$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/018dea0d-42eb-4d58-8914-636d25ca3b3c.roa File: 018dea0d-42eb-4d58-8914-636d25ca3b3c.roa (raw, json) Hash identifier: WxlA9eA6sxRBa4Kmi+0eckOyAowsd3Xc4g5MlYbGIm4= Subject key identifier: F9:77:C1:B2:9C:61:EE:18:29:A1:17:B1:73:B1:0D:66:33:63:F6:1D Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 49AC8659A56ACE7F32E84A06C36C190C8A20321B Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/018dea0d-42eb-4d58-8914-636d25ca3b3c.roa Signing time: Fri 23 Oct 2026 00:03:04 +0000 ROA not before: Fri 23 Oct 2026 00:03:04 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ac:86:59:a5:6a:ce:7f:32:e8:4a:06:c3:6c:19:0c:8a:20:32:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:03:04 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=74da323af0eb412cbfc51f04519ae194e0cc73340cd9d2034b7476cf0b75545d, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:d8:0b:44:51:31:fd:7d:e4:ce:2f:ac:bd: 2a:bd:9f:8b:60:e4:2e:48:db:c5:38:fb:59:0c:7e: dd:2e:0f:b2:7c:50:7e:3f:d6:8f:ed:dd:63:e7:89: 9e:db:88:2f:99:37:f3:70:2e:2e:52:72:b4:25:fb: d0:f5:c0:4d:4b:94:01:ce:98:12:77:80:0b:5a:9e: 79:c2:2f:3d:63:ce:5c:99:2f:81:12:47:94:38:a9: 54:c1:1f:65:05:bc:2e:0c:cd:7f:74:8a:d2:ec:f9: 86:aa:68:a3:2a:75:54:4b:d8:d7:7a:46:a5:85:06: d9:57:89:83:6a:fb:fb:6a:89:fb:88:5b:68:95:67: 5b:e0:d4:24:72:38:2b:1e:15:d4:1f:32:67:d8:04: f6:1d:d1:7b:8a:8d:08:e5:8d:71:b2:d2:36:f4:7b: 8e:6e:28:7a:77:46:2a:e6:d2:18:6b:25:28:43:5e: ae:e4:88:50:34:9a:9d:1b:4d:d3:ee:66:a6:f6:2a: 1e:4d:70:da:1f:58:fb:8f:cc:e8:59:5b:b7:c5:f3: c3:a3:a8:c9:f5:e8:03:3e:22:49:35:c3:46:3e:0c: fe:4c:fc:29:da:56:45:93:d1:1e:55:81:c6:7f:64: 98:f5:d2:23:17:0a:27:4d:62:d4:b0:b3:d1:b4:eb: 9a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:77:C1:B2:9C:61:EE:18:29:A1:17:B1:73:B1:0D:66:33:63:F6:1D X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/018dea0d-42eb-4d58-8914-636d25ca3b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018:800::/38 Signature Algorithm: sha256WithRSAEncryption 88:a5:81:aa:84:8f:df:5b:47:c9:b7:8d:75:5a:50:d6:b1:3d: 00:2a:fa:2b:a8:ed:8f:02:5b:57:74:dc:97:25:62:58:6e:dd: 31:e5:27:8f:2e:a8:df:12:fd:a6:da:b8:2a:ed:e2:ee:01:9d: ac:f0:c6:3e:ee:8c:3a:48:26:11:f9:95:52:9e:46:08:4f:13: c5:4c:59:9a:32:fb:ff:c8:9e:70:39:b0:8f:0f:40:56:97:0f: 62:b9:9e:ed:d3:ff:5a:c6:a9:35:3e:bd:fd:d7:82:5a:4e:c4: f6:8e:73:d6:96:ac:4c:0b:60:1e:5b:ec:d4:51:ec:a9:0e:3f: 30:97:e6:a3:f0:58:d7:fa:71:6f:74:a4:3b:1b:76:58:f0:09: 0a:cc:e3:35:c6:66:75:14:4d:38:4c:d0:e7:5c:49:fd:1a:0d: 49:c0:3e:3f:e2:30:05:08:aa:c6:7a:68:28:4a:25:a4:22:b0: 98:28:2b:35:b2:f4:6c:ab:45:37:bd:24:80:ed:f3:9f:5e:87: 8b:1f:27:42:77:dd:cc:39:91:01:c1:42:bd:32:5b:e2:42:98: 37:00:97:8e:30:02:4b:05:4c:9d:29:90:1b:86:9c:ea:9e:fe: 01:9c:58:fb:35:0b:a7:9f:61:ac:fb:d1:52:10:89:12:88:06: 47:d1:fd:bb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSayGWaVqzn8y6EoGw2wZDIogMhswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDMwNFoX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNANzRkYTMyM2FmMGViNDEyY2JmYzUx ZjA0NTE5YWUxOTRlMGNjNzMzNDBjZDlkMjAzNGI3NDc2Y2YwYjc1NTQ1ZDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvDYC0RRMf195M4vrL0qvZ+LYOQu SNvFOPtZDH7dLg+yfFB+P9aP7d1j54me24gvmTfzcC4uUnK0JfvQ9cBNS5QBzpgS d4ALWp55wi89Y85cmS+BEkeUOKlUwR9lBbwuDM1/dIrS7PmGqmijKnVUS9jXekal hQbZV4mDavv7aon7iFtolWdb4NQkcjgrHhXUHzJn2AT2HdF7io0I5Y1xstI29HuO bih6d0Yq5tIYayUoQ16u5IhQNJqdG03T7mam9ioeTXDaH1j7j8zoWVu3xfPDo6jJ 9egDPiJJNcNGPgz+TPwp2lZFk9EeVYHGf2SY9dIjFwonTWLUsLPRtOuaawIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPl3wbKcYe4YKaEXsXOxDWYzY/YdMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzAxOGRlYTBkLTQyZWItNGQ1OC04OTE0LTYzNmQyNWNhM2IzYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AGAgwDQYJKoZIhvcNAQELBQADggEBAIilgaqEj99bR8m3jXVa UNaxPQAq+iuo7Y8CW1d03JclYlhu3THlJ48uqN8S/abauCrt4u4Bnazwxj7ujDpI JhH5lVKeRghPE8VMWZoy+//InnA5sI8PQFaXD2K5nu3T/1rGqTU+vf3XglpOxPaO c9aWrEwLYB5b7NRR7KkOPzCX5qPwWNf6cW90pDsbdljwCQrM4zXGZnUUTThM0Odc Sf0aDUnAPj/iMAUIqsZ6aChKJaQisJgoKzWy9GyrRTe9JIDt859eh4sfJ0J33cw5 kQHBQr0yW+JCmDcAl44wAksFTJ0pkBuGnOqe/gGcWPs1C6efYaz70VIQiRKIBkfR /bs= -----END CERTIFICATE-----Generated at Wed Nov 11 11:53:34 2026 by rpki-client