$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1bd913-0902-4e95-8021-6e099376c80f.roa File: af1bd913-0902-4e95-8021-6e099376c80f.roa (raw, json) Hash identifier: hhoULEofqwMTuiwPy7NNF6Xv5chvZqy7UZNdtTUXn7Y= Subject key identifier: 8B:59:AE:25:A9:83:B2:C5:9F:73:15:A9:10:94:2F:CC:CD:1F:7E:65 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 29DC7D812E650930D5B677A7058524EA0B35B2EF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1bd913-0902-4e95-8021-6e099376c80f.roa Signing time: Thu 26 Jun 2025 20:07:42 +0000 ROA not before: Thu 26 Jun 2025 20:07:42 +0000 ROA not after: Thu 31 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:b0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:dc:7d:81:2e:65:09:30:d5:b6:77:a7:05:85:24:ea:0b:35:b2:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 26 20:07:42 2025 GMT Not After : Jul 31 23:59:59 2025 GMT Subject: serialNumber=dbf67a7b29f726d13d498db6f3cd163a7e7be25056fb4b62b65718b1492452cc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:00:b6:f8:55:f0:05:fc:3a:ad:c1:d8:b9: b5:18:31:e6:48:61:58:c0:3a:16:14:cc:c9:34:08: 2e:24:7c:fb:ba:ce:d2:88:89:92:b2:72:bc:31:0c: 24:8e:2e:18:17:79:5a:a6:4d:36:5b:bd:e3:8c:a7: 2b:ec:c7:a8:31:37:6e:79:c0:a1:9d:df:7d:35:c6: 3a:78:3f:ac:25:c4:5c:16:be:cc:b0:f1:d1:60:90: 26:ed:78:be:da:a9:2c:97:ea:09:12:9e:b4:1d:67: 5c:64:9b:7f:49:77:75:6b:e9:b6:18:70:c1:85:ec: 6a:ad:ff:a6:73:09:66:ca:f7:06:66:fc:33:7b:5b: 3f:17:c0:c6:41:bb:94:f8:be:ba:08:d6:d8:13:22: 8d:f1:6c:5c:e9:a7:14:ca:99:f1:ca:76:04:0c:4d: fc:47:52:2d:c5:04:c1:b5:bc:74:c4:49:f4:a6:38: 2b:4d:f6:43:d0:5e:33:02:75:49:60:1d:04:1d:88: 50:4a:ed:7d:03:f1:59:3d:42:40:f0:b4:62:4e:82: 0e:a8:36:38:f0:db:10:d9:13:55:b0:96:1b:a9:bb: 56:01:b1:f1:f8:60:bb:09:1c:9b:5a:18:d3:e1:d6: a3:3f:b7:c7:4a:96:f7:78:3c:1c:18:27:bc:d3:26: b6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:59:AE:25:A9:83:B2:C5:9F:73:15:A9:10:94:2F:CC:CD:1F:7E:65 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1bd913-0902-4e95-8021-6e099376c80f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:b0c0::/46 Signature Algorithm: sha256WithRSAEncryption b9:3f:fe:98:c2:9f:bc:64:b1:97:c9:bd:97:72:f5:3a:6e:c7: fc:f1:c7:ff:f7:1d:5e:96:ba:db:f7:02:14:9d:e7:20:b3:c1: 98:8a:4e:58:21:35:95:cb:bf:f5:1e:d5:a6:ec:88:7a:74:8e: eb:6d:fd:99:16:74:30:4e:ee:2d:b1:56:69:d3:9a:f2:78:d4: 2f:09:92:20:bb:28:29:97:7f:64:f2:f8:70:8f:5e:9e:db:e8: 4b:bd:8a:7a:3b:52:b0:e1:ff:02:b7:e0:a6:5c:1b:d3:e6:65: cf:d2:18:59:d6:fa:2c:08:b6:18:f6:ae:b1:b1:a1:a9:15:f2: 13:a9:1e:36:77:a9:12:6f:c6:eb:f9:e1:6f:a2:c4:7b:40:62: 83:61:1f:e2:ee:f7:e7:fa:ac:f3:23:f0:88:8f:2f:27:2d:0c: 41:df:ee:b6:e0:b6:e7:7a:01:57:ba:6c:5a:7d:ba:2e:e3:dc: da:1b:a1:c8:7c:c3:df:8a:78:14:2d:59:f9:f1:bb:05:78:98: 13:1c:76:45:26:28:66:d7:70:03:32:7f:9c:c0:48:a5:fd:a5: 5f:d9:0f:85:c3:54:65:2f:7b:b1:fd:04:68:eb:b4:ff:8d:60: ea:c8:39:a7:b1:83:fe:dc:f4:61:6c:c4:80:08:80:f8:58:01: be:2f:49:f6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKdx9gS5lCTDVtnenBYUk6gs1su8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNjIwMDc0MloX DTI1MDczMTIzNTk1OVowejFJMEcGA1UEBRNAZGJmNjdhN2IyOWY3MjZkMTNkNDk4 ZGI2ZjNjZDE2M2E3ZTdiZTI1MDU2ZmI0YjYyYjY1NzE4YjE0OTI0NTJjYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ4AtvhV8AX8Oq3B2Lm1GDHmSGFY wDoWFMzJNAguJHz7us7SiImSsnK8MQwkji4YF3lapk02W73jjKcr7MeoMTduecCh nd99NcY6eD+sJcRcFr7MsPHRYJAm7Xi+2qksl+oJEp60HWdcZJt/SXd1a+m2GHDB hexqrf+mcwlmyvcGZvwze1s/F8DGQbuU+L66CNbYEyKN8Wxc6acUypnxynYEDE38 R1ItxQTBtbx0xEn0pjgrTfZD0F4zAnVJYB0EHYhQSu19A/FZPUJA8LRiToIOqDY4 8NsQ2RNVsJYbqbtWAbHx+GC7CRybWhjT4dajP7fHSpb3eDwcGCe80ya2swIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFItZriWpg7LFn3MVqRCUL8zNH35lMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmMWJkOTEzLTA5MDItNGU5NS04MDIxLTZlMDk5Mzc2YzgwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba87DAMA0GCSqGSIb3DQEBCwUAA4IBAQC5P/6Ywp+8ZLGXyb2X cvU6bsf88cf/9x1elrrb9wIUnecgs8GYik5YITWVy7/1HtWm7Ih6dI7rbf2ZFnQw Tu4tsVZp05ryeNQvCZIguygpl39k8vhwj16e2+hLvYp6O1Kw4f8Ct+CmXBvT5mXP 0hhZ1vosCLYY9q6xsaGpFfITqR42d6kSb8br+eFvosR7QGKDYR/i7vfn+qzzI/CI jy8nLQxB3+624LbnegFXumxafbou49zaG6HIfMPfingULVn58bsFeJgTHHZFJihm 13ADMn+cwEil/aVf2Q+Fw1RlL3ux/QRo67T/jWDqyDmnsYP+3PRhbMSACID4WAG+ L0n2 -----END CERTIFICATE-----Generated at Sun Jun 29 04:34:51 2025 by rpki-client