$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa File: 230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa (raw, json) Hash identifier: IoZHJi+ZOe6+pDHmgfn8pem09jOU4lk0M4Ii4WWUkT0= Subject key identifier: 5E:42:C1:CA:55:45:22:4C:0E:41:1C:1C:5D:99:A6:3D:07:5F:82:EE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D84A09C5C1CCB76943147FB1F6142A4DCE3B617 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa Signing time: Tue 10 Jun 2025 15:51:15 +0000 ROA not before: Tue 10 Jun 2025 15:51:15 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 27.0.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:84:a0:9c:5c:1c:cb:76:94:31:47:fb:1f:61:42:a4:dc:e3:b6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 15:51:15 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=471ff0fc48cc96dd5d202353911941f9ac48419019df8ff132859d3eaf4aea7d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:22:2d:47:6e:43:76:e3:ec:41:1c:14:87:dc: 2f:38:2e:cd:6c:9f:56:76:f7:50:27:8c:b3:61:f0: 74:a1:4b:93:98:69:74:10:90:81:57:cc:84:1f:17: e8:ce:f2:85:86:0c:c7:49:33:a3:10:b5:fd:22:39: 80:90:91:be:3a:30:35:d6:9e:98:b1:25:61:a3:b8: bc:56:79:50:02:af:46:4c:c1:50:01:22:3b:fa:eb: d7:01:69:8e:1c:e7:98:fe:15:c2:cd:4c:cb:e9:16: ed:f6:a1:81:b8:77:64:76:af:8f:d3:cd:cf:f1:15: 20:81:82:e5:b3:16:1a:9a:a7:89:12:5b:3e:fa:5c: 52:c7:3e:27:97:40:45:15:f1:89:f3:3c:04:aa:f7: 87:4d:97:b2:e1:64:16:af:00:c8:e0:9a:12:bb:ba: d1:78:4f:d2:93:82:c6:85:95:ea:6a:45:6e:94:b7: 08:89:52:a5:f7:43:52:6d:c5:0c:46:61:81:65:04: 92:5f:32:87:df:0b:34:df:4f:4a:25:97:e8:35:b5: 19:74:a4:c8:1d:5e:52:c9:22:62:5f:5f:07:78:57: 33:e1:73:41:fa:54:12:96:49:f7:b9:64:3c:3c:17: ca:16:c4:06:2f:be:86:f0:8c:d8:8a:8b:54:cc:93: 3f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:42:C1:CA:55:45:22:4C:0E:41:1C:1C:5D:99:A6:3D:07:5F:82:EE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/230893db-3f28-4ea3-8a9a-8b4ba6bb1580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.0.0/22 Signature Algorithm: sha256WithRSAEncryption 37:47:91:0a:34:65:5f:b2:62:68:36:e8:73:eb:8c:90:5f:0c: 85:f8:17:be:13:c1:9d:1a:13:f9:3f:5a:ba:72:a9:d6:76:8d: 6a:43:70:83:fa:53:1d:0e:85:89:32:27:9e:e4:c6:0b:df:68: 37:e7:fd:db:b4:85:2e:b3:7f:21:07:d6:92:d4:00:f0:1a:ec: fc:d8:ff:6a:5b:46:e7:5d:e3:a3:f5:d3:4c:e9:33:aa:64:20: 25:41:83:5b:c6:91:03:1b:2c:36:c5:1e:4c:f9:d5:2e:b3:17: 7d:cc:be:79:ee:86:bd:bc:7d:23:96:3f:ab:77:86:01:91:55: 95:05:e7:f2:96:38:e3:ac:73:3f:51:01:33:7c:97:bc:d3:be: ba:4e:3a:1f:5b:4a:7a:4b:8b:86:0d:12:5b:55:f4:90:95:c6: 20:15:65:f0:e8:b8:88:9d:91:3f:7e:dd:20:a4:8f:93:65:ef: 0f:ca:f1:f6:bb:20:19:bb:fb:8e:ae:9d:29:ed:ae:40:0d:11: 59:be:85:92:8f:4e:89:19:46:7f:55:4b:ea:a3:f4:a5:c5:5b: af:52:49:60:e4:d1:aa:08:21:92:b0:5a:97:89:91:36:57:c6: eb:dd:5a:d9:b7:fa:cf:19:41:4d:5d:f9:f7:be:20:1a:d8:fe: 4f:72:95:6e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUXYSgnFwcy3aUMUf7H2FCpNzjthcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE1NTExNVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNANDcxZmYwZmM0OGNjOTZkZDVkMjAy MzUzOTExOTQxZjlhYzQ4NDE5MDE5ZGY4ZmYxMzI4NTlkM2VhZjRhZWE3ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSItR25DduPsQRwUh9wvOC7NbJ9W dvdQJ4yzYfB0oUuTmGl0EJCBV8yEHxfozvKFhgzHSTOjELX9IjmAkJG+OjA11p6Y sSVho7i8VnlQAq9GTMFQASI7+uvXAWmOHOeY/hXCzUzL6Rbt9qGBuHdkdq+P083P 8RUggYLlsxYamqeJEls++lxSxz4nl0BFFfGJ8zwEqveHTZey4WQWrwDI4JoSu7rR eE/Sk4LGhZXqakVulLcIiVKl90NSbcUMRmGBZQSSXzKH3ws0309KJZfoNbUZdKTI HV5SySJiX18HeFcz4XNB+lQSlkn3uWQ8PBfKFsQGL76G8IzYiotUzJM/+wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFF5CwcpVRSJMDkEcHF2Zpj0HX4LuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzMDg5M2RiLTNmMjgtNGVhMy04YTlhLThiNGJhNmJiMTU4MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCGwAAMA0GCSqGSIb3DQEBCwUAA4IBAQA3R5EKNGVfsmJoNuhz64yQ XwyF+Be+E8GdGhP5P1q6cqnWdo1qQ3CD+lMdDoWJMiee5MYL32g35/3btIUus38h B9aS1ADwGuz82P9qW0bnXeOj9dNM6TOqZCAlQYNbxpEDGyw2xR5M+dUusxd9zL55 7oa9vH0jlj+rd4YBkVWVBefyljjjrHM/UQEzfJe80766TjofW0p6S4uGDRJbVfSQ lcYgFWXw6LiInZE/ft0gpI+TZe8PyvH2uyAZu/uOrp0p7a5ADRFZvoWSj06JGUZ/ VUvqo/SlxVuvUklg5NGqCCGSsFqXiZE2V8br3VrZt/rPGUFNXfn3viAa2P5PcpVu -----END CERTIFICATE-----Generated at Sat Jun 14 05:59:09 2025 by rpki-client