$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa File: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (raw, json) Hash identifier: wjxc0bk+R6A/Qa3pHhsyRWed5/iyieBQym3MXX6RyzY= Subject key identifier: EA:FD:C5:CB:67:57:6E:9C:A9:01:A0:34:22:85:D2:64:57:57:6B:F5 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 5BFDB6BDAFCAC42E2F8AB3F60EF2A62A271125B7 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa Signing time: Sun 04 Oct 2026 00:00:09 +0000 ROA not before: Sun 04 Oct 2026 00:00:09 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 7224 IP address blocks: 43.250.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 00:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fd:b6:bd:af:ca:c4:2e:2f:8a:b3:f6:0e:f2:a6:2a:27:11:25:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Oct 4 00:00:09 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=7e2ab084da0f6fcdee85e347d591d7074a9b2d3866bcdc995a414d0f93b47dd0, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:89:91:53:b4:ef:47:f2:c7:91:cf:5b:2c: d9:9d:db:52:9c:44:9e:a9:da:96:82:4a:4e:a1:d9: fe:15:4d:cc:c3:b0:d7:51:d7:61:65:31:d2:df:1d: 9d:89:3f:a8:ba:25:ce:8c:78:db:d2:fb:e1:bd:ca: 50:31:b8:1b:c3:93:ea:ee:75:28:1c:57:91:b5:45: 70:50:fd:5e:dd:11:20:22:c4:13:9c:37:7b:07:d5: 32:1c:2b:87:7e:64:b4:a1:2d:9d:74:4e:77:df:83: b5:b1:3f:b2:9c:68:61:a4:7c:c4:10:a7:01:d5:37: 23:c4:fe:0f:dd:53:d9:a5:2f:56:c9:d8:95:2f:65: 43:ff:13:93:8c:64:4d:40:ef:a3:85:09:ae:3c:2f: 07:01:76:c5:8f:14:12:a9:36:ed:82:35:ca:c2:4d: c3:ef:ce:bd:60:2c:e2:5e:56:6a:12:b5:50:a3:73: 76:5c:17:b8:fc:fe:f6:65:6b:69:98:fd:9f:06:5a: 1e:d1:78:91:2a:29:d5:1b:df:5e:ac:ed:dd:87:9b: ed:22:88:b5:8e:0c:6f:81:e7:91:76:69:c2:ae:03: a1:d8:21:ff:10:bc:9b:6e:63:d7:c0:6c:2a:e7:71: 31:ea:16:70:2a:b8:96:9b:26:05:b0:eb:ae:ef:45: 4e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FD:C5:CB:67:57:6E:9C:A9:01:A0:34:22:85:D2:64:57:57:6B:F5 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.250.196.0/22 Signature Algorithm: sha256WithRSAEncryption 58:44:59:05:ba:1b:07:82:ac:b3:0a:d8:ce:b4:7d:3f:46:ed: 6d:d2:68:bc:22:0f:ca:8c:f6:f6:e0:35:a1:67:95:18:cf:b5: 4e:eb:9e:72:f0:7b:92:ff:d9:5b:be:30:a1:eb:e0:55:f0:44: 1b:54:fc:65:26:19:c7:9a:fb:60:c5:32:59:95:d7:42:03:60: 4b:8e:70:57:86:6f:45:f9:9d:44:36:63:a9:9a:eb:ff:f8:97: 14:9f:a6:ba:dd:9a:fd:fc:ed:f4:e8:f6:d4:d3:a7:d5:0d:62: 74:a1:60:3b:cd:1c:a3:af:71:07:f4:65:af:af:70:55:2e:5a: f4:b5:50:b6:62:47:be:be:9d:9f:1a:ce:01:3a:8b:ee:54:9a: 3a:7c:8d:b8:e7:c9:90:2e:9e:f0:e3:92:1e:bf:ed:89:ce:0f: 83:2f:d5:f0:56:cc:db:82:20:97:64:d4:39:7c:8b:1d:04:00: 7f:2a:4f:57:25:fb:e8:73:f5:d3:22:c6:6e:b2:35:47:b0:3f: d1:57:cf:6b:57:5e:d7:84:79:11:78:25:c7:c9:92:54:f9:84: a6:a6:72:43:b3:32:5d:e2:78:19:10:66:2a:94:cc:44:c1:66: ef:97:99:5c:69:3d:70:2d:db:dc:cb:17:4f:3e:94:25:30:e9: 2b:ff:11:94 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUW/22va/KxC4virP2DvKmKicRJbcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTAwNDAwMDAwOVoX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNAN2UyYWIwODRkYTBmNmZjZGVlODVl MzQ3ZDU5MWQ3MDc0YTliMmQzODY2YmNkYzk5NWE0MTRkMGY5M2I0N2RkMDEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfCJkVO070fyx5HPWyzZndtSnESe qdqWgkpOodn+FU3Mw7DXUddhZTHS3x2diT+ouiXOjHjb0vvhvcpQMbgbw5Pq7nUo HFeRtUVwUP1e3REgIsQTnDd7B9UyHCuHfmS0oS2ddE5334O1sT+ynGhhpHzEEKcB 1TcjxP4P3VPZpS9WydiVL2VD/xOTjGRNQO+jhQmuPC8HAXbFjxQSqTbtgjXKwk3D 7869YCziXlZqErVQo3N2XBe4/P72ZWtpmP2fBloe0XiRKinVG99erO3dh5vtIoi1 jgxvgeeRdmnCrgOh2CH/ELybbmPXwGwq53Ex6hZwKriWmyYFsOuu70VOKQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOr9xctnV26cqQGgNCKF0mRXV2v1MB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzliOGU5NjNlLTdmYTItNGJhMS1hNzhhLTRkMWZkNzk4OWIzMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/rEMA0GCSqGSIb3DQEBCwUAA4IBAQBYRFkFuhsHgqyzCtjOtH0/ Ru1t0mi8Ig/KjPb24DWhZ5UYz7VO655y8HuS/9lbvjCh6+BV8EQbVPxlJhnHmvtg xTJZlddCA2BLjnBXhm9F+Z1ENmOpmuv/+JcUn6a63Zr9/O306PbU06fVDWJ0oWA7 zRyjr3EH9GWvr3BVLlr0tVC2Yke+vp2fGs4BOovuVJo6fI2458mQLp7w45Iev+2J zg+DL9XwVszbgiCXZNQ5fIsdBAB/Kk9XJfvoc/XTIsZusjVHsD/RV89rV17XhHkR eCXHyZJU+YSmpnJDszJd4ngZEGYqlMxEwWbvl5lcaT1wLdvcyxdPPpQlMOkr/xGU -----END CERTIFICATE-----Generated at Thu Oct 22 21:27:54 2026 by rpki-client