$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/b0c38f03-3ced-484e-aa5b-7b06f125ad74.roa File: b0c38f03-3ced-484e-aa5b-7b06f125ad74.roa (raw, json) Hash identifier: 5NCp4vZPsgO5JJ/ATM+CAGRBe51nyHK6sfhap5bRxEU= Subject key identifier: 96:22:53:FE:04:91:00:13:88:9E:06:43:04:39:3F:E6:37:C4:D4:68 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 75BDBAA0378D716C56A814058C6B86FE32055318 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/b0c38f03-3ced-484e-aa5b-7b06f125ad74.roa Signing time: Fri 17 Jul 2026 00:00:35 +0000 ROA not before: Fri 17 Jul 2026 00:00:35 +0000 ROA not after: Thu 15 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.224.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:bd:ba:a0:37:8d:71:6c:56:a8:14:05:8c:6b:86:fe:32:05:53:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Jul 17 00:00:35 2026 GMT Not After : Oct 15 23:59:59 2026 GMT Subject: serialNumber=611489c862585b17b67085e74734eb81bf307e16d3662c62ecabe67e0100b88d, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:a3:13:70:c7:35:47:84:8a:aa:32:94:e3: 3d:04:7a:6a:b7:ff:35:97:c3:4a:b9:69:56:a5:0f: 13:c4:23:db:b5:77:cc:ba:d6:25:14:8f:3c:d7:fc: 76:0c:d8:46:96:39:6f:a7:0a:cd:79:20:73:5e:6f: f8:3a:80:10:e4:86:b7:10:e6:7a:d0:4d:92:9e:f7: 9c:66:ea:10:95:8f:f3:91:6b:6c:c0:5f:9e:72:91: cd:32:b7:b2:6d:a5:e2:70:62:b7:b1:c0:e5:b2:e7: 6c:ea:be:aa:96:ce:4c:13:02:5b:8c:f7:f4:5b:41: 13:99:4e:27:e9:75:0a:43:60:d6:6a:8a:7d:19:0d: 37:51:0b:bf:15:c9:b2:eb:3c:db:8f:79:fd:67:75: 37:0f:b3:f1:a7:a6:9b:7b:92:3b:99:13:72:12:0f: 91:89:f6:33:2b:5e:47:5e:45:ec:c3:e1:3a:9c:a0: f8:6c:25:0d:df:10:c8:e3:2a:6b:6f:75:b8:aa:7d: 62:d0:d3:5b:a0:a3:77:05:3b:b7:8b:d1:68:48:a9: dd:46:f0:96:8a:d1:c1:1c:73:34:26:bf:6b:d1:39: 54:d0:f8:90:80:36:32:99:a0:c5:46:2b:56:19:eb: b0:42:84:4a:c1:8d:b7:8c:ee:49:07:29:41:cd:58: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:22:53:FE:04:91:00:13:88:9E:06:43:04:39:3F:E6:37:C4:D4:68 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/b0c38f03-3ced-484e-aa5b-7b06f125ad74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.144.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:a0:ce:2e:8b:ab:6d:c8:48:39:29:86:95:59:f3:40:98:e8: f4:89:8e:64:53:38:91:68:b9:22:23:03:b8:64:41:f3:24:7b: bd:2e:41:39:c1:e4:d8:9a:0e:35:9c:21:3e:04:5c:15:65:62: 0d:47:37:1d:c0:39:90:f0:42:15:42:2c:b6:24:64:08:d0:2d: e8:2d:c5:24:97:59:02:1e:4c:6c:fd:43:fb:ce:89:99:df:0f: 8b:d4:c2:e1:5e:f5:2f:01:39:06:76:5b:aa:d9:01:66:b6:a7: 26:91:64:0f:93:f4:f5:6e:1f:34:ff:18:bc:7b:de:07:60:fc: 52:fd:91:5d:ea:50:98:97:40:3e:47:66:33:d1:33:d8:82:e8: 7d:e0:54:27:56:ba:90:7d:78:9a:86:4c:e0:1e:81:c9:76:93: fa:48:43:89:fd:0b:dc:01:e1:57:79:d1:ac:2f:0d:70:0a:92: 5b:25:33:60:06:a1:a7:24:c8:3a:7a:f5:6b:5d:a7:7c:6f:72: 17:cc:3b:b2:5d:cd:f6:59:e5:87:6b:ee:2b:2e:b5:b1:5c:8a: ce:e7:89:bf:80:e5:cd:b7:2b:40:3d:82:a5:81:53:c0:d7:6f: df:e9:21:c6:90:13:15:88:cd:56:85:32:d0:b2:e0:c9:38:3d: f6:67:ac:20 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUdb26oDeNcWxWqBQFjGuG/jIFUxgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDcxNzAwMDAzNVoX DTI2MTAxNTIzNTk1OVowejFJMEcGA1UEBRNANjExNDg5Yzg2MjU4NWIxN2I2NzA4 NWU3NDczNGViODFiZjMwN2UxNmQzNjYyYzYyZWNhYmU2N2UwMTAwYjg4ZDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoejE3DHNUeEiqoylOM9BHpqt/81 l8NKuWlWpQ8TxCPbtXfMutYlFI881/x2DNhGljlvpwrNeSBzXm/4OoAQ5Ia3EOZ6 0E2SnvecZuoQlY/zkWtswF+ecpHNMreybaXicGK3scDlsuds6r6qls5MEwJbjPf0 W0ETmU4n6XUKQ2DWaop9GQ03UQu/Fcmy6zzbj3n9Z3U3D7Pxp6abe5I7mRNyEg+R ifYzK15HXkXsw+E6nKD4bCUN3xDI4yprb3W4qn1i0NNboKN3BTu3i9FoSKndRvCW itHBHHM0Jr9r0TlU0PiQgDYymaDFRitWGeuwQoRKwY23jO5JBylBzVjDAwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJYiU/4EkQATiJ4GQwQ5P+Y3xNRoMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2IwYzM4ZjAzLTNjZWQtNDg0ZS1hYTViLTdiMDZmMTI1YWQ3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK+CQMA0GCSqGSIb3DQEBCwUAA4IBAQCeoM4ui6ttyEg5KYaVWfNA mOj0iY5kUziRaLkiIwO4ZEHzJHu9LkE5weTYmg41nCE+BFwVZWINRzcdwDmQ8EIV Qiy2JGQI0C3oLcUkl1kCHkxs/UP7zomZ3w+L1MLhXvUvATkGdluq2QFmtqcmkWQP k/T1bh80/xi8e94HYPxS/ZFd6lCYl0A+R2Yz0TPYguh94FQnVrqQfXiahkzgHoHJ dpP6SEOJ/QvcAeFXedGsLw1wCpJbJTNgBqGnJMg6evVrXad8b3IXzDuyXc32WeWH a+4rLrWxXIrO54m/gOXNtytAPYKlgVPA12/f6SHGkBMViM1WhTLQsuDJOD32Z6wg -----END CERTIFICATE-----Generated at Fri Jul 24 02:25:06 2026 by rpki-client