
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d13b2d76-a2f8-43ce-8976-3dc7df2b46ff.roa
File: d13b2d76-a2f8-43ce-8976-3dc7df2b46ff.roa (raw, json)
Hash identifier: N2Uvu77stWGyb3YMDcazAvFgq9IfqdJ7XYt/s77xCOU=
Subject key identifier: E0:BA:9B:76:45:8D:F5:0C:B8:03:FB:3A:76:20:68:25:2A:BF:C2:5C
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 50CA530CDDE62B4BCEB764675E43282F08D13110
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d13b2d76-a2f8-43ce-8976-3dc7df2b46ff.roa
Signing time: Mon 19 Oct 2026 00:10:44 +0000
ROA not before: Mon 19 Oct 2026 00:10:44 +0000
ROA not after: Sun 17 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 126.190.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 00:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ca:53:0c:dd:e6:2b:4b:ce:b7:64:67:5e:43:28:2f:08:d1:31:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Oct 19 00:10:44 2026 GMT
Not After : Jan 17 23:59:59 2027 GMT
Subject: serialNumber=279d6463ac487fa0307ad178b1151a0707c8f75c44bd3c22bad61367242d80c6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:09:34:1b:0e:67:46:42:7b:7a:89:56:72:
c6:9c:d7:45:8d:52:26:6e:6d:c8:38:5d:95:7c:f9:
82:99:56:3d:d6:b3:a8:b3:f5:7f:fb:f0:41:f6:81:
7e:b3:20:13:50:55:50:34:c1:b9:5e:6c:98:4f:56:
3b:1a:ff:d3:2c:aa:9e:2e:6e:f2:4f:38:1c:cc:87:
fa:68:4d:eb:6f:1b:2f:44:f8:30:cf:ff:14:f0:cc:
c3:58:f0:b0:13:f9:43:4e:bb:c2:9a:77:b9:d9:cb:
8d:bc:1e:4a:ab:15:f8:9f:44:2b:31:61:ed:8b:26:
83:52:f6:0c:8a:69:9f:c7:33:33:69:33:ad:e1:32:
d6:12:9d:fd:e9:db:c5:79:52:05:d4:7b:23:73:f2:
6c:81:71:c3:15:47:8e:ca:81:57:8f:b8:05:7c:a9:
a0:23:44:b0:e8:3b:9f:da:74:1b:ca:64:3c:f0:76:
3a:b9:0c:ed:52:8b:13:fb:97:5d:1b:06:24:c6:6e:
bb:db:71:7b:f0:3c:99:13:40:14:76:3c:24:90:31:
b1:1b:98:7c:c9:0c:fd:53:fc:d5:b3:ea:31:22:56:
6b:56:91:26:c2:da:3f:20:d7:40:48:64:c5:bf:7c:
64:33:af:ee:a6:d8:03:6e:8b:28:8b:98:f3:ca:d2:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BA:9B:76:45:8D:F5:0C:B8:03:FB:3A:76:20:68:25:2A:BF:C2:5C
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d13b2d76-a2f8-43ce-8976-3dc7df2b46ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
126.190.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1b:65:63:5b:53:20:77:90:52:46:db:da:5a:6d:69:e1:a0:cc:
b6:c7:85:9f:f9:f2:cf:a6:d4:5c:91:7b:75:72:09:ac:0f:bb:
63:fb:02:d8:fa:35:d6:33:ff:67:50:36:ab:92:fb:31:9b:01:
fd:f6:e0:1d:5b:d4:9b:e7:67:93:71:34:dc:53:cb:6f:ef:4e:
9a:b4:94:69:b9:c1:d4:65:16:02:38:4b:05:77:e9:9e:a9:8c:
8b:d1:f0:18:46:f4:4d:f2:82:16:00:58:ed:4b:92:8e:08:60:
6a:36:f1:38:2a:ff:5c:60:34:c7:f8:9f:c1:ef:03:1e:f0:25:
bc:69:71:09:d7:ba:d7:0e:db:b5:0e:58:f7:b0:88:cd:5a:9e:
1d:f4:ab:26:4d:7c:e1:08:ae:3c:0c:e1:ce:46:9d:5d:53:f5:
ba:24:f7:3e:13:42:05:f5:25:fd:a0:38:90:06:fa:62:76:0d:
c1:a8:d9:f6:97:22:e1:43:63:27:c4:bb:3d:9b:a7:f9:93:a8:
4e:31:0b:dc:97:45:f6:2f:38:e7:af:2f:58:b9:30:6b:32:b6:
02:12:40:1e:ae:20:59:15:ae:78:a4:ec:c0:99:92:18:29:bc:
8f:c0:25:91:ee:00:5b:26:31:60:0b:fa:5e:86:f4:72:7b:3b:
57:1f:05:a8
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUUMpTDN3mK0vOt2RnXkMoLwjRMRAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MTAxOTAwMTA0NFoX
DTI3MDExNzIzNTk1OVowejFJMEcGA1UEBRNAMjc5ZDY0NjNhYzQ4N2ZhMDMwN2Fk
MTc4YjExNTFhMDcwN2M4Zjc1YzQ0YmQzYzIyYmFkNjEzNjcyNDJkODBjNjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNkJNBsOZ0ZCe3qJVnLGnNdFjVIm
bm3IOF2VfPmCmVY91rOos/V/+/BB9oF+syATUFVQNMG5XmyYT1Y7Gv/TLKqeLm7y
TzgczIf6aE3rbxsvRPgwz/8U8MzDWPCwE/lDTrvCmne52cuNvB5KqxX4n0QrMWHt
iyaDUvYMimmfxzMzaTOt4TLWEp396dvFeVIF1Hsjc/JsgXHDFUeOyoFXj7gFfKmg
I0Sw6Duf2nQbymQ88HY6uQztUosT+5ddGwYkxm6723F78DyZE0AUdjwkkDGxG5h8
yQz9U/zVs+oxIlZrVpEmwto/INdASGTFv3xkM6/uptgDbosoi5jzytJGOQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFOC6m3ZFjfUMuAP7OnYgaCUqv8JcMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2QxM2IyZDc2LWEyZjgtNDNjZS04OTc2LTNkYzdkZjJiNDZmZi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAfr4wDQYJKoZIhvcNAQELBQADggEBABtlY1tTIHeQUkbb2lptaeGg
zLbHhZ/58s+m1FyRe3VyCawPu2P7Atj6NdYz/2dQNquS+zGbAf324B1b1JvnZ5Nx
NNxTy2/vTpq0lGm5wdRlFgI4SwV36Z6pjIvR8BhG9E3yghYAWO1Lko4IYGo28Tgq
/1xgNMf4n8HvAx7wJbxpcQnXutcO27UOWPewiM1anh30qyZNfOEIrjwM4c5GnV1T
9bok9z4TQgX1Jf2gOJAG+mJ2DcGo2faXIuFDYyfEuz2bp/mTqE4xC9yXRfYvOOev
L1i5MGsytgISQB6uIFkVrnik7MCZkhgpvI/AJZHuAFsmMWAL+l6G9HJ7O1cfBag=
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:12:27 2026 by rpki-client