$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa File: 22707524-2248-48ea-815f-578f49b19436.roa (raw, json) Hash identifier: foCeceipoHt2iBcpqitRYX+2oIIeUUdTZaIcHRm+piU= Subject key identifier: 97:15:13:8F:EA:BB:91:38:8D:9C:21:5B:7F:87:36:50:FC:11:8B:F4 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 02428C60DE7AECAE064CCB6A6D29112149C723EC Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa Signing time: Mon 03 Aug 2026 00:00:12 +0000 ROA not before: Mon 03 Aug 2026 00:00:12 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:42:8c:60:de:7a:ec:ae:06:4c:cb:6a:6d:29:11:21:49:c7:23:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:12 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=d5cd6dbe2999dc7a03cee334e0e2eec1a8b8aaaddd8fbbaba54821bab76eacd1, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5c:25:e2:4d:c2:eb:b3:ff:ea:37:98:ec:80: 9a:4e:c9:b4:06:e1:42:e8:1e:94:fd:b7:3c:94:4c: a0:fd:5f:35:24:69:4d:7d:d3:55:fe:0a:6f:d6:04: ce:04:c2:48:54:41:04:8f:73:f3:10:81:2e:48:02: 1d:51:f5:5b:49:2f:64:79:08:f3:6f:fb:79:14:d3: a7:ec:8f:19:3c:d2:ca:fa:98:a2:b3:01:87:15:5b: cf:46:23:f6:10:71:1f:ed:04:9f:bb:90:42:11:3f: 30:b2:ae:1e:25:6b:90:8d:c7:b3:d2:42:3d:d9:e1: 73:d5:31:3b:9d:0f:2e:18:f1:27:dd:8e:d8:f4:64: 74:9d:67:b9:bb:d3:68:86:82:16:0f:8e:e7:b3:10: a7:e9:a3:d0:e0:9d:c4:05:79:1a:b1:e6:b6:75:3c: ca:1d:9d:99:43:d4:a4:4f:52:8b:1b:b3:84:d6:bc: 73:ae:3d:73:00:1b:28:91:1d:b3:6a:0a:43:62:7a: 65:cb:89:f6:ea:74:a9:4e:80:7b:e4:ee:e3:b9:36: a9:cf:23:d8:e3:bb:42:a9:9a:e9:39:0f:73:50:34: 02:92:fc:22:e8:57:2a:82:f8:79:fc:4d:7c:a2:21: fc:9a:5e:7c:eb:ee:80:02:90:8d:de:cb:0f:d9:f0: 9a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:15:13:8F:EA:BB:91:38:8D:9C:21:5B:7F:87:36:50:FC:11:8B:F4 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.150.0/24 Signature Algorithm: sha256WithRSAEncryption 23:b0:f4:7b:2c:ac:85:77:09:bb:9f:5b:76:74:3c:0e:af:46: 8b:4c:81:95:01:0f:40:c0:7d:3b:53:7c:88:04:22:17:66:10: 81:f4:63:16:25:50:e9:98:93:7b:36:09:37:63:64:fc:a5:e0: ff:8a:1f:1e:45:54:e2:57:2e:4f:cb:84:2c:58:08:15:b8:f3: 4f:67:94:42:00:39:31:89:b5:20:a0:5d:68:5c:71:37:9b:e2: f2:49:8b:80:fa:2d:87:31:80:3b:60:7e:22:88:b6:79:d9:47: 4e:19:31:34:06:4f:11:68:95:3f:c7:f1:48:6d:7b:d6:8e:12: 71:36:13:1e:62:90:0e:ed:aa:6f:d5:70:2f:cd:0b:06:e3:df: 22:5a:cb:bf:eb:65:6d:39:24:3a:60:48:db:48:84:ee:ca:db: aa:35:42:77:e1:32:8f:37:33:82:0f:3a:4a:17:97:0b:fb:9b: 65:f5:53:af:53:6d:ac:d8:5d:c4:70:28:bc:0a:cb:97:38:30: bf:24:f2:51:17:fd:9f:d2:65:0b:a7:2f:30:51:e7:b5:1e:79: 47:fd:05:63:18:a2:ee:4d:db:eb:b9:91:f4:9d:9e:00:ce:e9: 74:2c:33:35:70:4c:4b:54:2a:4e:9f:2a:57:21:93:35:4c:7b: f5:4e:94:d9 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUAkKMYN567K4GTMtqbSkRIUnHI+wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAxMloX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAZDVjZDZkYmUyOTk5ZGM3YTAzY2Vl MzM0ZTBlMmVlYzFhOGI4YWFhZGRkOGZiYmFiYTU0ODIxYmFiNzZlYWNkMTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVwl4k3C67P/6jeY7ICaTsm0BuFC 6B6U/bc8lEyg/V81JGlNfdNV/gpv1gTOBMJIVEEEj3PzEIEuSAIdUfVbSS9keQjz b/t5FNOn7I8ZPNLK+piiswGHFVvPRiP2EHEf7QSfu5BCET8wsq4eJWuQjcez0kI9 2eFz1TE7nQ8uGPEn3Y7Y9GR0nWe5u9NohoIWD47nsxCn6aPQ4J3EBXkasea2dTzK HZ2ZQ9SkT1KLG7OE1rxzrj1zABsokR2zagpDYnply4n26nSpToB75O7juTapzyPY 47tCqZrpOQ9zUDQCkvwi6Fcqgvh5/E18oiH8ml586+6AApCN3ssP2fCa/QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJcVE4/qu5E4jZwhW3+HNlD8EYv0MB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzIyNzA3NTI0LTIyNDgtNDhlYS04MTVmLTU3OGY0OWIxOTQzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQArymWMA0GCSqGSIb3DQEBCwUAA4IBAQAjsPR7LKyFdwm7n1t2dDwO r0aLTIGVAQ9AwH07U3yIBCIXZhCB9GMWJVDpmJN7Ngk3Y2T8peD/ih8eRVTiVy5P y4QsWAgVuPNPZ5RCADkxibUgoF1oXHE3m+LySYuA+i2HMYA7YH4iiLZ52UdOGTE0 Bk8RaJU/x/FIbXvWjhJxNhMeYpAO7apv1XAvzQsG498iWsu/62VtOSQ6YEjbSITu ytuqNUJ34TKPNzOCDzpKF5cL+5tl9VOvU22s2F3EcCi8CsuXODC/JPJRF/2f0mUL py8wUee1HnlH/QVjGKLuTdvruZH0nZ4Azul0LDM1cExLVCpOnypXIZM1THv1TpTZ -----END CERTIFICATE-----Generated at Mon Aug 10 16:35:08 2026 by rpki-client