$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/755b4fcb-1a64-4574-a1e3-742632f6382c.roa File: 755b4fcb-1a64-4574-a1e3-742632f6382c.roa (raw, json) Hash identifier: IBH4bg+4gMs98QTdK6M6Aoo0PAiL5fUbjSY3OfTJFKg= Subject key identifier: 19:2A:1D:AE:28:EC:8F:9B:E4:83:66:F6:2E:6A:DB:9C:B2:A9:7A:1E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1FDD226DABE71F0B4A30EC8554B011F0400B6AE7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/755b4fcb-1a64-4574-a1e3-742632f6382c.roa Signing time: Tue 25 Mar 2025 15:21:31 +0000 ROA not before: Tue 25 Mar 2025 15:21:31 +0000 ROA not after: Tue 29 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:8080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:dd:22:6d:ab:e7:1f:0b:4a:30:ec:85:54:b0:11:f0:40:0b:6a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 25 15:21:31 2025 GMT Not After : Apr 29 23:59:59 2025 GMT Subject: serialNumber=980ba1f3f80824b61f85cf32ad2e785a7493b302f56aa637d325fb9eeee03054, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4c:88:bf:a1:a1:ea:5b:ea:0f:d4:4d:0d:d9: 9c:e9:af:63:ff:63:98:36:94:19:06:9a:ee:e5:9e: 5d:1d:58:7b:48:e4:5c:c9:ee:c9:05:01:1d:ee:d5: 74:f6:e4:ac:e1:71:c6:95:8c:aa:65:aa:9a:80:83: ab:24:72:67:e1:90:0a:03:a3:24:77:7c:82:14:1a: 59:c4:87:1c:f7:5d:a8:5e:55:9d:65:71:c8:c5:5a: a3:4c:58:42:63:83:87:ff:f0:f3:d2:ba:ee:a3:9f: 36:c3:3d:b3:14:49:29:86:e5:46:5f:55:2c:61:0d: 35:b0:f7:92:c3:52:48:88:08:06:19:64:11:aa:ea: c7:84:8e:85:50:f2:00:e9:9b:f2:3e:4e:75:1e:e0: 1a:8d:21:20:dd:5d:ba:9f:43:6f:d9:e7:da:9b:63: b6:17:39:62:0a:3c:2f:40:61:83:8f:96:94:ef:92: 3a:f5:3c:f4:16:7b:9b:11:55:92:c8:aa:95:a2:02: fe:82:72:ae:65:1c:29:84:79:5b:a4:82:95:ce:67: f9:60:80:1d:bf:89:e2:78:00:4c:36:e2:e8:4c:fa: b1:25:c0:6b:57:d7:0d:82:c2:86:02:de:a0:77:49: 73:af:4f:e2:1b:9e:21:36:dd:c8:89:40:87:c7:36: eb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2A:1D:AE:28:EC:8F:9B:E4:83:66:F6:2E:6A:DB:9C:B2:A9:7A:1E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/755b4fcb-1a64-4574-a1e3-742632f6382c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:8080::/46 Signature Algorithm: sha256WithRSAEncryption ab:d0:f5:c4:38:6c:ca:6a:9d:ba:1e:ea:40:e5:7a:5a:f8:4e: cb:d3:1a:26:7f:42:3e:66:81:05:68:14:40:7e:eb:a6:37:58: 88:08:05:f6:2d:49:0f:9c:ee:26:c8:db:65:bc:2f:8e:75:ee: d7:0a:54:00:e4:9c:7c:c4:e9:15:5c:0f:15:35:5d:55:ee:ee: d5:22:73:d8:f8:c2:45:6b:bf:05:9c:0d:7d:66:fd:5f:f1:8c: 30:75:a5:4a:ad:cf:4a:0e:5e:13:bc:3f:bb:80:39:56:b4:61: 4d:53:37:1a:fa:99:04:28:d7:3d:fc:35:90:96:e4:b5:58:1b: 6d:0c:f7:85:aa:cb:0a:f2:26:be:c0:40:bd:6a:fd:19:c4:4d: d0:37:9d:ee:c0:fb:78:e9:f2:8f:ef:4e:fd:e4:f9:f2:72:0c: c6:6c:51:0a:72:ff:a4:82:40:80:95:a0:d3:a6:0d:27:4c:57: c6:14:7d:04:0e:0e:c8:4c:d1:b3:4b:64:af:11:51:fb:b5:a1: 3b:a7:e2:18:00:75:d6:e5:a4:35:67:eb:a0:23:a6:bd:96:22: 5b:c2:99:15:04:a2:04:00:c1:23:ff:2a:99:e8:87:db:73:51: aa:ec:27:c1:7d:0b:5b:6e:9a:64:6b:7b:42:6b:dc:90:b4:7c: f0:81:2c:31 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUH90ibavnHwtKMOyFVLAR8EALaucwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNTE1MjEzMVoX DTI1MDQyOTIzNTk1OVowejFJMEcGA1UEBRNAOTgwYmExZjNmODA4MjRiNjFmODVj ZjMyYWQyZTc4NWE3NDkzYjMwMmY1NmFhNjM3ZDMyNWZiOWVlZWUwMzA1NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkyIv6Gh6lvqD9RNDdmc6a9j/2OY NpQZBpru5Z5dHVh7SORcye7JBQEd7tV09uSs4XHGlYyqZaqagIOrJHJn4ZAKA6Mk d3yCFBpZxIcc912oXlWdZXHIxVqjTFhCY4OH//Dz0rruo582wz2zFEkphuVGX1Us YQ01sPeSw1JIiAgGGWQRqurHhI6FUPIA6ZvyPk51HuAajSEg3V26n0Nv2efam2O2 FzliCjwvQGGDj5aU75I69Tz0FnubEVWSyKqVogL+gnKuZRwphHlbpIKVzmf5YIAd v4nieABMNuLoTPqxJcBrV9cNgsKGAt6gd0lzr0/iG54hNt3IiUCHxzbrhQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBkqHa4o7I+b5INm9i5q25yyqXoeMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc1NWI0ZmNiLTFhNjQtNDU3NC1hMWUzLTc0MjYzMmY2MzgyYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+4CAMA0GCSqGSIb3DQEBCwUAA4IBAQCr0PXEOGzKap26HupA 5Xpa+E7L0xomf0I+ZoEFaBRAfuumN1iICAX2LUkPnO4myNtlvC+Ode7XClQA5Jx8 xOkVXA8VNV1V7u7VInPY+MJFa78FnA19Zv1f8YwwdaVKrc9KDl4TvD+7gDlWtGFN Uzca+pkEKNc9/DWQluS1WBttDPeFqssK8ia+wEC9av0ZxE3QN53uwPt46fKP7079 5PnycgzGbFEKcv+kgkCAlaDTpg0nTFfGFH0EDg7ITNGzS2SvEVH7taE7p+IYAHXW 5aQ1Z+ugI6a9liJbwpkVBKIEAMEj/yqZ6Ifbc1Gq7CfBfQtbbppka3tCa9yQtHzw gSwx -----END CERTIFICATE-----Generated at Thu Apr 17 17:41:16 2025 by rpki-client