$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c759ed47-7de1-4858-b207-c77b1f7d2c35.roa File: c759ed47-7de1-4858-b207-c77b1f7d2c35.roa (raw, json) Hash identifier: 2vvyzr26ctLACiWBkdA99bMGWKSgUxZYVKOoT3Ov0Xw= Subject key identifier: 1F:08:6C:8C:CF:F9:0A:05:33:41:AC:10:81:7A:BC:D6:30:1E:6F:E2 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 618E8AF2ABAC4B5959AFD92D2DE69D83EB4C9A3F Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c759ed47-7de1-4858-b207-c77b1f7d2c35.roa Signing time: Mon 03 Aug 2026 00:10:14 +0000 ROA not before: Mon 03 Aug 2026 00:10:14 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 103.21.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Aug 2026 00:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8e:8a:f2:ab:ac:4b:59:59:af:d9:2d:2d:e6:9d:83:eb:4c:9a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 3 00:10:14 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=6047e8c0e0758af08d6aec501512749334b0b3f591a840db04dc928e83594108, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:98:ac:e2:2b:8f:28:37:74:45:f7:91:c7:69: e1:ec:61:20:08:89:4e:bf:df:4a:8f:3d:9b:41:e2: 18:ed:b9:26:3d:d8:83:43:c7:43:09:fd:81:00:f6: 38:53:6f:39:e3:84:2c:9a:90:55:ce:d8:a5:1b:71: c1:df:ba:ad:d2:39:0b:8a:e0:71:da:16:0c:13:2a: 97:10:07:b5:48:b1:bf:5a:e3:84:fc:b0:b7:c2:0b: 6e:38:ad:df:0c:c5:51:45:52:5e:5a:eb:54:2a:37: 77:9f:c0:6b:44:7a:5b:72:6c:a3:65:22:62:a1:1c: 8b:84:dd:55:07:ed:d4:0f:56:3b:88:bc:d2:88:3b: b8:80:ae:c3:d1:e7:a3:9d:a1:f4:56:39:58:d5:14: de:6f:b5:bb:f6:43:3e:22:1c:e7:f9:af:ec:ab:58: d7:3b:3c:c0:0c:04:74:bc:69:22:3a:7f:bc:29:f6: 43:b4:c3:3a:06:9b:d7:81:e8:c7:76:79:ef:53:20: d2:52:97:b7:8a:22:c1:7c:3a:16:95:44:60:80:22: bc:06:ae:11:10:40:f3:3d:fa:fb:de:c6:57:40:36: 22:6a:b0:8b:d6:d7:83:ab:cc:54:20:f7:e0:03:30: 2e:78:00:fe:40:06:85:66:6f:c3:6c:a7:e5:22:5e: ef:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:08:6C:8C:CF:F9:0A:05:33:41:AC:10:81:7A:BC:D6:30:1E:6F:E2 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c759ed47-7de1-4858-b207-c77b1f7d2c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.240.0/22 Signature Algorithm: sha256WithRSAEncryption 60:76:0e:7f:f8:b0:57:ee:b7:2d:38:84:4b:43:1d:65:9d:5b: c7:20:7b:51:21:0b:b4:e0:98:99:11:04:7b:68:7e:99:0c:41: 9e:3b:ca:c8:b7:e3:19:ac:4f:31:31:30:80:56:2b:25:51:f2: b5:da:a0:e8:e2:b5:e7:59:e5:27:d4:e1:0a:cf:ff:69:0a:16: 6a:64:cb:61:ee:db:73:cc:88:76:c1:b7:5b:84:36:d4:5b:eb: 1d:f0:85:a1:ac:92:2d:b8:5f:fe:31:95:05:19:64:59:e4:c6: 2f:55:9a:1d:42:e9:d3:d8:3e:0f:1e:67:ee:54:41:4f:3d:08: 01:d9:22:7b:02:f1:3f:30:0c:61:43:10:c9:ff:76:5c:57:e3: ac:3f:e9:ea:69:5e:49:b4:1d:69:c5:55:3c:ad:d8:7f:c2:e4: 3a:e1:3a:44:78:b0:81:b5:30:e5:5e:e2:ff:52:9a:1e:cc:cb: 0b:44:01:7c:5f:5b:ee:da:a9:39:d6:03:12:86:a9:b8:39:13: bc:8e:fd:a6:eb:1c:6c:45:20:b9:7e:31:7a:e0:09:1d:9e:a4: 2c:18:ca:d7:5a:5a:b3:0a:c6:63:a0:b9:e9:1e:2a:a0:5f:f1: d2:d9:bf:bf:a9:ea:fc:17:a0:45:e3:16:e8:12:fb:1f:6b:dc: 66:e2:44:b3 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUYY6K8qusS1lZr9ktLeadg+tMmj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwMzAwMTAxNFoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNANjA0N2U4YzBlMDc1OGFmMDhkNmFl YzUwMTUxMjc0OTMzNGIwYjNmNTkxYTg0MGRiMDRkYzkyOGU4MzU5NDEwODEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5is4iuPKDd0RfeRx2nh7GEgCIlO v99Kjz2bQeIY7bkmPdiDQ8dDCf2BAPY4U28544QsmpBVztilG3HB37qt0jkLiuBx 2hYMEyqXEAe1SLG/WuOE/LC3wgtuOK3fDMVRRVJeWutUKjd3n8BrRHpbcmyjZSJi oRyLhN1VB+3UD1Y7iLzSiDu4gK7D0eejnaH0VjlY1RTeb7W79kM+Ihzn+a/sq1jX OzzADAR0vGkiOn+8KfZDtMM6BpvXgejHdnnvUyDSUpe3iiLBfDoWlURggCK8Bq4R EEDzPfr73sZXQDYiarCL1teDq8xUIPfgAzAueAD+QAaFZm/DbKflIl7vjQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFB8IbIzP+QoFM0GsEIF6vNYwHm/iMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2M3NTllZDQ3LTdkZTEtNDg1OC1iMjA3LWM3N2IxZjdkMmMzNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZxXwMA0GCSqGSIb3DQEBCwUAA4IBAQBgdg5/+LBX7rctOIRLQx1l nVvHIHtRIQu04JiZEQR7aH6ZDEGeO8rIt+MZrE8xMTCAVislUfK12qDo4rXnWeUn 1OEKz/9pChZqZMth7ttzzIh2wbdbhDbUW+sd8IWhrJItuF/+MZUFGWRZ5MYvVZod QunT2D4PHmfuVEFPPQgB2SJ7AvE/MAxhQxDJ/3ZcV+OsP+nqaV5JtB1pxVU8rdh/ wuQ64TpEeLCBtTDlXuL/UpoezMsLRAF8X1vu2qk51gMShqm4ORO8jv2m6xxsRSC5 fjF64AkdnqQsGMrXWlqzCsZjoLnpHiqgX/HS2b+/qer8F6BF4xboEvsfa9xm4kSz -----END CERTIFICATE-----Generated at Mon Aug 3 23:33:44 2026 by rpki-client