$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/8c170584-7c9b-414b-8cba-a934a0a79bbe.roa File: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (raw, json) Hash identifier: 0t6pw1zjlgZY+wZ5e82TOOsu+qUa1YX5mTwb6oXX8HM= Subject key identifier: 78:26:EE:83:D5:9E:9C:C4:25:5A:28:52:55:DC:D7:E0:C6:5D:6E:51 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 233C2E74783710E235804A740A1F02399D4833F7 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/8c170584-7c9b-414b-8cba-a934a0a79bbe.roa Signing time: Tue 04 Aug 2026 00:00:42 +0000 ROA not before: Tue 04 Aug 2026 00:00:42 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6500:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:3c:2e:74:78:37:10:e2:35:80:4a:74:0a:1f:02:39:9d:48:33:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 4 00:00:42 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=3a5879840483d51972969c8d4663f608fb370a540feadb7f7d438c66cde41ef9, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:99:11:76:5f:9c:8e:31:33:dd:ce:6e:a9: 14:5d:04:13:26:f6:5d:1f:8a:a9:1f:f9:74:b9:7d: 05:98:93:64:d6:fa:7b:13:a0:d1:70:c1:f9:db:14: c4:f1:45:3a:6d:63:8e:64:1d:e8:d0:05:8b:0e:82: 08:de:7f:d5:61:41:ce:77:a7:9e:5f:25:67:4a:e3: 99:3f:77:3f:9d:d3:94:59:27:2b:3d:df:f4:22:aa: 7d:85:68:aa:38:be:a3:e3:e5:5a:32:5b:98:56:e6: e2:1d:6f:c4:d6:99:c9:bb:58:fb:6f:a3:a8:8a:f9: 92:1d:cd:40:06:55:da:48:5d:22:56:75:eb:ff:fb: 20:d6:a6:7e:a6:7a:0f:b3:40:3e:08:f3:e9:e9:fe: 0e:ae:e9:59:95:b4:9b:a8:7a:5c:4b:5f:9c:f1:ef: bb:72:28:4e:ba:ca:9b:7c:ee:96:9f:4f:1a:a0:82: 31:03:b6:e1:2b:4b:76:ad:dd:ce:e2:25:ea:d1:5d: b3:dc:03:48:4e:62:53:fc:f3:32:1e:f1:81:99:71: 37:c7:5b:02:19:90:4f:26:e3:1f:5c:31:3d:6a:76: 29:78:12:3b:7f:89:01:26:17:3a:aa:9c:1f:6b:c3: fa:92:5c:d5:d2:e8:b9:08:ca:d4:3f:ca:76:61:ce: 1f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:26:EE:83:D5:9E:9C:C4:25:5A:28:52:55:DC:D7:E0:C6:5D:6E:51 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/8c170584-7c9b-414b-8cba-a934a0a79bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6500:4000::/48 Signature Algorithm: sha256WithRSAEncryption 72:b6:f3:58:4b:34:53:fb:28:4a:43:34:03:f5:6d:a5:91:a9: 42:1a:52:f9:22:f5:e4:71:fb:dd:ac:98:30:4a:e9:11:09:9f: 98:79:6f:5c:bf:4b:c3:65:af:ad:9c:e8:8f:95:74:ab:aa:20: 68:eb:76:7f:2b:4e:e8:69:5e:1e:a7:81:9f:87:31:ee:90:c1: b6:c7:0d:69:2a:25:10:b4:55:b5:50:af:f9:65:9a:c8:2f:2f: c9:0c:8e:1f:5a:81:eb:ba:a4:46:3d:83:ad:ef:58:1a:aa:05: 40:12:65:da:79:90:b7:ba:43:3a:f8:fa:5e:ba:aa:b6:9b:35: e6:ca:38:24:49:28:d5:d6:56:44:cc:88:31:59:b4:45:f8:1a: 2a:40:2d:3b:c8:63:0f:33:a1:38:80:03:7c:e9:2a:c6:0e:56: 5d:49:49:43:da:85:bb:ed:8d:1e:57:f1:8f:b7:27:1e:2a:2f: c5:34:ce:0c:f3:e3:54:59:a6:72:68:4e:7e:81:60:f3:8d:e0: a1:48:f7:b6:00:eb:a6:bb:a3:ff:83:1b:42:58:0f:95:0f:b9: ed:5b:83:a2:6d:1b:81:3a:e7:df:aa:a3:ad:c4:21:ab:e0:63: 20:d3:94:a8:dc:62:ae:5a:3d:9a:4f:1f:dc:32:f5:5b:4f:cd: de:20:93:51 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIzwudHg3EOI1gEp0Ch8COZ1IM/cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwNDAwMDA0MloX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAM2E1ODc5ODQwNDgzZDUxOTcyOTY5 YzhkNDY2M2Y2MDhmYjM3MGE1NDBmZWFkYjdmN2Q0MzhjNjZjZGU0MWVmOTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVWZEXZfnI4xM93ObqkUXQQTJvZd H4qpH/l0uX0FmJNk1vp7E6DRcMH52xTE8UU6bWOOZB3o0AWLDoII3n/VYUHOd6ee XyVnSuOZP3c/ndOUWScrPd/0Iqp9hWiqOL6j4+VaMluYVubiHW/E1pnJu1j7b6Oo ivmSHc1ABlXaSF0iVnXr//sg1qZ+pnoPs0A+CPPp6f4OrulZlbSbqHpcS1+c8e+7 cihOusqbfO6Wn08aoIIxA7bhK0t2rd3O4iXq0V2z3ANITmJT/PMyHvGBmXE3x1sC GZBPJuMfXDE9anYpeBI7f4kBJhc6qpwfa8P6klzV0ui5CMrUP8p2Yc4fxQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHgm7oPVnpzEJVooUlXc1+DGXW5RMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzhjMTcwNTg0LTdjOWItNDE0Yi04Y2JhLWE5MzRhMGE3OWJiZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJABlAEAAMA0GCSqGSIb3DQEBCwUAA4IBAQBytvNYSzRT+yhKQzQD 9W2lkalCGlL5IvXkcfvdrJgwSukRCZ+YeW9cv0vDZa+tnOiPlXSrqiBo63Z/K07o aV4ep4GfhzHukMG2xw1pKiUQtFW1UK/5ZZrILy/JDI4fWoHruqRGPYOt71gaqgVA EmXaeZC3ukM6+Ppeuqq2mzXmyjgkSSjV1lZEzIgxWbRF+BoqQC07yGMPM6E4gAN8 6SrGDlZdSUlD2oW77Y0eV/GPtyceKi/FNM4M8+NUWaZyaE5+gWDzjeChSPe2AOum u6P/gxtCWA+VD7ntW4OibRuBOuffqqOtxCGr4GMg05So3GKuWj2aTx/cMvVbT83e IJNR -----END CERTIFICATE-----Generated at Mon Aug 10 16:35:01 2026 by rpki-client