$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa File: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (raw, json) Hash identifier: +a466zVwESTdjxfgtVGtNTJoIjBPUJ9uv2Bs/ijyO9Y= Subject key identifier: DB:4F:D8:E4:78:72:95:40:97:E5:02:B3:32:68:CE:53:65:1F:D2:B0 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 51C38C215CA8426FF43A60D992CF897DED51D1C2 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa Signing time: Thu 22 Oct 2026 00:07:25 +0000 ROA not before: Thu 22 Oct 2026 00:07:25 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 00:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c3:8c:21:5c:a8:42:6f:f4:3a:60:d9:92:cf:89:7d:ed:51:d1:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 22 00:07:25 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=12833df4d2b28904b83f3be339a764c919968186bb283b81187398538ee97bf9, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:34:1e:fe:96:d7:9e:14:48:43:e9:d7:1f:2d: da:17:8b:d0:51:e9:ea:e1:c8:1b:84:88:57:43:17: 03:7b:c4:12:8c:bc:bf:24:c4:ef:95:52:aa:c8:83: 5c:af:1a:95:e8:19:9d:cc:b5:eb:93:75:84:58:1f: 48:71:73:9f:35:73:70:20:39:1e:68:2b:c6:6b:33: b1:02:5a:58:0f:cb:e1:a6:00:f6:9a:c3:cb:d5:91: c5:e2:89:6e:8b:67:64:fa:e1:1f:63:be:5f:68:02: e4:33:ef:d1:97:ed:1a:77:23:96:4c:18:e6:34:d9: 50:fa:8b:4f:52:c9:1f:ce:ad:7e:8a:da:d2:70:c9: af:e1:dc:87:eb:76:a3:6c:1b:eb:d3:69:4f:19:64: 65:bd:49:60:1a:ca:08:4f:29:2e:7d:24:81:c1:f3: a6:a3:be:04:55:b5:25:65:b4:0b:36:e7:32:2e:20: 1b:b3:e4:da:7e:74:53:ff:9c:02:f2:81:4f:21:7e: 43:5d:fb:62:7b:8b:22:bf:39:c0:c1:4a:4c:e0:56: d4:ea:74:85:30:cf:d0:90:31:14:e8:59:69:85:de: 6d:67:24:29:79:8d:bb:81:a1:9e:6a:1f:83:53:4c: e9:65:86:17:e1:1f:23:84:1b:3e:90:d3:99:6b:7b: 7e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4F:D8:E4:78:72:95:40:97:E5:02:B3:32:68:CE:53:65:1F:D2:B0 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.193.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:fc:c7:c1:50:de:6c:fe:4e:27:e2:17:30:12:db:b7:21:b2: a7:6e:b5:66:ca:90:cf:3e:68:d2:01:40:81:1e:02:df:ee:e7: bf:1e:de:fc:f6:79:07:dd:73:cf:dc:81:bc:09:49:a6:80:5c: 2d:6a:96:6b:e6:06:b4:b0:e9:f0:47:12:6c:ec:c1:e8:d9:1c: b3:4a:c2:05:6d:75:fc:27:80:1f:6e:ad:3b:04:3a:0c:da:ca: 89:d9:bd:91:9b:d1:04:b6:1b:96:ca:ff:83:ce:43:97:51:4e: 3d:fc:1e:61:4d:a4:0c:cf:8f:c7:1a:b1:3b:34:5b:89:26:85: e5:aa:2c:2a:61:bb:79:f9:69:b8:3f:5a:c3:f9:8b:d9:e9:73: f6:c3:f9:fc:a3:6a:a4:bc:67:11:04:d0:20:d3:d7:68:20:b5: e6:76:8a:6f:0d:c1:26:6b:7f:74:13:48:3c:3f:cd:93:20:6b: 68:f1:45:b7:d5:c8:11:5f:d6:72:13:f3:b4:3a:6b:fa:a9:78: 99:6b:ab:24:61:bc:24:f6:3f:8f:77:f5:5a:de:a0:6f:26:c9: dd:04:c6:55:bd:de:f3:31:fc:92:11:f6:41:66:b0:4b:a3:fc: ee:2a:e5:6b:82:89:45:2d:92:ff:bf:53:5f:fb:2f:bd:c7:78: 80:28:78:53 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUUcOMIVyoQm/0OmDZks+Jfe1R0cIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAyMjAwMDcyNVoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAMTI4MzNkZjRkMmIyODkwNGI4M2Yz YmUzMzlhNzY0YzkxOTk2ODE4NmJiMjgzYjgxMTg3Mzk4NTM4ZWU5N2JmOTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzQe/pbXnhRIQ+nXHy3aF4vQUenq 4cgbhIhXQxcDe8QSjLy/JMTvlVKqyINcrxqV6BmdzLXrk3WEWB9IcXOfNXNwIDke aCvGazOxAlpYD8vhpgD2msPL1ZHF4olui2dk+uEfY75faALkM+/Rl+0adyOWTBjm NNlQ+otPUskfzq1+itrScMmv4dyH63ajbBvr02lPGWRlvUlgGsoITykufSSBwfOm o74EVbUlZbQLNucyLiAbs+TafnRT/5wC8oFPIX5DXftie4sivznAwUpM4FbU6nSF MM/QkDEU6Flphd5tZyQpeY27gaGeah+DU0zpZYYX4R8jhBs+kNOZa3t+lQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNtP2OR4cpVAl+UCszJozlNlH9KwMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzJmNDdkY2RkLWMzODQtNGViMi1hZWZkLWY0YWQ2NGYyNmNjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQArynBMA0GCSqGSIb3DQEBCwUAA4IBAQAf/MfBUN5s/k4n4hcwEtu3 IbKnbrVmypDPPmjSAUCBHgLf7ue/Ht789nkH3XPP3IG8CUmmgFwtapZr5ga0sOnw RxJs7MHo2RyzSsIFbXX8J4Afbq07BDoM2sqJ2b2Rm9EEthuWyv+DzkOXUU49/B5h TaQMz4/HGrE7NFuJJoXlqiwqYbt5+Wm4P1rD+YvZ6XP2w/n8o2qkvGcRBNAg09do ILXmdopvDcEma390E0g8P82TIGto8UW31cgRX9ZyE/O0Omv6qXiZa6skYbwk9j+P d/Va3qBvJsndBMZVvd7zMfySEfZBZrBLo/zuKuVrgolFLZL/v1Nf+y+9x3iAKHhT -----END CERTIFICATE-----Generated at Sun Oct 25 03:08:26 2026 by rpki-client