$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/adf75e2e-9d2c-4718-a49d-ad44079b266b.roa File: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (raw, json) Hash identifier: 7XgAJ+gr6KA0su8xucLdioVeQG9tOsLX2BCpy2wbklo= Subject key identifier: 31:FD:5E:F1:F2:BC:BF:CE:C2:F3:90:9D:4E:DD:52:F0:BE:5B:09:C9 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 0F6D34192B2638CE7459DA02D00B28B171C9191F Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/adf75e2e-9d2c-4718-a49d-ad44079b266b.roa Signing time: Mon 03 Aug 2026 00:00:11 +0000 ROA not before: Mon 03 Aug 2026 00:00:11 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6d:34:19:2b:26:38:ce:74:59:da:02:d0:0b:28:b1:71:c9:19:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:11 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=60e60964c898855bd7c127af6610bf0ccb831abc0fc87f37107dc9ede3c9fab3, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0d:d3:4b:0e:cf:d3:f2:3c:a2:99:44:99:6f: 91:4d:c2:09:0c:04:f6:cd:89:0b:e2:e9:7d:cb:35: 0f:fb:4f:1f:91:e2:63:1b:9c:20:75:d9:09:8e:88: 0d:a0:5c:55:e1:2e:ab:df:03:6b:60:d8:1e:d8:3a: 52:95:88:a9:0d:5d:aa:eb:e9:5e:27:6c:21:88:3f: 59:be:35:89:31:2f:b3:a7:58:94:f8:38:dd:de:9c: c1:2e:4f:59:80:51:d9:e9:6e:3a:5b:14:17:c6:bc: aa:7f:fc:81:03:30:04:73:ec:2f:99:b2:8a:2d:0a: 94:ce:34:ca:35:ac:48:c0:f9:85:82:e5:71:1a:8c: 1a:03:81:ee:8e:d5:ac:9e:4f:3d:8e:4a:df:f2:d7: e4:33:5c:a6:8d:38:91:a9:bc:8c:6f:73:5a:5b:a1: 6a:67:20:56:4e:d3:4b:90:fe:91:94:cc:ba:9a:3d: ca:fc:af:8a:83:70:0c:49:83:43:5e:1c:8f:d0:3b: 1d:79:3c:ed:3f:c5:b6:4f:ea:e8:5b:07:8a:f2:fa: c3:82:43:43:73:9d:fa:47:70:e4:ed:98:80:15:08: b6:0a:1a:49:71:af:ed:64:e5:58:28:a4:ba:04:5b: 16:0e:2a:4e:0e:78:de:e9:d0:9b:48:4d:36:a0:1b: ef:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FD:5E:F1:F2:BC:BF:CE:C2:F3:90:9D:4E:DD:52:F0:BE:5B:09:C9 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/adf75e2e-9d2c-4718-a49d-ad44079b266b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.152.0/21 Signature Algorithm: sha256WithRSAEncryption f6:11:af:0d:6e:87:26:7e:ad:de:db:b7:29:4e:e5:72:0a:bb: b2:80:b1:ef:8f:fc:fd:33:11:3e:43:b7:c6:1e:ea:8c:80:97: f2:10:34:c5:ba:c0:52:b3:18:2f:ff:48:8c:3c:d6:51:d8:8c: 6a:30:72:ad:99:65:39:3e:91:c1:f4:2a:7a:ef:14:c1:f2:29: ba:c6:4d:bd:1c:34:d2:8d:17:5a:37:0d:a8:4f:6b:12:68:d2: 5d:5f:c5:01:59:ca:22:81:b7:a0:b9:60:f7:78:ad:6f:c9:15: cc:44:82:7f:9f:d8:f0:50:92:40:25:8a:75:1b:a7:d2:f1:a5: e9:2f:b5:27:ae:7f:44:3a:ac:c8:af:02:55:8d:a3:d2:42:81: ba:ae:20:0a:41:a0:c9:53:eb:b3:f6:7c:c9:c3:8f:fe:b7:40: ae:25:f4:53:59:89:c6:fc:23:e3:49:8e:6e:1b:7f:a0:81:a2: 2a:57:c2:ae:31:fc:9f:e9:c8:61:68:91:96:cf:1d:03:fe:36: df:d3:40:e0:d0:2b:37:fa:e5:be:50:39:1e:11:d0:d4:9d:f3: 53:4a:59:91:1f:70:09:91:9e:05:85:f9:55:a3:60:cb:d0:53: 71:86:1d:4a:77:42:19:07:38:2c:fd:f6:c4:8f:83:b4:aa:a8: f1:3e:5c:ab -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUD200GSsmOM50WdoC0AsosXHJGR8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAxMVoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNANjBlNjA5NjRjODk4ODU1YmQ3YzEy N2FmNjYxMGJmMGNjYjgzMWFiYzBmYzg3ZjM3MTA3ZGM5ZWRlM2M5ZmFiMzEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg3TSw7P0/I8oplEmW+RTcIJDAT2 zYkL4ul9yzUP+08fkeJjG5wgddkJjogNoFxV4S6r3wNrYNge2DpSlYipDV2q6+le J2whiD9ZvjWJMS+zp1iU+Djd3pzBLk9ZgFHZ6W46WxQXxryqf/yBAzAEc+wvmbKK LQqUzjTKNaxIwPmFguVxGowaA4HujtWsnk89jkrf8tfkM1ymjTiRqbyMb3NaW6Fq ZyBWTtNLkP6RlMy6mj3K/K+Kg3AMSYNDXhyP0DsdeTztP8W2T+roWweK8vrDgkND c536R3Dk7ZiAFQi2ChpJca/tZOVYKKS6BFsWDipODnje6dCbSE02oBvvuwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDH9XvHyvL/OwvOQnU7dUvC+WwnJMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 L2FkZjc1ZTJlLTlkMmMtNDcxOC1hNDlkLWFkNDQwNzliMjY2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDrymYMA0GCSqGSIb3DQEBCwUAA4IBAQD2Ea8Nbocmfq3e27cpTuVy CruygLHvj/z9MxE+Q7fGHuqMgJfyEDTFusBSsxgv/0iMPNZR2IxqMHKtmWU5PpHB 9Cp67xTB8im6xk29HDTSjRdaNw2oT2sSaNJdX8UBWcoigbeguWD3eK1vyRXMRIJ/ n9jwUJJAJYp1G6fS8aXpL7Unrn9EOqzIrwJVjaPSQoG6riAKQaDJU+uz9nzJw4/+ t0CuJfRTWYnG/CPjSY5uG3+ggaIqV8KuMfyf6chhaJGWzx0D/jbf00Dg0Cs3+uW+ UDkeEdDUnfNTSlmRH3AJkZ4FhflVo2DL0FNxhh1Kd0IZBzgs/fbEj4O0qqjxPlyr -----END CERTIFICATE-----Generated at Mon Aug 10 16:33:00 2026 by rpki-client