$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa File: 9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa (raw, json) Hash identifier: DI50GVWhuqyRdnyczAiTsoJ7BdVV/P+vMdUFoa1Xknw= Subject key identifier: 0D:3C:28:62:55:2D:53:A4:57:44:81:B6:ED:CC:84:F3:2A:4B:B3:0B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 364D95B4C8D01781EF1EE795C2B7DEB1BFB0DAC3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa Signing time: Sun 18 Oct 2026 00:09:15 +0000 ROA not before: Sun 18 Oct 2026 00:09:15 +0000 ROA not after: Sat 16 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 103.246.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4d:95:b4:c8:d0:17:81:ef:1e:e7:95:c2:b7:de:b1:bf:b0:da:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 18 00:09:15 2026 GMT Not After : Jan 16 23:59:59 2027 GMT Subject: serialNumber=a17cd5d0cbb3d77f727b7a0d4b57051c0b6039e7914ef08b3e26d66761782cf7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:2c:14:69:ca:d8:4b:40:0a:f5:88:ad:be: 4d:c7:a7:d3:e2:26:d2:25:a4:c1:b9:88:d1:d2:6a: 65:cd:20:ef:e7:2e:19:f4:18:1f:d4:ab:d4:c3:aa: 34:f1:94:55:b6:a3:2a:e0:9c:f2:1f:5a:41:df:d0: ec:12:be:b5:f3:cd:8a:e7:68:fe:5c:ab:80:c6:2b: b3:7e:f4:0b:14:9b:f1:35:26:52:a3:a8:fb:7e:2c: 8b:08:f3:58:25:b7:02:51:63:92:74:d3:b2:cb:58: 5e:70:47:88:86:66:b5:eb:b2:69:90:75:47:17:78: 62:69:c6:1a:1b:79:81:67:86:13:46:a2:2f:1d:97: 4c:35:b6:35:7f:3f:47:59:44:7f:4e:dd:1c:30:e6: c7:f8:b0:55:9e:f0:c8:2d:14:dd:14:e0:27:cc:0a: 30:16:6b:b9:4f:cd:97:97:b5:2b:06:dc:40:78:6f: 6d:2b:0a:bc:22:fb:31:07:dc:99:75:07:b6:72:3a: ce:7d:45:3c:cf:58:c4:27:81:69:f5:c6:93:fe:a4: 58:6e:27:63:7d:61:b7:f1:d1:02:bd:c4:14:9a:73: ef:8b:b2:52:86:1b:5f:58:ac:5f:33:4b:d8:4d:76: b3:b5:f8:14:22:9b:5f:00:07:2c:bf:18:47:ff:fe: cf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3C:28:62:55:2D:53:A4:57:44:81:B6:ED:CC:84:F3:2A:4B:B3:0B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.246.148.0/22 Signature Algorithm: sha256WithRSAEncryption 89:54:ec:86:55:71:78:f7:5d:c8:b2:d7:26:44:60:ff:09:8d: 43:16:c0:9c:b0:83:74:d0:a7:33:2d:83:63:48:a1:c1:e1:3e: 56:fe:be:59:1c:08:0c:ad:39:45:a4:54:47:6a:6d:17:d7:a3: 0c:9c:54:c1:7f:7a:03:8b:a7:57:63:09:c6:29:10:6d:96:2d: 9b:00:21:ad:07:58:3e:ae:13:85:66:5e:30:2d:26:cc:ab:24: 1e:89:f3:2a:dc:bb:08:da:4d:79:7f:2d:10:53:12:5a:fb:3c: ed:17:16:26:5f:42:4c:bc:4a:06:8e:e8:c6:7c:a1:00:1d:8e: b2:ff:24:db:22:ef:99:3e:93:5c:15:90:3b:65:cb:71:68:7c: 3c:1c:5e:ab:eb:ed:f2:ea:26:cc:40:30:db:75:77:84:0e:6f: 82:fe:5d:c0:53:d7:aa:72:98:81:7b:58:2d:a9:6e:c7:85:11: 04:ec:ef:34:fc:b9:8c:9c:69:ae:8b:7e:73:6b:fe:ed:83:08: d7:c9:b1:06:f0:8b:f4:f5:0c:69:41:38:87:04:9a:af:29:ce: ef:7d:18:d2:14:86:a4:91:9c:f8:2a:50:9b:4a:af:50:1f:55: de:b0:d7:b6:b6:01:9d:88:ae:99:88:09:83:77:f0:ad:20:2d: 22:41:11:c5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUNk2VtMjQF4HvHueVwrfesb+w2sMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxODAwMDkxNVoX DTI3MDExNjIzNTk1OVowejFJMEcGA1UEBRNAYTE3Y2Q1ZDBjYmIzZDc3ZjcyN2I3 YTBkNGI1NzA1MWMwYjYwMzllNzkxNGVmMDhiM2UyNmQ2Njc2MTc4MmNmNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYosFGnK2EtACvWIrb5Nx6fT4ibS JaTBuYjR0mplzSDv5y4Z9Bgf1KvUw6o08ZRVtqMq4JzyH1pB39DsEr61882K52j+ XKuAxiuzfvQLFJvxNSZSo6j7fiyLCPNYJbcCUWOSdNOyy1hecEeIhma167JpkHVH F3hiacYaG3mBZ4YTRqIvHZdMNbY1fz9HWUR/Tt0cMObH+LBVnvDILRTdFOAnzAow Fmu5T82Xl7UrBtxAeG9tKwq8IvsxB9yZdQe2cjrOfUU8z1jEJ4Fp9caT/qRYbidj fWG38dECvcQUmnPvi7JShhtfWKxfM0vYTXaztfgUIptfAAcsvxhH//7PJQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFA08KGJVLVOkV0SBtu3MhPMqS7MLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzllMjJlOGVhLTU0MmYtNGUwMC05OTQ2LTQ1YjUyYTNhNDdjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/aUMA0GCSqGSIb3DQEBCwUAA4IBAQCJVOyGVXF4913IstcmRGD/ CY1DFsCcsIN00KczLYNjSKHB4T5W/r5ZHAgMrTlFpFRHam0X16MMnFTBf3oDi6dX YwnGKRBtli2bACGtB1g+rhOFZl4wLSbMqyQeifMq3LsI2k15fy0QUxJa+zztFxYm X0JMvEoGjujGfKEAHY6y/yTbIu+ZPpNcFZA7ZctxaHw8HF6r6+3y6ibMQDDbdXeE Dm+C/l3AU9eqcpiBe1gtqW7HhREE7O80/LmMnGmui35za/7tgwjXybEG8Iv09Qxp QTiHBJqvKc7vfRjSFIakkZz4KlCbSq9QH1XesNe2tgGdiK6ZiAmDd/CtIC0iQRHF -----END CERTIFICATE-----Generated at Sat Nov 7 08:43:33 2026 by rpki-client