$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/0bf15d3f-c546-4bb6-a764-82165c384d37.roa File: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (raw, json) Hash identifier: pAUau9W2Q1n8bkWgMJqn69Gjg4QnMvogj11ziiAugt0= Subject key identifier: 87:9B:B6:92:F9:4F:DE:FF:1C:77:9D:85:93:9A:FB:C5:64:02:C5:79 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 14BAA26814EF318C77DAC86C9B7B725FAC68D9C7 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/0bf15d3f-c546-4bb6-a764-82165c384d37.roa Signing time: Mon 03 Aug 2026 00:00:20 +0000 ROA not before: Mon 03 Aug 2026 00:00:20 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ba:a2:68:14:ef:31:8c:77:da:c8:6c:9b:7b:72:5f:ac:68:d9:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:20 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=8920117e6dac66d97a1756fb79ace2c92f7dc7649bd5199f8d16e3e1421f6a7f, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:6c:5b:af:d4:b1:12:3a:c8:a6:b0:79:cd: 92:92:fb:19:02:51:12:a7:71:80:e7:86:86:63:63: c4:3b:0a:26:59:90:59:c8:ea:0e:9d:78:95:1b:25: 92:26:c3:51:48:5f:b5:06:ea:28:83:b3:17:7c:e8: 19:e6:ab:67:f4:a0:c3:72:e6:a9:2a:b6:b4:e0:1b: 5e:a7:34:36:21:11:b0:92:04:a5:13:ad:e2:85:ed: d4:bf:58:26:67:6c:88:13:f1:5a:15:a6:da:53:34: cc:81:7d:87:01:87:cf:47:e3:6c:de:8e:24:8a:5a: a3:73:23:51:40:13:14:1d:c0:34:e8:4e:79:01:a1: 09:a5:9c:10:cb:b8:55:c4:d8:9f:59:2c:0e:44:45: 02:8c:a9:8b:ea:b8:02:0a:ff:4a:10:d8:e3:b1:46: 0e:56:02:f0:ae:ea:2a:13:5a:f6:54:7f:39:e3:cc: d5:c9:fe:3d:34:b3:6c:ad:57:2b:33:0e:3c:68:7a: 21:c8:99:aa:d7:00:cc:eb:30:df:5f:a8:1a:4f:c2: 0b:6d:b1:74:b5:71:6b:0f:aa:f7:7e:fb:38:a7:5b: c7:a9:22:8e:52:e1:1e:50:41:f8:59:0c:bb:ec:d5: 4e:00:ed:3c:26:20:9c:f5:58:d9:e6:1f:b6:95:5f: 06:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9B:B6:92:F9:4F:DE:FF:1C:77:9D:85:93:9A:FB:C5:64:02:C5:79 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/0bf15d3f-c546-4bb6-a764-82165c384d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.200.0/21 Signature Algorithm: sha256WithRSAEncryption 94:b2:c1:03:5e:48:56:ba:e0:5b:ad:63:9b:4e:88:5a:3e:93: 4f:23:4f:a5:c5:3c:8a:63:73:a3:62:33:5b:61:ac:8a:12:1e: b3:76:77:21:69:64:d5:3e:e7:cf:5b:ad:d2:98:45:d9:37:f6: 5e:dc:29:81:34:ae:84:39:a0:72:04:9d:3f:dc:3c:0d:7a:8d: 49:14:09:4f:fc:22:99:bb:a7:1e:a0:56:26:d4:66:2b:0d:9b: a1:05:88:ca:9d:8b:e8:17:4c:fd:94:21:88:c4:cf:cb:70:98: 5a:cd:fd:e0:c2:a0:e9:63:ec:e2:5a:56:fd:8d:ae:8a:13:03: 7e:6d:bc:af:e2:78:3d:73:1f:44:6a:af:f7:4d:91:30:3c:85: a8:6c:02:01:53:f4:d7:b1:71:f1:e0:ad:89:eb:55:49:75:0e: 67:3e:fb:70:73:ed:b6:88:b0:d5:d2:93:14:ea:0f:f8:33:ce: fe:0a:ed:60:9c:81:81:17:44:4a:bd:47:cf:f3:bd:44:e0:50: 79:b0:71:d7:12:1d:c8:c7:e1:db:8f:2f:39:0c:b7:8b:af:de: 70:92:f4:8d:8e:d2:33:3c:ef:ea:d8:86:28:bf:06:8a:17:37: a0:ea:86:2b:5e:9e:2e:1a:5d:1a:f7:bf:41:56:5f:bf:f3:de: dd:97:87:ea -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUFLqiaBTvMYx32shsm3tyX6xo2ccwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyMFoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAODkyMDExN2U2ZGFjNjZkOTdhMTc1 NmZiNzlhY2UyYzkyZjdkYzc2NDliZDUxOTlmOGQxNmUzZTE0MjFmNmE3ZjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjZsW6/UsRI6yKawec2SkvsZAlES p3GA54aGY2PEOwomWZBZyOoOnXiVGyWSJsNRSF+1Buoog7MXfOgZ5qtn9KDDcuap Kra04BtepzQ2IRGwkgSlE63ihe3Uv1gmZ2yIE/FaFabaUzTMgX2HAYfPR+Ns3o4k ilqjcyNRQBMUHcA06E55AaEJpZwQy7hVxNifWSwOREUCjKmL6rgCCv9KENjjsUYO VgLwruoqE1r2VH8548zVyf49NLNsrVcrMw48aHohyJmq1wDM6zDfX6gaT8ILbbF0 tXFrD6r3fvs4p1vHqSKOUuEeUEH4WQy77NVOAO08JiCc9VjZ5h+2lV8G7QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFIebtpL5T97/HHedhZOa+8VkAsV5MB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzBiZjE1ZDNmLWM1NDYtNGJiNi1hNzY0LTgyMTY1YzM4NGQzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDrynIMA0GCSqGSIb3DQEBCwUAA4IBAQCUssEDXkhWuuBbrWObToha PpNPI0+lxTyKY3OjYjNbYayKEh6zdnchaWTVPufPW63SmEXZN/Ze3CmBNK6EOaBy BJ0/3DwNeo1JFAlP/CKZu6ceoFYm1GYrDZuhBYjKnYvoF0z9lCGIxM/LcJhazf3g wqDpY+ziWlb9ja6KEwN+bbyv4ng9cx9Eaq/3TZEwPIWobAIBU/TXsXHx4K2J61VJ dQ5nPvtwc+22iLDV0pMU6g/4M87+Cu1gnIGBF0RKvUfP871E4FB5sHHXEh3Ix+Hb jy85DLeLr95wkvSNjtIzPO/q2IYovwaKFzeg6oYrXp4uGl0a979BVl+/897dl4fq -----END CERTIFICATE-----Generated at Sat Sep 5 08:43:54 2026 by rpki-client