$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/49119734-9dbc-4bd4-98be-57e4ce078928.roa File: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (raw, json) Hash identifier: vsd8H0ZXROgbcMd/yOBF4Rr2WxC8q8haStlcApwRNV0= Subject key identifier: CD:72:65:6B:DF:F3:07:93:5F:84:21:08:77:75:AA:9F:94:3B:DD:C2 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 4D2A5EBCD0A4B438F67B35BBC5864A96E9F1976D Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/49119734-9dbc-4bd4-98be-57e4ce078928.roa Signing time: Sun 04 Oct 2026 00:00:09 +0000 ROA not before: Sun 04 Oct 2026 00:00:09 +0000 ROA not after: Sat 02 Jan 2027 23:59:59 +0000 asID: 7224 IP address blocks: 43.224.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2a:5e:bc:d0:a4:b4:38:f6:7b:35:bb:c5:86:4a:96:e9:f1:97:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Oct 4 00:00:09 2026 GMT Not After : Jan 2 23:59:59 2027 GMT Subject: serialNumber=781e297294f52e986161c9237662d1b05de189085622c2f196552e984724dbf3, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4c:3a:0b:f8:5e:d8:74:c6:95:bf:42:4f:dd: e7:5e:cc:e5:95:29:22:2f:b9:59:3c:d2:cc:86:65: 12:54:26:3a:8c:ff:cc:76:e1:a1:df:ee:06:0e:37: 99:e8:e8:f2:57:91:c4:05:73:b5:83:60:05:50:e7: ef:d8:58:d7:6e:2d:88:9c:be:ba:b6:d8:1f:b0:0f: 84:ad:f1:c0:f9:2b:2d:6a:07:73:bb:75:48:31:ea: e1:80:ec:13:df:48:10:59:d6:b0:ac:8e:da:74:7b: f6:42:ff:e3:02:cb:63:96:7e:15:8e:23:75:17:5f: ca:0b:c4:6f:2b:25:64:37:a6:dc:b8:59:38:0a:c5: 50:1c:12:6d:82:b6:a5:51:00:56:30:5c:f2:44:78: a6:18:1e:52:40:81:67:56:82:ba:b8:12:23:0d:ba: bc:5f:46:c5:59:bb:d4:86:1a:a9:c4:32:19:c8:fd: 4d:4f:b7:5c:6e:1b:fb:4b:e8:62:58:67:05:71:33: a5:fa:c8:12:a8:98:1a:fe:5b:6d:ac:b1:57:2b:05: 0a:00:19:9c:cc:52:21:cb:6f:a5:a6:d8:0b:c7:a2: f0:6b:19:c0:3a:08:b9:2f:19:8b:4d:cd:67:10:34: 58:a6:b1:16:90:02:53:ec:d8:4c:25:58:8a:d4:ee: ff:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:72:65:6B:DF:F3:07:93:5F:84:21:08:77:75:AA:9F:94:3B:DD:C2 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/49119734-9dbc-4bd4-98be-57e4ce078928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.76.0/22 Signature Algorithm: sha256WithRSAEncryption 24:e4:a3:27:24:fe:84:c9:94:c0:ae:94:d0:1c:3f:ae:82:75: 50:b1:a0:67:37:a3:e5:de:d1:81:c2:1b:52:e4:eb:e0:f6:a0: 2c:8c:31:02:41:61:23:8f:c6:17:ad:ac:78:b2:53:b7:cf:19: 1c:86:c6:c8:06:a5:57:65:e1:66:a3:08:20:42:63:3e:96:c3: 4d:7a:89:47:d4:07:c7:28:5c:29:23:1f:29:f3:33:b5:e1:3a: 53:47:71:ba:a8:fd:30:3c:4e:40:48:09:71:5e:47:e1:be:fc: 49:48:63:02:47:60:6c:0b:84:75:a8:4d:9e:d3:83:73:e1:2d: 6d:7b:99:a4:af:b5:9c:de:6e:c4:ba:c5:42:3b:6e:fe:9e:7c: 23:67:0d:3f:52:57:e6:be:cf:56:36:4d:79:e7:ef:f4:af:9f: 82:23:ca:e4:80:0f:24:ab:b1:33:ae:5d:0b:9b:b8:12:3d:cc: ab:7f:63:eb:42:55:c1:b0:a6:73:8e:f3:75:62:1d:d5:b8:c1: 2f:d8:f6:60:17:af:39:b6:62:bb:11:ed:eb:8c:fd:eb:43:ef: 1b:62:0e:7f:0d:21:91:68:ff:e4:b3:89:ed:82:10:cb:b2:c8: 30:3e:1d:9e:73:88:1f:47:3a:1f:d5:40:c7:ea:d1:65:26:c3: 96:f9:39:f2 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUTSpevNCktDj2ezW7xYZKlunxl20wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MTAwNDAwMDAwOVoX DTI3MDEwMjIzNTk1OVowejFJMEcGA1UEBRNANzgxZTI5NzI5NGY1MmU5ODYxNjFj OTIzNzY2MmQxYjA1ZGUxODkwODU2MjJjMmYxOTY1NTJlOTg0NzI0ZGJmMzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0w6C/he2HTGlb9CT93nXszllSki L7lZPNLMhmUSVCY6jP/MduGh3+4GDjeZ6OjyV5HEBXO1g2AFUOfv2FjXbi2InL66 ttgfsA+ErfHA+Sstagdzu3VIMerhgOwT30gQWdawrI7adHv2Qv/jAstjln4VjiN1 F1/KC8RvKyVkN6bcuFk4CsVQHBJtgralUQBWMFzyRHimGB5SQIFnVoK6uBIjDbq8 X0bFWbvUhhqpxDIZyP1NT7dcbhv7S+hiWGcFcTOl+sgSqJga/lttrLFXKwUKABmc zFIhy2+lptgLx6LwaxnAOgi5LxmLTc1nEDRYprEWkAJT7NhMJViK1O7/UwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFM1yZWvf8weTX4QhCHd1qp+UO93CMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzQ5MTE5NzM0LTlkYmMtNGJkNC05OGJlLTU3ZTRjZTA3ODkyOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK+BMMA0GCSqGSIb3DQEBCwUAA4IBAQAk5KMnJP6EyZTArpTQHD+u gnVQsaBnN6Pl3tGBwhtS5Ovg9qAsjDECQWEjj8YXrax4slO3zxkchsbIBqVXZeFm owggQmM+lsNNeolH1AfHKFwpIx8p8zO14TpTR3G6qP0wPE5ASAlxXkfhvvxJSGMC R2BsC4R1qE2e04Nz4S1te5mkr7Wc3m7EusVCO27+nnwjZw0/Ulfmvs9WNk155+/0 r5+CI8rkgA8kq7Ezrl0Lm7gSPcyrf2PrQlXBsKZzjvN1Yh3VuMEv2PZgF685tmK7 Ee3rjP3rQ+8bYg5/DSGRaP/ks4ntghDLssgwPh2ec4gfRzof1UDH6tFlJsOW+Tny -----END CERTIFICATE-----Generated at Thu Nov 5 11:22:46 2026 by rpki-client