$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa File: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (raw, json) Hash identifier: 0Ow/tXW/884bxSmoDwoaOxFCu76VvuFVmDcjm/jKwzk= Subject key identifier: 11:47:D2:2D:48:F9:62:FB:4A:2F:24:77:91:96:CC:F1:87:4B:0A:FE Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 579914323559F85E76DC94821F231FEBA41377B4 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa Signing time: Thu 22 Oct 2026 00:07:25 +0000 ROA not before: Thu 22 Oct 2026 00:07:25 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 122.248.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:99:14:32:35:59:f8:5e:76:dc:94:82:1f:23:1f:eb:a4:13:77:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Oct 22 00:07:25 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=d9b2aeea95ff43aa1a0416c98e2f410772823368b1115a7069c5219ebaeb8085, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:85:e2:2b:12:69:b0:de:67:f5:f4:9c:c2:a2: 41:a1:ee:17:bf:eb:64:b1:93:a9:80:22:49:c8:04: 02:2e:c1:86:5a:ac:79:ba:93:f7:3e:b7:b0:6a:d5: 91:29:da:dc:35:f4:02:c1:ff:99:21:f1:bc:96:e6: 45:7e:ad:c6:f1:aa:24:8c:3b:78:87:08:9b:7f:c0: aa:bb:9e:8c:33:e3:b8:ff:5f:19:9c:ba:ef:e9:6b: 20:ef:0e:60:fb:cd:18:ac:80:d9:fe:e5:16:8c:da: 40:8d:7f:86:f4:ec:c9:60:c4:52:14:91:63:40:17: 62:7b:7b:9a:42:81:9a:25:69:24:19:07:0b:54:5b: bd:34:fd:2f:93:e1:81:a6:59:79:60:9c:fd:1d:6c: 9e:9a:59:66:27:a3:e3:64:39:44:9e:79:cb:61:f9: 8d:c2:eb:a2:71:ee:7e:cc:78:bc:23:14:b8:34:ae: 2c:39:50:6f:fd:30:2a:a6:e4:22:c2:1c:46:c2:97: 33:62:6e:80:d4:0a:4e:32:94:19:f3:e7:35:be:7e: d2:17:61:4d:0a:17:54:bb:0f:a6:5b:46:5b:d5:b8: 14:74:7c:56:ed:59:cd:2d:cb:db:f5:66:bf:0b:0a: 54:34:4f:6b:ae:4f:60:74:50:ab:1a:44:43:d7:86: 16:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:47:D2:2D:48:F9:62:FB:4A:2F:24:77:91:96:CC:F1:87:4B:0A:FE X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.192.0/19 Signature Algorithm: sha256WithRSAEncryption b4:8e:60:f4:5d:8a:aa:ec:8e:87:68:e7:14:0d:94:23:a6:d0: 84:a3:a4:58:c5:96:a6:06:25:a6:3b:c3:63:ac:9a:49:a7:5b: 6a:6a:b3:c0:f0:17:31:fb:fb:34:ff:13:68:f6:4d:84:16:9c: 34:4e:1a:3a:05:86:15:57:01:7f:c4:6b:44:ce:b9:70:53:8b: 03:26:b4:e3:e1:3e:a3:97:71:cd:d2:83:c8:3c:45:f2:ac:73: b0:21:59:0a:8e:df:b0:20:98:80:5c:04:07:a5:4e:be:fa:88: 66:c9:8a:92:5a:6f:23:4c:86:90:eb:71:bb:96:0a:e2:3a:87: 03:36:12:73:ed:c5:1b:eb:cd:0e:12:fb:70:37:c8:f7:dd:41: 3f:cd:7c:0b:c9:b5:9e:bc:33:c6:e9:cb:cf:26:31:7d:db:0a: a7:53:8f:66:e9:a4:61:c4:36:9c:61:37:be:e0:11:a2:fd:68: b3:ec:3e:d0:c7:b5:6c:76:de:af:e4:d4:2e:68:51:98:4f:2f: b0:9f:80:c1:1d:62:d8:54:99:c2:7f:b8:23:9c:4f:a4:96:7f: 7c:93:72:79:6f:c8:bc:17:18:c2:de:82:15:8c:47:0b:8e:73: 53:92:b7:16:b4:1f:3b:3f:d6:c6:2e:11:2e:5a:79:92:aa:5b: cb:69:97:4c -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUV5kUMjVZ+F523JSCHyMf66QTd7QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MTAyMjAwMDcyNVoX DTI3MDEyMDIzNTk1OVowejFJMEcGA1UEBRNAZDliMmFlZWE5NWZmNDNhYTFhMDQx NmM5OGUyZjQxMDc3MjgyMzM2OGIxMTE1YTcwNjljNTIxOWViYWViODA4NTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YXiKxJpsN5n9fScwqJBoe4Xv+tk sZOpgCJJyAQCLsGGWqx5upP3PrewatWRKdrcNfQCwf+ZIfG8luZFfq3G8aokjDt4 hwibf8Cqu56MM+O4/18ZnLrv6Wsg7w5g+80YrIDZ/uUWjNpAjX+G9OzJYMRSFJFj QBdie3uaQoGaJWkkGQcLVFu9NP0vk+GBpll5YJz9HWyemllmJ6PjZDlEnnnLYfmN wuuice5+zHi8IxS4NK4sOVBv/TAqpuQiwhxGwpczYm6A1ApOMpQZ8+c1vn7SF2FN ChdUuw+mW0Zb1bgUdHxW7VnNLcvb9Wa/CwpUNE9rrk9gdFCrGkRD14YW/wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFBFH0i1I+WL7Si8kd5GWzPGHSwr+MB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzI0NWZhNGViLTZkMGQtNGRmNy05ZTJkLTI5YTdkMzlhZGNiOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFevjAMA0GCSqGSIb3DQEBCwUAA4IBAQC0jmD0XYqq7I6HaOcUDZQj ptCEo6RYxZamBiWmO8NjrJpJp1tqarPA8Bcx+/s0/xNo9k2EFpw0Tho6BYYVVwF/ xGtEzrlwU4sDJrTj4T6jl3HN0oPIPEXyrHOwIVkKjt+wIJiAXAQHpU6++ohmyYqS Wm8jTIaQ63G7lgriOocDNhJz7cUb680OEvtwN8j33UE/zXwLybWevDPG6cvPJjF9 2wqnU49m6aRhxDacYTe+4BGi/Wiz7D7Qx7Vsdt6v5NQuaFGYTy+wn4DBHWLYVJnC f7gjnE+kln98k3J5b8i8FxjC3oIVjEcLjnNTkrcWtB87P9bGLhEuWnmSqlvLaZdM -----END CERTIFICATE-----Generated at Thu Nov 5 05:48:58 2026 by rpki-client