$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/43fd8687-12d4-49b5-9958-8536ce8160b4.roa File: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (raw, json) Hash identifier: jqK4j9uKnP6mkvPpUUYruYek4zjhpF2nQXMP5W7a9Qo= Subject key identifier: CC:12:28:40:69:70:0C:AE:A1:FE:80:A0:14:15:84:F2:4E:CF:5C:2D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 493B003DC765B0AAC2B6850F64A70BE043318F36 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/43fd8687-12d4-49b5-9958-8536ce8160b4.roa Signing time: Mon 03 Aug 2026 00:00:09 +0000 ROA not before: Mon 03 Aug 2026 00:00:09 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:3b:00:3d:c7:65:b0:aa:c2:b6:85:0f:64:a7:0b:e0:43:31:8f:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:09 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=db462148adb03c39ecf1b3328bf38e58e3669b47466dbe29a9199b2ec9cc7fa1, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fc:46:5a:7f:9c:e3:b2:e6:6f:9a:6e:94:c3: cb:7b:b3:be:59:0a:fc:ee:08:7c:4d:85:27:88:44: 0b:8a:79:ab:57:46:12:f7:b1:c7:16:cc:86:f7:14: 95:a1:c7:ce:e5:8a:5c:40:35:23:4a:cb:62:66:7b: 97:f0:25:c7:66:d4:4f:e1:0a:54:e4:29:30:8b:fd: fe:57:b0:e2:2f:6d:41:c2:75:fc:31:cd:97:38:3f: 72:89:f0:b1:d0:41:09:2d:53:e6:26:a3:b1:32:c3: 99:66:46:8c:1c:14:66:a6:a2:c6:1c:54:f3:b5:ea: ae:1c:ac:5c:7e:a9:d1:44:5d:db:70:88:1e:52:f2: 15:ac:1c:f8:5e:94:52:15:dd:83:19:8c:c4:7a:56: 1a:80:e7:da:97:63:16:f8:69:39:cb:68:60:2b:a0: 3d:78:ac:a2:c4:c2:14:48:bb:db:c1:36:44:4b:29: 15:0b:a3:7d:7c:ef:c0:24:6d:07:a0:ea:45:be:76: f3:fa:5a:71:ff:c1:ff:7d:e0:e5:58:ff:04:47:c8: fa:fc:7a:99:2b:af:0e:35:f6:eb:61:0f:42:93:54: 31:9f:06:ce:0d:29:2f:ae:09:a1:ef:fb:45:84:19: 7f:35:4a:8c:19:cf:25:d9:61:65:a8:87:b6:de:17: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:12:28:40:69:70:0C:AE:A1:FE:80:A0:14:15:84:F2:4E:CF:5C:2D X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/43fd8687-12d4-49b5-9958-8536ce8160b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.160.0/19 Signature Algorithm: sha256WithRSAEncryption 41:15:38:1d:6f:21:c9:c7:5c:c3:7c:7c:08:0a:c9:78:38:19: 48:86:9b:4a:af:56:fc:0d:6a:ee:2f:74:81:55:00:98:f8:f8: 7c:30:c9:68:97:66:5e:ff:27:44:27:7c:3a:a6:1f:93:8c:f2: f8:2a:12:ff:b7:d0:2a:40:19:75:7b:0f:58:75:fe:71:89:f2: c1:04:66:8b:3a:0b:c1:68:3f:2a:02:1c:d5:49:59:ae:97:3e: df:84:c6:c6:03:ea:29:d6:6b:38:1d:31:10:f7:a1:4a:a2:e2: ee:fe:85:72:74:b1:b2:77:5b:25:1a:12:ee:28:e0:61:f3:76: 74:70:c7:84:6f:53:9f:88:49:32:d5:cc:3e:57:58:09:67:91: 0b:d2:c7:4a:1a:f3:c2:f0:39:b7:d7:61:8a:59:90:d1:4f:58: 56:65:3c:23:ed:75:22:6a:37:ce:38:d4:ca:17:7d:d2:fe:b1: 15:b6:3e:c6:76:82:70:a3:f4:fe:4d:ac:22:bd:e0:49:03:42: d3:d9:69:0a:34:7e:22:97:0b:42:96:ad:04:a9:b3:e2:9a:85: 37:3e:64:23:82:38:99:4d:ae:81:63:12:27:de:a9:49:b1:d6: 4c:3e:27:7b:ae:37:48:b4:11:75:70:dc:47:8f:bd:fa:c2:13: f7:ee:08:7c -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUSTsAPcdlsKrCtoUPZKcL4EMxjzYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAwOVoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAZGI0NjIxNDhhZGIwM2MzOWVjZjFi MzMyOGJmMzhlNThlMzY2OWI0NzQ2NmRiZTI5YTkxOTliMmVjOWNjN2ZhMTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPxGWn+c47Lmb5pulMPLe7O+WQr8 7gh8TYUniEQLinmrV0YS97HHFsyG9xSVocfO5YpcQDUjSstiZnuX8CXHZtRP4QpU 5Ckwi/3+V7DiL21BwnX8Mc2XOD9yifCx0EEJLVPmJqOxMsOZZkaMHBRmpqLGHFTz tequHKxcfqnRRF3bcIgeUvIVrBz4XpRSFd2DGYzEelYagOfal2MW+Gk5y2hgK6A9 eKyixMIUSLvbwTZESykVC6N9fO/AJG0HoOpFvnbz+lpx/8H/feDlWP8ER8j6/HqZ K68ONfbrYQ9Ck1QxnwbODSkvrgmh7/tFhBl/NUqMGc8l2WFlqIe23hfaKwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFMwSKEBpcAyuof6AoBQVhPJOz1wtMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzQzZmQ4Njg3LTEyZDQtNDliNS05OTU4LTg1MzZjZTgxNjBiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFrymgMA0GCSqGSIb3DQEBCwUAA4IBAQBBFTgdbyHJx1zDfHwICsl4 OBlIhptKr1b8DWruL3SBVQCY+Ph8MMlol2Ze/ydEJ3w6ph+TjPL4KhL/t9AqQBl1 ew9Ydf5xifLBBGaLOgvBaD8qAhzVSVmulz7fhMbGA+op1ms4HTEQ96FKouLu/oVy dLGyd1slGhLuKOBh83Z0cMeEb1OfiEky1cw+V1gJZ5EL0sdKGvPC8Dm312GKWZDR T1hWZTwj7XUiajfOONTKF33S/rEVtj7GdoJwo/T+TawiveBJA0LT2WkKNH4ilwtC lq0EqbPimoU3PmQjgjiZTa6BYxIn3qlJsdZMPid7rjdItBF1cNxHj736whP37gh8 -----END CERTIFICATE-----Generated at Mon Aug 10 16:35:08 2026 by rpki-client