$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa File: 230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa (raw, json) Hash identifier: duhl71hGVJUB4JNiSjXHpuMaBjoIxwMgaimylj9WONM= Subject key identifier: 00:EE:12:E3:2C:F3:F0:E3:57:95:D7:47:4E:75:6F:CC:C8:CA:C5:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 17F48368FA1E08B7EA385CD86136740FC06074C2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa Signing time: Wed 26 Mar 2025 00:10:09 +0000 ROA not before: Wed 26 Mar 2025 00:10:09 +0000 ROA not after: Wed 30 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 27.0.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f4:83:68:fa:1e:08:b7:ea:38:5c:d8:61:36:74:0f:c0:60:74:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000 Validity Not Before: Mar 26 00:10:09 2025 GMT Not After : Apr 30 23:59:59 2025 GMT Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e3:de:76:9f:17:a1:54:73:b4:a6:c0:69:36: e5:1f:2b:c5:94:6a:60:c4:78:11:0c:be:b3:bb:78: ce:e9:a0:9d:05:a8:c6:25:87:69:d7:0a:54:b4:95: 47:45:7f:f2:c0:6d:7c:ec:d2:47:cf:4c:49:15:b1: 40:df:43:56:5d:be:03:db:bf:e9:3b:17:58:8e:f7: 5d:f2:b9:f6:a7:95:19:5e:c8:16:fd:88:8f:b8:66: 4e:56:32:91:7d:75:d1:b0:a0:6b:88:ae:46:38:27: 93:9e:fc:8a:cd:c7:3c:55:37:86:00:bc:34:dd:72: 9f:db:49:34:66:f9:7d:5e:a4:70:cd:c8:1d:2d:08: f6:2d:6e:58:ea:43:98:19:b5:30:ec:73:fb:ab:b6: e0:0c:dc:a5:bd:84:c3:a7:fb:f1:a2:b2:5a:c8:a6: 17:26:e6:37:d6:80:a1:93:23:e4:0d:87:d5:ec:8d: ef:e4:b0:26:d7:8a:17:56:11:f3:9b:88:36:31:f0: d3:53:19:84:da:f3:09:75:d4:94:6c:30:5d:0e:75: 38:9b:cb:00:60:e0:29:cd:75:77:f9:b1:92:76:ea: 6c:cc:63:62:9a:65:b6:42:60:74:f0:40:a5:2b:aa: 75:ce:1b:34:ea:3a:16:86:b2:59:0d:d3:1c:ef:9b: 97:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EE:12:E3:2C:F3:F0:E3:57:95:D7:47:4E:75:6F:CC:C8:CA:C5:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.0.0/22 Signature Algorithm: sha256WithRSAEncryption 05:18:c0:ab:d9:2c:dd:21:bb:cf:7b:99:9d:19:ae:42:0f:18: 2c:25:b0:e1:e5:ac:fd:be:44:8f:9d:48:70:c7:a5:da:cb:a3: 7c:dd:29:06:df:d0:09:c4:50:43:4f:50:66:fe:69:72:36:63: e9:31:d6:c8:aa:40:67:1b:79:fa:6a:c7:25:10:d6:6b:83:90: ad:3f:fa:f3:20:f2:ab:d2:30:df:8e:70:68:ff:bd:5b:20:70: 8c:10:09:b6:18:65:6b:4e:a9:25:fb:68:b3:22:fe:a2:ed:ad: 8f:6c:98:fa:02:01:7d:44:0c:fe:21:a0:48:47:11:22:5c:42: 4b:d9:ed:44:43:8b:90:c2:3c:32:22:ec:d4:98:7f:ca:ac:f4: 52:f6:ff:72:5c:f7:70:75:e8:22:ff:62:23:fc:85:f1:fc:42: 6c:f1:3a:b6:26:ad:f8:b7:f7:6b:b5:a2:0a:ab:85:6c:4f:86: 02:28:4a:ba:0c:8e:96:e1:da:50:58:b8:3b:0a:97:23:62:03: a0:63:a1:62:6b:45:4f:a0:b6:f0:a2:fb:5f:69:cb:39:42:41: 04:36:12:39:d8:24:5d:d8:00:0f:56:03:42:e3:eb:b9:30:96: 32:29:e0:04:4b:d4:da:17:6d:79:8c:2a:95:1a:58:57:f7:f1: 89:a2:6b:d9 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUF/SDaPoeCLfqOFzYYTZ0D8BgdMIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyNjAwMTAwOVoX DTI1MDQzMDIzNTk1OVowejFJMEcGA1UEBRNANGQ0OTQxYWNmODRmOGM5ZmU5MmQ4 MThmYzA2ZTY3MGY1MmIyMzQ3M2VlNGU5Yjk5MzM3ZDQ3OThjZmUxNjkyODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOPedp8XoVRztKbAaTblHyvFlGpg xHgRDL6zu3jO6aCdBajGJYdp1wpUtJVHRX/ywG187NJHz0xJFbFA30NWXb4D27/p OxdYjvdd8rn2p5UZXsgW/YiPuGZOVjKRfXXRsKBriK5GOCeTnvyKzcc8VTeGALw0 3XKf20k0Zvl9XqRwzcgdLQj2LW5Y6kOYGbUw7HP7q7bgDNylvYTDp/vxorJayKYX JuY31oChkyPkDYfV7I3v5LAm14oXVhHzm4g2MfDTUxmE2vMJddSUbDBdDnU4m8sA YOApzXV3+bGSdupszGNimmW2QmB08EClK6p1zhs06joWhrJZDdMc75uXAQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFADuEuMs8/DjV5XXR051b8zIysVpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzMDg5M2RiLTNmMjgtNGVhMy04YTlhLThiNGJhNmJiMTU4MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCGwAAMA0GCSqGSIb3DQEBCwUAA4IBAQAFGMCr2SzdIbvPe5mdGa5C DxgsJbDh5az9vkSPnUhwx6Xay6N83SkG39AJxFBDT1Bm/mlyNmPpMdbIqkBnG3n6 asclENZrg5CtP/rzIPKr0jDfjnBo/71bIHCMEAm2GGVrTqkl+2izIv6i7a2PbJj6 AgF9RAz+IaBIRxEiXEJL2e1EQ4uQwjwyIuzUmH/KrPRS9v9yXPdwdegi/2Ij/IXx /EJs8Tq2Jq34t/drtaIKq4VsT4YCKEq6DI6W4dpQWLg7CpcjYgOgY6Fia0VPoLbw ovtfacs5QkEENhI52CRd2AAPVgNC4+u5MJYyKeAES9TaF215jCqVGlhX9/GJomvZ -----END CERTIFICATE-----Generated at Sat Apr 5 12:10:06 2025 by rpki-client