$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afcac07a-e6ca-4152-9a24-ce75f3f5d110.roa File: afcac07a-e6ca-4152-9a24-ce75f3f5d110.roa (raw, json) Hash identifier: +PQjY8GO+X04zvGg9ZJCxWDp/Vkur7ATrMgc2ZlmZmg= Subject key identifier: 5D:1B:90:CA:C9:75:01:E9:66:A0:4E:2C:34:EC:62:65:77:97:C4:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 747EE6CED53DEFED4A73A4FC135ADEFB79815D95 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afcac07a-e6ca-4152-9a24-ce75f3f5d110.roa Signing time: Tue 10 Jun 2025 00:11:42 +0000 ROA not before: Tue 10 Jun 2025 00:11:42 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:f080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7e:e6:ce:d5:3d:ef:ed:4a:73:a4:fc:13:5a:de:fb:79:81:5d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 00:11:42 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=a277bd1bce43ba2034b85675bcbe10555d15567642cb42a040f84ec9ccd99654, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:74:f5:46:95:35:a0:74:d3:4c:79:f1:ff:ea: 33:08:ad:ce:22:81:9a:3e:dd:cc:15:aa:44:68:29: ff:48:75:58:6e:04:90:2a:e1:ac:f2:56:c2:5d:5c: d4:c5:4f:98:3b:61:0f:0a:3b:e6:2b:7a:d7:a3:ee: 67:a5:64:8d:00:37:61:80:3a:e9:39:96:9e:6f:9b: be:ea:a1:3a:fb:29:a2:b5:a3:30:23:83:6b:8f:38: a9:7e:f8:d6:20:95:5f:2a:5d:e3:54:b4:b8:6a:1d: 5f:81:53:63:7c:32:25:39:7c:ef:cb:f4:e3:e3:88: 2e:35:61:49:df:72:1f:01:a7:20:db:4a:73:9e:03: b6:40:13:ce:fc:0e:53:46:63:b4:db:3a:f8:b2:16: 25:ef:09:ec:3d:0c:98:69:9f:c0:13:c3:09:25:9a: ff:43:32:71:47:e3:82:36:76:ab:53:bd:64:af:3f: 2c:e6:15:de:9c:10:7e:2d:24:3e:b4:c2:9e:ce:25: 7f:6b:62:57:dc:87:52:c8:05:c0:a0:e0:45:73:d7: 20:36:79:eb:62:c2:40:b9:7c:c5:5c:58:65:f8:1e: db:e1:a7:a4:58:7e:e2:49:5d:f7:51:ea:fb:5d:90: f5:ec:c8:fd:0c:4d:d5:c9:cf:93:77:62:21:9a:ec: 98:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1B:90:CA:C9:75:01:E9:66:A0:4E:2C:34:EC:62:65:77:97:C4:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/afcac07a-e6ca-4152-9a24-ce75f3f5d110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:f080::/46 Signature Algorithm: sha256WithRSAEncryption 78:5e:f0:60:49:e2:77:5b:99:d1:17:48:3d:a7:d7:b7:fb:34: 38:61:87:c3:a7:32:3e:ff:d2:f4:2b:c0:84:98:66:a3:fa:73: 31:2a:99:c4:ad:59:fb:32:83:91:38:32:0f:ac:f9:af:b6:d0: e9:8a:21:40:be:5e:75:39:9c:7b:cd:58:d0:3c:47:c7:55:65: c8:cf:7b:d4:31:56:93:ab:a2:90:45:1b:90:af:37:6b:5c:d2: 10:96:a3:c9:2a:64:e1:16:8f:ca:8f:07:8d:ed:75:25:39:23: a2:a6:0a:08:59:5e:e9:9b:41:99:02:7c:72:66:a7:3c:d5:49: 83:1f:14:1a:f0:e2:a6:4a:3c:5d:c3:61:72:66:c2:af:15:ae: 49:5d:c3:aa:a3:44:bb:19:5f:74:4e:8c:f2:f5:b3:a1:01:db: 2c:97:14:04:63:9c:4b:cb:bd:a5:60:41:9f:4d:5d:04:25:89: dd:24:54:c0:9e:15:51:88:92:fc:fd:eb:cf:b4:6a:b7:fc:b9: 9d:38:ec:d6:b1:ac:06:e1:5b:27:e5:7f:f0:fe:f5:f2:f1:9c: f7:3b:60:3e:20:69:6f:6d:8c:08:2a:e6:87:82:04:d4:f2:8d: 8b:a0:8f:da:9d:e4:7e:26:83:4c:7d:27:30:8c:11:b0:be:8b: d5:d6:e2:fc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdH7mztU97+1Kc6T8E1re+3mBXZUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDAwMTE0MloX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAYTI3N2JkMWJjZTQzYmEyMDM0Yjg1 Njc1YmNiZTEwNTU1ZDE1NTY3NjQyY2I0MmEwNDBmODRlYzljY2Q5OTY1NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nT1RpU1oHTTTHnx/+ozCK3OIoGa Pt3MFapEaCn/SHVYbgSQKuGs8lbCXVzUxU+YO2EPCjvmK3rXo+5npWSNADdhgDrp OZaeb5u+6qE6+ymitaMwI4NrjzipfvjWIJVfKl3jVLS4ah1fgVNjfDIlOXzvy/Tj 44guNWFJ33IfAacg20pzngO2QBPO/A5TRmO02zr4shYl7wnsPQyYaZ/AE8MJJZr/ QzJxR+OCNnarU71krz8s5hXenBB+LSQ+tMKeziV/a2JX3IdSyAXAoOBFc9cgNnnr YsJAuXzFXFhl+B7b4aekWH7iSV33Uer7XZD17Mj9DE3Vyc+Td2IhmuyYOQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF0bkMrJdQHpZqBOLDTsYmV3l8QNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmY2FjMDdhLWU2Y2EtNDE1Mi05YTI0LWNlNzVmM2Y1ZDExMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+/CAMA0GCSqGSIb3DQEBCwUAA4IBAQB4XvBgSeJ3W5nRF0g9 p9e3+zQ4YYfDpzI+/9L0K8CEmGaj+nMxKpnErVn7MoORODIPrPmvttDpiiFAvl51 OZx7zVjQPEfHVWXIz3vUMVaTq6KQRRuQrzdrXNIQlqPJKmThFo/KjweN7XUlOSOi pgoIWV7pm0GZAnxyZqc81UmDHxQa8OKmSjxdw2FyZsKvFa5JXcOqo0S7GV90Tozy 9bOhAdsslxQEY5xLy72lYEGfTV0EJYndJFTAnhVRiJL8/evPtGq3/LmdOOzWsawG 4Vsn5X/w/vXy8Zz3O2A+IGlvbYwIKuaHggTU8o2LoI/aneR+JoNMfScwjBGwvovV 1uL8 -----END CERTIFICATE-----Generated at Sat Jun 14 06:27:11 2025 by rpki-client