$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af93514d-8161-4e49-b09b-f21c96c64613.roa File: af93514d-8161-4e49-b09b-f21c96c64613.roa (raw, json) Hash identifier: BT5YDYj8Lst0QvShuPjuRUdBLjTDd4ilQx+3/FYstVM= Subject key identifier: 0B:E2:0D:67:0B:30:22:B8:7C:E9:FA:BC:B0:1C:1F:B6:EA:D3:5C:E3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6EEBCD848CADDE9E291AA064BE4EB8868BC441C5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af93514d-8161-4e49-b09b-f21c96c64613.roa Signing time: Wed 29 Oct 2025 07:40:14 +0000 ROA not before: Wed 29 Oct 2025 07:40:14 +0000 ROA not after: Wed 03 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:eb:cd:84:8c:ad:de:9e:29:1a:a0:64:be:4e:b8:86:8b:c4:41:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 29 07:40:14 2025 GMT Not After : Dec 3 23:59:59 2025 GMT Subject: serialNumber=821467233d9b02c778234d2d01e08fadf1157b231f84eb70fb813c718213240d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:9a:54:2a:2f:88:d2:de:90:50:d4:21:76: f3:6e:73:3b:fb:44:f3:d2:3f:28:f7:4b:15:5c:09: fa:fe:4b:99:1d:5f:c4:b7:ce:a6:cd:35:16:4d:3c: 98:79:29:bd:14:c0:d8:7b:4e:25:11:69:6d:6d:80: 91:bf:65:d8:ea:66:eb:b4:b4:9f:e7:df:f6:ee:4c: ac:be:e3:80:9f:15:55:4c:73:2e:62:07:b5:b0:56: 38:5e:2a:0e:0e:68:04:cf:ee:38:df:0f:3c:88:72: 24:0b:af:e9:b7:79:a3:9b:f1:00:69:ef:80:00:a0: df:61:6c:31:11:06:79:18:85:4a:01:88:75:fa:5e: cd:14:b2:4d:85:d6:21:d4:fa:3f:73:e3:e9:1a:2e: 41:31:78:c6:b7:f4:3c:10:10:a7:be:0a:43:ac:76: 77:08:20:5e:84:a2:16:35:38:73:42:b4:e8:0f:b0: fa:f9:e4:a0:1f:0e:4e:e9:df:88:af:a0:33:23:92: 94:e4:08:41:95:31:c2:cb:95:ca:63:ff:33:b5:17: 92:30:fb:85:50:9f:c3:c0:66:2b:d5:87:99:33:cb: 04:3a:79:07:11:69:b0:9c:70:ff:7b:cf:9b:0d:83: 78:ba:cb:7b:47:71:44:e2:5c:09:6f:de:bf:14:be: fd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E2:0D:67:0B:30:22:B8:7C:E9:FA:BC:B0:1C:1F:B6:EA:D3:5C:E3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af93514d-8161-4e49-b09b-f21c96c64613.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:a000::/40 Signature Algorithm: sha256WithRSAEncryption 34:e7:c8:90:15:b5:5b:6e:c8:70:6c:4d:5d:f9:28:60:3c:fd: f6:93:ba:33:aa:09:db:1b:96:50:18:da:a6:1b:c3:e9:1e:9c: a2:f9:ae:58:44:13:9c:93:35:ec:a9:02:03:e5:b3:ad:70:e4: f9:16:35:1e:6b:e0:36:f0:de:6e:0e:eb:a9:2e:10:95:28:ca: d0:17:9a:b2:f7:4f:00:0e:0a:24:b4:67:95:99:c0:a0:3e:07: 81:96:37:1c:1d:89:d3:98:e3:85:8f:0e:11:b7:ac:57:bd:fa: c3:81:04:17:95:8c:d9:f6:6c:c4:71:92:a6:be:fb:11:53:21: a1:35:bd:04:f1:72:88:11:0d:31:f7:05:6f:8b:e1:1b:c7:05: 85:2b:a7:22:2f:d8:17:26:22:d8:f5:e2:82:0b:66:38:54:12: 23:d9:5a:67:ca:c6:cc:17:70:7d:ad:cb:c5:0f:88:f4:07:fc: 28:75:6a:25:ec:56:9f:87:f3:3c:ba:81:c5:2f:6a:0f:52:2f: 9f:5f:f8:2c:51:c4:e3:54:3e:0a:7a:0c:fa:98:57:74:6e:66: 02:ee:e9:78:b2:dd:78:71:4c:07:45:5c:86:39:df:b5:a3:eb: 1c:25:58:78:1f:c4:cd:44:83:88:5b:c2:83:2e:1d:f4:81:d2: 45:bd:80:30 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbuvNhIyt3p4pGqBkvk64hovEQcUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyOTA3NDAxNFoX DTI1MTIwMzIzNTk1OVowejFJMEcGA1UEBRNAODIxNDY3MjMzZDliMDJjNzc4MjM0 ZDJkMDFlMDhmYWRmMTE1N2IyMzFmODRlYjcwZmI4MTNjNzE4MjEzMjQwZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiWaVCoviNLekFDUIXbzbnM7+0Tz 0j8o90sVXAn6/kuZHV/Et86mzTUWTTyYeSm9FMDYe04lEWltbYCRv2XY6mbrtLSf 59/27kysvuOAnxVVTHMuYge1sFY4XioODmgEz+443w88iHIkC6/pt3mjm/EAae+A AKDfYWwxEQZ5GIVKAYh1+l7NFLJNhdYh1Po/c+PpGi5BMXjGt/Q8EBCnvgpDrHZ3 CCBehKIWNThzQrToD7D6+eSgHw5O6d+Ir6AzI5KU5AhBlTHCy5XKY/8ztReSMPuF UJ/DwGYr1YeZM8sEOnkHEWmwnHD/e8+bDYN4ust7R3FE4lwJb96/FL79HwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAviDWcLMCK4fOn6vLAcH7bq01zjMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmOTM1MTRkLTgxNjEtNGU0OS1iMDliLWYyMWM5NmM2NDYxMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6qAwDQYJKoZIhvcNAQELBQADggEBADTnyJAVtVtuyHBsTV35 KGA8/faTujOqCdsbllAY2qYbw+kenKL5rlhEE5yTNeypAgPls61w5PkWNR5r4Dbw 3m4O66kuEJUoytAXmrL3TwAOCiS0Z5WZwKA+B4GWNxwdidOY44WPDhG3rFe9+sOB BBeVjNn2bMRxkqa++xFTIaE1vQTxcogRDTH3BW+L4RvHBYUrpyIv2BcmItj14oIL ZjhUEiPZWmfKxswXcH2ty8UPiPQH/Ch1aiXsVp+H8zy6gcUvag9SL59f+CxRxONU Pgp6DPqYV3RuZgLu6Xiy3XhxTAdFXIY537Wj6xwlWHgfxM1Eg4hbwoMuHfSB0kW9 gDA= -----END CERTIFICATE-----Generated at Wed Nov 5 16:00:04 2025 by rpki-client