$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1bd913-0902-4e95-8021-6e099376c80f.roa File: af1bd913-0902-4e95-8021-6e099376c80f.roa (raw, json) Hash identifier: WRb7/IblqcBeAIMy8lezPuYHL2eA7fdK5fNA+GIufKQ= Subject key identifier: B1:D3:CD:2A:B5:A1:4D:EB:B9:2F:86:7C:F7:D4:0F:9D:CD:D7:AE:A3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A4ACA56B6FF31070AB3330BD591A94AA68833F2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1bd913-0902-4e95-8021-6e099376c80f.roa Signing time: Tue 21 Jul 2026 00:11:02 +0000 ROA not before: Tue 21 Jul 2026 00:11:02 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:b0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:4a:ca:56:b6:ff:31:07:0a:b3:33:0b:d5:91:a9:4a:a6:88:33:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:11:02 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=c44ef0118fe640a91e64289e2c622e31fbd1b1f9be7130c6cf11133ccc8c6075, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:f7:4f:9f:d2:ec:c9:89:b0:61:c9:55:2f: 94:40:95:55:02:9b:9e:95:84:9b:35:57:64:4d:ea: 58:27:24:21:78:db:ce:03:94:f6:1c:fe:5c:08:44: 3c:d4:ea:d1:a2:07:87:f2:15:53:52:7e:9a:1f:bf: 6a:66:e4:ed:17:20:67:8b:2e:41:ce:6b:e3:cf:4b: 72:4f:29:01:23:1f:d3:88:9a:59:c2:ae:32:06:4f: 81:ee:04:a7:d5:2d:f7:b9:e6:e2:b6:95:dd:e9:88: 89:8e:df:9f:18:2e:79:94:70:55:ba:d5:15:99:31: e0:a0:54:de:a7:9b:84:77:a3:88:c5:90:4f:95:65: ad:d8:f5:b4:85:e9:53:9e:2a:c5:6a:f3:f0:5a:87: dd:27:14:c8:37:78:b5:25:90:79:c8:cf:5c:db:6b: 05:1a:b5:e8:4a:00:2e:42:fb:94:74:df:5d:4c:a4: 95:89:2a:f0:41:ff:d4:3e:e5:33:93:80:26:74:5c: 63:20:8a:6a:00:4a:cb:7b:75:4a:0c:92:87:12:39: 9b:f2:45:68:75:6c:05:f1:53:28:a4:fe:c6:b5:03: 29:37:cc:7c:b5:ec:12:12:bc:87:d9:f4:11:52:2c: 78:be:ce:3e:08:aa:f5:8b:d0:d5:15:5b:0c:9e:2c: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D3:CD:2A:B5:A1:4D:EB:B9:2F:86:7C:F7:D4:0F:9D:CD:D7:AE:A3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1bd913-0902-4e95-8021-6e099376c80f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:b0c0::/46 Signature Algorithm: sha256WithRSAEncryption 49:d8:fd:ba:fa:08:65:c3:bb:fb:9f:1e:1b:03:bd:11:95:99: d3:14:97:82:e1:7b:35:01:a9:ce:3b:ed:0f:24:37:f0:7e:f8: 2b:a3:70:4b:1a:ba:ea:4c:e0:5a:c2:38:c6:51:f3:6a:41:3a: 61:05:31:a4:b1:85:76:93:f8:73:c8:e1:e0:99:3e:26:a7:a7: d7:b2:6d:1d:4e:71:0b:d0:08:53:bc:db:25:80:d4:51:71:89: a4:8e:f1:4a:7e:34:cf:5f:0f:cc:fd:e1:1b:4b:41:34:71:ce: 3f:a7:4c:78:a2:0c:8e:57:dc:bc:b0:d5:a4:aa:de:06:3a:cf: b8:8e:b7:7a:e8:2d:bb:ac:f7:a3:a1:56:5f:c6:4d:b7:53:7c: e0:3e:fe:bf:08:51:84:7d:88:06:df:c9:75:e3:6e:2d:46:e7: 38:35:30:24:ad:a0:6f:7a:05:64:df:5a:6c:91:12:5f:b0:c5: 55:9f:1a:61:e2:4e:97:f2:e3:57:d4:7b:e5:11:81:e1:fc:68: e3:4e:78:2f:f2:97:bf:e3:e4:d1:ab:50:61:aa:dd:a0:45:bc: 0b:f2:fa:f2:05:0e:9b:f8:6d:ae:f8:fd:19:83:20:d1:41:b9: 86:a8:a4:25:04:74:f7:c6:11:64:03:dd:39:53:5f:e4:cf:7e: 47:06:c6:2a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKkrKVrb/MQcKszML1ZGpSqaIM/IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMTEwMloX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAYzQ0ZWYwMTE4ZmU2NDBhOTFlNjQy ODllMmM2MjJlMzFmYmQxYjFmOWJlNzEzMGM2Y2YxMTEzM2NjYzhjNjA3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnr3T5/S7MmJsGHJVS+UQJVVApue lYSbNVdkTepYJyQheNvOA5T2HP5cCEQ81OrRogeH8hVTUn6aH79qZuTtFyBniy5B zmvjz0tyTykBIx/TiJpZwq4yBk+B7gSn1S33uebitpXd6YiJjt+fGC55lHBVutUV mTHgoFTep5uEd6OIxZBPlWWt2PW0helTnirFavPwWofdJxTIN3i1JZB5yM9c22sF GrXoSgAuQvuUdN9dTKSViSrwQf/UPuUzk4AmdFxjIIpqAErLe3VKDJKHEjmb8kVo dWwF8VMopP7GtQMpN8x8tewSEryH2fQRUix4vs4+CKr1i9DVFVsMnizvowIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLHTzSq1oU3ruS+GfPfUD53N166jMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmMWJkOTEzLTA5MDItNGU5NS04MDIxLTZlMDk5Mzc2YzgwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba87DAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ2P26+ghlw7v7nx4b A70RlZnTFJeC4Xs1AanOO+0PJDfwfvgro3BLGrrqTOBawjjGUfNqQTphBTGksYV2 k/hzyOHgmT4mp6fXsm0dTnEL0AhTvNslgNRRcYmkjvFKfjTPXw/M/eEbS0E0cc4/ p0x4ogyOV9y8sNWkqt4GOs+4jrd66C27rPejoVZfxk23U3zgPv6/CFGEfYgG38l1 424tRuc4NTAkraBvegVk31pskRJfsMVVnxph4k6X8uNX1HvlEYHh/GjjTngv8pe/ 4+TRq1Bhqt2gRbwL8vryBQ6b+G2u+P0ZgyDRQbmGqKQlBHT3xhFkA905U1/kz35H BsYq -----END CERTIFICATE-----Generated at Fri Jul 24 05:06:33 2026 by rpki-client