$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa File: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (raw, json) Hash identifier: pFH0mX/mS/sgsJHsPD8qn/rMn+DTJ3ZqeRaeUX7Sd/o= Subject key identifier: 23:9D:9D:FA:41:76:2D:C3:28:73:B4:6D:B1:09:84:13:59:25:0E:97 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 7FB3BAC2624E23CB0CE2989BBC1819F8024DE4BE Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa Signing time: Wed 05 Aug 2026 00:00:17 +0000 ROA not before: Wed 05 Aug 2026 00:00:17 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 160.235.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b3:ba:c2:62:4e:23:cb:0c:e2:98:9b:bc:18:19:f8:02:4d:e4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Aug 5 00:00:17 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=265bd4e8d33a6864fe2842f6037ea5a28250ce377327c7f5e5a5fc742c15acf6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1d:c5:5e:65:80:2a:e5:96:df:c1:df:0f:a6: f8:16:d0:23:f4:0a:fa:b8:f1:ba:46:43:60:5f:e2: 06:fb:50:bb:1b:b4:c8:fa:1b:75:78:a9:30:89:ea: a8:77:42:c7:6a:42:22:f9:84:29:8d:81:1f:95:3f: 96:8a:d0:7f:83:e8:3e:a5:a0:40:09:d0:11:c0:5c: b1:c6:ff:5b:1d:c0:33:87:1a:68:69:0b:f3:e0:9b: e4:a2:81:cb:a0:ca:c9:3c:85:e1:7f:97:f8:5e:73: ec:56:a5:21:b5:15:33:f4:4b:3c:15:45:69:46:36: 14:d2:3f:13:e6:5e:9e:9e:88:af:42:44:1b:b0:02: d5:9c:4d:63:0e:10:c8:d7:84:23:07:1e:a0:ad:7d: 92:a2:06:ae:82:af:c3:15:bd:61:0e:22:72:31:3b: ef:2b:0f:9f:94:df:41:7b:e1:ad:1f:fc:73:c7:ac: 02:fe:db:40:89:49:1e:3e:98:dd:cb:cd:27:55:be: 8b:b4:19:04:07:4c:b4:85:cb:ed:06:37:e3:7a:5b: 21:9c:ec:60:3b:50:11:82:91:3a:1d:be:51:e4:ba: ea:b1:07:73:51:b9:0d:e1:89:c7:2d:47:68:22:df: 3d:dd:c4:e0:93:71:a2:b1:da:66:36:b1:f9:c4:11: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9D:9D:FA:41:76:2D:C3:28:73:B4:6D:B1:09:84:13:59:25:0E:97 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.235.0.0/16 Signature Algorithm: sha256WithRSAEncryption 65:be:d8:fe:3d:38:a0:0d:f0:2c:09:6e:fd:cc:45:a5:ab:4d: cc:63:63:d1:42:bf:17:12:12:fe:0a:9a:ea:3b:6b:d5:c7:8f: 81:98:9b:0d:a5:51:43:6e:da:0d:78:61:54:da:53:9d:e8:46: cb:75:0c:5e:c1:a2:50:6d:11:47:c1:22:cb:62:96:79:aa:dd: 83:ad:ec:84:e2:0f:a7:b4:fd:e3:a1:b7:e7:86:22:03:bc:f0: 87:43:2b:e5:5b:98:76:12:d0:5e:f2:f6:b9:3d:d6:d0:1d:73: da:93:68:67:15:77:55:f9:1e:21:be:7c:d1:b0:8d:74:51:6b: 43:80:30:78:ed:8f:91:7f:ca:35:f3:60:cf:2c:93:e7:6b:8d: d3:7a:80:90:7f:5d:33:9b:a9:5d:1a:35:44:b7:cd:07:11:18: a1:9e:06:33:97:4f:3e:b6:64:ef:ff:19:c1:22:c5:b2:be:95: ed:6d:97:c5:18:23:6d:4e:02:23:e8:32:7b:a3:6c:08:29:66: d4:ad:3f:08:2f:d5:b8:63:ed:12:a3:21:f8:31:af:d8:cc:92: 7f:71:50:8f:7a:9b:92:9b:35:55:34:82:1e:f4:c0:78:a1:c4: ed:2b:1b:a3:2d:8a:b8:23:83:3c:97:e7:df:6c:f8:36:cb:a8: 6f:fd:c3:d8 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUf7O6wmJOI8sM4pibvBgZ+AJN5L4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MDgwNTAwMDAxN1oX DTI2MTEwMzIzNTk1OVowejFJMEcGA1UEBRNAMjY1YmQ0ZThkMzNhNjg2NGZlMjg0 MmY2MDM3ZWE1YTI4MjUwY2UzNzczMjdjN2Y1ZTVhNWZjNzQyYzE1YWNmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8x3FXmWAKuWW38HfD6b4FtAj9Ar6 uPG6RkNgX+IG+1C7G7TI+ht1eKkwieqod0LHakIi+YQpjYEflT+WitB/g+g+paBA CdARwFyxxv9bHcAzhxpoaQvz4JvkooHLoMrJPIXhf5f4XnPsVqUhtRUz9Es8FUVp RjYU0j8T5l6enoivQkQbsALVnE1jDhDI14QjBx6grX2Sogaugq/DFb1hDiJyMTvv Kw+flN9Be+GtH/xzx6wC/ttAiUkePpjdy80nVb6LtBkEB0y0hcvtBjfjelshnOxg O1ARgpE6Hb5R5LrqsQdzUbkN4YnHLUdoIt893cTgk3GisdpmNrH5xBEh2QIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFCOdnfpBdi3DKHO0bbEJhBNZJQ6XMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNkMWZiMWM3LTYxNDAtNGM1Ny05MjhmLTFhNTk1ODZmOWUyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAoOswDQYJKoZIhvcNAQELBQADggEBAGW+2P49OKAN8CwJbv3MRaWr TcxjY9FCvxcSEv4Kmuo7a9XHj4GYmw2lUUNu2g14YVTaU53oRst1DF7BolBtEUfB Istilnmq3YOt7ITiD6e0/eOht+eGIgO88IdDK+VbmHYS0F7y9rk91tAdc9qTaGcV d1X5HiG+fNGwjXRRa0OAMHjtj5F/yjXzYM8sk+drjdN6gJB/XTObqV0aNUS3zQcR GKGeBjOXTz62ZO//GcEixbK+le1tl8UYI21OAiPoMnujbAgpZtStPwgv1bhj7RKj Ifgxr9jMkn9xUI96m5KbNVU0gh70wHihxO0rG6MtirgjgzyX599s+DbLqG/9w9g= -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:38 2026 by rpki-client