$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac94887b-5f68-400d-969c-c7c686f570d1.roa File: ac94887b-5f68-400d-969c-c7c686f570d1.roa (raw, json) Hash identifier: RrRW8ktMTmF18VePjpobrQmiXdwakyHBYGPMYLjfH8I= Subject key identifier: 58:2C:3E:01:FD:1C:06:37:49:6B:66:47:F8:52:BE:52:1F:F6:80:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 786EA13B681F2DA55485B095934C72846C382A39 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac94887b-5f68-400d-969c-c7c686f570d1.roa Signing time: Sat 23 Aug 2025 00:31:28 +0000 ROA not before: Sat 23 Aug 2025 00:31:28 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6e:a1:3b:68:1f:2d:a5:54:85:b0:95:93:4c:72:84:6c:38:2a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:31:28 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=02626799f5677557d584dcbc99a41de9ea32529cc9b252bc046031319bdc42ba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:ac:6a:aa:da:1e:98:78:22:e4:79:f2:fd: b9:1f:fb:93:6c:45:45:9c:04:ed:aa:47:ca:49:41: 82:5e:6c:2f:48:40:0f:97:18:18:72:7f:61:8d:49: 88:72:ac:10:a2:ab:42:66:b1:bb:a7:56:17:18:91: 59:0f:04:75:36:b8:fd:8f:e9:c9:e0:44:77:ef:70: 4c:57:df:38:93:70:64:5f:09:6f:dd:78:93:e4:c1: 6d:08:56:43:3d:3b:f6:5a:e5:3b:4b:7b:56:66:54: f1:45:76:e9:fe:88:63:33:a4:ee:75:0c:aa:5f:0c: f3:8f:a8:b7:e4:bb:17:fc:b3:f0:cf:7f:bc:85:a7: f2:f3:4b:1a:76:a6:2e:22:f4:b2:38:bf:d0:01:26: 0c:62:7b:2d:ef:c9:86:cb:4b:7f:61:15:c9:86:3a: e1:5b:f2:19:4c:3a:08:67:86:6e:aa:84:22:96:e5: d3:5f:52:d2:3c:03:4e:99:f0:60:6d:81:a5:40:87: c4:72:06:35:c0:b0:c4:3b:76:f7:f0:6a:5f:b5:7a: 3c:8d:00:b5:03:71:21:18:b8:03:b9:02:92:d8:a8: 34:77:c4:43:5d:5f:53:5e:f8:5a:a8:cb:31:ea:01: e2:fd:f4:c9:cc:dc:2b:53:85:ab:8d:a6:91:99:7d: a7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2C:3E:01:FD:1C:06:37:49:6B:66:47:F8:52:BE:52:1F:F6:80:E7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac94887b-5f68-400d-969c-c7c686f570d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1000::/40 Signature Algorithm: sha256WithRSAEncryption c0:fc:b5:af:30:6a:71:58:63:c9:f3:4e:67:e6:73:93:3f:c2: f4:b3:df:1c:49:15:26:ea:30:10:2c:e5:27:c3:a9:ab:00:b4: d5:84:76:33:d5:26:8c:c8:c8:f3:8d:59:4d:40:f0:2b:b3:03: 51:95:ae:31:dd:7a:c0:31:90:e2:d4:71:fa:00:af:96:98:2a: 00:67:9d:80:d3:d1:6e:18:0a:10:b5:96:3d:85:53:38:0d:90: 0e:64:82:7d:94:3c:96:11:cc:b0:e5:56:bb:91:89:7d:7c:1d: 74:f2:4d:df:72:df:d2:50:ae:f2:c7:ce:af:b7:94:3a:62:3b: 65:4a:91:76:d7:70:ad:5a:0c:cb:5b:f7:d9:2a:95:6b:5d:97: af:2f:55:d0:10:70:31:0f:32:3c:0e:0a:9f:ca:14:b7:1b:87: ef:bd:73:eb:39:a5:1f:ba:60:6d:94:24:c5:a5:e3:43:ad:5d: b6:ae:49:c6:21:b6:5b:b8:e6:39:89:6a:ab:37:c3:63:36:99: 26:12:d8:58:34:e4:34:b7:2e:31:b3:fa:8b:65:93:e7:18:b1: 45:9a:24:1d:b4:7a:90:05:fa:71:8f:66:2d:70:eb:98:49:d7: fb:df:f7:b1:61:b9:9a:c2:6c:a6:d1:20:0f:71:f2:d7:9f:fe: 17:5a:1d:20 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeG6hO2gfLaVUhbCVk0xyhGw4KjkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMzEyOFoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAMDI2MjY3OTlmNTY3NzU1N2Q1ODRk Y2JjOTlhNDFkZTllYTMyNTI5Y2M5YjI1MmJjMDQ2MDMxMzE5YmRjNDJiYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy6saqraHph4IuR58v25H/uTbEVF nATtqkfKSUGCXmwvSEAPlxgYcn9hjUmIcqwQoqtCZrG7p1YXGJFZDwR1Nrj9j+nJ 4ER373BMV984k3BkXwlv3XiT5MFtCFZDPTv2WuU7S3tWZlTxRXbp/ohjM6TudQyq Xwzzj6i35LsX/LPwz3+8hafy80sadqYuIvSyOL/QASYMYnst78mGy0t/YRXJhjrh W/IZTDoIZ4ZuqoQiluXTX1LSPANOmfBgbYGlQIfEcgY1wLDEO3b38GpftXo8jQC1 A3EhGLgDuQKS2Kg0d8RDXV9TXvhaqMsx6gHi/fTJzNwrU4WrjaaRmX2n6QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFgsPgH9HAY3SWtmR/hSvlIf9oDnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FjOTQ4ODdiLTVmNjgtNDAwZC05NjljLWM3YzY4NmY1NzBkMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8hAwDQYJKoZIhvcNAQELBQADggEBAMD8ta8wanFYY8nzTmfm c5M/wvSz3xxJFSbqMBAs5SfDqasAtNWEdjPVJozIyPONWU1A8CuzA1GVrjHdesAx kOLUcfoAr5aYKgBnnYDT0W4YChC1lj2FUzgNkA5kgn2UPJYRzLDlVruRiX18HXTy Td9y39JQrvLHzq+3lDpiO2VKkXbXcK1aDMtb99kqlWtdl68vVdAQcDEPMjwOCp/K FLcbh++9c+s5pR+6YG2UJMWl40OtXbauScYhtlu45jmJaqs3w2M2mSYS2Fg05DS3 LjGz+otlk+cYsUWaJB20epAF+nGPZi1w65hJ1/vf97FhuZrCbKbRIA9x8tef/hda HSA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:09:20 2025 by rpki-client