$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/882a767c-0faf-4e71-a224-ecec47d98fcb.roa File: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (raw, json) Hash identifier: Rt6xeAG5BC92OG08uxGijjEv+6Nk8Ua9nz3u1/xjupg= Subject key identifier: 89:39:18:97:79:52:D8:32:88:C8:C5:DE:D8:AE:AF:0B:C5:2D:41:EC Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 2E9797EB10BA328B3930B7ABBD7E2DEFBAF2EEE2 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/882a767c-0faf-4e71-a224-ecec47d98fcb.roa Signing time: Mon 03 Aug 2026 00:00:11 +0000 ROA not before: Mon 03 Aug 2026 00:00:11 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 122.248.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:97:97:eb:10:ba:32:8b:39:30:b7:ab:bd:7e:2d:ef:ba:f2:ee:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:11 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=7c0b4a21230a72add47638636faa8e094aa9933d747a26fcf607c436cd551ad2, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:d3:90:28:d0:ad:ba:94:f6:4d:91:da:57: c3:0b:14:45:0a:2e:71:30:98:ba:35:2e:83:d5:2d: 57:62:d8:df:ec:eb:be:03:03:59:fe:84:a7:0e:29: 64:40:97:66:7d:54:5b:55:7f:fc:c5:ec:b4:fe:90: d9:75:5f:7e:f3:3e:20:db:38:04:04:19:19:59:51: 78:23:01:64:04:52:ee:8f:09:2c:18:65:b3:a4:35: 80:02:16:73:91:20:34:22:27:57:c0:68:1e:a0:9f: 9f:e5:b5:d8:ac:14:fd:63:58:86:e6:0c:c5:02:b0: 88:f1:0b:b0:0b:1a:a6:82:b5:e5:10:67:62:36:0e: 81:81:a4:cf:e1:d6:e8:d7:98:ab:bf:da:cb:37:f8: 73:15:9b:74:4d:10:a5:8d:1a:3b:6b:70:64:c7:7b: 73:32:62:4a:15:9e:7e:bb:64:37:fd:74:3c:ce:6e: 49:3b:a6:bb:87:4e:45:ce:1c:4f:13:ca:09:1e:96: 88:0d:33:ef:0c:97:df:e5:93:7c:1b:10:da:f8:aa: c1:dd:92:57:7a:83:08:dc:18:aa:9e:2c:c4:72:f3: 9a:06:fc:27:cf:ee:91:09:e4:0b:53:e5:d1:51:fd: d8:22:73:58:1a:15:a0:bb:39:5d:71:7c:7f:2c:22: c1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:39:18:97:79:52:D8:32:88:C8:C5:DE:D8:AE:AF:0B:C5:2D:41:EC X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/882a767c-0faf-4e71-a224-ecec47d98fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.224.0/21 Signature Algorithm: sha256WithRSAEncryption 04:12:66:d0:66:fb:bf:ba:ef:9c:98:1c:a2:19:11:77:e6:9a: 91:80:52:32:6f:15:0b:cb:9f:42:38:f5:ee:8c:dd:59:e3:0b: b9:96:1e:de:d7:f7:73:1c:0e:ab:4e:ac:7f:39:ee:f5:b5:d1: 4d:d2:a1:13:d2:37:3c:72:d0:3c:48:75:e9:82:23:ee:65:44: ea:b1:ce:26:3c:1a:ab:da:29:22:9a:5d:de:a3:c6:a8:ec:7c: a4:dc:10:50:9a:24:b9:a6:30:51:00:43:8c:b1:75:24:f5:c0: c3:36:ed:78:fc:1b:a8:1d:2b:71:94:ec:73:56:a1:f6:60:30: d4:d5:71:a6:b4:a9:dc:48:9f:d0:09:b1:26:76:9c:ac:1a:68: 65:b3:27:28:b2:13:86:c2:a1:4b:df:b1:53:20:e6:87:af:c4: 68:57:9a:10:72:88:37:e2:f3:e8:17:3b:27:f7:95:cc:ce:f4: b6:e0:5d:1d:22:9b:6c:d0:52:00:d8:6d:69:31:83:02:6c:1b: fb:05:74:92:5c:e8:1e:0d:ca:f2:8a:6f:13:1e:cf:9b:0c:71: 72:a7:79:3f:3b:a7:e1:c2:58:65:a6:38:d9:61:69:dc:ca:59: f0:4e:9b:6d:35:08:3a:f1:8e:1c:b0:d8:14:d8:71:b4:4b:02: 4a:90:6e:b8 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIULpeX6xC6Mos5MLervX4t77ry7uIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAxMVoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAN2MwYjRhMjEyMzBhNzJhZGQ0NzYz ODYzNmZhYThlMDk0YWE5OTMzZDc0N2EyNmZjZjYwN2M0MzZjZDU1MWFkMjEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrbTkCjQrbqU9k2R2lfDCxRFCi5x MJi6NS6D1S1XYtjf7Ou+AwNZ/oSnDilkQJdmfVRbVX/8xey0/pDZdV9+8z4g2zgE BBkZWVF4IwFkBFLujwksGGWzpDWAAhZzkSA0IidXwGgeoJ+f5bXYrBT9Y1iG5gzF ArCI8QuwCxqmgrXlEGdiNg6BgaTP4dbo15irv9rLN/hzFZt0TRCljRo7a3Bkx3tz MmJKFZ5+u2Q3/XQ8zm5JO6a7h05FzhxPE8oJHpaIDTPvDJff5ZN8GxDa+KrB3ZJX eoMI3BiqnizEcvOaBvwnz+6RCeQLU+XRUf3YInNYGhWguzldcXx/LCLBDwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFIk5GJd5UtgyiMjF3tiurwvFLUHsMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 Lzg4MmE3NjdjLTBmYWYtNGU3MS1hMjI0LWVjZWM0N2Q5OGZjYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDevjgMA0GCSqGSIb3DQEBCwUAA4IBAQAEEmbQZvu/uu+cmByiGRF3 5pqRgFIybxULy59COPXujN1Z4wu5lh7e1/dzHA6rTqx/Oe71tdFN0qET0jc8ctA8 SHXpgiPuZUTqsc4mPBqr2ikiml3eo8ao7Hyk3BBQmiS5pjBRAEOMsXUk9cDDNu14 /BuoHStxlOxzVqH2YDDU1XGmtKncSJ/QCbEmdpysGmhlsycoshOGwqFL37FTIOaH r8RoV5oQcog34vPoFzsn95XMzvS24F0dIpts0FIA2G1pMYMCbBv7BXSSXOgeDcry im8THs+bDHFyp3k/O6fhwlhlpjjZYWncylnwTpttNQg68Y4csNgU2HG0SwJKkG64 -----END CERTIFICATE-----Generated at Mon Aug 10 16:32:04 2026 by rpki-client