$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/a78b90df-233b-4ec6-89d2-de27ac2dc044.roa File: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (raw, json) Hash identifier: yLQ60Vu1aG8yLvN50aTCpkr3v59yQOtQsDjF9xdyhPU= Subject key identifier: F3:A2:C1:8D:41:33:24:70:E5:13:81:54:27:44:58:EB:99:38:90:F4 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 2B467E1708312334CB4A228C8292CFDA41ADB9F6 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/a78b90df-233b-4ec6-89d2-de27ac2dc044.roa Signing time: Mon 03 Aug 2026 00:00:24 +0000 ROA not before: Mon 03 Aug 2026 00:00:24 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Sep 2026 00:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:46:7e:17:08:31:23:34:cb:4a:22:8c:82:92:cf:da:41:ad:b9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Aug 3 00:00:24 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=70fd1b212cc790dcb0642a1cf30a33b7bf9763182953e17f1f53046094113afa, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:8b:fc:f8:86:db:b0:43:70:71:a3:ff:b4: bc:6b:71:1e:41:b6:ee:10:a8:dd:b7:02:21:f8:ec: 9e:cb:38:58:8c:1e:da:c6:3b:18:0c:9c:21:19:9f: bb:0b:27:45:a5:ea:51:cf:52:b2:71:5e:6f:7d:f4: 40:97:a3:9d:78:35:aa:7c:45:f2:82:44:fa:84:5a: e8:6c:8d:82:63:19:e9:37:b7:19:bd:6f:c2:60:f5: 05:41:70:5e:44:3d:dc:0a:3f:89:d2:8c:bd:6e:b4: 12:fa:5a:1d:0a:f8:dd:36:7b:13:2a:2e:6e:a4:7d: fc:e8:bb:95:8a:ee:c4:5e:0e:72:86:b8:4d:f5:c2: 90:35:40:ad:fd:e6:d9:41:ae:bd:56:38:14:b3:07: c9:19:4d:ea:ec:e2:e8:a6:01:47:9e:fa:11:ba:32: 23:72:bd:ad:7b:44:ec:bd:d7:13:fe:11:4d:67:9f: c2:ef:69:e5:97:eb:ad:fa:38:39:c7:af:7d:98:dc: 0f:17:2e:3a:ef:36:d6:88:65:f1:e8:da:f6:c4:a7: e0:8b:a7:0b:8b:83:7c:79:3b:3f:a4:ea:66:88:e1: 90:85:37:c5:05:a0:8d:af:a5:dc:86:d9:aa:95:47: e3:24:4c:7b:ad:6a:50:9d:89:70:50:29:cf:ac:8f: 9a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A2:C1:8D:41:33:24:70:E5:13:81:54:27:44:58:EB:99:38:90:F4 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/a78b90df-233b-4ec6-89d2-de27ac2dc044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.236.0/23 Signature Algorithm: sha256WithRSAEncryption 04:79:af:af:6f:2a:ee:5d:81:e7:ee:a9:47:33:e7:3b:ce:bf: ca:ea:de:6c:6b:3f:99:ec:24:51:23:5e:28:02:13:84:46:46: c3:14:2d:9f:fd:e4:6e:52:4c:f2:6d:29:a4:6b:d3:d8:16:98: ba:50:43:c5:f9:b5:58:f8:d9:9a:12:71:8d:07:c4:c0:cf:ce: 6c:71:7f:74:8f:8b:3a:c5:40:bc:3f:13:5a:4c:55:45:28:6f: 72:15:92:95:ea:29:60:6a:77:7c:25:20:23:e1:b4:9e:c5:46: c4:8b:5d:0e:b1:61:3e:61:56:db:10:98:c7:ee:19:75:ca:9b: fc:2d:cc:7d:88:69:11:30:f5:9e:49:48:b1:36:85:ad:17:f7: e5:31:a3:32:bc:dd:b8:9f:46:a5:0e:d9:6e:d6:20:79:45:32: b3:96:47:f5:d7:db:0a:b3:0a:f4:06:89:ae:e0:7d:0e:07:06: 04:06:de:4c:91:af:98:34:dd:11:30:29:8e:60:32:0b:58:9e: 22:c2:7e:d2:3a:29:eb:2d:d6:df:f3:79:37:79:65:49:bf:f8: 21:e4:c8:b4:8f:6d:3d:21:56:b9:cf:c3:90:45:56:f8:e3:1d: ac:15:31:f9:e4:96:65:6a:c1:57:d3:72:99:b4:3e:80:5a:e6: b3:3b:d1:a5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUK0Z+FwgxIzTLSiKMgpLP2kGtufYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDgwMzAwMDAyNFoX DTI2MTEwMTIzNTk1OVowejFJMEcGA1UEBRNANzBmZDFiMjEyY2M3OTBkY2IwNjQy YTFjZjMwYTMzYjdiZjk3NjMxODI5NTNlMTdmMWY1MzA0NjA5NDExM2FmYTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8OL/PiG27BDcHGj/7S8a3EeQbbu EKjdtwIh+OyeyzhYjB7axjsYDJwhGZ+7CydFpepRz1KycV5vffRAl6OdeDWqfEXy gkT6hFrobI2CYxnpN7cZvW/CYPUFQXBeRD3cCj+J0oy9brQS+lodCvjdNnsTKi5u pH386LuViu7EXg5yhrhN9cKQNUCt/ebZQa69VjgUswfJGU3q7OLopgFHnvoRujIj cr2te0TsvdcT/hFNZ5/C72nll+ut+jg5x699mNwPFy467zbWiGXx6Nr2xKfgi6cL i4N8eTs/pOpmiOGQhTfFBaCNr6XchtmqlUfjJEx7rWpQnYlwUCnPrI+aEQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPOiwY1BMyRw5ROBVCdEWOuZOJD0MB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 L2E3OGI5MGRmLTIzM2ItNGVjNi04OWQyLWRlMjdhYzJkYzA0NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBrynsMA0GCSqGSIb3DQEBCwUAA4IBAQAEea+vbyruXYHn7qlHM+c7 zr/K6t5saz+Z7CRRI14oAhOERkbDFC2f/eRuUkzybSmka9PYFpi6UEPF+bVY+Nma EnGNB8TAz85scX90j4s6xUC8PxNaTFVFKG9yFZKV6ilgand8JSAj4bSexUbEi10O sWE+YVbbEJjH7hl1ypv8Lcx9iGkRMPWeSUixNoWtF/flMaMyvN24n0alDtlu1iB5 RTKzlkf119sKswr0Bomu4H0OBwYEBt5Mka+YNN0RMCmOYDILWJ4iwn7SOinrLdbf 83k3eWVJv/gh5Mi0j209IVa5z8OQRVb44x2sFTH55JZlasFX03KZtD6AWuazO9Gl -----END CERTIFICATE-----Generated at Sat Sep 5 08:43:54 2026 by rpki-client