$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa File: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (raw, json) Hash identifier: Nti5XZ3SZ/5X5vml90GJptxj5wU4R5TflY4EtGcxI/E= Subject key identifier: DC:6A:82:EA:3C:14:9B:8E:4D:26:C5:09:29:DB:60:7B:34:0D:8A:35 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 5A11207508A253F1E707A458FD038F678A592528 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa Signing time: Mon 03 Aug 2026 00:00:23 +0000 ROA not before: Mon 03 Aug 2026 00:00:23 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:11:20:75:08:a2:53:f1:e7:07:a4:58:fd:03:8f:67:8a:59:25:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:23 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=21c9c3d6af5d6a75551fdb0d93095ce78d2bdce4b12e82136162939a53dc676f, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:46:5a:35:14:14:02:f3:23:fe:0b:47:66: 08:87:27:e5:36:90:37:ce:35:a8:af:95:10:c6:06: d0:8f:68:f4:85:64:f4:1b:d7:cd:01:24:3b:67:55: 73:bb:74:24:dd:96:8b:9b:7d:3a:b3:30:a7:f6:21: b1:b5:a6:68:da:da:4e:98:2c:d1:1c:40:fe:61:5e: b2:dd:61:e2:73:7c:c7:35:71:48:1e:c5:42:2a:30: 3e:06:d3:f9:a9:9e:12:37:50:cb:57:e5:69:c0:b2: 04:a9:6d:90:15:b6:c6:4d:7e:87:71:06:0b:fa:51: 68:03:55:15:2f:9b:70:b0:8b:6a:11:52:45:48:17: a0:0e:81:51:54:8c:16:1e:56:5b:2d:79:4d:ba:3e: f8:b3:a9:fd:41:6c:8f:34:ab:21:a1:b3:b2:ae:a1: 9b:ab:fc:2d:b2:63:2c:c5:32:8d:08:73:ec:82:ce: 7f:d2:f6:a9:75:b4:d3:d0:2c:ae:7d:56:e6:bb:5b: c3:f8:97:23:e5:bb:a7:dd:80:ff:8e:d3:ca:86:98: 06:ea:03:b1:c5:7b:11:c8:08:ab:7c:2f:ad:b0:fa: d3:2d:2b:07:2e:fc:46:02:59:d9:79:1c:74:69:10: b4:d5:b1:d3:55:43:bf:9d:ab:1e:4e:56:28:38:c4: 76:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6A:82:EA:3C:14:9B:8E:4D:26:C5:09:29:DB:60:7B:34:0D:8A:35 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.232.0/22 Signature Algorithm: sha256WithRSAEncryption 54:f0:98:90:ad:19:b2:75:3d:8a:19:24:c6:05:98:9d:ed:3a: 06:26:3c:bf:ce:9a:d4:5a:5c:65:de:d1:cc:32:e0:63:43:35: 99:19:50:37:4b:bc:65:e1:1f:71:46:02:55:9d:93:96:d7:85: 45:19:8b:3b:29:6e:93:17:1e:9f:c5:1f:b6:3d:c4:ff:06:0c: ea:4a:b7:89:85:7b:3e:c3:f6:d7:99:2e:63:e2:03:e2:86:ca: 2e:bc:66:e4:42:fd:72:ad:25:f9:33:59:e1:30:b0:43:ed:5e: ee:bc:6d:7e:70:a0:7b:1f:dd:db:1d:bf:aa:64:6c:46:0d:86: ae:48:0e:e4:b6:9e:7b:85:02:67:0e:35:02:40:85:dd:b4:1e: e0:d0:93:90:b5:c6:c1:5d:55:4f:dd:c9:d9:3d:7c:2c:82:52: 2a:2b:e9:4c:3d:9b:e2:99:5d:66:0c:dc:ed:bc:e4:03:df:c0: 3b:4c:bb:db:0b:03:0d:60:1d:2d:c6:59:0c:4c:fb:72:fa:bb: d7:99:17:51:e2:88:1e:76:8b:c8:5a:23:56:52:56:97:6d:a2: fc:dd:25:ea:12:d3:9f:57:b0:96:94:25:3c:24:41:9d:1d:a9: 6d:9d:4f:44:59:9c:14:5a:f7:8e:3e:8d:08:10:42:54:64:ea: 37:a0:6c:13 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUWhEgdQiiU/HnB6RY/QOPZ4pZJSgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyM1oX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAMjFjOWMzZDZhZjVkNmE3NTU1MWZk YjBkOTMwOTVjZTc4ZDJiZGNlNGIxMmU4MjEzNjE2MjkzOWE1M2RjNjc2ZjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyVGWjUUFALzI/4LR2YIhyflNpA3 zjWor5UQxgbQj2j0hWT0G9fNASQ7Z1Vzu3Qk3ZaLm306szCn9iGxtaZo2tpOmCzR HED+YV6y3WHic3zHNXFIHsVCKjA+BtP5qZ4SN1DLV+VpwLIEqW2QFbbGTX6HcQYL +lFoA1UVL5twsItqEVJFSBegDoFRVIwWHlZbLXlNuj74s6n9QWyPNKshobOyrqGb q/wtsmMsxTKNCHPsgs5/0vapdbTT0CyufVbmu1vD+Jcj5bun3YD/jtPKhpgG6gOx xXsRyAirfC+tsPrTLSsHLvxGAlnZeRx0aRC01bHTVUO/naseTlYoOMR2NwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNxqguo8FJuOTSbFCSnbYHs0DYo1MB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzBjNWM1NGZmLWY5NzctNGI5Ni04Y2U5LWExZWFmMDgyZmU5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCrynoMA0GCSqGSIb3DQEBCwUAA4IBAQBU8JiQrRmydT2KGSTGBZid 7ToGJjy/zprUWlxl3tHMMuBjQzWZGVA3S7xl4R9xRgJVnZOW14VFGYs7KW6TFx6f xR+2PcT/BgzqSreJhXs+w/bXmS5j4gPihsouvGbkQv1yrSX5M1nhMLBD7V7uvG1+ cKB7H93bHb+qZGxGDYauSA7ktp57hQJnDjUCQIXdtB7g0JOQtcbBXVVP3cnZPXws glIqK+lMPZvimV1mDNztvOQD38A7TLvbCwMNYB0txlkMTPty+rvXmRdR4ogedovI WiNWUlaXbaL83SXqEtOfV7CWlCU8JEGdHaltnU9EWZwUWveOPo0IEEJUZOo3oGwT -----END CERTIFICATE-----Generated at Sat Sep 5 08:43:56 2026 by rpki-client