$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3684e50c-c50f-4ebb-b327-e0759241197e.roa File: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (raw, json) Hash identifier: f89D2b5c8Zs4k8stZCv3jaHZ+1kBWHUzK88khgX2CBI= Subject key identifier: 17:72:AC:8D:3D:31:8C:F2:94:94:11:FC:16:EA:24:89:D2:B9:DE:D9 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 1D45DAAA16C561A242BC2CBEDE4C07CD82351E55 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3684e50c-c50f-4ebb-b327-e0759241197e.roa Signing time: Tue 04 Aug 2026 00:00:40 +0000 ROA not before: Tue 04 Aug 2026 00:00:40 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:45:da:aa:16:c5:61:a2:42:bc:2c:be:de:4c:07:cd:82:35:1e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 4 00:00:40 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=431e8af3ceff7125a6c1a4e1ae690af1db839863e2217e9eb5ea8415d39a99d6, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ed:76:2a:b1:aa:54:5c:08:85:22:1c:03:bf: 40:84:34:4c:91:20:9a:b0:67:01:1b:e0:46:2d:98: 3c:48:61:2c:cf:74:6a:7c:1c:5a:94:39:9b:93:ce: 3d:c2:12:a1:01:31:69:bf:23:64:2c:17:63:4e:34: 14:8f:c6:d1:28:dc:b5:24:c6:24:01:5a:c2:ce:dd: 55:8a:d2:a8:de:c8:34:56:87:9e:d7:27:3b:5b:ee: 17:4a:f5:fa:c3:81:9e:ea:92:0f:74:91:db:6d:46: c3:fe:fb:4d:95:87:02:09:7b:85:75:56:91:b8:38: 33:ba:ff:28:e9:68:a4:39:de:bf:fb:09:86:5b:86: 71:10:ac:b1:5b:6c:f2:c7:31:c2:4a:c5:c2:80:66: b9:2b:08:75:89:54:9c:1d:2f:80:b9:66:a8:3f:8d: b5:d6:d9:3d:6c:dd:50:4a:d9:e7:21:d6:8e:b1:48: d2:0a:c9:0b:e7:92:12:83:06:0c:cf:d7:9f:c0:e6: 5a:5c:f8:84:18:da:b0:92:9c:de:b0:f4:a1:90:4d: f1:6a:1f:05:8b:74:ec:5c:37:7f:c5:07:9b:f8:9f: 7a:ab:e8:ca:26:24:b7:97:ce:6d:57:4a:ec:55:50: ce:f3:5b:17:6b:c7:71:19:12:e8:c3:5b:b9:e0:6c: ce:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:72:AC:8D:3D:31:8C:F2:94:94:11:FC:16:EA:24:89:D2:B9:DE:D9 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3684e50c-c50f-4ebb-b327-e0759241197e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6500::/48 Signature Algorithm: sha256WithRSAEncryption 1f:a4:f5:89:86:23:e6:a7:3d:6b:40:0b:11:c9:93:87:5e:db: 71:07:7a:b9:3c:db:9f:e4:53:2e:6e:21:f2:d2:16:b8:64:83: a1:85:af:ae:59:3d:ef:df:50:70:a2:d1:d5:e2:6f:7c:e2:b9: fb:f6:8a:93:9e:bf:f9:34:45:50:d6:a2:35:10:ae:c2:75:0f: 0e:f1:23:a0:29:4e:fc:ae:5e:6d:df:df:2d:40:17:8f:d0:05: 39:2e:a3:d6:f9:2b:fd:2f:cc:51:9a:61:0a:b5:9b:2a:b8:f8: 26:72:5d:cb:8e:4e:43:17:c2:4a:4f:e9:b2:94:99:d4:52:b7: 70:2a:c5:eb:83:71:57:7d:21:fe:18:b4:fc:d2:a9:5d:36:2f: a3:35:ae:53:4c:7e:a2:30:5a:cf:e3:ad:11:a8:75:02:4b:95: 58:ec:da:f0:56:91:c0:e8:70:c7:3f:7d:46:fe:45:32:f9:2d: ae:50:6e:da:45:91:6d:8a:83:35:be:86:a3:78:ca:64:31:04: 7b:2f:1a:86:c4:26:63:2b:b2:9f:d1:9a:da:d2:04:b8:8e:4a: ce:32:10:55:e8:57:0d:e0:8a:96:02:12:f6:d5:5e:81:3a:92: ae:50:10:94:3f:54:53:91:58:d3:e7:ff:f9:5f:36:d8:00:e8: 36:66:c4:28 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHUXaqhbFYaJCvCy+3kwHzYI1HlUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwNDAwMDA0MFoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNANDMxZThhZjNjZWZmNzEyNWE2YzFh NGUxYWU2OTBhZjFkYjgzOTg2M2UyMjE3ZTllYjVlYTg0MTVkMzlhOTlkNjEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+12KrGqVFwIhSIcA79AhDRMkSCa sGcBG+BGLZg8SGEsz3RqfBxalDmbk849whKhATFpvyNkLBdjTjQUj8bRKNy1JMYk AVrCzt1VitKo3sg0Voee1yc7W+4XSvX6w4Ge6pIPdJHbbUbD/vtNlYcCCXuFdVaR uDgzuv8o6WikOd6/+wmGW4ZxEKyxW2zyxzHCSsXCgGa5Kwh1iVScHS+AuWaoP421 1tk9bN1QStnnIdaOsUjSCskL55ISgwYMz9efwOZaXPiEGNqwkpzesPShkE3xah8F i3TsXDd/xQeb+J96q+jKJiS3l85tV0rsVVDO81sXa8dxGRLow1u54GzOZQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBdyrI09MYzylJQR/BbqJInSud7ZMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzM2ODRlNTBjLWM1MGYtNGViYi1iMzI3LWUwNzU5MjQxMTk3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJABlAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAfpPWJhiPmpz1rQAsR yZOHXttxB3q5PNuf5FMubiHy0ha4ZIOhha+uWT3v31BwotHV4m984rn79oqTnr/5 NEVQ1qI1EK7CdQ8O8SOgKU78rl5t398tQBeP0AU5LqPW+Sv9L8xRmmEKtZsquPgm cl3Ljk5DF8JKT+mylJnUUrdwKsXrg3FXfSH+GLT80qldNi+jNa5TTH6iMFrP460R qHUCS5VY7NrwVpHA6HDHP31G/kUy+S2uUG7aRZFtioM1voajeMpkMQR7LxqGxCZj K7Kf0Zra0gS4jkrOMhBV6FcN4IqWAhL21V6BOpKuUBCUP1RTkVjT5//5XzbYAOg2 ZsQo -----END CERTIFICATE-----Generated at Mon Aug 10 16:32:53 2026 by rpki-client