$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22d6913e-5f3d-4f99-9a60-48579f471838.roa File: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (raw, json) Hash identifier: M17X9ZstdKPiOiaowDV9py+basmFK9dswRvMmNAfmyY= Subject key identifier: A5:0F:B6:AD:2D:5F:C7:85:EB:AD:2C:AA:8A:2C:FD:74:C2:87:00:5E Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 3DBDEF48C9EBEF849FE6D45688AB077AB2A6F5D1 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22d6913e-5f3d-4f99-9a60-48579f471838.roa Signing time: Tue 04 Aug 2026 00:00:41 +0000 ROA not before: Tue 04 Aug 2026 00:00:41 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6500:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:bd:ef:48:c9:eb:ef:84:9f:e6:d4:56:88:ab:07:7a:b2:a6:f5:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 4 00:00:41 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=30840e97affbb3c674dca0518c880a0e464f6e37993727187f95f80a159796a8, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:62:00:1e:66:5f:00:a1:20:d6:8d:7d:f2: 21:c3:50:a2:7f:e9:89:ba:da:08:a4:57:af:b6:83: 26:b4:02:e8:91:ff:c2:eb:44:cf:13:70:e9:df:cc: 71:f8:ea:b4:30:1c:46:4b:e5:63:95:9e:3a:f2:3f: 58:80:b4:36:eb:c7:93:72:5f:bf:69:ce:f1:0f:ed: 82:02:d8:d9:12:bb:48:ad:b9:fc:86:02:81:aa:fa: a3:a2:b3:60:a5:4c:14:47:17:2e:a6:80:ee:6b:bd: fe:9c:7f:f6:70:fa:60:a6:c2:d1:b3:7a:30:b0:51: e0:27:33:77:5d:01:cb:45:4c:29:b5:3a:8d:57:12: 66:aa:14:b0:72:d7:6f:dd:0b:34:77:89:60:8d:61: 24:29:09:98:ba:1d:0b:b4:81:e6:fd:3c:30:ac:a6: 52:72:8a:d7:b5:7e:c3:c2:bc:a5:52:b4:a4:c2:b3: f4:ba:4e:5b:e0:b0:93:30:20:01:34:72:db:00:5b: a3:d6:ac:32:8c:d2:7b:9f:6c:42:c2:eb:06:37:f1: 5c:2e:c0:30:4e:ae:14:5d:53:98:01:52:d0:01:1e: e2:c0:c0:e7:00:49:1b:5a:98:66:e9:cd:8c:eb:33: 48:f6:ba:7a:ff:aa:37:a8:2d:5a:f0:14:a1:01:45: ec:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0F:B6:AD:2D:5F:C7:85:EB:AD:2C:AA:8A:2C:FD:74:C2:87:00:5E X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/22d6913e-5f3d-4f99-9a60-48579f471838.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6500:2000::/36 Signature Algorithm: sha256WithRSAEncryption 7e:a1:af:4d:0f:95:22:00:f2:28:d7:eb:48:b4:66:70:1d:70: fe:a9:39:4b:d5:f5:9b:7c:e5:33:f5:cd:1a:9a:eb:2a:9c:97: fc:c6:f9:5a:0a:07:a8:bb:cf:eb:1f:1e:f2:ec:33:5a:ef:c3: 99:43:61:fa:55:17:c5:c6:35:89:d3:be:35:d2:20:64:5c:f8: 1f:68:bf:35:2e:fc:e5:b8:f7:55:c6:ae:7d:88:65:4b:ea:f5: 58:6b:80:1c:4e:61:3d:f3:1b:65:fd:73:1c:8e:88:c6:8b:0a: 91:52:a7:45:91:7a:97:c6:60:a0:84:bf:13:37:d2:f9:f4:19: 06:f2:95:21:61:00:a4:e9:12:f3:6b:57:fe:ce:91:7a:2d:20: ab:f6:36:cb:f7:69:bc:da:e2:6e:ec:be:72:0e:d8:e9:ed:60: 0d:96:4c:3a:ee:54:f9:3f:50:e5:3c:ce:ea:bb:46:96:c6:60: f4:27:35:6d:8d:f1:26:de:16:47:b0:9e:41:a3:c4:44:d6:17: 4a:98:6a:49:6c:24:6c:2f:99:70:da:06:ec:c7:c3:ac:ef:c8: 34:5d:44:cc:5a:8a:16:db:c9:c8:bd:92:22:fe:bb:92:7b:ae: 1b:81:04:4f:a0:55:c6:06:ca:eb:a1:fc:d7:c8:8b:72:11:4c: 63:28:9e:59 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPb3vSMnr74Sf5tRWiKsHerKm9dEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwNDAwMDA0MVoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAMzA4NDBlOTdhZmZiYjNjNjc0ZGNh MDUxOGM4ODBhMGU0NjRmNmUzNzk5MzcyNzE4N2Y5NWY4MGExNTk3OTZhODEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraFiAB5mXwChINaNffIhw1Cif+mJ utoIpFevtoMmtALokf/C60TPE3Dp38xx+Oq0MBxGS+VjlZ468j9YgLQ268eTcl+/ ac7xD+2CAtjZErtIrbn8hgKBqvqjorNgpUwURxcupoDua73+nH/2cPpgpsLRs3ow sFHgJzN3XQHLRUwptTqNVxJmqhSwctdv3Qs0d4lgjWEkKQmYuh0LtIHm/TwwrKZS corXtX7DwrylUrSkwrP0uk5b4LCTMCABNHLbAFuj1qwyjNJ7n2xCwusGN/FcLsAw Tq4UXVOYAVLQAR7iwMDnAEkbWphm6c2M6zNI9rp6/6o3qC1a8BShAUXsmQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKUPtq0tX8eF660sqoos/XTChwBeMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzIyZDY5MTNlLTVmM2QtNGY5OS05YTYwLTQ4NTc5ZjQ3MTgzOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJABlACAwDQYJKoZIhvcNAQELBQADggEBAH6hr00PlSIA8ijX60i0 ZnAdcP6pOUvV9Zt85TP1zRqa6yqcl/zG+VoKB6i7z+sfHvLsM1rvw5lDYfpVF8XG NYnTvjXSIGRc+B9ovzUu/OW491XGrn2IZUvq9VhrgBxOYT3zG2X9cxyOiMaLCpFS p0WRepfGYKCEvxM30vn0GQbylSFhAKTpEvNrV/7OkXotIKv2Nsv3abza4m7svnIO 2OntYA2WTDruVPk/UOU8zuq7RpbGYPQnNW2N8SbeFkewnkGjxETWF0qYaklsJGwv mXDaBuzHw6zvyDRdRMxaihbbyci9kiL+u5J7rhuBBE+gVcYGyuuh/NfIi3IRTGMo nlk= -----END CERTIFICATE-----Generated at Mon Aug 10 16:33:48 2026 by rpki-client