:a3:a4:ad:6d:b6:83:a8: 23:33:95:65:c1:ad:6a:02:f9:29:01:53:0e:b5:79: 9c:26:2c:87:9a:40:f7:9d:46:0e:9f:35:f8:db:3c: bc:8f:9f:d9:ee:35:58:3a:43:3c:c4:04:58:c5:61: 79:ef:46:29:18:12:71:3b:91:f8:ca:64:28:f1:b8: 94:63:98:33:83:e1:60:41:84:58:44:f3:a6:f0:d7: 6c:ce:a4:cd:11:5f:88:8f:a4:fd:43:3d:15:24:9f: 29:b2:49:a2:f5:ab:10:72:f5:9d:75:28:b5:0e:a9: 4a:3f:f3:68:95:85:0c:ce:bd:15:0d:bf:80:6d:b9: 18:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D0:28:FD:13:35:B2:C4:3F:26:AA:AC:09:09:65:9F:3F:0E:94:F1 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/b0c38f03-3ced-484e-aa5b-7b06f125ad74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.144.0/22 Signature Algorithm: sha256WithRSAEncryption 87:63:9c:a1:2d:ff:2f:83:d9:8a:52:68:fc:b2:f8:73:bd:3e: a9:3d:58:50:29:c7:80:fd:03:16:77:95:18:7b:c9:eb:b3:2e: 7b:a5:aa:46:2f:f7:bc:fe:ed:17:19:a3:ba:bc:c3:9f:73:6f: a2:dc:ad:fa:73:54:83:d6:23:b2:6e:c0:5e:f7:80:0f:83:7d: 44:26:35:d0:ce:40:24:4b:b1:ba:bb:e6:59:df:3c:b4:e7:ff: 03:46:85:f2:20:02:a7:f7:7f:b9:0a:ba:be:73:ae:79:06:bf: f8:b5:83:da:09:cd:9b:3f:21:8b:98:a5:a7:0b:17:75:ab:c4: 9e:98:e7:2b:9e:d8:1b:78:0e:3d:75:86:3b:cf:85:f3:3b:a8: a0:db:21:f2:22:c8:4a:7c:eb:45:86:0a:d2:cc:bd:90:d7:b5: 0d:7b:2c:28:a4:b1:3e:04:36:17:e2:cd:00:4d:34:ae:13:36: 9c:32:1f:5a:25:19:eb:d2:4c:3a:9c:46:89:54:fb:68:86:67: 26:d7:8f:a7:04:41:35:6c:cd:66:bf:2a:28:18:9a:fc:c1:18: cd:a0:0a:0a:b4:f6:32:cc:ff:de:65:24:bb:5d:a5:87:01:dd: 23:4a:99:8b:2c:57:15:e2:79:b0:8a:d5:79:d9:68:ad:5a:36: 00:9b:55:04 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIURke2FKOjroUxsG7RKCGCv8T3vzgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAwNTAwMDAwNVoX DTI3MDEwMzIzNTk1OVowejFJMEcGA1UEBRNANjk2ZDNjYzM4YzIzM2E0NTk3ZDVl NTEyMzY0ODFlMTdlMDNmMzIyODBhNDg1ZTZhNjk5NDNiMzQ4Y2Y3NThlNDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pIGniUg4uDu33QLIgX1axO2o8z0 WLLwSF1SHPGznsJHsvP5n4S25l7JqQMEcxx6O2aDnRGmguoMpQh5Fr3lWtLrrNQT 9jdcwa1gOGv1AuMpzMVV7Dmcx8JbeiDsMJRTrEO+Ur2qqfMpwJ8IOK+A1kEOwLur OK1wK2aJ/gmlKaOkrW22g6gjM5Vlwa1qAvkpAVMOtXmcJiyHmkD3nUYOnzX42zy8 j5/Z7jVYOkM8xARYxWF570YpGBJxO5H4ymQo8biUY5gzg+FgQYRYRPOm8NdszqTN EV+Ij6T9Qz0VJJ8pskmi9asQcvWddSi1DqlKP/NolYUMzr0VDb+AbbkY5wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFLzQKP0TNbLEPyaqrAkJZZ8/DpTxMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2IwYzM4ZjAzLTNjZWQtNDg0ZS1hYTViLTdiMDZmMTI1YWQ3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK+CQMA0GCSqGSIb3DQEBCwUAA4IBAQCHY5yhLf8vg9mKUmj8svhz vT6pPVhQKceA/QMWd5UYe8nrsy57papGL/e8/u0XGaO6vMOfc2+i3K36c1SD1iOy bsBe94APg31EJjXQzkAkS7G6u+ZZ3zy05/8DRoXyIAKn93+5Crq+c655Br/4tYPa Cc2bPyGLmKWnCxd1q8SemOcrntgbeA49dYY7z4XzO6ig2yHyIshKfOtFhgrSzL2Q 17UNeywopLE+BDYX4s0ATTSuEzacMh9aJRnr0kw6nEaJVPtohmcm14+nBEE1bM1m vyooGJr8wRjNoAoKtPYyzP/eZSS7XaWHAd0jSpmLLFcV4nmwitV52WitWjYAm1UE -----END CERTIFICATE-----Generated at Mon Oct 19 07:59:04 2026 by rpki-client