$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa File: 23ecebb0-098e-41b3-815b-beadfef6484a.roa (raw, json) Hash identifier: 4kbifqs6RiwiSIDYQ3GiDIj4c7tVhqc3dFTgbX5F/vI= Subject key identifier: 90:D8:7D:C8:64:41:D8:DD:E1:10:3D:ED:5C:E7:7E:8D:A2:22:29:4C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 64AA98DE79064F0C4B141423EF12ADD5FBC20053 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa Signing time: Tue 10 Jun 2025 15:30:13 +0000 ROA not before: Tue 10 Jun 2025 15:30:13 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:aa:98:de:79:06:4f:0c:4b:14:14:23:ef:12:ad:d5:fb:c2:00:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:30:13 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=eed62b658dace6cbb8a361d007cb33f10d3efeabd3e1a6b17e93e614e28f7d19, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:43:2e:b5:ab:d2:d4:4e:04:c6:a6:7d:7e:38: 42:7b:25:2e:5c:e9:f1:ae:c1:19:5d:04:2f:b5:75: 66:dc:2f:ac:85:7b:70:67:b4:69:55:01:7b:fe:4b: ce:f2:8b:c3:52:ed:79:76:11:87:1c:32:9a:7c:d3: fb:3e:8e:41:e4:83:ea:07:99:50:d1:18:3b:d8:cc: e6:95:a4:6b:24:7e:1a:eb:f9:bf:ee:b0:e6:d6:12: 8b:5c:da:fb:38:ef:87:6b:64:81:46:c4:77:3f:48: 00:cd:5d:ae:bf:e2:fe:5f:fb:1a:b6:92:9c:ce:69: 9a:24:55:8d:3e:8d:7d:4e:1b:47:b8:ba:79:45:3b: 9e:5f:bc:67:bb:3e:69:36:fe:9e:f5:eb:41:6a:02: c4:51:3a:b3:34:76:cf:ba:2a:90:6a:3f:c7:07:02: f2:33:fe:24:78:b5:23:4b:ca:20:ee:6e:0c:48:51: b1:08:46:d1:6a:0e:20:ca:fb:a1:f9:ec:e5:75:9f: 97:e8:3c:a3:d5:ba:75:10:eb:4b:b3:0d:99:ab:15: 56:fa:a5:3e:f5:ab:20:e4:f5:20:8b:23:93:b2:f6: 6e:c8:aa:ca:a7:14:4b:54:d9:b5:ed:42:29:6b:03: 15:8e:d2:e8:4f:e3:0f:b1:ed:26:84:a0:11:b9:65: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D8:7D:C8:64:41:D8:DD:E1:10:3D:ED:5C:E7:7E:8D:A2:22:29:4C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6::/32 Signature Algorithm: sha256WithRSAEncryption 09:b8:7e:a8:b2:d6:64:4a:2c:a3:cc:c8:ed:44:b1:ad:a9:cf: 05:46:c0:04:22:99:85:37:23:bb:d4:48:0e:b1:23:32:bf:f6: 69:a6:47:1e:8c:66:b7:b7:41:9e:fd:c9:31:80:a4:e0:90:22: 6f:e8:8a:8b:ca:99:0a:3b:0b:f5:bc:e4:19:ad:ec:a2:1c:d4: 8f:42:8e:36:3e:93:71:06:b2:43:fe:e4:c1:13:1b:fa:54:ad: da:79:91:ec:b4:37:c1:1f:00:d5:06:fd:4a:fe:f6:e4:96:de: 78:d0:52:a7:6b:dc:9b:21:a6:d3:7a:62:e2:b5:10:61:c3:39: a5:d7:13:bc:5e:db:df:05:f1:7b:8e:43:8a:1a:5e:fe:5b:7c: bb:0a:aa:ff:5d:6b:1a:58:2a:65:81:90:a6:0b:61:d4:2d:6d: 05:b0:35:69:ad:eb:5e:fc:53:4e:a3:29:ea:40:79:43:ae:2d: 39:78:e8:b5:8c:33:ae:7c:96:5c:45:c6:a7:6f:4b:e2:ff:af: 4a:6d:5f:a3:f2:8d:9f:af:6f:ed:52:a2:6e:90:20:60:ee:c0: 60:7c:75:cf:2a:dd:f9:fb:3f:4a:cf:72:8c:83:4b:ae:c0:6d: c8:b8:87:04:6a:46:e8:3e:b7:a3:1f:4f:e7:e0:15:dd:c7:ac: 16:05:24:6c -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUZKqY3nkGTwxLFBQj7xKt1fvCAFMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1MzAxM1oX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZWVkNjJiNjU4ZGFjZTZjYmI4YTM2 MWQwMDdjYjMzZjEwZDNlZmVhYmQzZTFhNmIxN2U5M2U2MTRlMjhmN2QxOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UMutavS1E4ExqZ9fjhCeyUuXOnx rsEZXQQvtXVm3C+shXtwZ7RpVQF7/kvO8ovDUu15dhGHHDKafNP7Po5B5IPqB5lQ 0Rg72MzmlaRrJH4a6/m/7rDm1hKLXNr7OO+Ha2SBRsR3P0gAzV2uv+L+X/satpKc zmmaJFWNPo19ThtHuLp5RTueX7xnuz5pNv6e9etBagLEUTqzNHbPuiqQaj/HBwLy M/4keLUjS8og7m4MSFGxCEbRag4gyvuh+ezldZ+X6Dyj1bp1EOtLsw2ZqxVW+qU+ 9asg5PUgiyOTsvZuyKrKpxRLVNm17UIpawMVjtLoT+MPse0mhKARuWW+NQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFJDYfchkQdjd4RA97Vznfo2iIilMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzZWNlYmIwLTA5OGUtNDFiMy04MTViLWJlYWRmZWY2NDg0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAba9jANBgkqhkiG9w0BAQsFAAOCAQEACbh+qLLWZEoso8zI7USx ranPBUbABCKZhTcju9RIDrEjMr/2aaZHHoxmt7dBnv3JMYCk4JAib+iKi8qZCjsL 9bzkGa3sohzUj0KONj6TcQayQ/7kwRMb+lSt2nmR7LQ3wR8A1Qb9Sv725JbeeNBS p2vcmyGm03pi4rUQYcM5pdcTvF7b3wXxe45Dihpe/lt8uwqq/11rGlgqZYGQpgth 1C1tBbA1aa3rXvxTTqMp6kB5Q64tOXjotYwzrnyWXEXGp29L4v+vSm1fo/KNn69v 7VKibpAgYO7AYHx1zyrd+fs/Ss9yjINLrsBtyLiHBGpG6D63ox9P5+AV3cesFgUk bA== -----END CERTIFICATE-----Generated at Sat Jun 14 06:03:11 2025 by rpki-client