$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa File: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (raw, json) Hash identifier: Xfh6ZjU3jVx9qa79ZmwSH+KBpt26XR6wuBYg75N51d8= Subject key identifier: DC:9C:CD:09:E0:31:E8:CE:18:E4:A3:9A:33:17:F3:B8:DE:81:C2:34 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 0D363C1104A084E64E48FCA9423DA75DE624A1EC Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa Signing time: Mon 03 Aug 2026 00:00:07 +0000 ROA not before: Mon 03 Aug 2026 00:00:07 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 122.248.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:36:3c:11:04:a0:84:e6:4e:48:fc:a9:42:3d:a7:5d:e6:24:a1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:07 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=0d0fbb89dc9d6f7f7e0c5e55a47ac25af345b6a3bf0b424fa17cdf4ee86f2d7d, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ac:6c:c0:cc:18:e5:60:a4:d3:b4:1b:c9:99: ef:e3:82:c1:5a:14:2b:3f:90:2f:02:6e:d1:89:c8: b3:2e:d4:ca:99:6c:0f:9d:53:ce:e2:66:bc:45:89: a5:2e:4a:43:72:fe:59:66:dd:c6:db:3d:b0:fd:36: 70:ee:cb:c7:64:c7:f1:c7:c4:f2:24:a5:19:d8:f7: 3c:5e:f8:fd:a9:6d:61:96:71:09:68:fb:77:31:22: 93:54:2c:1b:1c:e7:8f:56:6a:e1:6b:f1:14:1a:4d: 35:67:e5:37:3f:d0:6b:4e:57:a6:12:50:9d:22:2b: ac:79:eb:ed:61:27:ef:0c:27:3e:c3:10:4e:75:d8: 38:58:73:09:9d:40:f9:24:5a:e0:41:a2:ab:0a:bb: cf:3b:49:8c:d8:54:1f:ca:10:59:60:3b:af:8e:fb: d7:d2:a2:65:7a:fc:13:aa:1e:fc:4c:e3:6f:85:9a: ef:d6:96:33:52:c0:4a:e8:f7:73:aa:92:d5:12:4a: 37:41:ef:2b:d7:91:e5:84:ed:fe:0f:15:fd:95:77: e4:b8:b9:ae:96:0a:13:a3:81:00:5c:97:c4:ad:0e: 41:fb:3e:35:d7:2d:72:a8:8f:3e:77:9d:79:1a:3b: 0b:78:7d:ee:0b:a4:4c:c1:6b:d4:05:75:16:90:d9: 75:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9C:CD:09:E0:31:E8:CE:18:E4:A3:9A:33:17:F3:B8:DE:81:C2:34 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.192.0/19 Signature Algorithm: sha256WithRSAEncryption 96:f5:78:20:50:7c:86:da:2a:46:7b:02:6d:36:db:ea:07:af: 57:4f:0f:95:5d:56:3f:26:3a:90:b4:80:6d:19:ec:aa:72:b7: 28:ec:d2:f2:28:30:02:27:9b:19:e6:98:ec:25:c7:74:b0:4b: 4b:07:c9:33:db:89:76:0f:8a:54:28:11:e1:e9:e6:72:75:92: a3:fa:e9:36:61:f0:f2:ec:15:e1:c6:3e:ea:c7:6f:02:81:e7: 85:6a:f4:6d:6c:f0:2d:55:52:bc:d1:56:a8:f3:4e:88:6c:39: 2b:02:c7:8c:cd:1b:03:a9:0f:9c:cf:65:0a:64:bc:58:37:d8: 51:8c:39:d3:d1:bc:f9:43:26:eb:bd:dd:3a:fe:e1:93:86:cc: 62:cd:d4:ac:0d:db:b8:77:56:21:33:9d:fa:e4:80:6f:de:c8: d5:b5:f1:b4:6a:90:51:e4:05:46:3c:d2:a1:76:fa:76:8d:61: b1:08:2c:a0:9d:61:42:2b:15:70:cc:1e:fe:d8:01:f9:f5:f1: 1e:0a:88:12:bb:3e:1f:2d:9d:e3:50:a1:dc:3f:9f:04:ee:29: c4:2d:4b:6f:77:96:9a:f3:5f:37:08:b5:68:31:1b:98:31:ae: 41:6b:56:57:40:e4:4d:46:e4:f3:f5:a5:56:3d:47:49:6a:59: c4:01:5b:03 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUDTY8EQSghOZOSPypQj2nXeYkoewwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAwN1oX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAMGQwZmJiODlkYzlkNmY3ZjdlMGM1 ZTU1YTQ3YWMyNWFmMzQ1YjZhM2JmMGI0MjRmYTE3Y2RmNGVlODZmMmQ3ZDEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaxswMwY5WCk07QbyZnv44LBWhQr P5AvAm7RicizLtTKmWwPnVPO4ma8RYmlLkpDcv5ZZt3G2z2w/TZw7svHZMfxx8Ty JKUZ2Pc8Xvj9qW1hlnEJaPt3MSKTVCwbHOePVmrha/EUGk01Z+U3P9BrTlemElCd IiuseevtYSfvDCc+wxBOddg4WHMJnUD5JFrgQaKrCrvPO0mM2FQfyhBZYDuvjvvX 0qJlevwTqh78TONvhZrv1pYzUsBK6PdzqpLVEko3Qe8r15HlhO3+DxX9lXfkuLmu lgoTo4EAXJfErQ5B+z411y1yqI8+d515GjsLeH3uC6RMwWvUBXUWkNl1ZwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNyczQngMejOGOSjmjMX87jegcI0MB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzI0NWZhNGViLTZkMGQtNGRmNy05ZTJkLTI5YTdkMzlhZGNiOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFevjAMA0GCSqGSIb3DQEBCwUAA4IBAQCW9XggUHyG2ipGewJtNtvq B69XTw+VXVY/JjqQtIBtGeyqcrco7NLyKDACJ5sZ5pjsJcd0sEtLB8kz24l2D4pU KBHh6eZydZKj+uk2YfDy7BXhxj7qx28CgeeFavRtbPAtVVK80Vao806IbDkrAseM zRsDqQ+cz2UKZLxYN9hRjDnT0bz5Qybrvd06/uGThsxizdSsDdu4d1YhM5365IBv 3sjVtfG0apBR5AVGPNKhdvp2jWGxCCygnWFCKxVwzB7+2AH59fEeCogSuz4fLZ3j UKHcP58E7inELUtvd5aa8183CLVoMRuYMa5Ba1ZXQORNRuTz9aVWPUdJalnEAVsD -----END CERTIFICATE-----Generated at Mon Aug 10 16:32:54 2026 by rpki-client