$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af6b0407-66be-4076-87b3-370d845449ef.roa File: af6b0407-66be-4076-87b3-370d845449ef.roa (raw, json) Hash identifier: iwuTwSx4gRhzA0oUywPcUzASRcl1GY3EsxgOoAwAOKo= Subject key identifier: 22:74:EE:91:23:03:1B:41:A1:B2:58:F4:5D:C4:ED:54:63:4F:C8:D2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6A32884FD3D276E0EC073E822CB48650868A7734 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af6b0407-66be-4076-87b3-370d845449ef.roa Signing time: Sat 07 Jun 2025 00:11:04 +0000 ROA not before: Sat 07 Jun 2025 00:11:04 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:32:88:4f:d3:d2:76:e0:ec:07:3e:82:2c:b4:86:50:86:8a:77:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 7 00:11:04 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=945448e290e986aadf672c6e18bbc132b21df7faf71cf74a09896c79e84dcd1e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:3c:b6:fb:81:d8:a6:e8:0e:be:fb:ff:8d: 1e:4d:db:93:92:e5:c2:1d:37:b6:b6:bb:54:b6:a6: e5:71:80:f9:60:71:38:93:17:df:c0:2d:ea:b3:32: e2:1a:6f:bb:62:a4:9c:89:f6:e5:29:b7:5b:d1:72: 8b:de:97:83:a3:8b:59:2a:79:72:24:38:db:06:18: 0e:f6:0f:7c:69:55:9e:ee:0a:c6:2a:2d:5d:07:c0: 10:09:c5:3e:2d:af:f3:d0:4e:8d:21:aa:12:9f:a5: e9:c4:5b:ae:5c:eb:ec:03:e3:80:a5:2b:bd:19:b4: e0:64:ef:68:72:14:70:36:fc:c4:ac:1f:db:56:8f: 56:27:aa:dc:d8:ee:14:56:98:66:32:ac:c8:b1:f1: d6:8c:77:7b:8b:dd:52:df:78:4c:b6:5a:c3:30:38: 05:85:3f:3f:bb:e6:ad:2f:9c:ed:ed:cc:5d:4f:25: b9:6e:ac:70:50:71:32:9c:51:fa:59:5e:db:7e:c9: 04:0e:00:ed:f1:79:a9:fd:c9:f6:22:dd:47:10:ee: 6c:4f:63:65:a4:5a:b0:8b:78:fc:c6:9f:59:29:e4: 22:fa:57:2f:ab:96:a4:bb:be:b5:8f:20:de:da:6d: 9b:1f:6e:f0:75:60:22:37:93:2b:b4:7e:93:0d:67: 77:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:74:EE:91:23:03:1B:41:A1:B2:58:F4:5D:C4:ED:54:63:4F:C8:D2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af6b0407-66be-4076-87b3-370d845449ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:6040::/48 Signature Algorithm: sha256WithRSAEncryption a9:ba:2e:96:fc:f7:e0:a0:9e:10:a3:cb:dd:12:4d:58:b4:3a: 7d:3a:ee:fb:ef:b8:10:50:f0:16:e6:84:ba:4e:dc:e0:0d:96: ad:a4:b0:6e:5f:01:79:ab:8b:05:20:fd:2e:fb:9d:a6:ca:bf: 4e:64:1b:31:0d:ce:03:5f:10:c4:46:7f:66:0b:92:f5:14:35: 61:cc:d0:6c:6a:e8:de:38:71:82:74:bd:fe:a7:8d:a6:cc:1c: 4e:c2:1d:be:65:77:ff:71:1d:67:0e:e5:a8:87:0e:ea:15:d2: f0:83:f0:9b:7e:e3:23:0f:d5:a4:90:0c:07:eb:80:0b:ec:83: 09:2d:c6:c8:e8:2f:46:2d:b0:27:69:e0:cb:83:79:8e:9b:80: 59:9a:13:48:37:a3:41:9b:b4:b1:2b:68:e9:8f:70:28:00:cd: c5:94:4a:07:ec:5e:40:02:42:9d:54:d6:aa:b1:47:0b:6c:a2: a1:1e:e8:2f:c9:fa:02:32:af:e2:89:36:14:d7:e4:05:28:47: 14:a4:a9:09:8e:e7:2d:42:a2:ec:cb:54:b8:f5:e6:69:29:77: 9f:82:e6:e2:dc:55:8d:5a:1b:f2:63:08:9d:16:fc:c1:2b:c3: 7b:24:d5:cf:b4:b3:ef:2f:90:a3:cc:d0:48:fc:ca:bf:ef:5b: 0d:32:50:95 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUajKIT9PSduDsBz6CLLSGUIaKdzQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYwNzAwMTEwNFoX DTI1MDcxMjIzNTk1OVowejFJMEcGA1UEBRNAOTQ1NDQ4ZTI5MGU5ODZhYWRmNjcy YzZlMThiYmMxMzJiMjFkZjdmYWY3MWNmNzRhMDk4OTZjNzllODRkY2QxZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6w8tvuB2KboDr77/40eTduTkuXC HTe2trtUtqblcYD5YHE4kxffwC3qszLiGm+7YqScifblKbdb0XKL3peDo4tZKnly JDjbBhgO9g98aVWe7grGKi1dB8AQCcU+La/z0E6NIaoSn6XpxFuuXOvsA+OApSu9 GbTgZO9ochRwNvzErB/bVo9WJ6rc2O4UVphmMqzIsfHWjHd7i91S33hMtlrDMDgF hT8/u+atL5zt7cxdTyW5bqxwUHEynFH6WV7bfskEDgDt8Xmp/cn2It1HEO5sT2Nl pFqwi3j8xp9ZKeQi+lcvq5aku761jyDe2m2bH27wdWAiN5MrtH6TDWd3JwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCJ07pEjAxtBobJY9F3E7VRjT8jSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmNmIwNDA3LTY2YmUtNDA3Ni04N2IzLTM3MGQ4NDU0NDllZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8mBAMA0GCSqGSIb3DQEBCwUAA4IBAQCpui6W/PfgoJ4Qo8vd Ek1YtDp9Ou7777gQUPAW5oS6TtzgDZatpLBuXwF5q4sFIP0u+52myr9OZBsxDc4D XxDERn9mC5L1FDVhzNBsaujeOHGCdL3+p42mzBxOwh2+ZXf/cR1nDuWohw7qFdLw g/CbfuMjD9WkkAwH64AL7IMJLcbI6C9GLbAnaeDLg3mOm4BZmhNIN6NBm7SxK2jp j3AoAM3FlEoH7F5AAkKdVNaqsUcLbKKhHugvyfoCMq/iiTYU1+QFKEcUpKkJjuct QqLsy1S49eZpKXefgubi3FWNWhvyYwidFvzBK8N7JNXPtLPvL5CjzNBI/Mq/71sN MlCV -----END CERTIFICATE-----Generated at Sat Jun 14 06:49:04 2025 by rpki-client