$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac620d43-bae2-4977-92ae-a49214b6262c.roa File: ac620d43-bae2-4977-92ae-a49214b6262c.roa (raw, json) Hash identifier: NQRy/wdufcHMd8kzJZiTlHpKgRXosF6UBe1/IIl2Cko= Subject key identifier: 63:73:C6:34:02:A8:5F:65:FB:8C:36:2F:7A:21:31:CB:5C:E1:38:80 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3D0AF9DFBC4249474671970726DDF4193823526D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac620d43-bae2-4977-92ae-a49214b6262c.roa Signing time: Mon 22 Jun 2026 00:01:23 +0000 ROA not before: Mon 22 Jun 2026 00:01:23 +0000 ROA not after: Sun 20 Sep 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daeb:9000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 00:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0a:f9:df:bc:42:49:47:46:71:97:07:26:dd:f4:19:38:23:52:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 22 00:01:23 2026 GMT Not After : Sep 20 23:59:59 2026 GMT Subject: serialNumber=9a0ccb69f6ff7cc07ea3af2b837ca54a2aeb407bbb33056c299df60b2d43d846, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:0a:99:b0:1d:c1:92:d9:a7:2d:e3:8a:94: d0:ea:00:b3:12:c8:59:ab:1a:18:ba:43:d8:46:6c: d2:55:96:d4:ec:56:3f:aa:db:69:40:a0:b6:d7:1b: 46:dd:39:5d:e1:6c:3e:c3:e1:49:29:63:60:6e:d5: bd:fc:57:12:99:7c:6c:2a:1d:3d:65:bc:61:d0:73: 1a:8b:3c:cd:44:d1:1b:c4:cb:d3:7e:3e:4a:ef:06: 92:62:ab:f3:79:13:13:49:cc:17:ef:2e:3d:d0:c3: 6d:70:8b:5c:a6:f1:9f:23:e6:cf:a1:a3:c8:0e:af: e7:ff:8a:f7:4b:6f:89:e5:cf:b4:19:a3:dc:c8:e1: dd:c5:1d:4c:f3:d7:37:71:4c:c4:21:a3:13:c2:aa: 1f:49:fc:73:c9:83:91:a3:c9:13:9a:a1:41:86:1c: 4a:01:c2:1f:3a:ec:b5:7e:35:60:53:2a:c1:c7:ef: 0b:79:96:33:32:7b:d4:39:bc:e5:34:7c:8b:31:d7: 69:49:c1:75:fd:fa:e9:e7:cb:ee:89:59:29:e4:db: b1:05:01:7f:8c:ad:14:06:a6:e2:07:4a:08:36:b7: cd:d6:f7:c5:f7:83:ec:af:04:c9:82:2a:54:70:19: 4c:c2:bd:13:a2:f7:6b:34:5a:06:34:46:9a:74:8f: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:73:C6:34:02:A8:5F:65:FB:8C:36:2F:7A:21:31:CB:5C:E1:38:80 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ac620d43-bae2-4977-92ae-a49214b6262c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daeb:9000::/40 Signature Algorithm: sha256WithRSAEncryption 61:06:30:63:22:e0:15:a7:96:3f:a9:0c:e9:d0:01:15:1d:20: 2e:44:e5:ec:0d:43:f5:e7:be:28:78:da:7e:f5:58:c9:a8:6e: 3c:5d:d3:8e:bd:81:41:ac:24:7f:8c:c3:ae:f3:55:89:2e:85: cc:18:09:1c:c8:a4:05:9c:1f:df:34:12:1e:2d:5f:12:c1:1d: 35:20:f7:8b:11:2d:2d:bc:c5:36:fe:fd:7b:9d:a7:f9:25:41: cb:34:35:2e:54:34:25:69:2c:cc:40:39:28:08:53:44:bc:b9: 8b:12:5b:28:1b:88:3e:8f:d5:75:d4:e6:75:9b:71:d0:d3:38: 2c:58:b1:cb:5c:bc:2d:9e:eb:77:81:9e:79:c2:ae:e6:27:bb: 47:e0:68:b8:d9:69:8a:f9:07:02:7e:55:38:47:71:3c:c9:c9: 29:4d:3f:f8:da:56:20:09:bc:5a:a4:ac:04:ee:c4:a7:93:d4: bd:ac:39:58:e6:2f:e2:06:dc:00:83:2f:e2:af:c7:51:08:8c: b7:13:a4:7f:5f:ee:86:b8:10:7f:ff:27:6b:a1:fa:59:72:5b: 7a:36:78:26:43:09:28:20:b8:7d:44:b8:df:66:9a:f0:80:74: a5:1f:c7:70:ac:b3:8e:35:67:17:ec:da:53:02:40:31:e9:73: 39:b9:02:73 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUPQr537xCSUdGcZcHJt30GTgjUm0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDYyMjAwMDEyM1oX DTI2MDkyMDIzNTk1OVowejFJMEcGA1UEBRNAOWEwY2NiNjlmNmZmN2NjMDdlYTNh ZjJiODM3Y2E1NGEyYWViNDA3YmJiMzMwNTZjMjk5ZGY2MGIyZDQzZDg0NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKkKmbAdwZLZpy3jipTQ6gCzEshZ qxoYukPYRmzSVZbU7FY/qttpQKC21xtG3Tld4Ww+w+FJKWNgbtW9/FcSmXxsKh09 Zbxh0HMaizzNRNEbxMvTfj5K7waSYqvzeRMTScwX7y490MNtcItcpvGfI+bPoaPI Dq/n/4r3S2+J5c+0GaPcyOHdxR1M89c3cUzEIaMTwqofSfxzyYORo8kTmqFBhhxK AcIfOuy1fjVgUyrBx+8LeZYzMnvUObzlNHyLMddpScF1/frp58vuiVkp5NuxBQF/ jK0UBqbiB0oINrfN1vfF94PsrwTJgipUcBlMwr0TovdrNFoGNEaadI+vdwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGNzxjQCqF9l+4w2L3ohMctc4TiAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FjNjIwZDQzLWJhZTItNDk3Ny05MmFlLWE0OTIxNGI2MjYyYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba65AwDQYJKoZIhvcNAQELBQADggEBAGEGMGMi4BWnlj+pDOnQ ARUdIC5E5ewNQ/Xnvih42n71WMmobjxd0469gUGsJH+Mw67zVYkuhcwYCRzIpAWc H980Eh4tXxLBHTUg94sRLS28xTb+/Xudp/klQcs0NS5UNCVpLMxAOSgIU0S8uYsS WygbiD6P1XXU5nWbcdDTOCxYsctcvC2e63eBnnnCruYnu0fgaLjZaYr5BwJ+VThH cTzJySlNP/jaViAJvFqkrATuxKeT1L2sOVjmL+IG3ACDL+Kvx1EIjLcTpH9f7oa4 EH//J2uh+llyW3o2eCZDCSgguH1EuN9mmvCAdKUfx3Css441Zxfs2lMCQDHpczm5 AnM= -----END CERTIFICATE-----Generated at Thu Jul 9 11:05:05 2026 by rpki-client