$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa File: 4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa (raw, json) Hash identifier: zYj/a8ASRheGvb9X5gu8/RF5pi2iRLSKDgPl/LgmWdw= Subject key identifier: 1B:1D:B4:BA:B8:E5:64:88:68:22:64:93:BC:22:6E:F5:DE:F7:DB:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 61A3FE90B4A46B9CA8DDA140F8F8BA2B8D70C423 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa Signing time: Mon 21 Jul 2025 15:10:17 +0000 ROA not before: Mon 21 Jul 2025 15:10:17 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a3:fe:90:b4:a4:6b:9c:a8:dd:a1:40:f8:f8:ba:2b:8d:70:c4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 15:10:17 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=d63cd43e03fd35f44d4c0abd87f0ccba69c6ddceba743a38828335a31547030e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:93:e1:af:a8:6a:52:4b:1e:a4:70:1a:ca:3b: eb:7f:bd:72:ca:b7:8f:ac:ce:b9:13:07:00:98:f2: 9d:81:88:9a:99:a8:c4:e1:15:41:4c:77:e9:08:5b: 6a:2b:dc:10:28:8e:d1:45:2f:aa:18:d2:8e:76:6d: 9a:d8:9a:14:17:bf:12:43:22:24:b6:f9:fa:90:6b: 95:1f:d3:a3:27:31:ca:c1:d4:b3:ce:89:06:0c:f2: f4:2b:a5:ff:d2:e7:73:a1:4a:bb:39:d3:12:4d:a7: 7f:1f:4d:37:8f:db:4b:84:40:0c:62:fa:0a:be:69: 8d:23:60:96:4c:a4:1d:10:6a:05:ec:79:59:e2:b8: 86:2c:e0:cf:a8:e3:71:b7:77:b3:97:32:3b:6b:e0: 82:d1:71:eb:e4:2e:4a:3e:3d:0f:10:bd:0c:eb:fd: 72:89:c8:e1:cc:1d:8d:3c:98:51:8c:46:e4:0c:ca: 73:c6:20:41:cb:b1:a9:fa:98:aa:a4:f1:7c:88:d6: 2b:0c:2c:d4:0b:cb:b4:71:0a:a7:c3:bf:cb:a9:6b: 7f:93:87:72:37:76:dc:8a:a5:7a:9d:2c:2f:8f:0d: 2f:60:ed:14:68:1e:c9:0a:9f:dd:33:86:13:f3:35: 15:4e:3c:0b:bd:41:8b:fd:39:30:b1:44:aa:67:99: 7c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1D:B4:BA:B8:E5:64:88:68:22:64:93:BC:22:6E:F5:DE:F7:DB:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4afcfbcc-a6d2-42d7-bee5-3b08bf62a861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:a080::/46 Signature Algorithm: sha256WithRSAEncryption 6f:54:f4:c9:46:81:60:26:92:67:fa:81:a8:91:9d:83:3d:22: be:6f:ae:15:4d:0f:86:d9:6f:26:2f:27:1b:58:74:ae:dd:37: ce:ff:38:99:16:7d:86:fc:39:4d:0d:c3:30:4d:50:14:17:e3: da:1d:53:c6:49:0f:ce:3f:de:73:d7:c9:c1:1a:e1:02:96:e3: 22:7f:2b:06:8c:ce:e6:ef:68:91:e3:81:93:3f:d0:46:0a:d4: 4b:59:6f:89:cd:17:ca:9c:46:c6:d0:92:12:5b:ea:78:4f:98: 25:b1:09:dd:a6:89:5d:2a:c0:12:62:da:2e:8c:24:4b:d0:1e: 31:0d:a4:77:10:6f:87:aa:c9:d9:8f:b5:eb:f0:7d:8d:2d:f1: f6:9b:47:e0:73:af:60:87:78:84:c6:10:c8:8f:76:c4:4e:64: c5:57:a2:75:8c:98:16:6e:b2:5b:df:6c:08:0a:91:98:5f:8b: 84:29:63:bd:17:7a:6b:98:8b:e9:7a:6d:b6:a3:3f:0c:88:7e: 0a:46:19:a2:4f:23:82:4d:08:15:f6:aa:ac:22:5a:81:55:8a: 3e:53:ad:f5:b3:3e:2f:23:cc:2f:94:56:b0:5f:14:f4:09:99: 4d:dc:3f:ed:b0:5c:c5:4e:48:f5:93:41:b2:81:97:2f:4b:cf: c3:11:d6:d6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYaP+kLSka5yo3aFA+Pi6K41wxCMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMTE1MTAxN1oX DTI1MDgyNTIzNTk1OVowejFJMEcGA1UEBRNAZDYzY2Q0M2UwM2ZkMzVmNDRkNGMw YWJkODdmMGNjYmE2OWM2ZGRjZWJhNzQzYTM4ODI4MzM1YTMxNTQ3MDMwZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5Phr6hqUksepHAayjvrf71yyreP rM65EwcAmPKdgYiamajE4RVBTHfpCFtqK9wQKI7RRS+qGNKOdm2a2JoUF78SQyIk tvn6kGuVH9OjJzHKwdSzzokGDPL0K6X/0udzoUq7OdMSTad/H003j9tLhEAMYvoK vmmNI2CWTKQdEGoF7HlZ4riGLODPqONxt3ezlzI7a+CC0XHr5C5KPj0PEL0M6/1y icjhzB2NPJhRjEbkDMpzxiBBy7Gp+piqpPF8iNYrDCzUC8u0cQqnw7/LqWt/k4dy N3bciqV6nSwvjw0vYO0UaB7JCp/dM4YT8zUVTjwLvUGL/TkwsUSqZ5l8PQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBsdtLq45WSIaCJkk7wibvXe99vQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRhZmNmYmNjLWE2ZDItNDJkNy1iZWU1LTNiMDhiZjYyYTg2MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba86CAMA0GCSqGSIb3DQEBCwUAA4IBAQBvVPTJRoFgJpJn+oGo kZ2DPSK+b64VTQ+G2W8mLycbWHSu3TfO/ziZFn2G/DlNDcMwTVAUF+PaHVPGSQ/O P95z18nBGuECluMifysGjM7m72iR44GTP9BGCtRLWW+JzRfKnEbG0JISW+p4T5gl sQndpoldKsASYtoujCRL0B4xDaR3EG+HqsnZj7Xr8H2NLfH2m0fgc69gh3iExhDI j3bETmTFV6J1jJgWbrJb32wICpGYX4uEKWO9F3prmIvpem22oz8MiH4KRhmiTyOC TQgV9qqsIlqBVYo+U631sz4vI8wvlFawXxT0CZlN3D/tsFzFTkj1k0GygZcvS8/D EdbW -----END CERTIFICATE-----Generated at Mon Aug 4 15:59:47 2025 by rpki-client