$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa File: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (raw, json) Hash identifier: pxl179+2Z9STCt3zvlMh2QmjRWCzybRt0qTHkaw9izw= Subject key identifier: 9A:B1:7C:CD:E1:7B:83:CD:B1:C4:A3:F5:12:27:00:FE:DE:95:6A:54 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 651BC3403395B737489CA85C6B14F14AD3045A78 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa Signing time: Fri 23 Oct 2026 00:02:51 +0000 ROA not before: Fri 23 Oct 2026 00:02:51 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1b:c3:40:33:95:b7:37:48:9c:a8:5c:6b:14:f1:4a:d3:04:5a:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Oct 23 00:02:51 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=9b0a7775ad88ce7f8a38a8fb348648792bcf2719dbd8f9612bfb76b44fc3f80b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:40:da:af:94:c7:5e:48:f6:5d:ad:f7:64: 6a:d4:0b:d6:9d:39:c0:32:80:7c:b1:d7:b3:33:68: ec:35:9e:46:27:7f:fd:51:b1:99:b2:b5:e8:47:db: 9b:64:63:ad:96:1b:a9:94:24:5c:2c:b4:6e:37:b4: 39:0a:0f:14:9c:9d:a3:e2:3e:f4:f1:3c:cb:f8:6f: 0a:a7:14:2a:b3:22:b4:0a:f6:60:23:72:8e:37:f4: ae:b5:6a:f8:1e:0a:27:b2:e1:57:3b:84:e5:d9:1a: 0c:ea:26:9c:0d:24:5d:06:b0:4d:17:cd:f1:ff:81: 1c:f1:7c:06:05:88:a0:3f:68:42:6e:66:f0:6c:89: c3:52:8e:4e:bc:98:7a:76:f9:7b:5b:b2:ac:9e:88: 06:f1:91:69:ce:0a:91:8b:29:17:54:c9:d8:d1:22: 05:8e:7d:93:03:e0:e1:ba:c8:97:44:d9:72:7e:41: 2a:06:11:6a:9a:04:fc:05:d4:ef:a1:f9:2a:62:52: 51:3b:07:24:78:bc:53:c8:41:56:b9:01:49:0f:bb: 47:4d:80:a8:43:99:c6:97:9a:4f:44:50:16:20:68: 43:70:c6:56:8c:0f:11:f6:45:45:81:cf:5e:0c:4e: 5c:e0:11:97:ba:be:08:d3:ba:3e:8e:65:81:72:e3: 41:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B1:7C:CD:E1:7B:83:CD:B1:C4:A3:F5:12:27:00:FE:DE:95:6A:54 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.200.0/21 Signature Algorithm: sha256WithRSAEncryption 47:e2:6b:6a:49:bd:c3:9d:c5:14:6a:41:b3:d5:7a:7e:10:be: c9:9f:38:5c:a6:e7:69:05:58:a4:5e:09:89:3e:6d:43:fd:89: e0:19:fa:11:96:7f:05:3d:a3:fd:77:39:88:4e:9d:e5:9e:58: b0:60:6b:3d:fa:9e:38:3f:3e:32:de:5f:d0:ac:34:99:1a:dd: f1:45:7d:25:89:a3:9e:1e:fc:62:bc:c2:9d:00:ee:71:dd:54: 9e:ae:7c:b6:9d:fb:5d:59:b5:83:01:f8:bf:a9:c7:34:b1:22: 8e:70:5d:55:9f:ef:48:e5:00:78:51:e5:54:65:9f:e0:69:16: 68:e5:3c:9b:7d:f1:e5:e3:e2:c9:43:98:6a:97:c7:16:38:ed: 16:36:dd:a0:b2:25:0f:b3:9e:52:a4:b9:41:64:44:ef:38:8a: b1:9b:99:1a:cc:3d:99:9d:0d:19:1e:13:4d:11:b6:81:11:1d: 23:17:d8:21:aa:0e:c7:69:c5:48:8b:6a:02:a2:de:fd:3d:bc: 28:6f:e3:48:a4:8e:b7:d7:c5:52:6e:fa:b2:b4:36:93:5c:e9: 77:35:98:31:5a:4e:1c:43:8c:63:ed:09:ac:32:51:c8:5a:89: b8:ad:55:98:04:00:02:f3:07:ec:be:b0:c2:49:db:ef:9d:84: 67:af:b8:d5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUZRvDQDOVtzdInKhcaxTxStMEWngwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MTAyMzAwMDI1MVoX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAOWIwYTc3NzVhZDg4Y2U3ZjhhMzhh OGZiMzQ4NjQ4NzkyYmNmMjcxOWRiZDhmOTYxMmJmYjc2YjQ0ZmMzZjgwYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq1A2q+Ux15I9l2t92Rq1AvWnTnA MoB8sdezM2jsNZ5GJ3/9UbGZsrXoR9ubZGOtlhuplCRcLLRuN7Q5Cg8UnJ2j4j70 8TzL+G8KpxQqsyK0CvZgI3KON/SutWr4HgonsuFXO4Tl2RoM6iacDSRdBrBNF83x /4Ec8XwGBYigP2hCbmbwbInDUo5OvJh6dvl7W7KsnogG8ZFpzgqRiykXVMnY0SIF jn2TA+DhusiXRNlyfkEqBhFqmgT8BdTvofkqYlJROwckeLxTyEFWuQFJD7tHTYCo Q5nGl5pPRFAWIGhDcMZWjA8R9kVFgc9eDE5c4BGXur4I07o+jmWBcuNBPQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJqxfM3he4PNscSj9RInAP7elWpUMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRjYjNlOWY5LTQ2YTItNDFlYi1hNGI3LTc1YjUzZDc5MWYzMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDn/jIMA0GCSqGSIb3DQEBCwUAA4IBAQBH4mtqSb3DncUUakGz1Xp+ EL7JnzhcpudpBVikXgmJPm1D/YngGfoRln8FPaP9dzmITp3lnliwYGs9+p44Pz4y 3l/QrDSZGt3xRX0liaOeHvxivMKdAO5x3VSerny2nftdWbWDAfi/qcc0sSKOcF1V n+9I5QB4UeVUZZ/gaRZo5TybffHl4+LJQ5hql8cWOO0WNt2gsiUPs55SpLlBZETv OIqxm5kazD2ZnQ0ZHhNNEbaBER0jF9ghqg7HacVIi2oCot79Pbwob+NIpI6318VS bvqytDaTXOl3NZgxWk4cQ4xj7QmsMlHIWom4rVWYBAAC8wfsvrDCSdvvnYRnr7jV -----END CERTIFICATE-----Generated at Thu Nov 5 05:15:05 2026 by rpki-client