$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa File: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (raw, json) Hash identifier: Vf8YdqXd6PK59l/nJECtAxPzN54qUYTTnU1X7y+Hl+o= Subject key identifier: 70:E4:BE:3B:AC:52:31:FE:16:D1:BB:7B:1B:09:EC:21:59:7C:CA:2B Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 5A30809E65848AE7FA2170D9E9A18E53CEB965B8 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa Signing time: Sun 02 Aug 2026 00:00:07 +0000 ROA not before: Sun 02 Aug 2026 00:00:07 +0000 ROA not after: Sat 31 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.250.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:30:80:9e:65:84:8a:e7:fa:21:70:d9:e9:a1:8e:53:ce:b9:65:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 2 00:00:07 2026 GMT Not After : Oct 31 23:59:59 2026 GMT Subject: serialNumber=fb2d52a4ee837256c3f502407ef9fe6603689ef4f7f8d0ea704dc3f1981916ad, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:c1:0d:1c:3f:65:1c:d3:4f:a1:b7:dd:fd: 14:10:57:4f:8b:a5:57:53:c1:51:73:c8:e2:85:f9: 9c:61:04:13:f9:0e:03:a5:08:f6:0d:f2:b7:6a:62: 53:89:7e:3d:c4:93:59:05:b9:0c:53:69:1a:82:a8: e2:aa:01:e9:78:8d:8b:84:5b:81:d2:46:4d:99:8b: 17:be:5a:2c:4d:6f:d4:54:0e:e6:b6:b9:83:ae:5e: 14:04:4b:81:13:e2:20:10:bb:b9:93:ec:54:bd:38: 2a:17:8c:3e:aa:da:ad:ca:60:83:10:33:ce:22:22: 42:70:4c:05:35:35:e1:11:c0:60:c6:6d:6f:92:7f: 8a:93:d7:9b:f2:7f:50:bf:48:c3:72:fd:2e:6b:0b: 2b:2c:77:ae:78:d2:14:74:f8:36:20:08:49:fd:f6: 99:48:23:41:b7:80:22:4d:19:7d:37:1e:a7:84:39: f2:19:eb:0d:83:7f:66:c1:57:82:99:cb:40:08:78: 1a:e2:d4:45:e8:8b:2b:86:d4:11:24:6c:9c:24:06: d8:ac:90:ff:07:84:57:53:10:bd:0c:3a:d6:ed:dd: e0:c7:e2:54:73:03:51:5f:66:b0:b5:00:5e:4b:9b: 34:16:91:e0:07:99:cc:c1:8e:60:c0:d8:e7:41:37: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:BE:3B:AC:52:31:FE:16:D1:BB:7B:1B:09:EC:21:59:7C:CA:2B X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.250.192.0/22 Signature Algorithm: sha256WithRSAEncryption 23:cc:2b:63:5f:08:45:26:5c:30:92:54:b9:25:24:8d:7f:bf: 1c:3e:57:fb:62:d5:14:4a:66:03:94:c5:03:a4:93:00:07:1a: d1:00:bb:02:bb:d9:37:b7:12:f8:3c:1b:11:88:eb:bc:61:a9: ee:8e:55:14:3c:bd:43:bf:b0:b3:15:30:f3:33:cc:6b:bd:a6: e5:32:02:ed:7a:07:7a:05:d6:6a:8d:45:4d:90:c6:cd:09:d1: 04:2a:07:71:0e:7b:d7:b6:84:cb:c2:f2:8c:2f:73:95:ed:64: db:a5:ca:9d:e2:f8:b6:bf:7a:90:40:43:e3:04:d5:f9:3f:14: 89:c6:90:6b:e9:5d:bd:e2:0b:e1:2b:87:b2:c0:5f:83:5b:16: ae:3b:e4:32:75:03:61:de:85:ec:a9:12:20:50:a1:61:28:17: bc:20:ca:81:19:c3:6e:5e:c6:ae:be:b3:c4:d4:ee:0b:47:8b: f1:2a:63:a8:2e:c2:5e:62:93:ea:60:d8:58:4f:90:1e:78:55: 47:cc:22:c8:80:e7:b0:45:bb:f6:86:71:3a:89:74:77:44:e2: 4e:a7:68:87:e2:09:8e:75:bd:bd:33:e0:c5:c8:97:7c:41:95: ff:a0:ef:7a:8f:89:ff:ec:d0:ed:f1:ce:8c:f9:e7:e4:c3:1b: 2f:80:81:e1 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUWjCAnmWEiuf6IXDZ6aGOU865ZbgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMjAwMDAwN1oX DTI2MTAzMTIzNTk1OVowejFJMEcGA1UEBRNAZmIyZDUyYTRlZTgzNzI1NmMzZjUw MjQwN2VmOWZlNjYwMzY4OWVmNGY3ZjhkMGVhNzA0ZGMzZjE5ODE5MTZhZDEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifXBDRw/ZRzTT6G33f0UEFdPi6VX U8FRc8jihfmcYQQT+Q4DpQj2DfK3amJTiX49xJNZBbkMU2kagqjiqgHpeI2LhFuB 0kZNmYsXvlosTW/UVA7mtrmDrl4UBEuBE+IgELu5k+xUvTgqF4w+qtqtymCDEDPO IiJCcEwFNTXhEcBgxm1vkn+Kk9eb8n9Qv0jDcv0uawsrLHeueNIUdPg2IAhJ/faZ SCNBt4AiTRl9Nx6nhDnyGesNg39mwVeCmctACHga4tRF6IsrhtQRJGycJAbYrJD/ B4RXUxC9DDrW7d3gx+JUcwNRX2awtQBeS5s0FpHgB5nMwY5gwNjnQTfXQQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFHDkvjusUjH+FtG7exsJ7CFZfMorMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 L2NiMmU1YThjLTIxZjEtNDY3OS1hMzcyLTYxNzczMmZjM2VhNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/rAMA0GCSqGSIb3DQEBCwUAA4IBAQAjzCtjXwhFJlwwklS5JSSN f78cPlf7YtUUSmYDlMUDpJMABxrRALsCu9k3txL4PBsRiOu8YanujlUUPL1Dv7Cz FTDzM8xrvablMgLtegd6BdZqjUVNkMbNCdEEKgdxDnvXtoTLwvKML3OV7WTbpcqd 4vi2v3qQQEPjBNX5PxSJxpBr6V294gvhK4eywF+DWxauO+QydQNh3oXsqRIgUKFh KBe8IMqBGcNuXsauvrPE1O4LR4vxKmOoLsJeYpPqYNhYT5AeeFVHzCLIgOewRbv2 hnE6iXR3ROJOp2iH4gmOdb29M+DFyJd8QZX/oO96j4n/7NDt8c6M+efkwxsvgIHh -----END CERTIFICATE-----Generated at Mon Sep 21 10:36:46 2026 by rpki-client