$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa File: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (raw, json) Hash identifier: tt4cYUE6Kg8jt0O69Zb567gWFoo5rjLLM97F4/aSiTA= Subject key identifier: C6:EB:98:A5:C9:28:6E:95:2D:49:95:94:1C:E9:82:30:A8:AA:56:8D Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 26FA9F95A259CFF342607B77896B4A281325B335 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa Signing time: Thu 22 Oct 2026 00:07:27 +0000 ROA not before: Thu 22 Oct 2026 00:07:27 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:fa:9f:95:a2:59:cf:f3:42:60:7b:77:89:6b:4a:28:13:25:b3:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 22 00:07:27 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=7e1008d27d806be0814baefc2faa3327236cac9872a1724eeb0aa3ea84a7f68c, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:c4:d0:f7:54:6e:96:f6:e3:cf:3b:ca:84: e8:e5:b3:0a:1b:91:ab:89:5d:68:3c:26:73:b3:5f: 07:bb:b6:bd:38:04:c1:ab:2e:a8:e2:ae:f1:a2:1a: b4:ad:39:77:35:85:d1:1c:8a:5d:28:25:6c:6c:34: ba:1c:91:59:b2:c7:d0:5b:98:db:5d:df:ac:5f:d4: e6:56:1a:e7:ea:18:6c:cd:dd:d2:4b:93:2f:81:96: ce:0c:45:79:d3:27:51:92:6e:28:25:3f:d0:05:b3: f3:73:db:b7:86:df:f3:8d:ae:57:c5:ee:00:86:fa: f3:d7:45:5e:24:a7:83:92:d3:9b:05:ec:4c:7c:73: c3:2e:9f:37:8a:df:b0:18:27:c3:8c:ec:09:9c:89: a1:66:25:02:a6:4a:b6:fe:c9:9f:94:98:0e:4d:0d: 9d:a9:db:9a:d1:09:8e:be:8c:2b:94:6c:ea:61:95: 4b:4b:9c:27:12:c0:e5:48:3d:c1:6b:33:8a:0e:2e: 31:2a:2e:38:aa:63:ee:7c:dd:00:e3:2d:94:9e:0d: 65:d4:00:d2:67:8a:c5:9b:cb:2b:e4:04:33:0c:aa: 0b:79:ac:4c:96:bf:a5:7c:48:90:5c:f2:13:97:80: c4:27:de:48:84:26:9e:fd:a4:cd:fa:91:3b:08:2b: d0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EB:98:A5:C9:28:6E:95:2D:49:95:94:1C:E9:82:30:A8:AA:56:8D X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.232.0/22 Signature Algorithm: sha256WithRSAEncryption af:70:04:75:17:45:7a:5b:41:0c:b5:48:92:5b:9d:f1:f7:6c: 44:24:1f:68:1a:f2:02:b6:cd:d2:41:c1:6f:c6:7e:8d:d0:cf: 0d:4b:e8:4c:ef:37:a6:01:bb:a1:6e:19:e1:d6:12:a2:93:ac: 00:70:95:49:5d:d2:3c:79:40:f9:1c:9f:2f:ed:5a:7d:64:fd: 08:74:72:87:0d:59:08:04:b2:3f:f9:03:42:f5:84:36:50:26: 21:22:9d:b0:1f:f4:e1:40:83:c1:96:29:8e:c7:36:8b:d8:43: 6e:ef:99:f7:d0:4b:62:48:aa:f0:25:4f:02:be:ce:0d:5b:95: a7:17:c8:91:3b:eb:9b:30:ae:39:81:f3:aa:56:98:00:44:09: cd:b7:2d:a8:62:bc:27:a4:93:ba:7d:54:01:17:42:bc:2a:7e: 9c:28:8d:9e:3f:d1:8d:91:d6:1f:9b:8a:15:3f:06:0d:36:77: 60:f1:76:8f:d0:fd:7a:9f:74:9f:69:b3:8c:fc:ea:0b:f5:23: ce:78:8f:e3:99:dc:c0:92:a6:d6:5a:7c:1a:fd:da:7d:b6:64: 9d:f7:25:82:f9:b6:6f:98:a5:b5:af:4b:7c:ec:c9:a5:d7:87: c2:5f:7e:77:ea:af:51:67:df:fe:55:5d:ea:89:20:91:ff:42: ef:28:48:ad -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUJvqflaJZz/NCYHt3iWtKKBMlszUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAyMjAwMDcyN1oX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAN2UxMDA4ZDI3ZDgwNmJlMDgxNGJh ZWZjMmZhYTMzMjcyMzZjYWM5ODcyYTE3MjRlZWIwYWEzZWE4NGE3ZjY4YzEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUvE0PdUbpb24887yoTo5bMKG5Gr iV1oPCZzs18Hu7a9OATBqy6o4q7xohq0rTl3NYXRHIpdKCVsbDS6HJFZssfQW5jb Xd+sX9TmVhrn6hhszd3SS5MvgZbODEV50ydRkm4oJT/QBbPzc9u3ht/zja5Xxe4A hvrz10VeJKeDktObBexMfHPDLp83it+wGCfDjOwJnImhZiUCpkq2/smflJgOTQ2d qdua0QmOvowrlGzqYZVLS5wnEsDlSD3BazOKDi4xKi44qmPufN0A4y2Ung1l1ADS Z4rFm8sr5AQzDKoLeaxMlr+lfEiQXPITl4DEJ95IhCae/aTN+pE7CCvQzwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFMbrmKXJKG6VLUmVlBzpgjCoqlaNMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzBjNWM1NGZmLWY5NzctNGI5Ni04Y2U5LWExZWFmMDgyZmU5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCrynoMA0GCSqGSIb3DQEBCwUAA4IBAQCvcAR1F0V6W0EMtUiSW53x 92xEJB9oGvICts3SQcFvxn6N0M8NS+hM7zemAbuhbhnh1hKik6wAcJVJXdI8eUD5 HJ8v7Vp9ZP0IdHKHDVkIBLI/+QNC9YQ2UCYhIp2wH/ThQIPBlimOxzaL2ENu75n3 0EtiSKrwJU8Cvs4NW5WnF8iRO+ubMK45gfOqVpgARAnNty2oYrwnpJO6fVQBF0K8 Kn6cKI2eP9GNkdYfm4oVPwYNNndg8XaP0P16n3SfabOM/OoL9SPOeI/jmdzAkqbW Wnwa/dp9tmSd9yWC+bZvmKW1r0t87Mml14fCX3536q9RZ9/+VV3qiSCR/0LvKEit -----END CERTIFICATE-----Generated at Sat Oct 24 12:18:52 2026 by rpki-client