$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1bd913-0902-4e95-8021-6e099376c80f.roa File: af1bd913-0902-4e95-8021-6e099376c80f.roa (raw, json) Hash identifier: Lg7/7mfMzsmFVJ/59evpzkWU5ibO4l8exUcVqJ3MegM= Subject key identifier: 8B:F3:3A:AE:F2:DB:3D:6A:B0:FE:C3:4E:01:A8:CC:55:DD:6D:19:77 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6165387D2607A32D7BC9C4640A643212F5295C26 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1bd913-0902-4e95-8021-6e099376c80f.roa Signing time: Wed 29 Oct 2025 00:10:09 +0000 ROA not before: Wed 29 Oct 2025 00:10:09 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:b0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:65:38:7d:26:07:a3:2d:7b:c9:c4:64:0a:64:32:12:f5:29:5c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 00:10:09 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=7dc8e02f5b0e1185831c4864256147ce9b500df3edf3ffd8215f11c1e62c6f9a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:2c:85:6b:3e:8f:ac:f4:4f:05:7a:6a:4f: 39:48:75:fe:09:9f:0a:30:39:f1:4c:65:c7:21:8d: 7e:7c:fd:41:16:85:09:e4:c1:9f:13:b0:15:da:fd: 5d:a6:56:d4:18:28:b4:d9:81:a9:d3:72:f9:b0:c9: 45:d6:d2:6d:18:34:18:5f:e0:2d:cd:02:b6:2a:44: 80:1a:6b:80:f3:6e:e4:09:c9:96:0c:d2:57:0c:93: 54:38:36:b2:c2:58:54:ba:c6:2b:16:45:69:fd:fe: 61:02:d2:09:4f:5d:4c:52:e6:d1:ee:79:3d:73:a0: 8b:2a:d4:b3:7e:9a:f7:0e:86:5e:eb:9b:56:f0:3e: 67:ca:d9:dd:a6:b4:b7:4c:15:58:dc:c4:a9:79:a0: f7:1b:3a:5c:9b:19:68:3f:ce:6c:3d:d6:f0:d0:bf: 49:3c:80:c2:54:c2:04:cb:9b:67:a1:f1:d0:05:3a: 91:46:16:8d:1a:21:14:49:a2:dd:26:f8:bf:ee:b9: 6a:00:a6:db:55:bb:22:41:a9:e8:1c:db:39:cd:53: c7:5a:3f:d1:1c:4d:ae:f8:16:dc:c2:0a:3a:c7:b0: ac:22:cc:3f:f4:13:2a:39:08:be:96:a7:28:56:f4: 2e:e3:e1:63:0e:90:04:b3:47:d0:2b:aa:46:34:69: 7f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F3:3A:AE:F2:DB:3D:6A:B0:FE:C3:4E:01:A8:CC:55:DD:6D:19:77 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af1bd913-0902-4e95-8021-6e099376c80f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:b0c0::/46 Signature Algorithm: sha256WithRSAEncryption 1d:c7:12:6f:57:92:14:a3:30:c0:82:37:9c:a8:27:6c:e0:72: f9:92:37:de:a6:b5:b3:fc:79:80:23:db:47:08:e9:a1:fe:99: c9:ab:ad:6d:ec:cf:1d:bc:f5:5c:8d:69:79:7e:e1:cc:28:6c: 20:0f:66:ad:2e:73:63:9d:2a:cb:8f:18:c1:c2:d9:ba:09:12: 2f:dc:2a:73:86:e3:82:53:7f:3d:63:0e:71:a4:eb:61:76:5b: 7b:90:0a:59:d6:16:ca:18:83:8b:35:ee:c8:00:7a:a9:ab:92: 0f:82:8b:ec:14:a8:4c:20:36:61:36:d9:e4:69:58:f9:01:ca: 59:a3:8a:39:45:e8:0d:83:b3:b3:c2:49:f2:49:e2:95:21:4c: fa:96:57:fe:30:cb:18:0e:9e:bf:7e:ca:37:34:db:d0:86:82: ae:15:3a:03:4e:a2:1a:5d:21:1a:03:8a:64:a6:1e:10:c1:19: 3c:d1:72:c0:b6:04:4e:9a:73:4e:f8:5b:3a:ad:b8:f4:f9:f9: 39:13:8b:71:72:c9:70:aa:dd:55:27:0d:36:38:4d:57:a8:3c: 4b:74:f0:88:83:48:f5:64:cf:57:01:fb:cc:18:c3:86:10:b9: 06:a0:ce:53:1d:6c:6c:20:d5:a1:ec:7a:43:13:5d:2e:99:40: 44:57:39:30 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYWU4fSYHoy17ycRkCmQyEvUpXCYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTAwMTAwOVoX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAN2RjOGUwMmY1YjBlMTE4NTgzMWM0 ODY0MjU2MTQ3Y2U5YjUwMGRmM2VkZjNmZmQ4MjE1ZjExYzFlNjJjNmY5YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0cshWs+j6z0TwV6ak85SHX+CZ8K MDnxTGXHIY1+fP1BFoUJ5MGfE7AV2v1dplbUGCi02YGp03L5sMlF1tJtGDQYX+At zQK2KkSAGmuA827kCcmWDNJXDJNUODaywlhUusYrFkVp/f5hAtIJT11MUubR7nk9 c6CLKtSzfpr3DoZe65tW8D5nytndprS3TBVY3MSpeaD3GzpcmxloP85sPdbw0L9J PIDCVMIEy5tnofHQBTqRRhaNGiEUSaLdJvi/7rlqAKbbVbsiQanoHNs5zVPHWj/R HE2u+Bbcwgo6x7CsIsw/9BMqOQi+lqcoVvQu4+FjDpAEs0fQK6pGNGl/7wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIvzOq7y2z1qsP7DTgGozFXdbRl3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmMWJkOTEzLTA5MDItNGU5NS04MDIxLTZlMDk5Mzc2YzgwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba87DAMA0GCSqGSIb3DQEBCwUAA4IBAQAdxxJvV5IUozDAgjec qCds4HL5kjfeprWz/HmAI9tHCOmh/pnJq61t7M8dvPVcjWl5fuHMKGwgD2atLnNj nSrLjxjBwtm6CRIv3CpzhuOCU389Yw5xpOthdlt7kApZ1hbKGIOLNe7IAHqpq5IP govsFKhMIDZhNtnkaVj5AcpZo4o5RegNg7OzwknySeKVIUz6llf+MMsYDp6/fso3 NNvQhoKuFToDTqIaXSEaA4pkph4QwRk80XLAtgROmnNO+Fs6rbj0+fk5E4txcslw qt1VJw02OE1XqDxLdPCIg0j1ZM9XAfvMGMOGELkGoM5THWxsINWh7HpDE10umUBE Vzkw -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:45 2025 by rpki-client