$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b59fbe4-f242-4dbf-9964-15048c3da996.roa File: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (raw, json) Hash identifier: QhnxFBgjUxHiRKLTJPQ2sIaTKqb14Jbu69kbxZumNEw= Subject key identifier: 5D:A8:35:B8:DA:B5:BA:E5:8A:0A:64:4D:A9:C0:85:FB:90:7D:E1:61 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 7C16B9E2EBAEC8CC03B5D71D4A47A7B6B7DA8849 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b59fbe4-f242-4dbf-9964-15048c3da996.roa Signing time: Mon 03 Aug 2026 00:00:26 +0000 ROA not before: Mon 03 Aug 2026 00:00:26 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 103.4.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:16:b9:e2:eb:ae:c8:cc:03:b5:d7:1d:4a:47:a7:b6:b7:da:88:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:26 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=da5b98c069483f1290cd07721d5db2456ae39b9c831e55c0e474c3ce25540e6e, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:97:9a:da:61:3c:da:21:8a:58:d2:2d:87:f3: 75:f6:74:22:6e:c6:60:ee:11:b1:4b:2b:38:0c:66: 29:6c:55:d7:9e:46:4b:93:9d:79:dc:11:66:49:57: f3:a0:68:b7:7f:cf:5d:a3:bb:bf:81:2b:15:eb:ba: cd:86:17:87:f9:47:7e:47:49:c2:de:fa:81:f8:eb: 8f:cc:10:6a:f8:55:2d:f5:dc:01:ef:9c:7e:d3:20: 49:7f:97:75:58:b5:7d:26:e7:6b:7c:8f:97:c1:7b: 62:fd:a7:fb:df:66:ca:e5:66:f5:80:fa:9d:4d:6e: 37:34:7c:ec:04:dc:24:2f:b6:49:db:4b:5c:96:71: 36:b3:13:1f:d1:1f:c2:34:de:28:99:2d:13:47:d8: e1:c0:91:9d:52:37:c5:1c:04:7a:e7:e1:b3:94:58: f8:2a:58:d9:18:78:52:14:b2:14:f5:d2:6b:81:0a: 16:c1:1d:e0:65:75:b1:a3:9e:c1:84:21:26:a5:09: 18:36:73:ea:5d:0b:c6:49:dc:13:ff:e9:91:fe:e4: 51:d2:55:6e:d2:00:f7:4b:8f:1c:83:f7:62:c9:9e: 0c:3a:32:c0:a0:b5:fc:1c:ef:a9:80:ff:0a:31:ff: 3a:b8:ce:56:b9:08:34:50:f0:b8:75:a5:58:4f:9e: 78:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A8:35:B8:DA:B5:BA:E5:8A:0A:64:4D:A9:C0:85:FB:90:7D:E1:61 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b59fbe4-f242-4dbf-9964-15048c3da996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.8.0/21 Signature Algorithm: sha256WithRSAEncryption 38:3b:a8:62:d9:31:6a:0b:27:71:ed:96:0b:b4:68:af:ef:80: a8:f2:67:c3:ca:00:ef:a0:96:e3:c6:f4:d5:be:19:96:ef:60: 23:81:01:a9:a9:68:0b:70:6d:fb:21:7c:4a:90:47:64:a2:94: 21:da:e6:8c:11:98:13:6d:95:32:ce:c3:53:7c:30:57:75:1a: 88:a1:19:ee:c1:f0:37:e1:79:cc:91:1d:b6:43:b6:33:93:3e: ef:e4:28:5f:9b:a8:7a:64:42:12:bd:af:8e:08:f8:53:ff:cf: 95:d4:c4:82:bd:9d:f8:12:c5:ee:a9:87:33:b9:97:91:34:d9: ca:8a:b2:3e:f6:ba:13:9b:f7:58:78:71:d4:8d:85:16:5a:eb: 89:e8:bf:9f:69:c5:f1:4d:3e:8c:1b:35:2b:94:a9:4a:ad:d1: 0c:fc:3c:02:c5:46:45:cf:06:73:0d:f8:9f:c0:40:81:11:0b: 22:58:44:4d:c5:c7:9d:a8:f3:09:69:8a:1d:3e:bf:cd:15:11: 8b:63:82:06:5c:88:3c:32:fc:7d:db:64:6b:14:aa:a6:7b:2b: 16:9e:80:67:f3:87:6c:a5:97:22:32:63:ed:f3:51:69:13:19: 6f:da:69:24:89:da:2d:58:c2:ec:a7:88:48:b3:21:87:99:3b: 6e:e7:3c:d7 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUfBa54uuuyMwDtdcdSkentrfaiEkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyNloX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNAZGE1Yjk4YzA2OTQ4M2YxMjkwY2Qw NzcyMWQ1ZGIyNDU2YWUzOWI5YzgzMWU1NWMwZTQ3NGMzY2UyNTU0MGU2ZTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85ea2mE82iGKWNIth/N19nQibsZg 7hGxSys4DGYpbFXXnkZLk5153BFmSVfzoGi3f89do7u/gSsV67rNhheH+Ud+R0nC 3vqB+OuPzBBq+FUt9dwB75x+0yBJf5d1WLV9JudrfI+XwXti/af732bK5Wb1gPqd TW43NHzsBNwkL7ZJ20tclnE2sxMf0R/CNN4omS0TR9jhwJGdUjfFHAR65+GzlFj4 KljZGHhSFLIU9dJrgQoWwR3gZXWxo57BhCEmpQkYNnPqXQvGSdwT/+mR/uRR0lVu 0gD3S48cg/diyZ4MOjLAoLX8HO+pgP8KMf86uM5WuQg0UPC4daVYT554XwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFF2oNbjatbrligpkTanAhfuQfeFhMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzliNTlmYmU0LWYyNDItNGRiZi05OTY0LTE1MDQ4YzNkYTk5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDZwQIMA0GCSqGSIb3DQEBCwUAA4IBAQA4O6hi2TFqCydx7ZYLtGiv 74Co8mfDygDvoJbjxvTVvhmW72AjgQGpqWgLcG37IXxKkEdkopQh2uaMEZgTbZUy zsNTfDBXdRqIoRnuwfA34XnMkR22Q7Yzkz7v5Chfm6h6ZEISva+OCPhT/8+V1MSC vZ34EsXuqYczuZeRNNnKirI+9roTm/dYeHHUjYUWWuuJ6L+facXxTT6MGzUrlKlK rdEM/DwCxUZFzwZzDfifwECBEQsiWERNxcedqPMJaYodPr/NFRGLY4IGXIg8Mvx9 22RrFKqmeysWnoBn84dspZciMmPt81FpExlv2mkkidotWMLsp4hIsyGHmTtu5zzX -----END CERTIFICATE-----Generated at Sat Sep 5 08:43:57 2026 by rpki-client