$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/05bc8dbb-c70a-48da-b45b-4448364614ff.roa File: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (raw, json) Hash identifier: GzrrAfumHEMPi4ACEsRqcf2EBNjWevtrlZjHnMAFDks= Subject key identifier: 7B:44:CA:74:A7:9C:21:C6:12:32:0A:55:F6:D7:F3:4A:5A:C2:CB:11 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 1F7C731FFC8A1DF9E4BA70C8B32FDADA02B0ACBE Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/05bc8dbb-c70a-48da-b45b-4448364614ff.roa Signing time: Thu 22 Oct 2026 00:07:29 +0000 ROA not before: Thu 22 Oct 2026 00:07:29 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7c:73:1f:fc:8a:1d:f9:e4:ba:70:c8:b3:2f:da:da:02:b0:ac:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 22 00:07:29 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=1afd0c086e81c3c9f6887fb59f5d2c1fd893f8315f323b9597c3653af07ef4fc, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:90:d4:b3:5b:31:b4:4f:69:d0:2f:d1:97: c1:82:d0:f4:3f:ed:fc:27:54:99:27:d8:5e:71:76: 31:1c:e7:b6:bb:75:b8:a0:14:57:32:c1:9e:49:02: f4:b7:e5:ed:31:d3:bd:93:a4:48:26:8e:82:04:c2: 65:9f:a8:bc:47:31:3c:6e:05:63:26:2c:a0:a4:3f: 4c:01:3d:3d:a0:67:a6:07:bd:a6:ec:e2:8a:d0:cf: 1e:f7:59:c9:9f:26:20:5d:1f:af:dc:38:55:ed:18: 6f:d0:f7:ab:b6:cc:75:c3:3d:78:92:47:2a:2d:80: 8e:89:be:ae:90:3f:e0:f9:b0:e5:ff:a6:c2:4b:94: 18:eb:c7:b9:31:c9:2a:04:10:b0:6c:88:c2:3c:1b: 7f:a7:33:ba:79:3e:fd:b0:d4:2d:4f:36:68:2f:32: 0b:5f:4e:41:3d:40:4e:da:ea:08:21:d4:c2:67:da: 82:c2:a9:40:75:4d:81:43:a3:bb:41:8a:d2:0b:6e: 34:45:18:63:e3:76:77:aa:24:80:b9:ee:4c:73:0e: 9d:cb:5f:38:fb:98:fe:d6:f8:62:b3:51:57:e5:f6: 86:80:93:7b:1a:e4:80:ac:73:05:31:70:aa:51:78: 95:4c:ad:bc:4c:e3:64:05:48:5a:d1:b5:67:83:6e: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:44:CA:74:A7:9C:21:C6:12:32:0A:55:F6:D7:F3:4A:5A:C2:CB:11 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/05bc8dbb-c70a-48da-b45b-4448364614ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.208.0/20 Signature Algorithm: sha256WithRSAEncryption 1c:33:e3:d7:fe:75:0c:65:5f:93:76:31:a0:2a:e4:02:9d:da: 0e:64:20:04:cb:18:08:fa:6d:94:d0:05:73:06:9d:06:fb:a7: e5:37:ed:4f:e2:85:2b:18:64:cb:49:d0:7c:fe:ae:30:7e:a3: 5a:9e:36:20:1e:9f:c9:9d:8a:ed:62:49:f7:97:16:db:c7:22: e6:c5:38:e9:28:51:40:b1:5c:7b:7a:3f:31:c5:9f:40:ce:0b: db:c9:47:80:cc:05:74:4e:e6:8e:ac:11:be:46:43:a0:de:50: 5a:18:5d:05:c9:50:73:56:3b:72:5f:5b:9c:3d:8e:db:e6:9c: 9d:c7:40:3c:1d:21:7d:28:4b:03:d2:08:4a:8b:02:ba:d5:84: db:54:dc:b4:77:57:28:eb:53:a8:a0:73:ad:8b:44:95:52:dd: cd:8a:9b:d2:8b:fe:aa:7a:91:06:a1:e7:34:0c:e9:b0:d6:4b: 9c:6f:b0:5e:3f:08:42:be:8c:73:ec:4a:3c:a7:11:0c:68:16: df:da:f8:e7:dd:46:43:99:ec:52:75:49:22:a4:0c:2d:74:73: 19:15:5d:c8:38:fb:8d:84:78:6b:37:c4:b4:e5:bb:2f:79:a4: bd:8e:0b:2e:f4:a5:30:d4:0c:4f:84:e0:53:f4:4a:51:5e:ab: a9:56:7c:56 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUH3xzH/yKHfnkunDIsy/a2gKwrL4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAyMjAwMDcyOVoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAMWFmZDBjMDg2ZTgxYzNjOWY2ODg3 ZmI1OWY1ZDJjMWZkODkzZjgzMTVmMzIzYjk1OTdjMzY1M2FmMDdlZjRmYzEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptmQ1LNbMbRPadAv0ZfBgtD0P+38 J1SZJ9hecXYxHOe2u3W4oBRXMsGeSQL0t+XtMdO9k6RIJo6CBMJln6i8RzE8bgVj JiygpD9MAT09oGemB72m7OKK0M8e91nJnyYgXR+v3DhV7Rhv0Pertsx1wz14kkcq LYCOib6ukD/g+bDl/6bCS5QY68e5MckqBBCwbIjCPBt/pzO6eT79sNQtTzZoLzIL X05BPUBO2uoIIdTCZ9qCwqlAdU2BQ6O7QYrSC240RRhj43Z3qiSAue5Mcw6dy184 +5j+1vhis1FX5faGgJN7GuSArHMFMXCqUXiVTK28TONkBUha0bVng25dXwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFHtEynSnnCHGEjIKVfbX80pawssRMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzA1YmM4ZGJiLWM3MGEtNDhkYS1iNDViLTQ0NDgzNjQ2MTRmZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQErynQMA0GCSqGSIb3DQEBCwUAA4IBAQAcM+PX/nUMZV+TdjGgKuQC ndoOZCAEyxgI+m2U0AVzBp0G+6flN+1P4oUrGGTLSdB8/q4wfqNanjYgHp/JnYrt Ykn3lxbbxyLmxTjpKFFAsVx7ej8xxZ9AzgvbyUeAzAV0TuaOrBG+RkOg3lBaGF0F yVBzVjtyX1ucPY7b5pydx0A8HSF9KEsD0ghKiwK61YTbVNy0d1co61OooHOti0SV Ut3NipvSi/6qepEGoec0DOmw1kucb7BePwhCvoxz7Eo8pxEMaBbf2vjn3UZDmexS dUkipAwtdHMZFV3IOPuNhHhrN8S05bsveaS9jgsu9KUw1AxPhOBT9EpRXqupVnxW -----END CERTIFICATE-----Generated at Sun Oct 25 02:19:55 2026 by rpki-client