$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa File: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (raw, json) Hash identifier: Dcm8WyP+tRkJzCNAbotVujAO0N7AZKefgHJLgDm17rM= Subject key identifier: 90:C6:8F:39:98:6E:A4:5B:5C:06:DB:1E:F4:EF:81:BA:68:41:07:22 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 642A5A9BD2A5B3FF8C26091F93E6B11B0354D6E9 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa Signing time: Thu 16 Jul 2026 00:00:05 +0000 ROA not before: Thu 16 Jul 2026 00:00:05 +0000 ROA not after: Wed 14 Oct 2026 23:59:59 +0000 asID: 7224 IP address blocks: 43.250.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:2a:5a:9b:d2:a5:b3:ff:8c:26:09:1f:93:e6:b1:1b:03:54:d6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Jul 16 00:00:05 2026 GMT Not After : Oct 14 23:59:59 2026 GMT Subject: serialNumber=55a8ddcd8dab8ebb998789016d60e0a8dfb180d93b0f44b56679e37fc48f5c6a, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:7c:31:6d:92:5a:a0:e5:6d:09:8e:60:fc: 31:2a:ad:ed:71:3a:be:fe:88:c0:8a:c5:29:30:9e: 2b:bd:9d:70:7d:ef:13:e4:32:44:b6:0b:de:da:69: c8:20:e1:41:30:9b:5e:7e:e9:85:09:75:41:9b:b9: 6e:ba:86:56:a7:50:d8:f3:28:e9:81:45:b4:4b:70: 0c:3b:26:81:64:3d:f9:5f:0d:40:16:ca:56:77:10: b5:c9:e5:fa:33:ab:64:06:db:80:37:fc:ef:22:7b: 9a:87:1c:0e:e4:e5:45:d1:55:73:27:1b:8e:7e:a9: 00:a3:d0:82:05:c0:19:c6:32:04:3e:f7:56:bd:a2: 8e:a4:19:96:2c:20:10:21:8a:9d:71:22:0a:d2:5b: a1:41:48:9a:4c:10:84:b2:e9:95:0f:ec:96:7e:30: 73:8c:e1:be:64:80:37:ad:a3:cb:4a:d2:e6:34:ef: 51:cb:cd:ce:37:6b:3f:66:ed:b7:01:ad:66:2b:b5: 58:83:6a:7a:12:1a:c4:bc:fb:ae:d0:5a:72:14:58: 50:ab:8c:f8:65:a3:ab:1b:38:d4:82:02:12:c6:4b: 1a:ff:a0:d1:a6:cf:69:62:89:be:1b:6a:74:a7:8f: 1f:f3:e0:7e:a8:81:3c:60:76:f7:11:1c:a2:76:f8: 2d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C6:8F:39:98:6E:A4:5B:5C:06:DB:1E:F4:EF:81:BA:68:41:07:22 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.250.196.0/22 Signature Algorithm: sha256WithRSAEncryption aa:45:24:45:cc:e4:fc:c6:15:d6:f8:1d:b9:86:c6:d6:44:44: 0c:62:03:d5:6a:9e:67:a0:db:05:a1:90:5a:24:db:69:13:94: 0c:48:26:de:00:dc:26:9c:49:de:38:68:ed:20:85:d6:e3:1a: 5a:73:36:74:98:4f:03:79:3e:99:d7:f8:dd:7d:96:3d:9a:63: 2e:51:d2:78:8d:f8:aa:8b:93:28:17:0e:1a:49:80:40:4d:ef: 76:3d:a4:17:8a:f7:68:77:01:8f:ce:a5:d1:19:cc:93:a5:36: 8f:db:a0:98:2c:ef:34:bd:88:39:1f:9f:ac:6c:16:42:36:10: f8:bd:89:29:fb:f8:da:bd:1e:d4:78:9e:a3:eb:77:3d:c6:1a: fa:38:5d:c2:49:71:4e:c2:fc:6b:ca:04:21:0f:1a:01:d4:29: c1:52:83:76:d7:80:c3:5f:c5:28:4b:d1:40:9a:c0:98:14:22: 97:de:d2:57:4c:30:16:ab:de:f7:4b:3a:c9:df:a0:a6:57:6b: 7b:e5:1e:23:01:0e:8f:14:44:95:11:ab:36:01:a8:a3:da:21: 6f:b9:e5:e0:f6:ac:07:79:6e:10:a4:f4:98:dd:9b:16:f4:fa: 30:03:ef:3c:a0:da:24:d5:33:06:fe:c7:ee:cd:00:87:9f:69: 2f:33:0c:4e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUZCpam9Kls/+MJgkfk+axGwNU1ukwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDcxNjAwMDAwNVoX DTI2MTAxNDIzNTk1OVowejFJMEcGA1UEBRNANTVhOGRkY2Q4ZGFiOGViYjk5ODc4 OTAxNmQ2MGUwYThkZmIxODBkOTNiMGY0NGI1NjY3OWUzN2ZjNDhmNWM2YTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgR8MW2SWqDlbQmOYPwxKq3tcTq+ /ojAisUpMJ4rvZ1wfe8T5DJEtgve2mnIIOFBMJtefumFCXVBm7luuoZWp1DY8yjp gUW0S3AMOyaBZD35Xw1AFspWdxC1yeX6M6tkBtuAN/zvInuahxwO5OVF0VVzJxuO fqkAo9CCBcAZxjIEPvdWvaKOpBmWLCAQIYqdcSIK0luhQUiaTBCEsumVD+yWfjBz jOG+ZIA3raPLStLmNO9Ry83ON2s/Zu23Aa1mK7VYg2p6EhrEvPuu0FpyFFhQq4z4 ZaOrGzjUggISxksa/6DRps9pYom+G2p0p48f8+B+qIE8YHb3ERyidvgtCQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJDGjzmYbqRbXAbbHvTvgbpoQQciMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzliOGU5NjNlLTdmYTItNGJhMS1hNzhhLTRkMWZkNzk4OWIzMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/rEMA0GCSqGSIb3DQEBCwUAA4IBAQCqRSRFzOT8xhXW+B25hsbW REQMYgPVap5noNsFoZBaJNtpE5QMSCbeANwmnEneOGjtIIXW4xpaczZ0mE8DeT6Z 1/jdfZY9mmMuUdJ4jfiqi5MoFw4aSYBATe92PaQXivdodwGPzqXRGcyTpTaP26CY LO80vYg5H5+sbBZCNhD4vYkp+/javR7UeJ6j63c9xhr6OF3CSXFOwvxrygQhDxoB 1CnBUoN214DDX8UoS9FAmsCYFCKX3tJXTDAWq973SzrJ36CmV2t75R4jAQ6PFESV Eas2Aaij2iFvueXg9qwHeW4QpPSY3ZsW9PowA+88oNok1TMG/sfuzQCHn2kvMwxO -----END CERTIFICATE-----Generated at Tue Jul 21 21:43:07 2026 by rpki-client