$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/40956690-3661-49f2-8ebc-2fa5a47a98ad.roa File: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (raw, json) Hash identifier: te7DS3DktK83aCxy8o+ilCq83Ed1eUbE5XjTVNaNLzo= Subject key identifier: 0A:6F:3A:5B:B1:FF:FE:67:20:88:69:06:6C:4E:DE:9E:AA:B3:5E:8F Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 5396928113EB314A66533F6E388F7654C9331801 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/40956690-3661-49f2-8ebc-2fa5a47a98ad.roa Signing time: Fri 23 Oct 2026 00:03:08 +0000 ROA not before: Fri 23 Oct 2026 00:03:08 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:96:92:81:13:eb:31:4a:66:53:3f:6e:38:8f:76:54:c9:33:18:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Oct 23 00:03:08 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=2c64d4becf65dd3ead7e52906370ed40339422af34c97c4b1bb1f349f4a001c1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:9e:1a:20:e1:22:d1:74:3b:92:f5:31:14: 6f:68:fa:17:45:e3:14:95:6a:16:34:67:cf:90:54: 28:a3:90:12:b5:78:aa:cb:f3:0b:bf:9f:c8:91:30: ae:be:49:2d:e8:a6:09:65:1c:84:3f:ee:7d:a3:da: 2d:38:fe:20:f6:92:93:cc:3f:f5:87:9d:5d:53:49: 8e:7f:7f:cc:ac:83:18:96:6c:a8:10:1c:e3:9a:fd: 8a:cc:bc:1a:ff:4c:dc:1e:2a:63:e1:5b:88:01:7e: e5:a5:b8:4e:42:cc:dd:c4:ab:a4:2f:d8:db:79:0a: 62:1b:6d:9e:6d:7b:70:e0:96:28:86:0c:a7:6c:b0: 8b:0a:ca:db:ed:a6:de:63:ff:32:c0:39:62:26:88: 31:69:29:63:ac:1e:bb:33:02:d9:87:cf:1f:a1:65: 9f:38:14:dd:62:57:72:62:f3:de:c6:dc:ec:0b:c4: 91:e4:07:2e:a8:f8:a7:1c:c3:c7:24:26:95:de:12: dc:bc:ad:8a:35:06:14:2d:13:25:b9:98:81:1b:aa: 95:64:b3:4b:e2:62:36:fb:2a:60:83:69:f3:39:93: 6b:e0:34:f1:9d:6f:97:d5:6b:3a:92:f7:b6:c6:4d: 61:db:2c:5e:1c:dd:44:86:3a:9c:e7:9f:cb:a5:d0: 2a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6F:3A:5B:B1:FF:FE:67:20:88:69:06:6C:4E:DE:9E:AA:B3:5E:8F X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/40956690-3661-49f2-8ebc-2fa5a47a98ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.240.0/21 Signature Algorithm: sha256WithRSAEncryption 3c:19:f0:8d:d2:10:af:c3:88:84:98:33:6f:0e:67:d5:c9:bc: 79:98:6a:10:9b:d6:72:0f:07:47:7c:e2:db:bf:66:4a:02:22: 8c:45:d2:d6:c0:48:c0:e9:5d:8f:cb:d7:72:11:7f:58:c7:be: 05:50:2a:03:4d:e3:57:cd:83:78:7c:fa:12:be:50:97:58:f7: bb:77:9b:12:95:21:21:08:97:10:bf:e1:4b:bd:5a:0d:44:13: c0:46:05:fd:00:61:30:40:10:f0:89:a2:ae:ed:e3:a5:bc:e8: 28:a6:7d:34:ea:d1:a4:89:3c:b8:fc:a0:78:e7:e1:5f:f7:00: a7:bc:12:7f:89:cf:7c:4a:09:51:54:d5:84:03:2f:93:77:ce: 74:5f:42:9c:0d:e3:f6:64:56:b4:e5:0a:19:34:08:97:0b:8a: 1e:43:01:9a:fb:0a:4f:ad:d5:93:ec:dc:3a:bf:34:4c:b7:91: 27:d4:14:72:10:82:0f:65:51:24:d0:0c:f6:4d:f6:bc:7a:00: b2:c8:bb:65:2d:de:47:18:ef:c7:22:ce:ea:a7:ac:fe:72:68: c0:c3:ef:27:fc:e3:3d:fb:1a:79:45:59:72:88:87:f7:74:1e: 7c:95:7a:4c:56:9d:9c:81:d6:68:50:7e:81:4e:1d:d9:40:31: 30:7f:ef:0b -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUU5aSgRPrMUpmUz9uOI92VMkzGAEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MTAyMzAwMDMwOFoX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAMmM2NGQ0YmVjZjY1ZGQzZWFkN2U1 MjkwNjM3MGVkNDAzMzk0MjJhZjM0Yzk3YzRiMWJiMWYzNDlmNGEwMDFjMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoceeGiDhItF0O5L1MRRvaPoXReMU lWoWNGfPkFQoo5AStXiqy/MLv5/IkTCuvkkt6KYJZRyEP+59o9otOP4g9pKTzD/1 h51dU0mOf3/MrIMYlmyoEBzjmv2KzLwa/0zcHipj4VuIAX7lpbhOQszdxKukL9jb eQpiG22ebXtw4JYohgynbLCLCsrb7abeY/8ywDliJogxaSljrB67MwLZh88foWWf OBTdYldyYvPextzsC8SR5AcuqPinHMPHJCaV3hLcvK2KNQYULRMluZiBG6qVZLNL 4mI2+ypgg2nzOZNr4DTxnW+X1Ws6kve2xk1h2yxeHN1Ehjqc55/LpdAqBQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFApvOlux//5nIIhpBmxO3p6qs16PMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQwOTU2NjkwLTM2NjEtNDlmMi04ZWJjLTJmYTVhNDdhOThhZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDn/jwMA0GCSqGSIb3DQEBCwUAA4IBAQA8GfCN0hCvw4iEmDNvDmfV ybx5mGoQm9ZyDwdHfOLbv2ZKAiKMRdLWwEjA6V2Py9dyEX9Yx74FUCoDTeNXzYN4 fPoSvlCXWPe7d5sSlSEhCJcQv+FLvVoNRBPARgX9AGEwQBDwiaKu7eOlvOgopn00 6tGkiTy4/KB45+Ff9wCnvBJ/ic98SglRVNWEAy+Td850X0KcDeP2ZFa05QoZNAiX C4oeQwGa+wpPrdWT7Nw6vzRMt5En1BRyEIIPZVEk0Az2Tfa8egCyyLtlLd5HGO/H Is7qp6z+cmjAw+8n/OM9+xp5RVlyiIf3dB58lXpMVp2cgdZoUH6BTh3ZQDEwf+8L -----END CERTIFICATE-----Generated at Thu Nov 5 05:17:52 2026 by rpki-client