$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86788001-2d2c-41b3-aade-12042b8560bb.roa File: 86788001-2d2c-41b3-aade-12042b8560bb.roa (raw, json) Hash identifier: sy/MTnCWI/xGDZOUDW0g31+3+/XogYNcES7hp3M/N7Q= Subject key identifier: 1E:E7:25:44:C1:FA:15:30:50:70:C0:03:9F:EF:C9:98:EA:4D:AA:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7124A78EB39BA8DDC80B7901C385D88F07884607 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86788001-2d2c-41b3-aade-12042b8560bb.roa Signing time: Mon 18 Aug 2025 15:00:12 +0000 ROA not before: Mon 18 Aug 2025 15:00:12 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:24:a7:8e:b3:9b:a8:dd:c8:0b:79:01:c3:85:d8:8f:07:88:46:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 15:00:12 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=0af627a74128dccc5d36fed68e1eda759527851e9c7976788b94e723e5462b69, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:45:01:8d:7b:aa:ca:69:9d:bf:9e:5b:11: 6c:99:05:a4:e7:9e:8d:bc:d5:75:01:8b:5d:89:69: 65:46:52:b4:76:11:f5:73:0d:92:2d:2f:bb:85:1f: 5b:ea:02:11:0b:cb:82:43:9d:a2:8d:7b:f8:b2:56: bc:4b:41:3d:c3:59:6f:1a:c2:4b:3a:06:ac:9f:c2: 35:f8:ee:6f:10:58:be:20:df:d8:d9:c2:50:39:ed: 02:42:d8:73:23:20:fa:c5:6c:d7:6f:8c:24:65:0c: 63:0b:a2:bb:f8:3f:a0:d8:8d:d4:f1:40:17:0c:25: ce:c0:46:3c:96:5b:d4:7e:26:22:6e:51:18:ed:a5: af:d4:6d:45:45:2e:9f:70:3c:b2:49:67:51:88:03: 3b:8c:a1:03:e0:69:91:a5:9f:ab:08:a5:f1:78:a3: d7:f5:3f:03:45:97:46:43:4c:f3:6d:50:9f:93:94: 04:f3:ac:cd:fd:18:4c:c8:e1:07:0f:f6:b2:4f:90: 99:a3:67:dd:ae:08:7f:bc:bf:9f:61:7e:e1:c2:5f: 23:9e:80:c2:cf:fa:8e:2e:1b:fe:1a:01:31:3f:76: 8a:83:4d:07:19:b3:8a:c7:cc:95:18:50:ab:e4:d4: 82:49:3c:35:8b:74:82:e7:0d:01:4f:b7:3c:d5:ca: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E7:25:44:C1:FA:15:30:50:70:C0:03:9F:EF:C9:98:EA:4D:AA:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86788001-2d2c-41b3-aade-12042b8560bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:6000::/40 Signature Algorithm: sha256WithRSAEncryption c9:74:e9:8a:82:c2:9a:b3:ad:c1:70:c7:68:96:44:e3:1b:7c: 79:46:78:67:c0:f7:82:ce:2e:9b:d1:d9:0f:55:86:5f:56:98: a6:7e:79:d8:94:28:a5:3d:e9:32:53:e5:03:d7:14:58:f2:6b: a4:10:ac:9c:0e:ee:b3:11:f2:28:75:ec:e0:74:4a:a4:f4:69: f4:58:9b:69:e4:9c:e4:b5:12:29:1e:fa:7b:e8:62:34:93:7e: 4d:c1:0c:86:94:d0:4a:a4:26:18:84:f9:e4:24:3a:bb:ab:93: 79:a4:2c:ab:9f:a7:cf:98:53:c8:58:04:f0:bf:5e:ed:6d:d0: 0e:ca:81:76:58:4f:fe:ea:67:a6:10:de:d7:f6:3e:65:f0:f1: 0d:f5:ab:7e:99:87:20:ec:da:66:54:72:ac:07:7f:39:f6:7b: 90:bc:66:a2:56:87:69:06:c0:73:1b:2b:c2:7a:bf:c9:4c:99: 09:a7:ea:88:be:3c:73:49:ac:07:6d:dd:1d:f2:27:48:86:94: 79:51:0e:bf:c8:7a:ed:6a:55:bb:90:44:4f:8e:88:e6:17:ff: fd:f0:81:b0:a5:39:02:b7:ae:72:f2:8a:ca:a8:2a:ae:6a:1e: f2:3b:6c:cf:cd:de:cc:d2:f6:92:55:cc:09:ac:19:03:f0:4d: d9:dc:9c:50 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcSSnjrObqN3IC3kBw4XYjweIRgcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE1MDAxMloX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNAMGFmNjI3YTc0MTI4ZGNjYzVkMzZm ZWQ2OGUxZWRhNzU5NTI3ODUxZTljNzk3Njc4OGI5NGU3MjNlNTQ2MmI2OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHJFAY17qsppnb+eWxFsmQWk556N vNV1AYtdiWllRlK0dhH1cw2SLS+7hR9b6gIRC8uCQ52ijXv4sla8S0E9w1lvGsJL Ogasn8I1+O5vEFi+IN/Y2cJQOe0CQthzIyD6xWzXb4wkZQxjC6K7+D+g2I3U8UAX DCXOwEY8llvUfiYiblEY7aWv1G1FRS6fcDyySWdRiAM7jKED4GmRpZ+rCKXxeKPX 9T8DRZdGQ0zzbVCfk5QE86zN/RhMyOEHD/ayT5CZo2fdrgh/vL+fYX7hwl8jnoDC z/qOLhv+GgExP3aKg00HGbOKx8yVGFCr5NSCSTw1i3SC5w0BT7c81coGEwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB7nJUTB+hUwUHDAA5/vyZjqTappMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2Nzg4MDAxLTJkMmMtNDFiMy1hYWRlLTEyMDQyYjg1NjBiYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9GAwDQYJKoZIhvcNAQELBQADggEBAMl06YqCwpqzrcFwx2iW ROMbfHlGeGfA94LOLpvR2Q9Vhl9WmKZ+ediUKKU96TJT5QPXFFjya6QQrJwO7rMR 8ih17OB0SqT0afRYm2nknOS1Eike+nvoYjSTfk3BDIaU0EqkJhiE+eQkOrurk3mk LKufp8+YU8hYBPC/Xu1t0A7KgXZYT/7qZ6YQ3tf2PmXw8Q31q36ZhyDs2mZUcqwH fzn2e5C8ZqJWh2kGwHMbK8J6v8lMmQmn6oi+PHNJrAdt3R3yJ0iGlHlRDr/Ieu1q VbuQRE+OiOYX//3wgbClOQK3rnLyisqoKq5qHvI7bM/N3szS9pJVzAmsGQPwTdnc nFA= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:57 2025 by rpki-client