$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa File: 22707524-2248-48ea-815f-578f49b19436.roa (raw, json) Hash identifier: gWQW94UchMXKpAitMYpF39jPrIGeNpor2yQqW1vclFo= Subject key identifier: AC:A8:C3:3C:C8:41:3C:EC:25:E0:B7:B4:73:14:DF:54:81:89:B7:13 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 036CCBA324A1A3741E1D1831A36B42CAC1719603 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa Signing time: Fri 15 May 2026 00:00:16 +0000 ROA not before: Fri 15 May 2026 00:00:16 +0000 ROA not after: Thu 13 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Jun 2026 00:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6c:cb:a3:24:a1:a3:74:1e:1d:18:31:a3:6b:42:ca:c1:71:96:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: May 15 00:00:16 2026 GMT Not After : Aug 13 23:59:59 2026 GMT Subject: serialNumber=f745af8545a71398bcf61d57a3569b618eecc2ef5742e5ab9e1c594530b3df38, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:87:6a:83:55:23:12:58:6a:8f:22:43:e7: 9b:6d:ab:f0:0d:56:df:3c:78:e7:53:41:74:b1:80: 7c:c4:d3:56:80:ad:a2:b4:a7:9c:45:8b:c9:36:42: 8e:7b:0b:b2:1e:77:81:28:f9:f3:70:87:91:e1:26: 5e:e4:de:a5:65:48:da:97:58:0e:c9:78:8c:72:cf: f0:51:f7:97:79:e0:62:18:ec:ac:df:ac:83:8f:d3: bd:19:70:68:55:ba:63:1d:85:b0:de:45:74:e3:65: 61:87:6a:19:cf:b1:bc:3a:9c:9b:39:9f:3f:03:f6: a3:09:b7:78:18:48:19:b3:40:78:d0:8c:78:e4:32: 5e:ab:b7:ff:c4:8b:b5:f4:8a:05:12:fe:9a:3d:7a: bb:74:77:c5:79:28:b9:8d:e0:0c:f1:69:6f:31:31: c4:d6:c2:51:fc:a3:1a:b8:4a:a6:98:ac:59:cc:30: 62:3a:8b:e2:4e:63:73:1f:ef:6e:5e:43:f8:09:8a: 38:c3:b9:6e:db:d4:35:47:f2:03:4c:a6:ef:56:2b: 01:44:6a:2e:87:d5:79:ac:7f:92:84:c5:4b:76:c1: fb:4a:ba:a2:f4:d0:f4:d3:ae:40:37:34:ae:1b:6e: 56:04:4a:c9:e0:dd:d9:09:c2:5f:6d:36:45:3f:78: 91:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A8:C3:3C:C8:41:3C:EC:25:E0:B7:B4:73:14:DF:54:81:89:B7:13 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22707524-2248-48ea-815f-578f49b19436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.150.0/24 Signature Algorithm: sha256WithRSAEncryption 58:8e:cc:e9:1e:1f:6f:d7:f2:bc:09:f0:73:9e:f9:48:74:72: 4b:fd:e1:62:4b:0d:89:85:ad:b6:a6:4e:3b:83:d3:bd:5c:78: 0a:d7:82:e7:36:5c:29:f1:c4:f1:18:4d:00:97:52:cc:84:d5: 2d:69:14:e9:5c:a0:27:83:34:a4:15:55:f3:0a:65:7c:f5:16: c0:5c:4a:8f:b4:07:ec:95:50:16:a8:21:8e:0f:85:7c:8a:1f: 69:65:93:0d:b1:fe:5b:f5:46:19:72:4c:b4:52:12:f9:23:3b: d8:71:58:e7:37:04:7a:52:74:ac:07:c5:3f:cd:14:7f:ed:fa: ec:b0:65:48:92:c1:74:63:c8:d6:01:d8:b9:24:ed:bc:a4:9b: ad:c1:05:50:9a:f5:72:0d:7d:ad:6e:b7:42:0b:b9:20:07:11: 0c:23:61:85:44:2c:e8:98:69:47:c5:51:13:15:3a:76:c7:08: bc:e2:86:d4:02:48:ec:17:fc:78:36:8a:d2:92:89:23:e4:4f: 8a:9b:06:e5:d9:1a:75:3e:53:a4:87:d0:c4:82:05:21:57:6a: 21:fe:a4:e4:1e:e1:22:8a:c3:80:d2:09:0a:72:fa:f8:f1:b0: 2a:43:62:e3:19:5b:72:c8:73:07:f0:87:73:15:1d:1a:85:78: 85:4a:47:26 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUA2zLoySho3QeHRgxo2tCysFxlgMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDUxNTAwMDAxNloX DTI2MDgxMzIzNTk1OVowejFJMEcGA1UEBRNAZjc0NWFmODU0NWE3MTM5OGJjZjYx ZDU3YTM1NjliNjE4ZWVjYzJlZjU3NDJlNWFiOWUxYzU5NDUzMGIzZGYzODEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPWHaoNVIxJYao8iQ+ebbavwDVbf PHjnU0F0sYB8xNNWgK2itKecRYvJNkKOewuyHneBKPnzcIeR4SZe5N6lZUjal1gO yXiMcs/wUfeXeeBiGOys36yDj9O9GXBoVbpjHYWw3kV042Vhh2oZz7G8OpybOZ8/ A/ajCbd4GEgZs0B40Ix45DJeq7f/xIu19IoFEv6aPXq7dHfFeSi5jeAM8WlvMTHE 1sJR/KMauEqmmKxZzDBiOoviTmNzH+9uXkP4CYo4w7lu29Q1R/IDTKbvVisBRGou h9V5rH+ShMVLdsH7Srqi9ND0065ANzSuG25WBErJ4N3ZCcJfbTZFP3iR7QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKyowzzIQTzsJeC3tHMU31SBibcTMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzIyNzA3NTI0LTIyNDgtNDhlYS04MTVmLTU3OGY0OWIxOTQzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQArymWMA0GCSqGSIb3DQEBCwUAA4IBAQBYjszpHh9v1/K8CfBznvlI dHJL/eFiSw2Jha22pk47g9O9XHgK14LnNlwp8cTxGE0Al1LMhNUtaRTpXKAngzSk FVXzCmV89RbAXEqPtAfslVAWqCGOD4V8ih9pZZMNsf5b9UYZcky0UhL5IzvYcVjn NwR6UnSsB8U/zRR/7frssGVIksF0Y8jWAdi5JO28pJutwQVQmvVyDX2tbrdCC7kg BxEMI2GFRCzomGlHxVETFTp2xwi84obUAkjsF/x4NorSkokj5E+Kmwbl2Rp1PlOk h9DEggUhV2oh/qTkHuEiisOA0gkKcvr48bAqQ2LjGVtyyHMH8IdzFR0ahXiFSkcm -----END CERTIFICATE-----Generated at Fri Jun 19 08:13:31 2026 by rpki-client