$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/197500e2-3802-44b2-a561-ca3dad01e209.roa File: 197500e2-3802-44b2-a561-ca3dad01e209.roa (raw, json) Hash identifier: D5YEv6LFdnrwCbRsDwsjGzEGVDM0zNLpwOMVcfpsT/4= Subject key identifier: 6B:58:EC:8D:01:18:B0:A6:99:BA:EF:CD:A9:CF:E4:0C:4F:EB:3A:85 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 555130433B20EC8A3A0413B693AED08D4D801012 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/197500e2-3802-44b2-a561-ca3dad01e209.roa Signing time: Thu 22 Oct 2026 00:07:29 +0000 ROA not before: Thu 22 Oct 2026 00:07:29 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:51:30:43:3b:20:ec:8a:3a:04:13:b6:93:ae:d0:8d:4d:80:10:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Oct 22 00:07:29 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=0365e00962b72fcfc546b5aaef1db6b2ed43083ff8805ce7e6b06f946a7983db, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:4e:f3:8b:9f:a8:68:d2:d3:d0:6c:60:4f: 52:d4:a1:c7:3d:c5:41:57:b2:91:ca:91:06:50:92: be:c2:8e:d4:54:96:30:05:df:44:f2:bc:e0:7a:8c: 46:29:3a:d6:4b:d6:46:ce:9a:ac:3e:0e:22:e9:58: 8e:76:f3:36:d5:6f:e3:bd:d6:a6:79:f0:c9:07:fb: 25:7b:c4:6e:d4:2a:d8:ff:c0:96:d1:41:4a:38:95: 98:c2:ed:d7:bc:e3:aa:74:5e:b3:aa:9d:5d:75:71: 23:56:47:a2:ec:82:e4:56:5d:09:73:38:e1:71:1e: 9a:a6:dc:fe:05:4b:86:6e:bf:bd:30:e9:2b:6b:93: 98:d6:d0:ea:ef:41:98:0e:a9:2e:76:8e:2f:ca:e3: 18:6f:0c:60:67:17:9a:af:b0:7d:a9:4e:88:f6:e1: 95:42:be:d7:e7:67:ae:7e:28:2c:97:13:ad:79:56: 06:e3:30:37:d7:74:d6:eb:76:22:c8:b7:2e:73:73: 8f:7f:3b:15:28:de:c9:3a:d5:b9:41:ae:f2:c2:2e: f0:33:3e:ce:81:e2:d4:0a:58:e5:7f:8c:22:a7:83: f3:61:91:1c:bf:dc:d6:b9:59:ed:76:bc:e1:b3:fa: 11:93:f9:c1:08:84:ee:42:f3:aa:ca:6d:6b:1b:8e: 91:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:58:EC:8D:01:18:B0:A6:99:BA:EF:CD:A9:CF:E4:0C:4F:EB:3A:85 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/197500e2-3802-44b2-a561-ca3dad01e209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.128.0/24 Signature Algorithm: sha256WithRSAEncryption 94:ee:5f:67:5c:e0:a4:14:87:05:fd:6b:9e:4b:13:ad:e9:00: 9c:a1:3b:9a:38:38:ce:5b:cd:cf:92:0c:91:65:6c:2a:f6:96: ce:56:d1:4f:ca:2f:46:a2:10:46:77:ed:9f:67:16:aa:65:36: 64:1e:25:8f:cd:39:a8:ce:db:49:3a:01:39:a7:32:f7:3a:26: 41:1a:72:77:00:72:ca:ad:15:a5:5b:03:e2:07:b1:e4:66:64: 13:5a:a3:a1:2c:ed:1a:f0:12:e3:2f:62:25:aa:d0:3a:fd:3d: b1:ec:a1:8c:01:be:80:90:05:52:50:f0:20:fb:6e:85:04:b4: d7:7e:d4:21:cf:6b:d4:27:28:76:b3:50:81:db:a5:ce:c7:2d: dd:af:3d:e4:6e:3a:44:c2:f8:70:40:cb:30:80:05:3a:f8:2c: 0d:5e:c8:36:cc:09:ab:70:ff:10:09:3f:8f:72:95:22:1a:0a: 61:a9:ee:1b:86:3c:07:af:a8:12:99:d4:14:01:c7:62:97:77: 31:34:4a:ff:f3:e5:af:38:90:b8:fb:1f:1b:94:af:44:b8:27: 54:a0:60:1d:0a:0f:a8:80:76:50:e1:12:d2:db:9e:f3:24:c3: ac:ec:2a:53:4a:74:d3:fe:cd:49:40:5f:54:3c:f8:a9:49:ec: d2:2d:16:44 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUVVEwQzsg7Io6BBO2k67QjU2AEBIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MTAyMjAwMDcyOVoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAMDM2NWUwMDk2MmI3MmZjZmM1NDZi NWFhZWYxZGI2YjJlZDQzMDgzZmY4ODA1Y2U3ZTZiMDZmOTQ2YTc5ODNkYjEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfRO84ufqGjS09BsYE9S1KHHPcVB V7KRypEGUJK+wo7UVJYwBd9E8rzgeoxGKTrWS9ZGzpqsPg4i6ViOdvM21W/jvdam efDJB/sle8Ru1CrY/8CW0UFKOJWYwu3XvOOqdF6zqp1ddXEjVkei7ILkVl0Jczjh cR6aptz+BUuGbr+9MOkra5OY1tDq70GYDqkudo4vyuMYbwxgZxear7B9qU6I9uGV Qr7X52eufigslxOteVYG4zA313TW63YiyLcuc3OPfzsVKN7JOtW5Qa7ywi7wMz7O geLUCljlf4wip4PzYZEcv9zWuVntdrzhs/oRk/nBCITuQvOqym1rG46RGwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFGtY7I0BGLCmmbrvzanP5AxP6zqFMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzE5NzUwMGUyLTM4MDItNDRiMi1hNTYxLWNhM2RhZDAxZTIwOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQArymAMA0GCSqGSIb3DQEBCwUAA4IBAQCU7l9nXOCkFIcF/WueSxOt 6QCcoTuaODjOW83PkgyRZWwq9pbOVtFPyi9GohBGd+2fZxaqZTZkHiWPzTmozttJ OgE5pzL3OiZBGnJ3AHLKrRWlWwPiB7HkZmQTWqOhLO0a8BLjL2IlqtA6/T2x7KGM Ab6AkAVSUPAg+26FBLTXftQhz2vUJyh2s1CB26XOxy3drz3kbjpEwvhwQMswgAU6 +CwNXsg2zAmrcP8QCT+PcpUiGgphqe4bhjwHr6gSmdQUAcdil3cxNEr/8+WvOJC4 +x8blK9EuCdUoGAdCg+ogHZQ4RLS257zJMOs7CpTSnTT/s1JQF9UPPipSezSLRZE -----END CERTIFICATE-----Generated at Thu Nov 5 04:28:11 2026 by rpki-client