$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/d953b731-7921-47dd-abf3-b7b8cc367900.roa File: d953b731-7921-47dd-abf3-b7b8cc367900.roa (raw, json) Hash identifier: 5sdZchZ9b8aSmuGueMOFRBbV7e90xtd+L0+oJr39aZ8= Subject key identifier: 7F:47:00:3B:A6:FA:77:29:09:55:47:0D:31:F7:B3:8C:D2:F7:7A:94 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 2DB67E9B92199EF0747EE7E42B75570A8948394E Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/d953b731-7921-47dd-abf3-b7b8cc367900.roa Signing time: Mon 03 Aug 2026 00:00:05 +0000 ROA not before: Mon 03 Aug 2026 00:00:05 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 122.248.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b6:7e:9b:92:19:9e:f0:74:7e:e7:e4:2b:75:57:0a:89:48:39:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:05 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=196e8ce1d30329960a0976182097f01503d9e598cfa03efb9f24a5875cc319ab, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:84:eb:32:48:3a:7a:fb:08:57:46:4b:72: d9:ad:22:e9:db:89:cf:79:c9:0b:eb:f5:ad:e1:d5: 86:71:fc:ae:ac:b1:b4:c8:03:ca:10:cd:6b:23:5a: 86:c1:41:1e:55:f1:93:a5:35:e4:d0:b6:bc:5c:c5: b8:94:26:97:86:d0:3e:b4:fc:4e:c6:8f:a3:ba:f6: e1:47:66:2d:f6:09:25:05:8f:b1:35:31:84:7a:16: 4d:a7:41:8c:f6:15:e1:09:4f:ed:f3:bb:0b:f8:49: 0c:d9:78:c5:13:06:5e:8e:d1:04:cc:38:8a:c1:0b: d8:84:03:d6:3c:7d:6e:12:0f:70:81:4c:37:fc:11: ad:07:51:61:49:59:c1:75:9f:d8:aa:21:b8:0f:79: fb:72:7c:4d:5f:a6:a7:a9:2a:19:f8:1e:e0:cc:68: 96:d6:99:ea:67:c9:cc:3e:4e:68:50:a0:43:b7:9c: 7f:f8:d6:4b:0d:23:79:ef:c9:3b:10:d1:be:78:f6: 2a:7b:ae:f5:e0:a9:d4:e9:89:1e:59:3c:0f:ec:94: a3:e2:4c:d9:ad:9f:30:76:48:ec:df:a8:26:34:a9: cd:36:7d:72:be:52:dd:0f:95:a8:7c:6d:b8:db:5c: 22:45:be:d2:01:e6:c6:f1:64:3a:4e:14:97:31:ad: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:47:00:3B:A6:FA:77:29:09:55:47:0D:31:F7:B3:8C:D2:F7:7A:94 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/d953b731-7921-47dd-abf3-b7b8cc367900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.192.0/18 Signature Algorithm: sha256WithRSAEncryption e1:bb:29:6c:e9:37:4b:98:f1:5c:fc:76:d6:5b:9e:07:63:2f: 02:11:da:b5:3b:64:6c:37:1b:d6:51:b6:56:db:37:8e:58:50: 90:53:9f:b4:0d:1a:07:e7:00:48:71:5e:4d:c6:3e:2d:9e:30: eb:59:3d:81:1b:36:28:0b:f2:60:02:f3:2f:7c:07:db:a0:6e: 29:cf:fa:4d:48:52:cf:16:85:87:02:74:cf:6c:59:91:cd:b6: 36:a0:ef:bc:e8:8e:ea:c5:b9:14:17:38:e9:f4:ef:42:2f:15: a4:45:b7:0f:b4:54:2a:5f:07:55:28:9e:27:18:39:64:81:38: e3:6f:48:92:21:37:3d:f5:22:4d:48:ad:e7:22:37:61:29:d1: bf:4a:94:f0:6d:47:4b:0e:44:08:73:d1:3d:1e:e5:a3:ef:95: 47:4a:1d:86:4f:b6:c6:b8:63:fe:90:90:fb:67:93:79:ec:0d: 31:50:f4:ac:cf:14:f6:f9:c7:33:89:24:f7:7b:ac:a0:cd:75: 09:a2:56:21:c6:3c:40:e5:4e:73:c1:6e:1f:5c:a2:1d:09:87: 1a:6d:a6:5d:dd:b5:4e:a5:5a:26:0b:04:dc:16:b4:c4:4d:0d: 3b:76:8e:71:5b:10:b0:69:d4:6d:d2:fa:98:44:c0:7d:68:bb: 50:0d:23:81 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIULbZ+m5IZnvB0fufkK3VXColIOU4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAwNVoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAMTk2ZThjZTFkMzAzMjk5NjBhMDk3 NjE4MjA5N2YwMTUwM2Q5ZTU5OGNmYTAzZWZiOWYyNGE1ODc1Y2MzMTlhYjEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyWE6zJIOnr7CFdGS3LZrSLp24nP eckL6/Wt4dWGcfyurLG0yAPKEM1rI1qGwUEeVfGTpTXk0La8XMW4lCaXhtA+tPxO xo+juvbhR2Yt9gklBY+xNTGEehZNp0GM9hXhCU/t87sL+EkM2XjFEwZejtEEzDiK wQvYhAPWPH1uEg9wgUw3/BGtB1FhSVnBdZ/YqiG4D3n7cnxNX6anqSoZ+B7gzGiW 1pnqZ8nMPk5oUKBDt5x/+NZLDSN578k7ENG+ePYqe6714KnU6YkeWTwP7JSj4kzZ rZ8wdkjs36gmNKnNNn1yvlLdD5WofG2421wiRb7SAebG8WQ6ThSXMa1l/QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFH9HADum+ncpCVVHDTH3s4zS93qUMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 L2Q5NTNiNzMxLTc5MjEtNDdkZC1hYmYzLWI3YjhjYzM2NzkwMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGevjAMA0GCSqGSIb3DQEBCwUAA4IBAQDhuyls6TdLmPFc/HbWW54H Yy8CEdq1O2RsNxvWUbZW2zeOWFCQU5+0DRoH5wBIcV5Nxj4tnjDrWT2BGzYoC/Jg AvMvfAfboG4pz/pNSFLPFoWHAnTPbFmRzbY2oO+86I7qxbkUFzjp9O9CLxWkRbcP tFQqXwdVKJ4nGDlkgTjjb0iSITc99SJNSK3nIjdhKdG/SpTwbUdLDkQIc9E9HuWj 75VHSh2GT7bGuGP+kJD7Z5N57A0xUPSszxT2+ccziST3e6ygzXUJolYhxjxA5U5z wW4fXKIdCYcabaZd3bVOpVomCwTcFrTETQ07do5xWxCwadRt0vqYRMB9aLtQDSOB -----END CERTIFICATE-----Generated at Mon Aug 10 16:33:47 2026 by rpki-client