$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c759ed47-7de1-4858-b207-c77b1f7d2c35.roa File: c759ed47-7de1-4858-b207-c77b1f7d2c35.roa (raw, json) Hash identifier: h1lEqvOFFySYZE3v8FtAKtIg67E3DMplGHAU1muzr54= Subject key identifier: C4:97:CD:DC:EA:F7:E2:80:D6:10:1A:B2:72:D0:70:3D:14:52:0A:D3 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 4DEA8449DBD953453D8BB9554A1EC4D3B2F225D0 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c759ed47-7de1-4858-b207-c77b1f7d2c35.roa Signing time: Thu 22 Oct 2026 00:10:07 +0000 ROA not before: Thu 22 Oct 2026 00:10:07 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 103.21.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 00:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ea:84:49:db:d9:53:45:3d:8b:b9:55:4a:1e:c4:d3:b2:f2:25:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 22 00:10:07 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=e338409965d606a08c79672c65a0805a277ebfa696bdc29ae1179adc1ba8a846, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:be:8e:b6:6d:50:47:af:f4:85:03:98:0c:d7: 82:95:6a:95:e9:b2:ec:74:4a:84:1f:9b:3e:78:6d: 91:a6:a9:2c:b9:0b:1d:65:b2:df:ea:6d:0c:29:80: 4c:9c:ec:b3:0b:6d:13:90:eb:b7:3c:fb:4e:81:30: 22:52:f2:93:63:ef:70:76:45:5f:10:f1:6a:d4:8d: 6e:12:9a:fa:af:fe:5b:85:90:1e:2f:30:cc:d5:68: 5d:cb:27:6e:6d:02:21:71:28:16:d5:f2:f7:54:83: 59:3d:60:43:78:0b:64:8b:ff:15:61:54:b4:0c:b9: ad:6f:8c:86:d4:59:04:ba:18:8a:a0:c1:9d:87:df: d8:b2:84:4c:ab:58:7a:5c:e1:08:cf:ac:68:08:5a: b0:57:6e:71:a0:12:72:db:bc:e0:07:6d:d3:61:2e: 5a:43:dc:ea:41:97:07:8f:c3:c5:9f:7d:a2:77:ab: 74:6b:4b:ac:0c:e2:d7:6c:f5:29:5e:5b:61:55:c3: af:19:3c:52:2e:b5:48:82:49:30:5f:3a:1e:d3:5f: 12:69:d7:ad:f7:4b:47:0a:de:37:23:06:20:a1:1b: d1:e9:7d:44:5e:29:cd:99:8b:b0:7c:c5:95:ed:9b: c9:63:dd:5b:d9:4c:c2:45:e4:0e:ff:2e:a3:9f:3c: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:97:CD:DC:EA:F7:E2:80:D6:10:1A:B2:72:D0:70:3D:14:52:0A:D3 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c759ed47-7de1-4858-b207-c77b1f7d2c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.240.0/22 Signature Algorithm: sha256WithRSAEncryption 35:fa:bd:0b:b4:66:98:aa:11:bf:22:23:86:8f:86:32:90:f3: dc:44:e9:2a:03:c7:37:fc:f4:37:a3:bb:6b:44:c1:7c:75:e2: ef:aa:1d:69:85:12:82:6d:8a:24:d5:f2:2a:be:df:10:3c:c9: 47:32:fd:80:77:06:6c:fb:cf:73:c0:18:49:e0:4c:ea:b3:57: 78:ab:51:45:ce:18:33:11:c0:ad:7e:17:32:a6:3b:14:b6:16: 63:33:27:64:8d:f7:26:e2:7f:2d:2d:a9:3c:5d:b4:25:e7:89: 92:b6:85:28:1e:c0:74:84:93:c7:40:20:4d:fa:ab:d1:50:ad: b6:b4:6c:63:95:e7:2d:78:27:1c:a6:d7:0a:cd:5e:47:e3:a7: 86:fa:81:7f:2b:d2:7e:01:c6:e4:bc:61:91:96:2a:34:8e:d2: 09:b2:8e:98:7c:d2:4b:69:cd:77:b4:c5:5b:e7:3e:1b:0f:1d: 08:81:1e:b9:5a:c2:33:09:03:21:b7:48:36:b9:61:9d:2c:db: c5:67:9c:0f:6e:5d:6d:e7:c0:3b:81:a2:0d:4a:d2:f9:db:c2: df:ef:de:8d:f8:5a:bf:3f:64:eb:c5:ad:90:0d:77:f0:ae:f8: 11:47:30:ad:dc:3e:01:38:78:da:aa:51:13:33:d6:79:c1:f1: 03:31:12:71 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUTeqESdvZU0U9i7lVSh7E07LyJdAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMjAwMTAwN1oX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAZTMzODQwOTk2NWQ2MDZhMDhjNzk2 NzJjNjVhMDgwNWEyNzdlYmZhNjk2YmRjMjlhZTExNzlhZGMxYmE4YTg0NjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+76Otm1QR6/0hQOYDNeClWqV6bLs dEqEH5s+eG2RpqksuQsdZbLf6m0MKYBMnOyzC20TkOu3PPtOgTAiUvKTY+9wdkVf EPFq1I1uEpr6r/5bhZAeLzDM1WhdyydubQIhcSgW1fL3VINZPWBDeAtki/8VYVS0 DLmtb4yG1FkEuhiKoMGdh9/YsoRMq1h6XOEIz6xoCFqwV25xoBJy27zgB23TYS5a Q9zqQZcHj8PFn32id6t0a0usDOLXbPUpXlthVcOvGTxSLrVIgkkwXzoe018Sadet 90tHCt43IwYgoRvR6X1EXinNmYuwfMWV7ZvJY91b2UzCReQO/y6jnzxE3wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFMSXzdzq9+KA1hAasnLQcD0UUgrTMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2M3NTllZDQ3LTdkZTEtNDg1OC1iMjA3LWM3N2IxZjdkMmMzNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZxXwMA0GCSqGSIb3DQEBCwUAA4IBAQA1+r0LtGaYqhG/IiOGj4Yy kPPcROkqA8c3/PQ3o7trRMF8deLvqh1phRKCbYok1fIqvt8QPMlHMv2AdwZs+89z wBhJ4Ezqs1d4q1FFzhgzEcCtfhcypjsUthZjMydkjfcm4n8tLak8XbQl54mStoUo HsB0hJPHQCBN+qvRUK22tGxjlecteCccptcKzV5H46eG+oF/K9J+AcbkvGGRlio0 jtIJso6YfNJLac13tMVb5z4bDx0IgR65WsIzCQMht0g2uWGdLNvFZ5wPbl1t58A7 gaINStL528Lf796N+Fq/P2Trxa2QDXfwrvgRRzCt3D4BOHjaqlETM9Z5wfEDMRJx -----END CERTIFICATE-----Generated at Mon Nov 2 05:23:25 2026 by rpki-client