$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa File: 23ecebb0-098e-41b3-815b-beadfef6484a.roa (raw, json) Hash identifier: aZiLINybCYAo0p/DK0Kt6vFzn/u4wmyxa3QfZrFhitY= Subject key identifier: 9A:C9:7E:89:82:F7:B3:D7:94:EF:61:EC:1B:80:C3:15:83:4D:43:C2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 015E8213B34798CBFDF6F7A40CC1CD2B7F6AD637 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa Signing time: Wed 16 Apr 2025 00:00:40 +0000 ROA not before: Wed 16 Apr 2025 00:00:40 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5e:82:13:b3:47:98:cb:fd:f6:f7:a4:0c:c1:cd:2b:7f:6a:d6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 16 00:00:40 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=03c5291eed8b4284e0898817ce40b3837aa36e2579b0f0ae9e0e1665ca414e84, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:71:ab:d4:13:da:96:43:91:85:d6:ca:66: 3d:b1:9a:83:f0:ef:54:16:45:e5:8f:2d:c1:53:1d: 5b:6d:9d:cd:2e:c3:9b:d2:b5:56:0f:83:5d:b1:bf: 71:2c:61:a3:c9:b4:af:8a:cc:dd:ba:fa:0b:91:8a: cb:4f:00:9d:e4:fc:2c:88:9b:a6:4e:42:50:26:a5: 87:a5:e8:35:d3:79:fd:79:e0:ad:8a:65:0f:ee:6a: ed:61:f6:4d:b7:11:35:97:5a:8f:1d:b6:cb:dd:d8: 32:00:a9:2d:27:c7:8d:d8:1f:cc:24:b9:dc:1d:b5: 75:1b:d8:6e:9d:e6:8c:a4:b9:62:7e:ad:11:09:84: 4d:3e:df:66:35:b5:36:c5:cd:1c:f9:6c:fc:ef:8a: 38:de:ac:70:4d:d1:91:b1:c5:0c:2b:ce:c7:5f:f4: da:3d:a1:ea:56:c4:39:25:b6:98:cb:06:30:f7:4b: 15:3c:d8:17:f4:e4:2a:d2:31:be:69:6e:a4:45:df: 51:27:1b:c5:2d:a3:eb:fb:db:37:85:92:a1:2e:74: 48:c3:59:dc:dc:9a:30:76:06:5f:27:c5:6e:2a:1a: 93:82:44:8e:74:2a:08:cb:2b:5d:69:57:ba:8e:67: 4b:b5:01:37:b0:61:e5:de:7c:a2:96:21:23:57:3b: ba:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C9:7E:89:82:F7:B3:D7:94:EF:61:EC:1B:80:C3:15:83:4D:43:C2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6::/32 Signature Algorithm: sha256WithRSAEncryption 95:00:88:05:75:a9:f1:73:dd:49:6a:2d:19:66:2d:bb:77:91: d3:34:16:a6:4d:7c:e6:d7:f0:81:0c:6e:1f:cd:b3:e7:39:b9: 3a:15:65:8c:08:40:37:21:23:6e:42:6b:99:ce:0d:6d:ba:11: 4c:7d:5b:ce:7e:40:96:2b:de:2b:cc:ea:7a:17:11:e7:e6:41: 6d:51:17:ee:d2:7c:dd:26:2d:0a:e0:16:7f:b0:9c:de:45:e4: bb:d7:4c:e7:a8:41:cb:73:7a:d4:28:17:78:f5:69:d3:5b:74: 8d:f5:d2:e4:41:c4:65:99:ca:d3:d9:6f:6a:1b:94:04:9c:a1: 3b:71:3d:b4:63:c6:ce:14:8a:8e:85:e6:55:dd:68:3d:6e:a8: f0:be:75:ea:26:96:36:10:3a:77:66:13:65:f1:f0:ad:50:09: 6a:1e:b1:7c:6f:2a:59:cf:0b:cc:4c:60:45:52:88:f4:7a:ac: 13:19:fb:d8:90:0a:64:d0:ce:63:9e:ad:4b:d4:10:0c:75:c0: a4:aa:cc:1b:19:50:92:39:f4:c7:2e:db:4c:1c:79:d4:ab:49: fe:d7:fc:87:58:82:e9:92:eb:51:72:ae:b0:ca:24:48:ff:fb: 57:7a:93:d7:9c:26:b9:bb:dc:03:a0:7a:49:da:41:4c:e0:4e: 03:66:c2:c4 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUAV6CE7NHmMv99vekDMHNK39q1jcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNjAwMDA0MFoX DTI1MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAMDNjNTI5MWVlZDhiNDI4NGUwODk4 ODE3Y2U0MGIzODM3YWEzNmUyNTc5YjBmMGFlOWUwZTE2NjVjYTQxNGU4NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnRxq9QT2pZDkYXWymY9sZqD8O9U FkXljy3BUx1bbZ3NLsOb0rVWD4Ndsb9xLGGjybSviszduvoLkYrLTwCd5PwsiJum TkJQJqWHpeg103n9eeCtimUP7mrtYfZNtxE1l1qPHbbL3dgyAKktJ8eN2B/MJLnc HbV1G9huneaMpLlifq0RCYRNPt9mNbU2xc0c+Wz874o43qxwTdGRscUMK87HX/Ta PaHqVsQ5JbaYywYw90sVPNgX9OQq0jG+aW6kRd9RJxvFLaPr+9s3hZKhLnRIw1nc 3JowdgZfJ8VuKhqTgkSOdCoIyytdaVe6jmdLtQE3sGHl3nyiliEjVzu6uwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFJrJfomC97PXlO9h7BuAwxWDTUPCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzZWNlYmIwLTA5OGUtNDFiMy04MTViLWJlYWRmZWY2NDg0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba9jANBgkqhkiG9w0BAQsFAAOCAQEAlQCIBXWp8XPdSWotGWYt u3eR0zQWpk185tfwgQxuH82z5zm5OhVljAhANyEjbkJrmc4NbboRTH1bzn5Alive K8zqehcR5+ZBbVEX7tJ83SYtCuAWf7Cc3kXku9dM56hBy3N61CgXePVp01t0jfXS 5EHEZZnK09lvahuUBJyhO3E9tGPGzhSKjoXmVd1oPW6o8L516iaWNhA6d2YTZfHw rVAJah6xfG8qWc8LzExgRVKI9HqsExn72JAKZNDOY56tS9QQDHXApKrMGxlQkjn0 xy7bTBx51KtJ/tf8h1iC6ZLrUXKusMokSP/7V3qT15wmubvcA6B6SdpBTOBOA2bC xA== -----END CERTIFICATE-----Generated at Thu Apr 17 17:34:02 2025 by rpki-client