$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa File: 22707524-2248-48ea-815f-578f49b19436.roa (raw, json) Hash identifier: IVXOKGD/y2rb9u1H3/BWvT6KdJrZ0agT6J4RwPkkmZE= Subject key identifier: AC:70:97:C6:5D:1C:58:82:1A:C2:2B:3F:FB:6D:92:56:D4:1F:05:2D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 0727FF59B3FD8BEF6E7061FC2C4C4A8BBDF9D588 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa Signing time: Thu 22 Oct 2026 00:07:29 +0000 ROA not before: Thu 22 Oct 2026 00:07:29 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:27:ff:59:b3:fd:8b:ef:6e:70:61:fc:2c:4c:4a:8b:bd:f9:d5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Oct 22 00:07:29 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=8bb32b392f76cb0922b45b02ea6271e93dc1aee8280ee01cba08179243c9bde4, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:44:c4:35:37:90:6c:7f:32:3c:2d:7b:3e:ab: a4:99:80:71:a8:29:c0:13:ec:21:50:4a:77:ec:6f: c1:8f:3a:26:d8:5c:64:8b:fb:fe:a8:a1:96:33:48: 99:48:70:8a:5f:32:86:f7:b9:b0:30:27:09:39:6b: 3f:6e:27:94:14:34:58:7f:2f:36:1d:69:2d:07:61: e4:de:d0:28:e6:46:fe:e2:3b:f4:9a:20:2b:1f:c3: d9:7a:1c:9a:92:0a:dd:3e:e3:3e:3f:34:ca:19:ff: 6e:d4:ce:18:46:22:43:3e:3a:fb:6e:41:15:56:ff: 10:f1:e1:50:d9:34:b2:f8:94:78:dc:e2:d8:3f:fe: c1:46:d9:7f:f3:41:91:a0:f0:f6:c2:85:f4:dc:cd: 90:a2:e9:7e:7e:ce:55:89:3d:00:f7:2e:ee:da:e0: 50:44:c1:cb:99:5d:cc:b3:4e:61:d7:1a:cf:5e:c3: 0d:82:71:0f:dd:07:72:9a:bf:b3:a5:dc:a0:6c:62: 35:4d:9d:cf:bd:d9:b5:34:4a:c2:d2:e3:0c:0c:ca: 85:39:69:43:8b:1b:c6:57:e8:d3:a7:a9:be:63:4e: 68:25:df:00:10:37:b6:c6:5a:77:a3:e9:0b:09:39: 83:3e:af:f0:46:e7:32:0d:50:c7:be:53:c9:61:3a: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:70:97:C6:5D:1C:58:82:1A:C2:2B:3F:FB:6D:92:56:D4:1F:05:2D X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.150.0/24 Signature Algorithm: sha256WithRSAEncryption ef:9a:27:0e:d1:ea:18:7e:64:54:b2:9d:6b:c6:07:eb:a3:2e: cd:c2:aa:b8:7f:a6:b6:13:2b:d3:2d:35:7d:fd:73:aa:bd:3b: c3:52:f7:0f:93:7e:2c:7a:f2:0f:7f:65:eb:a6:1c:0a:2d:45: d7:14:48:cb:be:f9:76:7c:3f:fa:23:d5:d4:bc:e1:b7:3e:ea: c4:b7:fd:1a:b8:5e:b4:da:a2:dd:6b:e9:f4:13:b4:4d:68:a0: e3:80:c4:46:2f:48:00:e0:3b:79:8b:e2:25:1d:f1:38:15:d5: c0:51:27:f3:49:de:fb:78:a2:2a:70:64:45:07:1e:30:bf:30: 7d:a3:07:71:db:81:80:c0:64:32:b7:bf:dc:74:9f:b6:60:06: d4:e9:04:9d:86:6e:79:e6:ba:b0:87:b7:16:46:83:1c:af:44: d9:b0:a3:01:d3:d2:1d:68:7b:9d:69:01:ea:c9:1a:f1:9e:7f: bd:b2:95:00:d0:bc:ea:32:88:ef:1d:23:8f:2e:b8:bd:a2:0a: 41:4f:8e:35:e5:30:db:77:15:c5:70:08:44:14:4e:37:5e:1e: af:0c:31:a2:73:30:42:3b:42:92:62:68:01:0c:cd:a6:b3:76: 2e:a9:e2:96:54:ba:74:2e:e0:ab:ce:0d:79:ba:5b:81:80:31: 97:68:2c:58 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUByf/WbP9i+9ucGH8LExKi7351YgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MTAyMjAwMDcyOVoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAOGJiMzJiMzkyZjc2Y2IwOTIyYjQ1 YjAyZWE2MjcxZTkzZGMxYWVlODI4MGVlMDFjYmEwODE3OTI0M2M5YmRlNDEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkTENTeQbH8yPC17PqukmYBxqCnA E+whUEp37G/Bjzom2Fxki/v+qKGWM0iZSHCKXzKG97mwMCcJOWs/bieUFDRYfy82 HWktB2Hk3tAo5kb+4jv0miArH8PZehyakgrdPuM+PzTKGf9u1M4YRiJDPjr7bkEV Vv8Q8eFQ2TSy+JR43OLYP/7BRtl/80GRoPD2woX03M2Qoul+fs5ViT0A9y7u2uBQ RMHLmV3Ms05h1xrPXsMNgnEP3Qdymr+zpdygbGI1TZ3Pvdm1NErC0uMMDMqFOWlD ixvGV+jTp6m+Y05oJd8AEDe2xlp3o+kLCTmDPq/wRucyDVDHvlPJYTqpoQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKxwl8ZdHFiCGsIrP/ttklbUHwUtMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzIyNzA3NTI0LTIyNDgtNDhlYS04MTVmLTU3OGY0OWIxOTQzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQArymWMA0GCSqGSIb3DQEBCwUAA4IBAQDvmicO0eoYfmRUsp1rxgfr oy7Nwqq4f6a2EyvTLTV9/XOqvTvDUvcPk34sevIPf2XrphwKLUXXFEjLvvl2fD/6 I9XUvOG3PurEt/0auF602qLda+n0E7RNaKDjgMRGL0gA4Dt5i+IlHfE4FdXAUSfz Sd77eKIqcGRFBx4wvzB9owdx24GAwGQyt7/cdJ+2YAbU6QSdhm555rqwh7cWRoMc r0TZsKMB09IdaHudaQHqyRrxnn+9spUA0LzqMojvHSOPLri9ogpBT4415TDbdxXF cAhEFE43Xh6vDDGiczBCO0KSYmgBDM2ms3YuqeKWVLp0LuCrzg15uluBgDGXaCxY -----END CERTIFICATE-----Generated at Thu Nov 5 04:29:06 2026 by rpki-client