$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa File: 0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa (raw, json) Hash identifier: gbNOSC1+gNRuV2J5spiENb7EqXLeyNGQycxfLksXhSo= Subject key identifier: E0:DA:1B:AC:88:BB:29:A4:B8:60:B7:EC:84:FE:EE:CB:C5:45:8B:1A Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 27B0D41C9380CC903578AE744ED9099EE4BFB876 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa Signing time: Fri 23 Oct 2026 00:03:09 +0000 ROA not before: Fri 23 Oct 2026 00:03:09 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8014:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 00:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b0:d4:1c:93:80:cc:90:35:78:ae:74:4e:d9:09:9e:e4:bf:b8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:03:09 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=00a306bf9379291ce0de677e310a722edd076ddabf84ef074e6b8eb8db072070, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:2a:5a:e7:d3:11:92:5c:de:9e:c5:b5:f3: 15:79:61:e7:56:bd:95:7c:1c:88:2f:75:5e:90:e9: a5:16:44:a1:1c:0d:5d:93:56:68:54:0b:ae:03:6b: 4b:78:ef:60:1c:6d:13:8e:2f:34:ca:b8:c1:9a:ac: 6d:26:62:25:2a:5f:bb:93:5a:33:2e:d4:72:7f:9a: 8f:32:e3:dd:bc:16:39:20:af:36:7a:92:c7:c5:8c: 1b:c9:c3:40:dd:01:07:b3:ff:46:6f:fb:c9:1e:94: d3:23:fd:e3:c9:4f:14:25:2d:28:30:14:44:bc:48: 25:85:a6:8f:ff:16:d7:43:56:b3:1a:f9:a8:80:17: 99:15:40:95:13:a3:fd:ec:1e:68:c3:8b:ac:25:52: 66:29:c9:9b:63:be:a9:97:0d:b1:9b:b5:b4:f7:f0: 7f:68:5e:45:34:55:d4:d9:3f:23:6f:44:cd:95:48: 57:ff:fa:a3:69:90:10:e9:08:c0:eb:63:c2:ce:79: 05:62:bc:b2:42:1e:c1:2f:7b:87:40:e6:e3:d3:2e: 3d:75:48:5a:1b:fc:71:f4:af:2f:87:7f:ce:e1:ef: 30:00:63:a1:48:7a:89:78:9a:f3:80:7a:94:90:9d: a3:bb:da:1f:b0:68:18:2f:3d:89:d4:3e:34:34:d1: 9d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DA:1B:AC:88:BB:29:A4:B8:60:B7:EC:84:FE:EE:CB:C5:45:8B:1A X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/0feedd18-2b71-48d5-a2ee-07ca90b4d203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8014:800::/38 Signature Algorithm: sha256WithRSAEncryption 95:98:89:c9:a0:dd:2d:47:16:0d:ea:d4:a6:da:61:39:17:8b: 9a:7a:9b:c9:d5:c1:ae:24:d9:a0:ce:63:ad:c2:cd:25:c6:db: ca:80:9e:45:36:ef:40:d0:40:d2:4c:fc:75:37:d0:0a:34:d0: 0e:9b:25:56:35:cd:dc:9e:af:99:ad:b3:4a:98:49:5f:c5:04: 5e:da:21:15:fb:d2:f4:8f:56:e9:7f:dd:06:f4:3a:8f:77:42: 32:e4:1a:d1:f7:60:63:81:37:f7:d2:f7:6a:d9:82:1a:a6:49: 0c:f9:e0:4b:3e:17:f7:3c:81:c3:c0:b5:ed:9f:6a:b5:76:95: b0:e8:ca:15:5e:b2:b2:b5:49:4f:01:9b:25:01:f4:18:ff:2d: 4d:73:95:c4:c7:44:05:38:b1:2d:16:82:a8:8b:c0:c9:25:16: 77:58:58:e6:82:8f:1e:f0:9b:98:4c:9c:dc:fe:43:88:b1:45: c9:aa:f1:b7:3c:85:6f:38:31:45:ff:b0:e5:87:11:dc:9e:19: 94:ad:3d:0a:bf:94:e3:05:65:8f:2d:76:69:c2:b7:11:5f:a3: 3d:b4:02:43:4d:df:f5:7f:01:1f:3e:10:f1:66:7c:53:5c:d6: 6c:9e:12:fd:23:3f:ba:89:f5:10:57:64:e6:b0:09:46:d2:d1: 76:c5:f2:b9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJ7DUHJOAzJA1eK50TtkJnuS/uHYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDMwOVoX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNAMDBhMzA2YmY5Mzc5MjkxY2UwZGU2 NzdlMzEwYTcyMmVkZDA3NmRkYWJmODRlZjA3NGU2YjhlYjhkYjA3MjA3MDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWEqWufTEZJc3p7FtfMVeWHnVr2V fByIL3VekOmlFkShHA1dk1ZoVAuuA2tLeO9gHG0Tji80yrjBmqxtJmIlKl+7k1oz LtRyf5qPMuPdvBY5IK82epLHxYwbycNA3QEHs/9Gb/vJHpTTI/3jyU8UJS0oMBRE vEglhaaP/xbXQ1azGvmogBeZFUCVE6P97B5ow4usJVJmKcmbY76plw2xm7W09/B/ aF5FNFXU2T8jb0TNlUhX//qjaZAQ6QjA62PCznkFYryyQh7BL3uHQObj0y49dUha G/xx9K8vh3/O4e8wAGOhSHqJeJrzgHqUkJ2ju9ofsGgYLz2J1D40NNGdswIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFODaG6yIuymkuGC37IT+7svFRYsaMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzBmZWVkZDE4LTJiNzEtNDhkNS1hMmVlLTA3Y2E5MGI0ZDIwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AFAgwDQYJKoZIhvcNAQELBQADggEBAJWYicmg3S1HFg3q1Kba YTkXi5p6m8nVwa4k2aDOY63CzSXG28qAnkU270DQQNJM/HU30Ao00A6bJVY1zdye r5mts0qYSV/FBF7aIRX70vSPVul/3Qb0Oo93QjLkGtH3YGOBN/fS92rZghqmSQz5 4Es+F/c8gcPAte2farV2lbDoyhVesrK1SU8BmyUB9Bj/LU1zlcTHRAU4sS0WgqiL wMklFndYWOaCjx7wm5hMnNz+Q4ixRcmq8bc8hW84MUX/sOWHEdyeGZStPQq/lOMF ZY8tdmnCtxFfoz20AkNN3/V/AR8+EPFmfFNc1myeEv0jP7qJ9RBXZOawCUbS0XbF 8rk= -----END CERTIFICATE-----Generated at Thu Nov 5 05:04:40 2026 by rpki-client