$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/05bc8dbb-c70a-48da-b45b-4448364614ff.roa File: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (raw, json) Hash identifier: lY4T+SAC/eq1lqcLwr6+duWXCWoI/25yj9GloUcLqnc= Subject key identifier: 10:D4:DC:57:A9:D2:38:8A:DA:2C:CB:F2:A4:69:F2:80:25:73:9D:48 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 39C344A8E28B2CDD14022EC3A908E860E25449DD Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/05bc8dbb-c70a-48da-b45b-4448364614ff.roa Signing time: Mon 03 Aug 2026 00:00:27 +0000 ROA not before: Mon 03 Aug 2026 00:00:27 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c3:44:a8:e2:8b:2c:dd:14:02:2e:c3:a9:08:e8:60:e2:54:49:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:27 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=5fa065c892a54cf899757281037c3c19254b2ab6fa6c6c109a4517f7ac3a277e, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fe:af:a5:3e:b4:cf:11:42:99:af:cf:d2:8f: 28:92:f7:99:72:2d:d9:04:93:71:71:63:cd:2f:24: c9:30:66:cd:16:ec:b5:ec:6d:97:28:d0:5d:73:04: 31:2b:cc:bc:73:f1:d1:c4:05:d1:c0:e7:49:ab:ad: 96:8d:eb:cd:f6:10:b7:3a:8a:61:c5:19:22:9f:11: 9f:2f:c7:b1:39:46:d0:e0:a6:f1:14:20:cb:93:7e: 84:fc:69:78:87:52:ea:48:6e:99:4d:cb:1b:fe:77: b9:e3:1b:55:bf:c0:9d:c9:92:b7:9d:ae:84:9b:70: d3:13:68:65:3f:11:24:4e:60:ea:ed:87:8f:81:3e: 92:cf:63:9b:45:7e:7c:f0:58:cf:92:d0:a5:a3:c0: e3:8b:01:04:10:e4:62:bc:fd:f1:5e:ed:29:99:53: 75:bb:b4:6a:48:e8:b7:60:24:c8:fa:22:39:cf:52: f7:bc:db:9b:2d:5e:cd:0e:51:a8:24:16:01:ec:bd: dc:d4:fd:5c:02:54:b5:6c:ba:ea:f1:54:69:d2:b9: 9e:c5:75:f2:22:74:4a:4a:ea:e7:e0:dd:11:c4:44: ce:5d:3d:e9:9b:1b:23:e3:17:a8:8e:11:dd:18:f3: 93:21:66:b8:87:90:0d:13:62:06:0f:54:38:34:96: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D4:DC:57:A9:D2:38:8A:DA:2C:CB:F2:A4:69:F2:80:25:73:9D:48 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/05bc8dbb-c70a-48da-b45b-4448364614ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.208.0/20 Signature Algorithm: sha256WithRSAEncryption 34:07:88:1c:52:90:f5:a3:18:2b:6d:1c:71:e4:9e:b4:c5:f8: 8a:28:14:76:22:35:17:b8:e3:a4:41:30:0e:fc:ab:7b:01:18: 71:42:2b:78:88:74:6c:d7:8e:8e:b6:76:98:04:d3:1c:4e:5b: 82:50:3c:7f:b7:bc:ab:ce:14:f0:0b:69:b1:ea:d9:a0:a9:b2: 42:e9:ac:af:7d:87:6d:e8:cd:8a:b0:2d:47:5b:44:91:d6:e8: e7:d7:91:75:1a:5d:ac:45:67:68:86:51:42:ee:31:f1:ce:94: a2:f3:f0:b1:c7:3c:87:08:e9:53:12:22:53:57:cd:9c:4e:10: db:de:a6:c7:25:a0:c0:db:d5:06:67:bb:4d:d4:ad:5f:34:48: 2b:0e:3f:56:4a:de:ef:de:3a:d4:a5:68:2d:13:00:80:fc:06: 6b:4e:f4:f2:15:c9:dd:8e:2d:73:30:a4:7b:fa:b9:28:b6:0d: 64:05:0c:37:54:f8:42:ee:fe:bc:0f:b4:cc:0f:cc:78:c9:9a: 85:9f:0b:56:85:8c:5a:61:e2:65:21:03:33:12:e0:1a:71:a7: 70:3e:a2:df:62:7a:29:5c:04:b2:8b:4c:9a:2e:db:e8:b4:1f: 10:ec:22:3f:7b:44:49:2e:09:f4:d0:84:38:b0:06:e8:7e:3b: c3:01:cc:93 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUOcNEqOKLLN0UAi7DqQjoYOJUSd0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyN1oX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNANWZhMDY1Yzg5MmE1NGNmODk5NzU3 MjgxMDM3YzNjMTkyNTRiMmFiNmZhNmM2YzEwOWE0NTE3ZjdhYzNhMjc3ZTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf6vpT60zxFCma/P0o8okveZci3Z BJNxcWPNLyTJMGbNFuy17G2XKNBdcwQxK8y8c/HRxAXRwOdJq62WjevN9hC3Ooph xRkinxGfL8exOUbQ4KbxFCDLk36E/Gl4h1LqSG6ZTcsb/ne54xtVv8CdyZK3na6E m3DTE2hlPxEkTmDq7YePgT6Sz2ObRX588FjPktClo8DjiwEEEORivP3xXu0pmVN1 u7RqSOi3YCTI+iI5z1L3vNubLV7NDlGoJBYB7L3c1P1cAlS1bLrq8VRp0rmexXXy InRKSurn4N0RxETOXT3pmxsj4xeojhHdGPOTIWa4h5ANE2IGD1Q4NJbIVQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFBDU3Fep0jiK2izL8qRp8oAlc51IMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzA1YmM4ZGJiLWM3MGEtNDhkYS1iNDViLTQ0NDgzNjQ2MTRmZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQErynQMA0GCSqGSIb3DQEBCwUAA4IBAQA0B4gcUpD1oxgrbRxx5J60 xfiKKBR2IjUXuOOkQTAO/Kt7ARhxQit4iHRs146OtnaYBNMcTluCUDx/t7yrzhTw C2mx6tmgqbJC6ayvfYdt6M2KsC1HW0SR1ujn15F1Gl2sRWdohlFC7jHxzpSi8/Cx xzyHCOlTEiJTV82cThDb3qbHJaDA29UGZ7tN1K1fNEgrDj9WSt7v3jrUpWgtEwCA /AZrTvTyFcndji1zMKR7+rkotg1kBQw3VPhC7v68D7TMD8x4yZqFnwtWhYxaYeJl IQMzEuAacadwPqLfYnopXASyi0yaLtvotB8Q7CI/e0RJLgn00IQ4sAbofjvDAcyT -----END CERTIFICATE-----Generated at Sat Sep 5 08:43:53 2026 by rpki-client