$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/197500e2-3802-44b2-a561-ca3dad01e209.roa File: 197500e2-3802-44b2-a561-ca3dad01e209.roa (raw, json) Hash identifier: JS5bz35Ewx8DTp8/iz+8ZYDl54lvO4wwOJh221IKssM= Subject key identifier: 32:9B:33:EE:24:A4:99:D4:2E:6D:3A:33:84:A0:FD:08:3C:AD:24:2E Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 58F4E2D616311E75C552DC5354505EF5A6A5F6F6 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/197500e2-3802-44b2-a561-ca3dad01e209.roa Signing time: Mon 03 Aug 2026 00:00:12 +0000 ROA not before: Mon 03 Aug 2026 00:00:12 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f4:e2:d6:16:31:1e:75:c5:52:dc:53:54:50:5e:f5:a6:a5:f6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:12 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=2c9fdf974a3244241e2586d1e7fb9e81fd63337bcb99386d30fa7f486cddfc27, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:f0:35:91:f6:aa:ba:4b:0a:66:56:de:8a: bf:fa:c1:dc:54:b9:14:df:db:0b:57:f1:8c:a3:ab: 24:37:b5:72:65:87:43:aa:fe:fd:c7:4b:dd:5d:f6: 6c:98:2e:95:18:1a:44:0c:ad:0c:2a:da:a6:4e:33: 54:9d:40:96:b9:62:92:92:0b:aa:7f:e2:58:e4:38: fb:bf:c4:51:c9:b5:9c:a0:ef:fc:a6:2f:cc:88:95: 3b:56:c9:ec:4c:a8:2e:76:55:3d:21:96:7d:49:ae: 1a:6d:f2:4a:ca:52:fe:de:b7:9f:30:b1:32:b8:b4: 4a:0b:3b:92:98:3d:5c:4e:57:b7:25:3c:ca:a5:c2: d4:60:82:46:4a:f7:f3:75:11:9e:30:87:90:d0:1f: 35:a6:9c:a3:5b:65:1b:f2:b7:48:1c:bb:bb:f9:ca: bc:a2:9a:61:b2:dc:8d:a2:3e:e8:d4:e5:69:77:bc: 16:13:37:2f:53:db:2e:a9:c7:a6:93:1d:47:71:9e: e9:d3:e1:bb:7b:fb:07:fb:e3:84:27:cc:ae:8f:a0: a5:2f:6a:8e:ff:be:da:ec:b3:a3:78:ce:ba:62:0c: 39:c3:dc:4a:7c:17:b9:80:d8:bd:5e:73:fd:36:21: 00:ef:1b:0c:10:99:78:1a:91:6a:1b:4f:1d:b0:70: f0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9B:33:EE:24:A4:99:D4:2E:6D:3A:33:84:A0:FD:08:3C:AD:24:2E X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/197500e2-3802-44b2-a561-ca3dad01e209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.128.0/24 Signature Algorithm: sha256WithRSAEncryption 30:61:79:7e:e6:06:e5:3c:6c:52:a7:aa:4d:9f:6a:65:26:bb: d6:88:55:4d:de:4a:39:ea:df:2d:eb:71:44:2b:98:3e:a7:5e: 8e:fa:d5:08:17:b5:42:71:77:a5:fa:d4:a1:e6:84:ab:63:57: 92:9a:74:94:4c:7a:97:ad:82:a8:ff:96:38:b9:7f:a4:11:11: c8:56:e7:40:98:29:aa:a2:5b:98:ea:c3:06:dc:d8:ed:13:79: f5:4b:90:58:ef:fb:e5:b3:8b:02:0d:e7:3b:a4:dc:01:04:9a: 17:fd:48:8f:4a:af:69:1f:6a:5b:40:49:72:0c:7e:f3:b4:65: 0a:7b:c8:3d:e3:98:3c:ba:37:72:bc:6c:9d:bc:85:2d:fd:b5: d4:ef:f9:4f:8d:0a:96:c3:bb:02:7f:90:0e:dc:4d:c4:ff:ba: 32:cc:8a:0c:90:7f:2c:a6:85:7b:f7:54:b2:06:ba:ee:9a:3b: 90:aa:82:7d:8b:c9:1e:39:f8:a6:5b:e8:e1:25:37:9e:70:06: 93:21:8d:d4:8c:c2:bd:60:43:ee:d3:95:06:f0:62:3e:d6:d1: b8:01:dd:2e:f8:72:41:07:68:e9:a2:f8:2b:24:de:c2:7d:c2: 74:a3:5b:46:31:53:ff:a4:af:60:64:75:bf:13:46:5c:ea:7d: d7:4d:0a:3c -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUWPTi1hYxHnXFUtxTVFBe9aal9vYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAxMloX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAMmM5ZmRmOTc0YTMyNDQyNDFlMjU4 NmQxZTdmYjllODFmZDYzMzM3YmNiOTkzODZkMzBmYTdmNDg2Y2RkZmMyNzEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L7wNZH2qrpLCmZW3oq/+sHcVLkU 39sLV/GMo6skN7VyZYdDqv79x0vdXfZsmC6VGBpEDK0MKtqmTjNUnUCWuWKSkguq f+JY5Dj7v8RRybWcoO/8pi/MiJU7VsnsTKgudlU9IZZ9Sa4abfJKylL+3refMLEy uLRKCzuSmD1cTle3JTzKpcLUYIJGSvfzdRGeMIeQ0B81ppyjW2Ub8rdIHLu7+cq8 opphstyNoj7o1OVpd7wWEzcvU9suqcemkx1HcZ7p0+G7e/sH++OEJ8yuj6ClL2qO /77a7LOjeM66Ygw5w9xKfBe5gNi9XnP9NiEA7xsMEJl4GpFqG08dsHDwqQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDKbM+4kpJnULm06M4Sg/Qg8rSQuMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzE5NzUwMGUyLTM4MDItNDRiMi1hNTYxLWNhM2RhZDAxZTIwOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQArymAMA0GCSqGSIb3DQEBCwUAA4IBAQAwYXl+5gblPGxSp6pNn2pl JrvWiFVN3ko56t8t63FEK5g+p16O+tUIF7VCcXel+tSh5oSrY1eSmnSUTHqXrYKo /5Y4uX+kERHIVudAmCmqoluY6sMG3NjtE3n1S5BY7/vls4sCDec7pNwBBJoX/UiP Sq9pH2pbQElyDH7ztGUKe8g945g8ujdyvGydvIUt/bXU7/lPjQqWw7sCf5AO3E3E /7oyzIoMkH8spoV791SyBrrumjuQqoJ9i8keOfimW+jhJTeecAaTIY3UjMK9YEPu 05UG8GI+1tG4Ad0u+HJBB2jpovgrJN7CfcJ0o1tGMVP/pK9gZHW/E0Zc6n3XTQo8 -----END CERTIFICATE-----Generated at Mon Aug 10 16:33:13 2026 by rpki-client