$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab754b4b-74fd-42c1-8298-33b9dac12e67.roa File: ab754b4b-74fd-42c1-8298-33b9dac12e67.roa (raw, json) Hash identifier: OVRxuPzTZdofOfow3OboiNAW9IlXUj9YSleSHZdP428= Subject key identifier: DC:E9:98:36:AA:5E:26:87:C0:16:6E:A0:6F:A4:17:BB:B6:8C:B9:33 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7BF8F042D4BCB991FD5B43659DF3DCF9D38E94AC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab754b4b-74fd-42c1-8298-33b9dac12e67.roa Signing time: Sat 28 Jun 2025 00:00:57 +0000 ROA not before: Sat 28 Jun 2025 00:00:57 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:c800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f8:f0:42:d4:bc:b9:91:fd:5b:43:65:9d:f3:dc:f9:d3:8e:94:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 28 00:00:57 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=7b2aa0b81386ed9b856aa5c509a68100f2d5dcf37d6d9782536706b0979c45e2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8b:14:c6:3b:fc:63:ea:d2:82:d2:33:ac:4d: db:d1:97:d5:ee:cb:ae:b9:5a:86:1b:83:cd:69:43: 73:9c:ec:46:c5:83:7f:75:62:bf:42:15:d5:90:39: ee:d0:86:d8:f2:98:0a:64:b6:c1:1e:4c:5b:96:4d: 87:cb:8b:f6:3b:01:5c:66:db:87:f8:9a:17:6a:e1: 40:dd:5c:67:5d:60:34:71:d7:86:3b:20:07:13:4b: a1:34:7e:71:2c:19:e9:b7:c7:e9:e7:5f:ea:e9:06: b5:2c:78:30:14:0c:93:8e:e7:59:58:fd:20:75:28: 38:83:26:3c:03:7b:12:d7:5a:fc:a9:aa:90:ef:2a: 6c:d5:75:31:03:3a:64:a8:b1:24:7b:21:da:b3:6b: 64:0f:d9:7a:5d:eb:4a:e4:b7:9b:59:03:ac:b5:dc: 59:39:7b:92:b4:4b:ff:8f:07:6a:f6:ca:b2:ac:4e: f8:bd:66:9f:d9:7d:42:bf:8e:0a:98:9b:e8:ac:12: 35:11:12:75:3b:e0:0e:94:98:99:a1:38:a4:47:73: 2a:48:ad:3d:61:f6:23:98:d5:02:22:07:2a:5b:53: ab:c9:05:5b:c9:2d:9b:84:fb:53:16:ad:b0:18:43: 9b:e6:c4:c1:d4:5d:9b:d8:04:40:c1:d0:10:7d:c8: 19:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E9:98:36:AA:5E:26:87:C0:16:6E:A0:6F:A4:17:BB:B6:8C:B9:33 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ab754b4b-74fd-42c1-8298-33b9dac12e67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:c800::/40 Signature Algorithm: sha256WithRSAEncryption 63:5b:71:98:21:bf:9f:84:c7:79:11:56:5a:fe:2d:97:3a:4f: b2:43:a5:49:75:4b:72:cb:a1:f0:dd:80:9f:7a:5e:25:e5:5a: f9:7e:13:1e:c1:a3:d4:66:bc:8a:4e:f4:88:86:ce:ff:cd:f2: 8b:d5:3e:67:e5:b4:32:1a:a4:2c:8e:8b:26:0d:9a:75:59:ad: ca:10:01:9d:37:24:92:30:ee:45:91:ab:14:cf:7a:a3:8f:20: e4:e9:3f:93:ff:87:fa:f3:05:ee:13:0c:35:6c:2a:15:67:0d: 9d:3c:26:fd:b3:ad:1b:79:bf:f5:05:0a:a1:e8:9f:2a:cc:02: 1e:a1:9e:f7:4f:78:7b:cc:4c:58:81:02:fd:25:d1:c7:b7:2c: 80:d4:18:b4:2b:75:94:04:fb:13:38:1a:17:eb:c3:2b:4f:25: 1e:15:79:8e:1a:a6:82:86:c8:14:fa:c7:c7:df:f3:8a:f1:fc: ca:40:43:57:5c:d4:2b:5b:f5:c4:78:ee:44:f4:bf:0f:f9:d1: 3c:5c:7b:27:89:b6:a3:18:be:73:eb:3e:b6:86:99:cc:40:25: 0a:e4:1d:e6:9a:e2:b4:8d:45:15:eb:98:86:ea:20:41:fe:51: dc:8a:7c:81:65:61:e4:e2:65:bb:b8:ea:c5:a0:7c:18:88:06: 34:4a:be:0c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUe/jwQtS8uZH9W0NlnfPc+dOOlKwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyODAwMDA1N1oX DTI1MDgwMjIzNTk1OVowejFJMEcGA1UEBRNAN2IyYWEwYjgxMzg2ZWQ5Yjg1NmFh NWM1MDlhNjgxMDBmMmQ1ZGNmMzdkNmQ5NzgyNTM2NzA2YjA5NzljNDVlMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYsUxjv8Y+rSgtIzrE3b0ZfV7suu uVqGG4PNaUNznOxGxYN/dWK/QhXVkDnu0IbY8pgKZLbBHkxblk2Hy4v2OwFcZtuH +JoXauFA3VxnXWA0cdeGOyAHE0uhNH5xLBnpt8fp51/q6Qa1LHgwFAyTjudZWP0g dSg4gyY8A3sS11r8qaqQ7yps1XUxAzpkqLEkeyHas2tkD9l6XetK5LebWQOstdxZ OXuStEv/jwdq9sqyrE74vWaf2X1Cv44KmJvorBI1ERJ1O+AOlJiZoTikR3MqSK09 YfYjmNUCIgcqW1OryQVbyS2bhPtTFq2wGEOb5sTB1F2b2ARAwdAQfcgZVQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNzpmDaqXiaHwBZuoG+kF7u2jLkzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FiNzU0YjRiLTc0ZmQtNDJjMS04Mjk4LTMzYjlkYWMxMmU2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaucgwDQYJKoZIhvcNAQELBQADggEBAGNbcZghv5+Ex3kRVlr+ LZc6T7JDpUl1S3LLofDdgJ96XiXlWvl+Ex7Bo9RmvIpO9IiGzv/N8ovVPmfltDIa pCyOiyYNmnVZrcoQAZ03JJIw7kWRqxTPeqOPIOTpP5P/h/rzBe4TDDVsKhVnDZ08 Jv2zrRt5v/UFCqHonyrMAh6hnvdPeHvMTFiBAv0l0ce3LIDUGLQrdZQE+xM4Ghfr wytPJR4VeY4apoKGyBT6x8ff84rx/MpAQ1dc1Ctb9cR47kT0vw/50TxceyeJtqMY vnPrPraGmcxAJQrkHeaa4rSNRRXrmIbqIEH+UdyKfIFlYeTiZbu46sWgfBiIBjRK vgw= -----END CERTIFICATE-----Generated at Sun Jun 29 04:25:32 2025 by rpki-client