$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/fcc4293c-b24f-4fac-9395-546f748b3b13.roa File: fcc4293c-b24f-4fac-9395-546f748b3b13.roa (raw, json) Hash identifier: XZn4tKWd5VK0gFJYisxAbi9cwhbs2edw7KfNkPKgyno= Subject key identifier: C3:18:2D:F7:09:18:53:64:8D:59:9C:15:5A:AA:AD:DD:07:B7:CC:83 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 0E30D9A0ECAB9B8197CADEB429E454010C4DB183 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/fcc4293c-b24f-4fac-9395-546f748b3b13.roa Signing time: Tue 04 Aug 2026 00:00:32 +0000 ROA not before: Tue 04 Aug 2026 00:00:32 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 00:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:30:d9:a0:ec:ab:9b:81:97:ca:de:b4:29:e4:54:01:0c:4d:b1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:32 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=7cbf70a8d194470f5a09e0d921dafd45e65127a9fcac0dd3b4850dc6f2a8157d, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:b4:4c:7f:31:44:8d:8e:78:7e:f6:2f:ba: 9b:96:a1:f6:00:18:95:9d:3f:21:ec:57:0d:03:16: 87:7b:0b:6a:98:f2:a3:4f:9a:6c:33:98:e8:8e:8d: e1:11:87:7b:39:c1:56:64:0c:13:b0:87:96:ce:c3: 69:14:95:74:34:3d:15:5f:e1:a9:01:f1:59:4b:3d: 72:1b:da:2c:e7:a8:52:ee:39:68:1f:42:a2:dd:e4: 8f:fe:e0:89:50:ad:12:54:7c:80:ff:c6:3d:3a:ad: 0c:41:2d:d5:5a:47:01:c6:02:6a:79:ea:7b:2f:97: fb:57:02:0a:d9:ef:77:ff:64:bf:43:be:e9:dc:05: 83:77:10:96:88:f0:6a:7f:26:af:c5:eb:7c:17:ef: a5:94:41:28:e1:3b:9a:98:5d:9c:45:7e:03:0d:9b: c1:27:fe:e9:b2:45:4f:1c:e9:98:df:92:42:d2:77: 51:e8:95:94:16:ce:89:b0:86:e8:92:45:28:20:27: fd:ee:57:9e:00:f1:30:56:2e:30:f7:da:68:93:42: 62:8a:09:ef:51:07:27:68:40:4b:78:cb:ac:d4:44: 0e:49:22:28:6a:c7:99:e7:b2:b8:fb:c8:38:21:1a: d8:2d:22:27:70:c1:a7:8b:05:4f:cd:01:20:af:8e: b3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:18:2D:F7:09:18:53:64:8D:59:9C:15:5A:AA:AD:DD:07:B7:CC:83 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/fcc4293c-b24f-4fac-9395-546f748b3b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018::/38 Signature Algorithm: sha256WithRSAEncryption 83:d4:d4:69:47:ed:a8:63:5a:ea:84:3e:48:8d:e1:f6:1e:5f: 53:91:94:dd:60:49:62:64:1f:19:44:6b:51:f4:99:a1:22:0c: ac:d3:dc:a4:10:5a:61:09:fe:64:64:82:26:4f:49:3c:4d:4a: a7:60:92:40:40:3b:fd:e6:40:e2:ca:9e:a5:c9:eb:2a:9e:cb: 40:a6:a0:cc:91:5d:ed:a5:5d:b6:a1:d5:77:cc:02:50:1b:51: c6:5f:c1:d1:2d:5c:86:4a:54:5d:bc:a3:e3:2c:f0:8c:62:10: 4d:95:2c:7a:1d:ca:35:d2:2c:ab:d5:ed:47:5c:99:11:74:76: cc:73:dd:4f:d6:0d:8d:13:cc:84:0b:12:33:b5:9c:a7:e5:8b: 57:0b:54:91:a2:a2:11:ec:de:39:9d:81:53:9e:5f:f9:97:a1: b3:c1:90:ee:63:1a:84:16:3a:a6:6a:ef:70:9a:5c:e4:b4:8e: 58:29:ad:a2:c4:19:08:e2:ef:b0:0e:a8:ac:be:5a:f8:6c:eb: 60:c5:d0:2c:02:aa:17:e2:b9:3e:23:48:b0:d9:d7:fe:8c:0a: 4a:e1:ad:41:6c:65:1b:c7:47:70:61:5f:a7:58:cb:07:21:6e: 9d:fd:9c:14:f3:b4:40:5e:f5:d8:4a:b2:5b:96:e7:bd:33:2f: 57:68:3f:f0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDjDZoOyrm4GXyt60KeRUAQxNsYMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAzMloX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAN2NiZjcwYThkMTk0NDcwZjVhMDll MGQ5MjFkYWZkNDVlNjUxMjdhOWZjYWMwZGQzYjQ4NTBkYzZmMmE4MTU3ZDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArri0TH8xRI2OeH72L7qblqH2ABiV nT8h7FcNAxaHewtqmPKjT5psM5jojo3hEYd7OcFWZAwTsIeWzsNpFJV0ND0VX+Gp AfFZSz1yG9os56hS7jloH0Ki3eSP/uCJUK0SVHyA/8Y9Oq0MQS3VWkcBxgJqeep7 L5f7VwIK2e93/2S/Q77p3AWDdxCWiPBqfyavxet8F++llEEo4TuamF2cRX4DDZvB J/7pskVPHOmY35JC0ndR6JWUFs6JsIbokkUoICf97leeAPEwVi4w99pok0Jiignv UQcnaEBLeMus1EQOSSIoaseZ57K4+8g4IRrYLSIncMGniwVPzQEgr46z8QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMMYLfcJGFNkjVmcFVqqrd0Ht8yDMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2ZjYzQyOTNjLWIyNGYtNGZhYy05Mzk1LTU0NmY3NDhiM2IxMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AGAAwDQYJKoZIhvcNAQELBQADggEBAIPU1GlH7ahjWuqEPkiN 4fYeX1ORlN1gSWJkHxlEa1H0maEiDKzT3KQQWmEJ/mRkgiZPSTxNSqdgkkBAO/3m QOLKnqXJ6yqey0CmoMyRXe2lXbah1XfMAlAbUcZfwdEtXIZKVF28o+Ms8IxiEE2V LHodyjXSLKvV7UdcmRF0dsxz3U/WDY0TzIQLEjO1nKfli1cLVJGiohHs3jmdgVOe X/mXobPBkO5jGoQWOqZq73CaXOS0jlgpraLEGQji77AOqKy+Wvhs62DF0CwCqhfi uT4jSLDZ1/6MCkrhrUFsZRvHR3BhX6dYywchbp39nBTztEBe9dhKsluW570zL1do P/A= -----END CERTIFICATE-----Generated at Tue Aug 11 09:27:10 2026 by rpki-client