$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa File: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (raw, json) Hash identifier: yynW230gtjoHe64VdAtkS5LYRTOFwLp0sflgw8zSW1g= Subject key identifier: C0:34:9B:6D:D3:44:35:27:E6:50:93:38:08:8B:06:4B:3D:D4:0E:32 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 5A4D4FE95E97DEAF491B08BC89B5BF1A60CE161D Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa Signing time: Thu 22 Oct 2026 00:07:26 +0000 ROA not before: Thu 22 Oct 2026 00:07:26 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:4d:4f:e9:5e:97:de:af:49:1b:08:bc:89:b5:bf:1a:60:ce:16:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 22 00:07:26 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=ea6bf70ac88955dfd903ac00c8d35bd77ed68daf8fe21415d0849152c4baaa1a, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:a9:2e:97:65:7e:81:ab:5e:3a:d8:72:2d:78: 9e:04:a9:26:39:0e:92:18:60:69:49:7c:78:85:25: f2:2a:64:93:db:f8:e2:9f:f1:1e:80:e0:d2:85:cd: 10:79:70:8d:a2:f8:ba:f0:18:a5:aa:17:44:05:7b: c9:8b:33:eb:a3:e5:fe:1a:3b:39:7c:70:6d:f7:b5: 1b:d6:73:c8:ab:c5:98:6b:00:76:41:86:14:2b:79: 2a:78:1e:18:80:eb:52:2b:20:b5:95:78:34:58:bb: 03:3d:55:c4:ad:36:fc:39:21:49:0a:7e:83:7f:42: 76:9a:35:c9:6d:b1:19:75:e2:bf:6a:c8:3b:a0:a0: 28:fd:ae:9f:9a:62:2b:58:4d:24:45:f4:c1:6d:4d: 13:9e:38:3e:93:d5:c1:fb:d9:96:42:21:c7:8b:36: 61:f0:35:7f:b9:18:ef:a6:45:93:e4:cc:fa:fc:f1: 7f:43:69:e0:1f:0c:96:53:28:43:fb:0e:65:de:ff: 30:c5:a5:1f:63:b5:d1:c8:30:81:c3:46:07:eb:b5: d0:f7:ff:e4:43:da:d8:ba:6d:b2:56:df:5e:d3:b3: 89:ab:f2:11:63:30:f6:10:8a:3c:7c:da:4e:44:40: fc:ce:bf:fa:98:64:a1:4f:45:7b:c6:1a:61:d6:c0: 00:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:34:9B:6D:D3:44:35:27:E6:50:93:38:08:8B:06:4B:3D:D4:0E:32 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.192.0/18 Signature Algorithm: sha256WithRSAEncryption 31:38:b3:ff:c1:a4:e9:97:03:c3:9a:d2:d6:9f:7e:24:35:1b: da:96:2e:78:d5:dc:cf:21:90:c6:99:70:e5:f2:13:aa:e0:fa: 0e:9b:c4:21:a0:a7:91:ed:a5:1b:8d:55:d6:72:d6:42:78:1d: fb:a5:30:ca:67:a4:cc:7c:1c:10:9c:a5:fc:d1:38:3c:b2:91: 87:c3:aa:0e:8e:47:ce:67:21:02:48:0e:bf:60:6a:55:f6:9d: 06:b4:d0:d1:15:8f:f4:c2:d2:f9:93:20:f4:84:27:ce:83:9b: ad:42:4d:33:21:e1:9d:3d:71:09:d6:a8:0d:9c:8a:6e:8f:5f: 82:87:90:ab:fa:4b:61:f3:82:94:b6:50:4c:38:c7:4a:d6:a6: 42:a0:9a:99:e1:df:f0:4c:99:d0:7c:d4:52:03:f8:d4:8c:6c: 88:98:a7:fa:65:5c:da:43:4f:ec:8b:7a:85:c8:70:61:a5:c9: 08:75:37:db:82:14:a5:a3:cc:a5:a1:18:b1:75:80:ad:41:2b: 2f:ab:5b:4f:70:6a:a2:ac:f5:4b:46:21:9f:7e:a6:f3:28:3a: 24:7e:50:ba:36:c1:f5:4a:99:6d:f3:0b:31:28:d5:04:c3:30: 38:b0:5e:e7:db:fb:45:6b:9c:09:74:c0:66:ef:28:8b:08:3e: e4:9f:e7:c0 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUWk1P6V6X3q9JGwi8ibW/GmDOFh0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAyMjAwMDcyNloX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAZWE2YmY3MGFjODg5NTVkZmQ5MDNh YzAwYzhkMzViZDc3ZWQ2OGRhZjhmZTIxNDE1ZDA4NDkxNTJjNGJhYWExYTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86kul2V+gateOthyLXieBKkmOQ6S GGBpSXx4hSXyKmST2/jin/EegODShc0QeXCNovi68BilqhdEBXvJizPro+X+Gjs5 fHBt97Ub1nPIq8WYawB2QYYUK3kqeB4YgOtSKyC1lXg0WLsDPVXErTb8OSFJCn6D f0J2mjXJbbEZdeK/asg7oKAo/a6fmmIrWE0kRfTBbU0Tnjg+k9XB+9mWQiHHizZh 8DV/uRjvpkWT5Mz6/PF/Q2ngHwyWUyhD+w5l3v8wxaUfY7XRyDCBw0YH67XQ9//k Q9rYum2yVt9e07OJq/IRYzD2EIo8fNpORED8zr/6mGShT0V7xhph1sAAGwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFMA0m23TRDUn5lCTOAiLBks91A4yMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzdhNjQ2ZWMzLWZjMGUtNDBlNy1hZGI0LTgyZDVmZDgzZjAyOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGrynAMA0GCSqGSIb3DQEBCwUAA4IBAQAxOLP/waTplwPDmtLWn34k NRvali541dzPIZDGmXDl8hOq4PoOm8QhoKeR7aUbjVXWctZCeB37pTDKZ6TMfBwQ nKX80Tg8spGHw6oOjkfOZyECSA6/YGpV9p0GtNDRFY/0wtL5kyD0hCfOg5utQk0z IeGdPXEJ1qgNnIpuj1+Ch5Cr+kth84KUtlBMOMdK1qZCoJqZ4d/wTJnQfNRSA/jU jGyImKf6ZVzaQ0/si3qFyHBhpckIdTfbghSlo8yloRixdYCtQSsvq1tPcGqirPVL RiGffqbzKDokflC6NsH1Splt8wsxKNUEwzA4sF7n2/tFa5wJdMBm7yiLCD7kn+fA -----END CERTIFICATE-----Generated at Sat Oct 24 12:19:23 2026 by rpki-client