$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa File: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (raw, json) Hash identifier: qfDCFklRSZy6qF1O8iPPjm/XUZaPn2bJ4RCH80bO8Ds= Subject key identifier: F5:59:B0:17:CE:14:2A:94:C5:DF:91:C1:F7:15:D2:A1:0C:F6:FD:77 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 0C6F36A30BB5692C0C9D5FAD7F611E502AE74254 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa Signing time: Thu 22 Oct 2026 00:07:24 +0000 ROA not before: Thu 22 Oct 2026 00:07:24 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 122.248.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:6f:36:a3:0b:b5:69:2c:0c:9d:5f:ad:7f:61:1e:50:2a:e7:42:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Oct 22 00:07:24 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=99e65467a5a8c7c1c31610059d30e4259cb802eb1a64a95f5eb802a0d92c1647, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3f:70:4e:18:2f:8d:94:7b:79:bf:41:78:55: 44:5d:6e:6f:04:77:10:5d:04:da:2c:f6:7e:dd:7c: 09:b3:8a:1e:5b:1c:b8:d3:70:9b:eb:09:fa:07:9f: 98:9d:5c:c8:0c:b8:b2:0b:e1:21:8b:df:8b:9d:82: 72:7d:43:d7:70:4d:8f:79:ab:02:79:a4:6f:bf:d8: 5a:67:aa:f7:1a:d8:67:ec:73:1c:64:35:43:98:94: 19:44:3e:3e:87:0b:c9:f1:58:82:bb:85:ee:cb:2f: 4e:53:e9:94:98:c8:93:8d:5c:7e:94:9d:e9:68:53: ac:92:9d:09:0b:41:29:f9:9c:dd:35:f7:9c:2a:48: 88:d2:43:d5:a6:f1:9b:cc:c0:a3:59:e8:c9:a3:34: cd:4c:f5:6f:d8:72:51:ea:2c:e2:e5:05:33:72:c7: 09:56:9e:60:79:7e:2b:ab:2a:82:0c:1a:70:10:60: 42:fe:dd:f4:ec:fd:fb:a0:75:ed:3c:3d:64:97:bf: ae:5c:4f:78:bf:c0:69:ac:09:70:36:63:78:10:b4: 81:fe:2a:49:e4:a9:9f:7d:c0:e6:be:4c:8b:62:65: af:ef:8b:c7:7d:6e:b3:b6:8f:86:d0:9f:b6:51:1b: 4b:63:66:65:53:69:6a:02:53:72:3b:52:ca:96:34: 70:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:59:B0:17:CE:14:2A:94:C5:DF:91:C1:F7:15:D2:A1:0C:F6:FD:77 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.240.0/20 Signature Algorithm: sha256WithRSAEncryption c7:ea:6e:c0:93:df:0e:ee:ac:ac:63:8d:e7:83:33:ea:4c:02: 6c:76:1e:70:0e:de:85:3a:4e:7b:a8:92:a4:59:02:57:09:a7: ed:36:b6:2f:e2:d6:94:c2:46:fb:28:a5:96:fa:22:89:aa:cd: 8b:34:71:2e:03:52:94:a9:82:c2:22:15:34:12:54:6b:94:ab: ce:14:0d:1c:0f:83:d7:51:49:6d:43:99:db:92:a3:73:af:4c: e2:4b:f3:1c:84:ec:df:8d:65:01:5e:29:8c:7e:e2:78:be:9d: 22:e0:92:03:70:4c:e8:26:ab:eb:c2:af:46:9e:24:4d:dc:f7: 9a:77:91:e9:af:e8:33:e2:bb:92:6f:8e:25:89:70:38:6b:29: 8a:13:63:8e:64:41:29:48:77:db:52:af:58:0f:87:0c:73:20: 1e:a7:ee:65:a1:99:b4:28:6a:66:e2:11:55:6b:41:54:50:eb: 33:a4:57:18:06:61:da:71:b6:0d:a9:ac:db:72:af:1f:8d:0f: ff:3c:48:5f:81:50:c0:bb:19:64:2a:b7:fe:3f:be:bd:8d:b9: a7:06:0a:51:fe:61:f4:39:ff:e1:2d:18:35:6f:d4:d1:eb:24: 5c:0c:fd:b0:f5:5b:48:00:5e:03:b3:62:0e:f8:8c:d8:fb:2d: a4:8c:3e:db -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUDG82owu1aSwMnV+tf2EeUCrnQlQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MTAyMjAwMDcyNFoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAOTllNjU0NjdhNWE4YzdjMWMzMTYx MDA1OWQzMGU0MjU5Y2I4MDJlYjFhNjRhOTVmNWViODAyYTBkOTJjMTY0NzEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj9wThgvjZR7eb9BeFVEXW5vBHcQ XQTaLPZ+3XwJs4oeWxy403Cb6wn6B5+YnVzIDLiyC+Ehi9+LnYJyfUPXcE2PeasC eaRvv9haZ6r3Gthn7HMcZDVDmJQZRD4+hwvJ8ViCu4Xuyy9OU+mUmMiTjVx+lJ3p aFOskp0JC0Ep+ZzdNfecKkiI0kPVpvGbzMCjWejJozTNTPVv2HJR6izi5QUzcscJ Vp5geX4rqyqCDBpwEGBC/t307P37oHXtPD1kl7+uXE94v8BprAlwNmN4ELSB/ipJ 5KmffcDmvkyLYmWv74vHfW6zto+G0J+2URtLY2ZlU2lqAlNyO1LKljRwAwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPVZsBfOFCqUxd+RwfcV0qEM9v13MB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzE3N2M5NzAyLWVlMzktNDJkMS1iNzZmLTZjZWU3N2Y0ZmI0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEevjwMA0GCSqGSIb3DQEBCwUAA4IBAQDH6m7Ak98O7qysY43ngzPq TAJsdh5wDt6FOk57qJKkWQJXCaftNrYv4taUwkb7KKWW+iKJqs2LNHEuA1KUqYLC IhU0ElRrlKvOFA0cD4PXUUltQ5nbkqNzr0ziS/MchOzfjWUBXimMfuJ4vp0i4JID cEzoJqvrwq9GniRN3Pead5Hpr+gz4ruSb44liXA4aymKE2OOZEEpSHfbUq9YD4cM cyAep+5loZm0KGpm4hFVa0FUUOszpFcYBmHacbYNqazbcq8fjQ//PEhfgVDAuxlk Krf+P769jbmnBgpR/mH0Of/hLRg1b9TR6yRcDP2w9VtIAF4Ds2IO+IzY+y2kjD7b -----END CERTIFICATE-----Generated at Thu Nov 5 04:27:32 2026 by rpki-client