$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa File: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (raw, json) Hash identifier: SmhnWkJlgRO1ZNn792ZwOUn8Tem6AvtEchsHWxmpNlg= Subject key identifier: 9D:B7:B2:6B:94:EC:F3:5E:52:36:68:10:2A:20:E0:AC:14:08:CE:78 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 21F3CB0736D93C448AA39E0304087540C12CD22F Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa Signing time: Mon 03 Aug 2026 00:00:23 +0000 ROA not before: Mon 03 Aug 2026 00:00:23 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f3:cb:07:36:d9:3c:44:8a:a3:9e:03:04:08:75:40:c1:2c:d2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:23 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=a47bebc32b8102bc08061d8950160149af19a747e4d0069827771705893ad275, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4a:c0:b5:e4:12:20:85:36:a7:0e:c5:fc:f7: 4f:ac:fa:20:6a:7c:15:f6:ad:3c:0a:54:63:74:08: cf:47:fb:cb:90:28:45:13:d7:e8:34:42:cb:ef:d0: ea:58:03:26:2c:35:68:92:cb:e5:f7:b6:cb:66:5c: fc:43:73:25:4e:79:7e:7f:3e:4d:bd:31:90:7b:be: ff:3c:06:b8:d5:dc:8c:53:fc:95:ba:6d:58:5c:84: 76:d3:94:f6:a3:30:ca:de:88:69:10:d8:3b:06:0e: 7f:9d:7e:2b:3b:0c:60:22:e8:48:c4:9d:04:0f:75: 9d:e0:2e:76:9b:9f:28:1f:7b:9e:8e:56:7b:3d:18: 5a:76:9d:e3:c3:17:58:07:80:b1:ae:91:cf:ee:c7: 89:16:a0:ca:9f:e6:a8:e4:f8:0b:3f:6d:5f:9f:24: 31:82:f5:7d:f5:15:13:80:7c:a0:a2:d3:e1:88:09: 80:f2:17:e4:a8:d4:c4:b4:16:1e:c4:c0:e6:86:47: c9:f1:df:a0:a3:cd:54:74:81:0d:34:02:0d:b5:a2: bd:b4:ff:2b:7f:60:b6:ca:4d:77:19:fa:c0:00:36: 24:89:91:e9:33:9b:3c:01:af:9a:3d:19:59:bb:8e: 5d:bb:04:21:90:0c:8b:57:16:33:ea:b8:89:ed:d1: c8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B7:B2:6B:94:EC:F3:5E:52:36:68:10:2A:20:E0:AC:14:08:CE:78 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.192.0/18 Signature Algorithm: sha256WithRSAEncryption 7a:66:44:ee:63:17:10:cd:fa:50:06:d5:b8:f8:e2:ec:08:a5: 73:9e:dd:a9:c3:26:e1:6f:e4:56:6d:cd:6c:b2:b3:33:85:ad: ee:7d:b3:bf:0d:21:ff:25:34:35:83:b4:50:04:1e:69:15:c0: b0:b3:b1:8d:ce:fe:38:57:f9:30:6c:6d:45:4d:6e:43:02:92: 27:62:ba:8c:65:97:87:ac:65:78:b8:f6:90:92:c8:0e:6b:cd: 55:a1:02:0d:0b:c7:a4:2f:95:6f:52:4c:40:64:5b:d0:b2:af: e8:54:08:66:e2:fa:7a:d1:4e:46:56:ad:f1:75:05:63:fa:56: 7f:cf:40:bb:4a:66:ac:0a:ee:f0:41:4b:80:c6:c8:7e:b7:54: da:ff:77:67:9a:af:0f:93:f2:db:5a:11:09:6c:95:c6:13:18: 2a:af:86:91:0b:6a:c2:58:a8:72:4f:48:74:72:9d:f1:2f:53: 8b:9c:bb:5d:81:3d:40:c8:fb:21:b9:c6:9f:1d:50:8c:40:bc: ac:06:75:12:45:75:95:d8:29:e8:d6:37:0c:b2:79:b1:76:9f: a6:88:3d:60:ae:e0:60:15:7a:1f:f6:09:85:5a:a8:33:45:a3: 0f:fe:15:6a:9e:c6:56:96:74:4b:12:56:aa:57:e7:8b:ba:f8: ba:5b:c0:3e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUIfPLBzbZPESKo54DBAh1QMEs0i8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyM1oX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAYTQ3YmViYzMyYjgxMDJiYzA4MDYx ZDg5NTAxNjAxNDlhZjE5YTc0N2U0ZDAwNjk4Mjc3NzE3MDU4OTNhZDI3NTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzErAteQSIIU2pw7F/PdPrPoganwV 9q08ClRjdAjPR/vLkChFE9foNELL79DqWAMmLDVoksvl97bLZlz8Q3MlTnl+fz5N vTGQe77/PAa41dyMU/yVum1YXIR205T2ozDK3ohpENg7Bg5/nX4rOwxgIuhIxJ0E D3Wd4C52m58oH3uejlZ7PRhadp3jwxdYB4CxrpHP7seJFqDKn+ao5PgLP21fnyQx gvV99RUTgHygotPhiAmA8hfkqNTEtBYexMDmhkfJ8d+go81UdIENNAINtaK9tP8r f2C2yk13GfrAADYkiZHpM5s8Aa+aPRlZu45duwQhkAyLVxYz6riJ7dHIXwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJ23smuU7PNeUjZoECog4KwUCM54MB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzdhNjQ2ZWMzLWZjMGUtNDBlNy1hZGI0LTgyZDVmZDgzZjAyOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGrynAMA0GCSqGSIb3DQEBCwUAA4IBAQB6ZkTuYxcQzfpQBtW4+OLs CKVznt2pwybhb+RWbc1ssrMzha3ufbO/DSH/JTQ1g7RQBB5pFcCws7GNzv44V/kw bG1FTW5DApInYrqMZZeHrGV4uPaQksgOa81VoQINC8ekL5VvUkxAZFvQsq/oVAhm 4vp60U5GVq3xdQVj+lZ/z0C7SmasCu7wQUuAxsh+t1Ta/3dnmq8Pk/LbWhEJbJXG Exgqr4aRC2rCWKhyT0h0cp3xL1OLnLtdgT1AyPshucafHVCMQLysBnUSRXWV2Cno 1jcMsnmxdp+miD1gruBgFXof9gmFWqgzRaMP/hVqnsZWlnRLElaqV+eLuvi6W8A+ -----END CERTIFICATE-----Generated at Sat Sep 5 08:44:20 2026 by rpki-client