$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/977f90e2-d257-4dde-9740-b0391458d8ed.roa File: 977f90e2-d257-4dde-9740-b0391458d8ed.roa (raw, json) Hash identifier: TSj91WEADX5QNsH7TroXK9tum4cw1dv5L2Y/CTsQ5YE= Subject key identifier: 6E:77:AE:53:92:9E:A3:33:4D:BD:66:31:F9:F5:18:05:91:A8:80:B3 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 201E67D0CAB7263AA89A7784E711B131F790DFE7 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/977f90e2-d257-4dde-9740-b0391458d8ed.roa Signing time: Mon 03 Aug 2026 00:10:20 +0000 ROA not before: Mon 03 Aug 2026 00:10:20 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8000::/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1e:67:d0:ca:b7:26:3a:a8:9a:77:84:e7:11:b1:31:f7:90:df:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 3 00:10:20 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=6ae6b8b4ebc8c34be89de702b9e66a60ebd05ed2cfaf09e3ef20b92db704b1c0, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ba:c2:50:16:ae:af:05:ba:3e:8e:d3:04:5f: 60:ac:c2:a1:e0:f0:7c:52:5e:85:93:ff:3f:c4:70: c2:09:9e:d7:11:2c:a0:62:1b:7a:06:53:85:54:1f: 83:e6:cc:78:02:70:b1:cc:90:f7:17:7b:8d:7e:96: 96:18:6f:c1:e1:a1:ea:06:18:65:17:bb:ae:78:57: 0a:81:8e:f2:ad:96:dd:b3:79:41:c6:32:e4:26:cc: 73:0f:58:cb:ec:3a:83:2c:39:d9:6a:3d:84:ef:f3: 63:8b:79:9f:fa:d9:dc:70:6a:32:db:48:94:42:56: dd:48:39:66:85:16:7f:ee:c9:2d:b7:7e:c2:7a:f4: 51:e5:45:db:ce:dc:c5:37:ad:ec:c7:d0:b9:a0:20: 9b:b4:8d:25:b6:94:60:bf:3a:71:c1:87:1d:39:a6: 3d:26:cd:98:75:2f:48:54:f0:9f:71:17:d6:12:aa: 26:f9:9e:af:d5:cf:12:4b:98:64:d3:3b:7f:e9:a8: 44:70:ff:0d:e1:97:3d:5f:7f:1d:02:dd:cd:eb:93: 0f:70:c0:43:1a:d6:5c:3b:4d:d9:53:4d:79:26:01: 13:14:dc:30:c0:5e:dd:33:01:f2:43:5b:5b:20:e3: 50:a5:1a:2e:1c:97:bb:fb:64:78:46:99:27:09:3e: 78:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:77:AE:53:92:9E:A3:33:4D:BD:66:31:F9:F5:18:05:91:A8:80:B3 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/977f90e2-d257-4dde-9740-b0391458d8ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8000::/24 Signature Algorithm: sha256WithRSAEncryption 4c:f7:ee:d9:12:71:52:aa:0b:31:7f:9d:98:d1:49:80:01:61: df:7b:88:b0:73:c6:f7:29:53:67:8d:e0:bd:ca:3a:eb:f8:85: 44:4d:00:d0:54:04:d1:06:4a:4a:08:2d:25:c3:66:45:42:c3: 5e:57:89:d1:16:8d:e8:f0:e6:b8:c3:c5:37:03:6d:0a:d8:94: f6:9e:99:78:f2:a1:6d:64:84:43:81:fd:20:98:43:90:13:3e: a4:8f:ae:4e:98:62:17:27:9f:3c:f8:a8:c0:d4:3a:0f:56:34: c3:fb:e4:78:28:da:fd:08:e0:05:02:d7:28:21:90:78:4d:3f: c8:8f:0d:06:9a:3c:df:03:d9:08:10:b5:5d:e9:e1:12:e7:15: 94:a6:61:c7:03:70:4b:1f:37:5f:65:ed:12:2b:d4:28:62:ef: b3:8f:e2:79:e3:66:79:fc:55:e3:96:2f:54:ff:03:ce:e1:ec: 5a:92:68:38:17:a7:61:d7:f7:71:99:d6:e9:be:22:bf:81:ef: 29:e3:b6:12:9e:7f:2e:62:27:90:0b:03:2c:37:2b:95:91:bb: c8:13:d9:5d:1c:d3:e4:2a:9e:14:44:ab:f6:7c:bd:1b:9d:9f: 0d:46:97:fe:27:6d:80:bc:51:e2:b4:eb:1e:44:18:9d:c9:62: 0a:ae:96:0e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUIB5n0Mq3JjqomneE5xGxMfeQ3+cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwMzAwMTAyMFoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNANmFlNmI4YjRlYmM4YzM0YmU4OWRl NzAyYjllNjZhNjBlYmQwNWVkMmNmYWYwOWUzZWYyMGI5MmRiNzA0YjFjMDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6brCUBaurwW6Po7TBF9grMKh4PB8 Ul6Fk/8/xHDCCZ7XESygYht6BlOFVB+D5sx4AnCxzJD3F3uNfpaWGG/B4aHqBhhl F7uueFcKgY7yrZbds3lBxjLkJsxzD1jL7DqDLDnZaj2E7/Nji3mf+tnccGoy20iU QlbdSDlmhRZ/7sktt37CevRR5UXbztzFN63sx9C5oCCbtI0ltpRgvzpxwYcdOaY9 Js2YdS9IVPCfcRfWEqom+Z6v1c8SS5hk0zt/6ahEcP8N4Zc9X38dAt3N65MPcMBD GtZcO03ZU015JgETFNwwwF7dMwHyQ1tbIONQpRouHJe7+2R4RpknCT542QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFG53rlOSnqMzTb1mMfn1GAWRqICzMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 Lzk3N2Y5MGUyLWQyNTctNGRkZS05NzQwLWIwMzkxNDU4ZDhlZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAAjAGAwQAJA+AMA0GCSqGSIb3DQEBCwUAA4IBAQBM9+7ZEnFSqgsxf52Y0UmA AWHfe4iwc8b3KVNnjeC9yjrr+IVETQDQVATRBkpKCC0lw2ZFQsNeV4nRFo3o8Oa4 w8U3A20K2JT2npl48qFtZIRDgf0gmEOQEz6kj65OmGIXJ588+KjA1DoPVjTD++R4 KNr9COAFAtcoIZB4TT/Ijw0GmjzfA9kIELVd6eES5xWUpmHHA3BLHzdfZe0SK9Qo Yu+zj+J542Z5/FXjli9U/wPO4exakmg4F6dh1/dxmdbpviK/ge8p47YSnn8uYieQ CwMsNyuVkbvIE9ldHNPkKp4URKv2fL0bnZ8NRpf+J22AvFHitOseRBidyWIKrpYO -----END CERTIFICATE-----Generated at Sat Aug 15 07:43:10 2026 by rpki-client