$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa File: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (raw, json) Hash identifier: rVIJNgp4LBpEepxSDHvTh5KCpV25MUZbwVzCwpiejfs= Subject key identifier: E4:28:80:4D:98:B9:40:CC:5E:6F:CB:EA:F0:9C:FA:4C:EF:EE:7C:6D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 68B0C62DB30981D2F8EB4FEB4FFCA442157AC598 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa Signing time: Mon 03 Aug 2026 00:00:10 +0000 ROA not before: Mon 03 Aug 2026 00:00:10 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 122.248.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 00:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b0:c6:2d:b3:09:81:d2:f8:eb:4f:eb:4f:fc:a4:42:15:7a:c5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Aug 3 00:00:10 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=a9fb3629a49383e1847ad0fcee3d31a66bed1f941029059f45b8e536d46eea62, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:f2:b5:c0:b3:4e:8c:42:af:4c:11:58:85: c8:41:47:ef:21:5b:4b:57:03:37:b5:3b:7c:9f:fb: 4b:03:ce:02:a2:95:57:2d:a4:d5:e1:35:eb:5c:4d: c3:b9:f0:e7:b1:37:64:af:dd:4f:b0:e6:e5:7d:d9: 37:df:e1:55:62:72:51:35:7e:99:96:d3:f2:bd:bb: cc:c3:04:86:9d:cd:16:4e:4c:47:50:bb:76:f7:6a: 91:ec:24:60:86:e2:b4:a8:68:66:67:ca:9b:e1:69: aa:b6:89:4a:db:f7:81:37:ba:ba:5f:2d:46:ad:4d: dc:be:ae:4d:e6:fb:0f:0d:0c:61:33:63:81:f4:f7: 28:d2:84:37:47:40:23:23:d0:d3:cc:ec:6b:be:e4: de:88:1b:08:9f:6d:45:40:5d:fc:3f:39:21:1f:2b: 20:e4:39:71:b9:d0:3f:24:fc:b3:7f:a2:a4:ac:b6: 58:aa:f0:d4:1e:8d:d5:cb:7c:b5:4a:91:57:fc:e8: d0:f8:02:01:68:4c:78:29:35:ad:e8:41:de:85:0f: 80:10:d0:7d:56:c6:09:52:05:0d:e7:17:39:7e:dc: 84:c4:93:df:00:39:d8:45:8a:d7:91:6b:76:52:35: 9e:82:6c:91:40:ec:39:c2:e1:37:8b:ae:6b:f3:13: 48:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:28:80:4D:98:B9:40:CC:5E:6F:CB:EA:F0:9C:FA:4C:EF:EE:7C:6D X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.232.0/21 Signature Algorithm: sha256WithRSAEncryption 85:1f:51:40:b8:d6:23:eb:b3:23:68:e8:cb:07:bb:2b:ab:0d: 53:c4:c3:60:fa:7e:62:1d:96:af:18:ca:fe:6b:68:27:19:d7: c9:cd:83:33:14:51:8b:40:ab:e3:09:fb:4e:e6:ac:1e:6a:7a: 6f:53:ef:1c:a5:ea:7a:cd:a8:0f:57:3e:b2:b6:cc:c8:20:bf: 07:a5:6e:da:54:27:9f:53:d5:10:ac:0e:9b:46:04:19:9e:3c: d9:7c:37:9a:24:b5:a5:f0:35:64:7b:2b:47:ea:31:be:fd:2c: 1b:75:e4:e1:a9:5f:9d:04:df:03:2f:35:b1:35:9b:1b:47:7d: e1:cb:8d:b8:ae:a2:69:25:62:9c:ca:8b:fb:9e:d8:5b:83:b3: 15:cc:c7:05:00:ba:dc:d4:a9:dd:fd:65:f0:f6:f5:db:63:50: 29:19:a3:50:d0:06:b5:af:5a:dd:51:73:5d:c5:83:4b:9c:4c: 87:3a:b2:dd:56:97:55:48:c5:cb:36:f3:7e:bb:a6:28:c0:d4: 06:2f:e4:13:0c:07:95:44:8c:09:ab:f9:30:a7:38:81:52:be: 3b:38:11:6e:96:65:2b:f5:31:02:e0:1e:e3:9e:d6:75:a0:59: 2a:0e:68:4c:f7:a3:90:53:54:1c:49:b8:70:54:92:22:36:d5: 0e:5d:ce:d4 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUaLDGLbMJgdL460/rT/ykQhV6xZgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDgwMzAwMDAxMFoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAYTlmYjM2MjlhNDkzODNlMTg0N2Fk MGZjZWUzZDMxYTY2YmVkMWY5NDEwMjkwNTlmNDViOGU1MzZkNDZlZWE2MjEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmTytcCzToxCr0wRWIXIQUfvIVtL VwM3tTt8n/tLA84CopVXLaTV4TXrXE3DufDnsTdkr91PsOblfdk33+FVYnJRNX6Z ltPyvbvMwwSGnc0WTkxHULt292qR7CRghuK0qGhmZ8qb4WmqtolK2/eBN7q6Xy1G rU3cvq5N5vsPDQxhM2OB9Pco0oQ3R0AjI9DTzOxrvuTeiBsIn21FQF38PzkhHysg 5DlxudA/JPyzf6KkrLZYqvDUHo3Vy3y1SpFX/OjQ+AIBaEx4KTWt6EHehQ+AENB9 VsYJUgUN5xc5ftyExJPfADnYRYrXkWt2UjWegmyRQOw5wuE3i65r8xNItQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOQogE2YuUDMXm/L6vCc+kzv7nxtMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 L2UzMmM5Y2JkLWEyNDEtNGRmNi05OWJiLWU3ZDE1YWJlNGIzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDevjoMA0GCSqGSIb3DQEBCwUAA4IBAQCFH1FAuNYj67MjaOjLB7sr qw1TxMNg+n5iHZavGMr+a2gnGdfJzYMzFFGLQKvjCftO5qweanpvU+8cpep6zagP Vz6ytszIIL8HpW7aVCefU9UQrA6bRgQZnjzZfDeaJLWl8DVkeytH6jG+/SwbdeTh qV+dBN8DLzWxNZsbR33hy424rqJpJWKcyov7nthbg7MVzMcFALrc1Knd/WXw9vXb Y1ApGaNQ0Aa1r1rdUXNdxYNLnEyHOrLdVpdVSMXLNvN+u6YowNQGL+QTDAeVRIwJ q/kwpziBUr47OBFulmUr9TEC4B7jntZ1oFkqDmhM96OQU1QcSbhwVJIiNtUOXc7U -----END CERTIFICATE-----Generated at Mon Aug 10 16:32:08 2026 by rpki-client