$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/565f9740-389f-45ac-956e-b96e19889315.roa File: 565f9740-389f-45ac-956e-b96e19889315.roa (raw, json) Hash identifier: jOuib/rqNEB+QR2F/5ggYq891QHKCJh1yIuNR/CNTJo= Subject key identifier: 62:D0:5E:0C:58:C7:75:96:0C:C7:DC:A1:8B:FF:75:02:CB:01:1C:9E Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 65E03596A0A2E08FE3C6166218837C4C658E2782 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/565f9740-389f-45ac-956e-b96e19889315.roa Signing time: Tue 04 Aug 2026 00:00:50 +0000 ROA not before: Tue 04 Aug 2026 00:00:50 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e0:35:96:a0:a2:e0:8f:e3:c6:16:62:18:83:7c:4c:65:8e:27:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Aug 4 00:00:50 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=3a6d02ec3760ac6fd9833bb1e2770c9c5882bfe5c166782e3872dde1aa969c4e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:35:58:cb:ad:91:b4:c2:1b:71:00:5e:6c:da: 24:32:af:7f:b1:d7:9c:01:6d:f0:2b:af:6b:c3:be: 30:dc:2b:d2:7e:d2:85:6f:55:f4:82:f0:b5:06:3a: e4:a5:28:af:7e:4e:99:78:2d:3f:96:2a:75:c8:2a: 30:32:ee:06:09:bb:46:2e:a2:e1:e1:d0:59:7d:6e: b7:99:d7:14:1b:ee:90:6e:90:a8:f8:6e:c5:eb:21: bd:dd:f7:2b:b8:b9:f3:f5:46:c0:e9:75:1d:64:84: e6:55:79:c0:a8:4e:2d:5e:04:0e:1e:0d:aa:51:39: 48:82:a0:ba:e7:4d:e6:18:d1:29:79:6f:70:d0:49: 18:d1:31:74:fa:40:84:7e:35:98:03:f8:24:d6:70: 10:78:46:c7:d5:ad:38:8b:7d:dc:3e:d1:b9:60:1f: 31:76:92:00:f8:a1:54:99:69:6b:47:c9:01:67:f5: fb:4e:3d:e8:4e:b8:92:2f:62:ac:3e:af:78:c1:c2: 96:a2:8a:67:ad:cf:31:2d:35:0c:83:cc:45:26:c2: 73:9f:ef:36:0f:10:a6:25:85:22:37:74:ff:44:de: 46:5d:3e:11:88:a6:fd:98:ef:ce:32:c7:b5:0e:46: d6:32:d3:db:0a:82:ce:6a:4f:f0:3a:63:3e:77:1a: e7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D0:5E:0C:58:C7:75:96:0C:C7:DC:A1:8B:FF:75:02:CB:01:1C:9E X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/565f9740-389f-45ac-956e-b96e19889315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.224.0/21 Signature Algorithm: sha256WithRSAEncryption 71:de:63:e5:ae:c1:26:23:67:5e:b1:28:ff:5c:08:52:5b:14: a3:0d:d3:be:2f:0e:1c:06:75:a1:15:00:97:df:d5:2c:4b:00: 6d:ee:e1:c5:6f:2c:f2:d7:e0:9e:7c:36:88:d0:6e:aa:15:91: 54:5c:13:c2:b8:b8:e0:c8:25:1c:5a:84:26:95:1b:d2:b1:3f: a5:d8:5b:d8:32:46:a2:7e:bb:84:d2:f2:96:06:5c:82:e2:59: 7d:11:32:2d:8a:5f:8b:fb:a2:78:1c:ec:fd:7d:91:75:1a:90: f4:3e:80:f5:21:fb:74:e7:7f:e6:4e:8b:61:c9:bf:c9:52:5a: d5:65:2a:0b:1b:2d:b6:40:ca:3e:13:00:4d:d5:6b:0a:93:29: 30:4e:36:27:1e:e5:0c:60:32:20:a3:d0:5a:de:7e:ab:36:79: cb:f7:43:7c:fc:60:d7:99:54:b2:43:9e:14:c3:50:d2:57:a4: a5:34:5e:97:9c:86:c2:ed:5d:d2:29:a8:72:28:41:97:74:31: ac:3d:b6:52:5a:ee:d0:f7:c9:08:31:a5:7d:27:7a:c4:3f:65: 78:ba:f1:50:91:b6:0c:f8:8a:00:5b:19:bf:b0:ee:85:08:4b: 13:75:cb:32:d1:76:fe:b3:12:e4:ef:04:ca:01:a8:60:53:a6: f7:75:74:80 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUZeA1lqCi4I/jxhZiGIN8TGWOJ4IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MDgwNDAwMDA1MFoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAM2E2ZDAyZWMzNzYwYWM2ZmQ5ODMz YmIxZTI3NzBjOWM1ODgyYmZlNWMxNjY3ODJlMzg3MmRkZTFhYTk2OWM0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDVYy62RtMIbcQBebNokMq9/sdec AW3wK69rw74w3CvSftKFb1X0gvC1BjrkpSivfk6ZeC0/lip1yCowMu4GCbtGLqLh 4dBZfW63mdcUG+6QbpCo+G7F6yG93fcruLnz9UbA6XUdZITmVXnAqE4tXgQOHg2q UTlIgqC6503mGNEpeW9w0EkY0TF0+kCEfjWYA/gk1nAQeEbH1a04i33cPtG5YB8x dpIA+KFUmWlrR8kBZ/X7Tj3oTriSL2KsPq94wcKWoopnrc8xLTUMg8xFJsJzn+82 DxCmJYUiN3T/RN5GXT4RiKb9mO/OMse1DkbWMtPbCoLOak/wOmM+dxrnCQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFGLQXgxYx3WWDMfcoYv/dQLLARyeMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU2NWY5NzQwLTM4OWYtNDVhYy05NTZlLWI5NmUxOTg4OTMxNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDn/jgMA0GCSqGSIb3DQEBCwUAA4IBAQBx3mPlrsEmI2desSj/XAhS WxSjDdO+Lw4cBnWhFQCX39UsSwBt7uHFbyzy1+CefDaI0G6qFZFUXBPCuLjgyCUc WoQmlRvSsT+l2FvYMkaifruE0vKWBlyC4ll9ETItil+L+6J4HOz9fZF1GpD0PoD1 Ift053/mTothyb/JUlrVZSoLGy22QMo+EwBN1WsKkykwTjYnHuUMYDIgo9Ba3n6r NnnL90N8/GDXmVSyQ54Uw1DSV6SlNF6XnIbC7V3SKahyKEGXdDGsPbZSWu7Q98kI MaV9J3rEP2V4uvFQkbYM+IoAWxm/sO6FCEsTdcsy0Xb+sxLk7wTKAahgU6b3dXSA -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:49 2026 by rpki-client