$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/0bf15d3f-c546-4bb6-a764-82165c384d37.roa File: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (raw, json) Hash identifier: 6ESbmpYd7H+0YV5LqCGCwBRmIUQlbPsgFEVkrcgvI6A= Subject key identifier: E0:77:46:AF:B6:21:7D:AF:0E:A6:52:EE:29:58:A2:A1:08:74:37:EB Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 4FC382A981A5E206459DD17E6FBC47372818FDE8 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/0bf15d3f-c546-4bb6-a764-82165c384d37.roa Signing time: Thu 22 Oct 2026 00:07:23 +0000 ROA not before: Thu 22 Oct 2026 00:07:23 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c3:82:a9:81:a5:e2:06:45:9d:d1:7e:6f:bc:47:37:28:18:fd:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 22 00:07:23 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=2e44213b4ecc5f5429f7816e52aa620f2e048ca3c93eed85645e4daf993ae885, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:c8:3b:12:36:97:52:0b:18:07:7b:82:9a: fc:b9:a6:2b:08:6e:1e:ae:a8:5d:0d:a8:50:a8:f7: ee:d2:06:13:9f:d3:53:a7:6a:e5:e3:88:e8:fc:af: 94:04:b2:f0:e2:d9:80:23:62:17:22:f9:e5:10:68: af:a8:a1:a8:55:7a:c1:5e:e2:90:47:b8:55:e4:36: 5f:95:ac:ec:a7:09:04:38:14:76:a4:a5:f6:97:36: 77:f8:a4:2e:d7:2f:47:50:59:7b:68:66:45:74:bb: 5f:e9:6a:13:a0:68:7f:44:3c:99:68:a3:26:98:4c: 7b:a5:da:c1:d2:cb:54:21:3b:1f:fb:54:04:f0:a9: b0:2c:9c:af:71:b8:1a:8f:5b:77:d1:4c:f9:1b:19: 9c:e6:ad:a1:88:b9:ed:e5:b8:43:06:e5:25:c7:cc: b0:ca:b0:c4:c8:ce:4b:da:7b:ed:6c:46:06:31:68: 6a:be:3a:d1:f1:b6:07:1e:44:78:e5:79:0d:5e:39: 3c:32:f8:42:15:3e:af:50:98:fb:33:5f:28:2b:d5: 7f:72:f8:ca:60:97:88:eb:0f:32:cb:bf:5c:c7:d8: 59:96:f9:79:6f:23:88:12:4e:48:e8:25:f4:d0:aa: aa:d9:db:4c:60:63:3e:17:ad:ea:fa:ca:05:ab:34: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:77:46:AF:B6:21:7D:AF:0E:A6:52:EE:29:58:A2:A1:08:74:37:EB X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/0bf15d3f-c546-4bb6-a764-82165c384d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.200.0/21 Signature Algorithm: sha256WithRSAEncryption 53:5f:1a:55:df:71:0d:33:b6:62:ba:1c:45:c7:16:fe:ae:4f: 18:91:2d:a7:f6:08:13:50:d0:42:6d:cc:d3:30:0e:7d:98:31: f7:c3:c6:8b:d3:da:d9:6b:bd:5a:fc:64:80:0d:20:a4:7b:87: 2a:d3:86:4f:48:bd:97:14:39:07:4f:c6:64:41:11:78:78:8b: 6c:61:cb:6d:fd:fd:18:2e:3e:b1:8e:e0:38:4c:24:1e:f4:c6: 8b:7d:63:9b:62:3e:60:02:c9:64:65:98:6e:11:d3:4a:07:89: 74:38:6b:e8:65:27:3a:9b:5c:6c:c9:e1:27:e2:03:63:7e:30: 8c:e0:48:8a:15:98:a6:02:3d:ab:ed:f5:b3:66:c3:c3:40:39: e3:01:20:d0:6d:1f:c6:0a:6a:53:48:02:b1:da:3c:51:2a:20: 4b:33:10:08:06:94:0b:f8:6b:e9:a2:4f:c2:3d:31:94:9b:36: fb:f3:1f:57:f6:aa:f1:bf:c7:ed:76:fb:73:ee:31:61:d6:c1: 83:90:fe:28:55:ac:d7:25:4b:d1:2e:95:d7:56:29:2e:cd:b3: ae:15:c3:6e:c6:bf:e6:fd:22:38:8a:0f:7a:5a:49:bf:60:68: c6:07:3f:d0:3b:a3:fb:8d:ad:79:d3:c2:41:e6:ce:c5:76:9f: 72:b0:a6:ec -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUT8OCqYGl4gZFndF+b7xHNygY/egwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAyMjAwMDcyM1oX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAMmU0NDIxM2I0ZWNjNWY1NDI5Zjc4 MTZlNTJhYTYyMGYyZTA0OGNhM2M5M2VlZDg1NjQ1ZTRkYWY5OTNhZTg4NTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm7IOxI2l1ILGAd7gpr8uaYrCG4e rqhdDahQqPfu0gYTn9NTp2rl44jo/K+UBLLw4tmAI2IXIvnlEGivqKGoVXrBXuKQ R7hV5DZflazspwkEOBR2pKX2lzZ3+KQu1y9HUFl7aGZFdLtf6WoToGh/RDyZaKMm mEx7pdrB0stUITsf+1QE8KmwLJyvcbgaj1t30Uz5Gxmc5q2hiLnt5bhDBuUlx8yw yrDEyM5L2nvtbEYGMWhqvjrR8bYHHkR45XkNXjk8MvhCFT6vUJj7M18oK9V/cvjK YJeI6w8yy79cx9hZlvl5byOIEk5I6CX00Kqq2dtMYGM+F63q+soFqzSXCwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOB3Rq+2IX2vDqZS7ilYoqEIdDfrMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzBiZjE1ZDNmLWM1NDYtNGJiNi1hNzY0LTgyMTY1YzM4NGQzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDrynIMA0GCSqGSIb3DQEBCwUAA4IBAQBTXxpV33ENM7ZiuhxFxxb+ rk8YkS2n9ggTUNBCbczTMA59mDH3w8aL09rZa71a/GSADSCke4cq04ZPSL2XFDkH T8ZkQRF4eItsYctt/f0YLj6xjuA4TCQe9MaLfWObYj5gAslkZZhuEdNKB4l0OGvo ZSc6m1xsyeEn4gNjfjCM4EiKFZimAj2r7fWzZsPDQDnjASDQbR/GCmpTSAKx2jxR KiBLMxAIBpQL+Gvpok/CPTGUmzb78x9X9qrxv8ftdvtz7jFh1sGDkP4oVazXJUvR LpXXVikuzbOuFcNuxr/m/SI4ig96Wkm/YGjGBz/QO6P7ja1508JB5s7Fdp9ysKbs -----END CERTIFICATE-----Generated at Sat Oct 24 10:36:56 2026 by rpki-client