$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b51d6a60-7601-45c2-8839-f2002dfa8409.roa File: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (raw, json) Hash identifier: qPzKMLETddB1HMtrfs0e/EyZsPUwi+5CNvlo+jknupQ= Subject key identifier: 81:68:AF:62:A2:E4:29:88:B3:72:55:51:BF:07:A9:0A:F3:59:34:55 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 637442C0533FA08DA63E25BB7FACA7A0DB5C5120 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b51d6a60-7601-45c2-8839-f2002dfa8409.roa Signing time: Thu 30 Jul 2026 00:00:05 +0000 ROA not before: Thu 30 Jul 2026 00:00:05 +0000 ROA not after: Wed 28 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:74:42:c0:53:3f:a0:8d:a6:3e:25:bb:7f:ac:a7:a0:db:5c:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Jul 30 00:00:05 2026 GMT Not After : Oct 28 23:59:59 2026 GMT Subject: serialNumber=26119f8d7b7918ea2a7e220e27be52cfef068ecde046a113a1e9d5fd94316494, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:00:bd:69:1b:1f:a8:17:a3:bd:28:d0:4b: b5:ca:77:44:0f:45:e3:da:25:68:51:b2:9b:6e:c2: de:5e:6c:ef:74:05:57:21:39:04:0c:2b:b9:19:de: fe:95:2a:2d:e5:06:91:6b:cd:f2:59:31:b6:bb:31: 22:33:a0:40:ba:33:9d:6f:17:7e:d2:e3:e4:05:00: 32:07:54:29:0c:ee:3f:1d:0a:b1:3a:f4:98:ac:de: b8:f6:86:a7:cd:fb:4c:04:cc:5d:b1:9e:e0:9a:a2: 5e:2b:e9:4b:03:6f:73:ec:22:a9:3a:f0:81:dc:09: 19:d8:fd:07:e6:18:7f:99:e4:d0:92:6b:c7:2b:9b: 97:11:50:d5:5a:9c:80:40:f7:33:16:6c:85:e5:28: 38:ac:03:1f:00:89:d4:5b:3b:66:a9:79:82:f2:87: 25:c6:00:4d:17:20:17:d6:e8:47:c4:0a:be:28:15: 92:44:44:48:f9:0b:06:85:11:2b:e9:36:f9:52:58: 81:bf:57:a5:1a:d8:a1:d9:b9:9d:49:dc:59:c2:de: db:2f:b0:ef:1b:10:d1:4b:62:55:b0:09:43:b7:f2: 66:4e:99:ac:69:36:e4:9b:e0:d5:2a:c2:ba:6c:1f: 38:de:2f:da:a2:cd:a9:80:d9:d4:da:64:fa:f1:69: 40:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:68:AF:62:A2:E4:29:88:B3:72:55:51:BF:07:A9:0A:F3:59:34:55 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b51d6a60-7601-45c2-8839-f2002dfa8409.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.0.0/17 Signature Algorithm: sha256WithRSAEncryption 50:0d:3c:26:b7:62:01:db:f1:0a:97:1e:9a:a2:76:0d:dc:ae: e4:54:ca:89:75:36:27:59:d5:23:18:bf:e5:d6:bc:7e:d8:3a: be:39:fb:6e:55:c0:6a:b0:5c:b1:aa:63:db:d5:e7:ab:03:4d: 45:9e:1b:1a:44:4d:cd:69:bc:f8:85:11:75:48:13:07:be:f8: 77:bc:7b:6f:e4:02:66:6b:c9:15:13:0a:fb:12:85:d2:e5:51: 54:5c:d6:e4:41:d4:b5:aa:89:31:9b:08:80:de:d3:be:cd:3b: 19:33:a5:c6:c2:3b:44:60:ae:db:e9:f1:28:f4:33:04:97:54: ae:89:03:36:69:b8:28:5a:ac:65:a2:3c:6c:b5:bc:fe:4b:be: a2:c0:86:f4:a7:3a:a3:38:c8:84:b8:2d:16:ec:96:80:5c:62: 41:b9:73:b1:f0:9e:b2:12:e3:a9:7e:d3:35:67:6a:7f:5e:0e: da:c7:80:e2:e8:30:3a:46:9f:8e:da:08:86:05:51:fb:64:52: 91:01:8a:a0:1e:84:9d:1d:37:ed:32:7b:b3:60:3b:cb:c7:1b: 29:ef:52:9b:c3:0d:ec:43:c8:5c:9c:55:b8:ec:35:fb:a5:33: f7:49:5c:6d:50:67:c5:68:c2:b0:16:6f:1c:ce:97:1e:1a:0f: 6e:28:40:bc -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUY3RCwFM/oI2mPiW7f6ynoNtcUSAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MDczMDAwMDAwNVoX DTI2MTAyODIzNTk1OVowejFJMEcGA1UEBRNAMjYxMTlmOGQ3Yjc5MThlYTJhN2Uy MjBlMjdiZTUyY2ZlZjA2OGVjZGUwNDZhMTEzYTFlOWQ1ZmQ5NDMxNjQ5NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIcAvWkbH6gXo70o0Eu1yndED0Xj 2iVoUbKbbsLeXmzvdAVXITkEDCu5Gd7+lSot5QaRa83yWTG2uzEiM6BAujOdbxd+ 0uPkBQAyB1QpDO4/HQqxOvSYrN649oanzftMBMxdsZ7gmqJeK+lLA29z7CKpOvCB 3AkZ2P0H5hh/meTQkmvHK5uXEVDVWpyAQPczFmyF5Sg4rAMfAInUWztmqXmC8ocl xgBNFyAX1uhHxAq+KBWSRERI+QsGhREr6Tb5UliBv1elGtih2bmdSdxZwt7bL7Dv GxDRS2JVsAlDt/JmTpmsaTbkm+DVKsK6bB843i/aos2pgNnU2mT68WlAcQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFIFor2Ki5CmIs3JVUb8HqQrzWTRVMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I1MWQ2YTYwLTc2MDEtNDVjMi04ODM5LWYyMDAyZGZhODQwOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQHn/gAMA0GCSqGSIb3DQEBCwUAA4IBAQBQDTwmt2IB2/EKlx6aonYN 3K7kVMqJdTYnWdUjGL/l1rx+2Dq+OftuVcBqsFyxqmPb1eerA01FnhsaRE3Nabz4 hRF1SBMHvvh3vHtv5AJma8kVEwr7EoXS5VFUXNbkQdS1qokxmwiA3tO+zTsZM6XG wjtEYK7b6fEo9DMEl1SuiQM2abgoWqxlojxstbz+S76iwIb0pzqjOMiEuC0W7JaA XGJBuXOx8J6yEuOpftM1Z2p/Xg7ax4Di6DA6Rp+O2giGBVH7ZFKRAYqgHoSdHTft MnuzYDvLxxsp71Kbww3sQ8hcnFW47DX7pTP3SVxtUGfFaMKwFm8czpceGg9uKEC8 -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:29 2026 by rpki-client