$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa File: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (raw, json) Hash identifier: zICboMBFoDWQbdk8MP/DZRlv/R8TCsqdWQDOJ6BhHGk= Subject key identifier: FC:84:B2:36:B7:62:D4:79:9D:DD:91:6B:83:19:F0:E2:60:4B:7A:63 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 5AC327F273227B7190C77179C42F33A221BC1695 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa Signing time: Mon 03 Aug 2026 00:00:06 +0000 ROA not before: Mon 03 Aug 2026 00:00:06 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 122.248.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c3:27:f2:73:22:7b:71:90:c7:71:79:c4:2f:33:a2:21:bc:16:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:06 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=141145ac006c0d010ec74d592042bcca3d1e14e3d34c27998b5460c7e2fcabd4, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:1f:b3:b1:5f:ed:47:ec:ca:b8:7d:ee:9c: c6:28:28:ac:2d:a2:19:e7:48:2d:6d:76:94:ee:41: 20:dd:6c:3f:14:90:c0:c0:79:8f:25:b1:3b:ee:c2: f1:97:87:52:db:c5:d9:29:99:b7:08:75:21:b0:35: 5b:b1:75:80:ac:8a:2b:88:46:ed:77:99:23:a4:37: 94:26:fa:5f:6a:19:c2:55:09:7b:4d:b2:3d:ed:fa: e6:27:a3:40:a5:35:1c:fb:b8:64:dc:96:c9:41:84: 36:74:ff:89:b2:1c:7f:8e:66:38:ec:d5:8f:e5:1b: 64:48:e8:02:d4:e0:a5:91:be:5e:f9:8a:fb:5f:82: 6a:cf:61:a7:fb:60:dd:c9:55:a5:fa:16:a5:22:17: 14:19:b1:fe:38:13:5a:e4:b9:3f:08:62:ab:b8:1d: e9:68:ac:8f:c3:2f:b9:fa:ff:27:c3:f4:03:fa:62: 66:50:8e:99:9f:57:66:8e:a6:b9:fb:fa:02:be:1b: ea:77:60:68:a7:24:c4:7f:f0:e6:8c:4f:f5:65:72: 6f:f0:2b:c7:97:02:7e:de:7c:a9:9a:9b:a5:45:00: 15:97:2f:20:78:d6:5e:02:62:85:54:f9:c3:d5:2a: c6:d2:bf:5a:bb:d4:8d:2d:ed:a6:2c:5a:86:88:ff: 1c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:84:B2:36:B7:62:D4:79:9D:DD:91:6B:83:19:F0:E2:60:4B:7A:63 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.240.0/20 Signature Algorithm: sha256WithRSAEncryption 57:fe:19:fb:82:00:6c:e2:e3:dd:80:18:5a:29:fb:ed:45:41: fc:1c:d4:a3:99:6e:fa:48:dc:85:48:f4:c4:4c:d1:0e:d1:ae: d1:4d:d9:1c:ee:c8:78:72:60:80:b3:d4:de:0f:e9:bc:c1:d5: 8c:20:5f:45:61:00:15:0e:50:a1:6e:af:72:77:47:c8:18:bb: 73:18:b8:a3:c7:87:62:8b:6e:eb:07:fc:89:ab:6d:18:1f:d7: 1f:f6:a3:2f:d6:f6:4d:51:3d:d2:eb:2b:fc:96:35:1f:d1:78: 7c:64:b5:c1:c6:d8:d6:c4:96:6f:2c:b0:e9:bb:57:c1:2e:5f: 6c:13:86:12:35:f8:91:5c:02:fb:91:6c:dd:86:16:8e:b4:eb: e9:ad:93:8c:3d:fd:6d:de:eb:2b:b9:7a:28:be:5f:4d:64:31: 20:80:6f:63:54:8d:21:25:b8:af:a0:3a:99:96:9b:c3:61:2c: a9:3f:83:e7:75:85:ac:52:4d:d1:82:cd:08:99:b7:5f:d4:62: 78:c9:ae:8d:a0:60:7a:e0:78:5a:eb:99:9c:c1:ca:1e:d6:d7: 66:f6:85:95:87:3f:4f:8f:51:bb:d6:43:27:50:14:04:44:51: 53:f4:87:ff:ff:b9:1e:74:15:ef:23:de:43:08:10:0f:63:67: 79:27:4a:a5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUWsMn8nMie3GQx3F5xC8zoiG8FpUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAwNloX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAMTQxMTQ1YWMwMDZjMGQwMTBlYzc0 ZDU5MjA0MmJjY2EzZDFlMTRlM2QzNGMyNzk5OGI1NDYwYzdlMmZjYWJkNDEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvckfs7Ff7Ufsyrh97pzGKCisLaIZ 50gtbXaU7kEg3Ww/FJDAwHmPJbE77sLxl4dS28XZKZm3CHUhsDVbsXWArIoriEbt d5kjpDeUJvpfahnCVQl7TbI97frmJ6NApTUc+7hk3JbJQYQ2dP+Jshx/jmY47NWP 5RtkSOgC1OClkb5e+Yr7X4Jqz2Gn+2DdyVWl+halIhcUGbH+OBNa5Lk/CGKruB3p aKyPwy+5+v8nw/QD+mJmUI6Zn1dmjqa5+/oCvhvqd2BopyTEf/DmjE/1ZXJv8CvH lwJ+3nypmpulRQAVly8geNZeAmKFVPnD1SrG0r9au9SNLe2mLFqGiP8cmQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPyEsja3YtR5nd2Ra4MZ8OJgS3pjMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzE3N2M5NzAyLWVlMzktNDJkMS1iNzZmLTZjZWU3N2Y0ZmI0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEevjwMA0GCSqGSIb3DQEBCwUAA4IBAQBX/hn7ggBs4uPdgBhaKfvt RUH8HNSjmW76SNyFSPTETNEO0a7RTdkc7sh4cmCAs9TeD+m8wdWMIF9FYQAVDlCh bq9yd0fIGLtzGLijx4dii27rB/yJq20YH9cf9qMv1vZNUT3S6yv8ljUf0Xh8ZLXB xtjWxJZvLLDpu1fBLl9sE4YSNfiRXAL7kWzdhhaOtOvprZOMPf1t3usruXoovl9N ZDEggG9jVI0hJbivoDqZlpvDYSypP4PndYWsUk3Rgs0Imbdf1GJ4ya6NoGB64Hha 65mcwcoe1tdm9oWVhz9Pj1G71kMnUBQERFFT9If//7kedBXvI95DCBAPY2d5J0ql -----END CERTIFICATE-----Generated at Mon Aug 10 16:35:01 2026 by rpki-client