$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa File: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (raw, json) Hash identifier: ccwt1CBQMyS3892sZdcXMVVzywZdW2vC4hnvlBXhQmc= Subject key identifier: 2F:8B:DE:D3:F1:DD:C8:0D:32:49:86:B1:40:E2:64:2C:79:79:20:20 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 42AF5DAF29D2CEB71E26802E257442E1E96B5D35 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa Signing time: Fri 15 May 2026 00:00:12 +0000 ROA not before: Fri 15 May 2026 00:00:12 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 122.248.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Jun 2026 00:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:af:5d:af:29:d2:ce:b7:1e:26:80:2e:25:74:42:e1:e9:6b:5d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: May 15 00:00:12 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=2cd5f2f4bdcc65c8cdb147fbf7e0fb652eb7e44ec6f16016acc0a0418a7151de, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8b:d2:b8:23:db:2d:91:d8:31:84:9b:df:5c: 97:7c:b1:ac:05:12:95:95:75:38:d5:6e:a3:52:bd: c1:a0:0c:93:8f:38:08:68:94:f2:7a:12:da:a4:e2: 46:72:28:53:58:43:a4:96:88:eb:4f:b5:ea:7b:9d: 0a:17:ab:65:0c:ee:4c:73:ea:95:79:f0:ae:af:ad: b8:68:8b:d3:fc:ae:38:a9:a1:f9:fa:31:a2:71:fa: 80:9b:42:68:68:1c:8e:14:f4:2b:a0:99:03:d9:15: 75:1c:2f:57:3a:0a:6a:c3:d0:28:f0:2b:4b:b9:ff: 91:85:1e:09:9a:08:34:f2:b8:26:a5:0f:63:0b:43: ab:00:34:42:12:e7:79:0a:cf:8a:ce:b4:e5:dd:3a: b7:89:94:d0:fc:23:7a:fa:7c:4b:48:3a:05:2c:1a: 81:f0:94:08:6e:96:1b:ab:6b:7c:8a:54:f1:23:73: 9d:48:35:16:89:8c:93:61:d1:1c:41:93:cb:1a:11: 33:ba:fb:33:ba:b3:e5:5e:52:7e:32:1f:10:bf:7e: e1:eb:9b:40:8f:04:bc:4a:fb:5e:28:65:d3:06:00: 41:ab:0b:d3:c1:6c:ee:1f:4c:d0:87:25:98:ec:fc: 05:e0:55:b3:08:7a:e8:c1:16:d0:c7:90:42:43:08: b5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8B:DE:D3:F1:DD:C8:0D:32:49:86:B1:40:E2:64:2C:79:79:20:20 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.240.0/20 Signature Algorithm: sha256WithRSAEncryption 10:1a:a4:1d:5b:4f:5a:75:0e:86:2d:47:0d:66:da:ac:69:4d: f5:c7:8d:02:87:d5:e0:28:0f:6f:0e:4e:7f:91:2c:f9:2a:05: 6a:7d:ce:8d:de:e1:5c:6d:04:97:3d:6f:76:85:8c:27:b3:9a: 11:90:f0:97:1a:dd:a8:ee:cc:58:5c:26:5b:36:2d:9a:ed:1e: 3e:68:48:1d:f2:7b:4b:ce:19:99:73:6a:d1:52:aa:60:7d:03: 28:2a:b2:6c:1d:65:f2:22:87:ee:85:8c:ef:92:b0:dd:cc:3a: b5:ab:59:96:ed:47:8c:e7:d2:db:4c:96:42:1b:1d:6a:3d:62: 01:80:e8:26:70:e9:19:80:33:bc:58:30:6b:15:05:54:34:f9: 3b:6a:de:60:58:e5:b8:c1:09:e9:71:6a:d5:f8:99:30:f1:f6: ca:d6:40:ba:2c:bc:97:01:3f:04:bd:84:2c:14:04:b1:6a:d3: 68:17:6f:ef:40:b5:09:26:b8:33:e7:1c:76:cc:c1:cd:56:64: 3e:e8:10:38:83:4a:32:a7:33:13:df:1b:0c:27:6f:fe:12:fe: 12:4d:a0:77:a8:0d:8b:e5:32:57:a9:fd:f9:99:bc:19:12:0a: 00:c9:e7:47:61:86:30:d6:27:e4:1d:31:ee:31:0c:c6:0f:8d: 29:87:9f:11 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUQq9drynSzrceJoAuJXRC4elrXTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDUxNTAwMDAxMloX DTI2MDgxMzIzNTk1OVowejFJMEcGA1UEBRNAMmNkNWYyZjRiZGNjNjVjOGNkYjE0 N2ZiZjdlMGZiNjUyZWI3ZTQ0ZWM2ZjE2MDE2YWNjMGEwNDE4YTcxNTFkZTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkovSuCPbLZHYMYSb31yXfLGsBRKV lXU41W6jUr3BoAyTjzgIaJTyehLapOJGcihTWEOklojrT7Xqe50KF6tlDO5Mc+qV efCur624aIvT/K44qaH5+jGicfqAm0JoaByOFPQroJkD2RV1HC9XOgpqw9Ao8CtL uf+RhR4Jmgg08rgmpQ9jC0OrADRCEud5Cs+KzrTl3Tq3iZTQ/CN6+nxLSDoFLBqB 8JQIbpYbq2t8ilTxI3OdSDUWiYyTYdEcQZPLGhEzuvszurPlXlJ+Mh8Qv37h65tA jwS8SvteKGXTBgBBqwvTwWzuH0zQhyWY7PwF4FWzCHrowRbQx5BCQwi1LwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFC+L3tPx3cgNMkmGsUDiZCx5eSAgMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzE3N2M5NzAyLWVlMzktNDJkMS1iNzZmLTZjZWU3N2Y0ZmI0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEevjwMA0GCSqGSIb3DQEBCwUAA4IBAQAQGqQdW09adQ6GLUcNZtqs aU31x40Ch9XgKA9vDk5/kSz5KgVqfc6N3uFcbQSXPW92hYwns5oRkPCXGt2o7sxY XCZbNi2a7R4+aEgd8ntLzhmZc2rRUqpgfQMoKrJsHWXyIofuhYzvkrDdzDq1q1mW 7UeM59LbTJZCGx1qPWIBgOgmcOkZgDO8WDBrFQVUNPk7at5gWOW4wQnpcWrV+Jkw 8fbK1kC6LLyXAT8EvYQsFASxatNoF2/vQLUJJrgz5xx2zMHNVmQ+6BA4g0oypzMT 3xsMJ2/+Ev4STaB3qA2L5TJXqf35mbwZEgoAyedHYYYw1ifkHTHuMQzGD40ph58R -----END CERTIFICATE-----Generated at Fri Jun 19 08:13:01 2026 by rpki-client