$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/fcc4293c-b24f-4fac-9395-546f748b3b13.roa File: fcc4293c-b24f-4fac-9395-546f748b3b13.roa (raw, json) Hash identifier: TEVVGJjJbvN3cmk9Ol5bLx5Cy4W+Bp2qFKbAOL0/Aro= Subject key identifier: 99:3C:B0:F9:F7:1E:1F:9C:6E:0A:AC:84:65:19:B5:8C:C5:2C:A1:14 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 62ADB77DCE326BA96965FA3610220E42200A0516 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/fcc4293c-b24f-4fac-9395-546f748b3b13.roa Signing time: Fri 23 Oct 2026 00:03:08 +0000 ROA not before: Fri 23 Oct 2026 00:03:08 +0000 ROA not after: Thu 21 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ad:b7:7d:ce:32:6b:a9:69:65:fa:36:10:22:0e:42:20:0a:05:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Oct 23 00:03:08 2026 GMT Not After : Jan 21 23:59:59 2027 GMT Subject: serialNumber=57485a70cd014bae295b3dd0b28f7521b02e3c708e204a617166643234129deb, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:a2:5d:69:e4:36:ad:6d:7b:bc:c7:13:6a: 5e:05:c9:ab:32:25:89:da:b9:70:b9:85:03:cf:da: a3:47:9f:74:7d:ae:dd:25:0d:93:84:3a:20:30:26: 74:72:f3:d0:0f:dc:d5:9c:3e:68:80:64:c1:52:fb: c9:00:57:46:7e:24:7e:79:06:fa:0c:29:dd:08:fe: 99:a8:79:9b:e6:bd:aa:c3:aa:16:70:01:a7:a6:29: 1a:50:22:40:d1:68:40:d8:cc:f9:ed:3d:60:78:2d: 71:15:86:ec:4f:c3:ff:15:11:fc:81:ca:d9:aa:94: d4:07:c4:31:91:74:58:61:a6:40:aa:6d:3b:11:d9: 07:2d:e1:80:fe:a2:e0:c7:8f:c0:39:99:40:b0:62: 62:42:fb:b2:2a:91:8f:fa:e8:03:e7:25:62:4f:11: c9:13:cc:a6:2b:55:cf:c0:1a:70:7d:2b:f3:94:3b: c1:a8:96:38:69:8e:4d:e7:7f:b8:8f:02:20:06:35: d8:04:fe:62:3a:ff:be:b3:bb:58:b0:80:aa:a6:7a: 00:0f:f1:29:4c:43:1f:64:69:4d:65:c0:24:09:6e: b8:7f:e3:9d:f9:db:5a:cf:32:80:88:35:4c:a7:4c: fe:f4:4d:96:83:b4:d6:ab:b4:68:5d:21:1b:d2:22: 3a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3C:B0:F9:F7:1E:1F:9C:6E:0A:AC:84:65:19:B5:8C:C5:2C:A1:14 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/fcc4293c-b24f-4fac-9395-546f748b3b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018::/38 Signature Algorithm: sha256WithRSAEncryption 08:b8:a4:6d:94:da:27:95:8c:c0:00:4f:ba:f6:c8:66:10:5f: fa:92:c3:69:cb:3e:60:b4:ba:50:e3:c3:97:87:d7:4b:a2:23: 1f:b3:c6:89:c9:44:0f:51:dd:d3:52:f7:50:fc:92:9a:5b:03: a9:7c:58:b8:aa:d0:e8:2c:10:cc:84:51:38:c9:ec:5c:a1:ef: 4c:98:ed:bb:77:81:91:db:c2:fe:a8:7c:04:e0:7e:75:87:0c: df:4a:17:f8:b2:53:35:dc:75:b7:e3:a8:d6:fa:7d:5e:07:be: 6e:a8:b8:dc:71:c2:0b:cd:24:00:80:05:b0:10:4a:d2:8e:9b: 1c:0f:34:42:7c:e1:9b:55:d9:f4:7b:74:27:8a:ac:43:6d:94: 5e:be:25:ff:dd:da:c8:48:a2:b0:90:75:a2:93:ca:46:43:95: c3:0a:9b:73:01:bf:2a:1b:bb:d2:86:a1:4b:08:f3:41:25:0a: 4e:3b:70:a8:d8:17:ef:90:d4:7d:03:88:0f:d9:da:37:d0:89: 2e:ed:e6:49:74:59:ea:75:81:36:3f:b5:da:0c:de:99:3c:1c: 88:bc:73:95:52:f4:fe:48:8b:6b:a4:ce:95:9d:34:b4:ba:76: be:52:b5:cf:f6:96:98:7f:c9:6d:93:d6:0d:06:49:e6:b9:9a: fd:9d:89:71 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYq23fc4ya6lpZfo2ECIOQiAKBRYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MTAyMzAwMDMwOFoX DTI3MDEyMTIzNTk1OVowejFJMEcGA1UEBRNANTc0ODVhNzBjZDAxNGJhZTI5NWIz ZGQwYjI4Zjc1MjFiMDJlM2M3MDhlMjA0YTYxNzE2NjY0MzIzNDEyOWRlYjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTyiXWnkNq1te7zHE2peBcmrMiWJ 2rlwuYUDz9qjR590fa7dJQ2ThDogMCZ0cvPQD9zVnD5ogGTBUvvJAFdGfiR+eQb6 DCndCP6ZqHmb5r2qw6oWcAGnpikaUCJA0WhA2Mz57T1geC1xFYbsT8P/FRH8gcrZ qpTUB8QxkXRYYaZAqm07EdkHLeGA/qLgx4/AOZlAsGJiQvuyKpGP+ugD5yViTxHJ E8ymK1XPwBpwfSvzlDvBqJY4aY5N53+4jwIgBjXYBP5iOv++s7tYsICqpnoAD/Ep TEMfZGlNZcAkCW64f+Od+dtazzKAiDVMp0z+9E2Wg7TWq7RoXSEb0iI6iwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJk8sPn3Hh+cbgqshGUZtYzFLKEUMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2ZjYzQyOTNjLWIyNGYtNGZhYy05Mzk1LTU0NmY3NDhiM2IxMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AGAAwDQYJKoZIhvcNAQELBQADggEBAAi4pG2U2ieVjMAAT7r2 yGYQX/qSw2nLPmC0ulDjw5eH10uiIx+zxonJRA9R3dNS91D8kppbA6l8WLiq0Ogs EMyEUTjJ7Fyh70yY7bt3gZHbwv6ofATgfnWHDN9KF/iyUzXcdbfjqNb6fV4Hvm6o uNxxwgvNJACABbAQStKOmxwPNEJ84ZtV2fR7dCeKrENtlF6+Jf/d2shIorCQdaKT ykZDlcMKm3MBvyobu9KGoUsI80ElCk47cKjYF++Q1H0DiA/Z2jfQiS7t5kl0Wep1 gTY/tdoM3pk8HIi8c5VS9P5Ii2ukzpWdNLS6dr5Stc/2lph/yW2T1g0GSea5mv2d iXE= -----END CERTIFICATE-----Generated at Wed Nov 11 13:42:03 2026 by rpki-client