$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa File: 07cfb406-d628-472a-94e3-493598a051d0.roa (raw, json) Hash identifier: xw1erNZkZDwX6U9JAGLaFAebJsjMOAlZnZKT+PUoGEU= Subject key identifier: 09:E8:70:B5:32:65:7B:9A:22:9A:69:46:CC:F9:E2:75:4C:FD:11:75 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5E88C1D1F70F01A2FD3376B15B9F18CDB67F3232 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa Signing time: Sat 23 Aug 2025 00:21:41 +0000 ROA not before: Sat 23 Aug 2025 00:21:41 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:88:c1:d1:f7:0f:01:a2:fd:33:76:b1:5b:9f:18:cd:b6:7f:32:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 23 00:21:41 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=9337c4d7fed4a6f7d60866b3a891dfe1130846fc5f291f89de93327da6030372, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:39:a5:76:ce:29:d2:47:bf:2f:7f:7b:3b: 98:1d:53:67:5c:1b:75:61:f8:9f:f7:30:8f:06:cd: cd:ff:10:2e:8d:f5:05:e9:ac:5e:d8:a0:3a:34:ef: 65:5f:ca:d6:3f:71:84:67:0f:74:3b:d2:51:a1:96: de:98:1b:bf:32:30:ad:23:47:5c:dd:f1:bd:59:f1: 39:ba:85:c8:38:f5:9d:c9:51:48:d6:af:35:1c:7f: 8b:1e:f7:f7:7b:09:1b:5a:a4:2e:11:d1:57:6f:5d: e4:d6:00:59:12:a8:5d:87:53:70:bf:4f:6a:e3:44: 9c:ec:f4:db:73:ab:7e:16:7d:e7:9c:20:28:16:a7: b3:f9:cc:dc:c4:a0:57:11:b5:72:a4:d7:df:9a:2e: fb:9c:44:b2:b1:cc:d6:7d:eb:9d:ee:ee:34:bf:02: 07:2f:c8:f9:ca:a9:e0:ad:31:5b:a6:7f:bb:63:f5: 42:a5:6d:35:ac:a2:e4:5b:9c:98:12:47:93:4e:84: ae:c3:b2:a2:c7:4f:85:21:8f:d6:5b:95:24:89:de: 42:b5:67:8e:34:db:5e:31:b8:a4:27:f3:b8:70:1d: af:f6:cb:49:79:31:51:a2:b1:f0:5e:80:11:29:e6: db:21:e0:d7:99:cf:c1:b9:bb:ae:32:cb:53:93:5e: 1c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E8:70:B5:32:65:7B:9A:22:9A:69:46:CC:F9:E2:75:4C:FD:11:75 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2040::/48 Signature Algorithm: sha256WithRSAEncryption ad:47:d8:0b:0d:99:1a:5a:a1:b8:c0:02:95:ba:da:7b:df:c1: 0c:63:b0:1d:88:6f:c8:6b:91:ee:44:4d:02:60:bf:f2:33:95: 98:1c:5f:e2:d5:b6:c0:9f:79:4c:d9:92:5b:80:f0:cd:23:31: ac:cf:d3:f7:cf:79:22:af:4f:a3:29:21:ab:20:dd:de:23:34: e0:0e:06:78:52:60:a4:1c:21:20:06:8c:f3:e8:1d:56:69:32: b8:90:3c:01:6f:28:86:e6:4d:bf:7e:aa:35:c6:8e:57:76:8d: 79:db:4e:e5:3b:02:ca:12:e9:17:cf:c3:0a:e1:ce:30:d9:f0: c5:29:74:43:8d:be:ea:dd:23:41:30:22:11:ae:77:41:9f:cb: 9f:d3:6f:70:8f:3c:f2:2b:d9:f6:21:0e:b3:62:1a:50:4a:1d: 00:1c:24:2f:70:70:b0:c3:08:4b:25:d1:1a:ef:d8:50:23:3b: 40:09:c9:b1:0c:be:58:c8:26:73:e2:d3:35:fc:22:e9:6f:b8: 6f:73:c6:62:5a:3d:0a:df:86:ea:e9:34:46:5f:41:e2:9d:bb: 10:cb:fe:95:e5:3c:4e:19:3f:69:32:d0:27:2c:5d:81:a3:91: 29:52:46:8b:25:fa:1d:1e:c6:55:e3:2a:0d:7f:6e:1e:e2:c5: f7:97:6a:2c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXojB0fcPAaL9M3axW58YzbZ/MjIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgyMzAwMjE0MVoX DTI1MDkyNzIzNTk1OVowejFJMEcGA1UEBRNAOTMzN2M0ZDdmZWQ0YTZmN2Q2MDg2 NmIzYTg5MWRmZTExMzA4NDZmYzVmMjkxZjg5ZGU5MzMyN2RhNjAzMDM3MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoI5pXbOKdJHvy9/ezuYHVNnXBt1 Yfif9zCPBs3N/xAujfUF6axe2KA6NO9lX8rWP3GEZw90O9JRoZbemBu/MjCtI0dc 3fG9WfE5uoXIOPWdyVFI1q81HH+LHvf3ewkbWqQuEdFXb13k1gBZEqhdh1Nwv09q 40Sc7PTbc6t+Fn3nnCAoFqez+czcxKBXEbVypNffmi77nESysczWfeud7u40vwIH L8j5yqngrTFbpn+7Y/VCpW01rKLkW5yYEkeTToSuw7Kix0+FIY/WW5Ukid5CtWeO NNteMbikJ/O4cB2v9stJeTFRorHwXoARKebbIeDXmc/BubuuMstTk14cTQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAnocLUyZXuaIpppRsz54nVM/RF1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3Y2ZiNDA2LWQ2MjgtNDcyYS05NGUzLTQ5MzU5OGEwNTFkMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaACBAMA0GCSqGSIb3DQEBCwUAA4IBAQCtR9gLDZkaWqG4wAKV utp738EMY7AdiG/Ia5HuRE0CYL/yM5WYHF/i1bbAn3lM2ZJbgPDNIzGsz9P3z3ki r0+jKSGrIN3eIzTgDgZ4UmCkHCEgBozz6B1WaTK4kDwBbyiG5k2/fqo1xo5Xdo15 207lOwLKEukXz8MK4c4w2fDFKXRDjb7q3SNBMCIRrndBn8uf029wjzzyK9n2IQ6z YhpQSh0AHCQvcHCwwwhLJdEa79hQIztACcmxDL5YyCZz4tM1/CLpb7hvc8ZiWj0K 34bq6TRGX0HinbsQy/6V5TxOGT9pMtAnLF2Bo5EpUkaLJfodHsZV4yoNf24e4sX3 l2os -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:08 2025 by rpki-client