$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/427017ca-fc05-4df1-9de8-dc6182848704.roa File: 427017ca-fc05-4df1-9de8-dc6182848704.roa (raw, json) Hash identifier: q81ewmwNpHUSMXhDAFu5lW/kJapef7t4kgPwzoufuFA= Subject key identifier: 12:82:1D:6A:95:FF:6E:77:DB:AE:DE:A6:E8:59:82:00:41:C2:F4:F4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4083C9813EFA049453D9CDCBD8BB73CA99E24A33 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/427017ca-fc05-4df1-9de8-dc6182848704.roa Signing time: Fri 01 Aug 2025 00:50:43 +0000 ROA not before: Fri 01 Aug 2025 00:50:43 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 43.198.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:83:c9:81:3e:fa:04:94:53:d9:cd:cb:d8:bb:73:ca:99:e2:4a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:50:43 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=05219a84ddccf13e02313284ec416860105cc395bf81d829b218f15228fdbcff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bd:7f:12:45:00:8a:02:0d:a1:a8:88:9f:6b: 44:04:75:f4:3b:89:b2:f1:c6:55:f8:7b:76:21:c6: 81:9f:7a:dc:eb:56:eb:ac:bb:1c:36:e4:e8:a3:6c: d0:15:51:4c:bd:c1:f2:76:ee:04:17:a4:2f:93:e9: 6a:8f:2e:ea:80:b3:9a:8f:5c:bf:25:56:31:c8:12: e7:72:eb:a2:9a:a3:aa:07:42:57:bf:5f:f8:e4:26: 8e:6a:2f:a9:5e:46:90:e8:f1:72:60:a8:3c:f4:d9: 12:00:95:75:26:3d:a8:54:5e:10:33:03:c4:a4:20: 49:1c:4a:ad:8a:4b:3c:2f:23:64:8d:db:73:de:3f: 6b:bc:b1:ad:bf:b0:82:58:70:f8:67:8a:9d:6d:59: 8a:68:01:24:40:e8:a9:a8:5f:d7:f0:76:0c:fb:83: ae:28:b2:ce:58:c1:3a:f8:e7:40:21:90:f6:f3:9d: d1:14:90:fd:1c:60:84:5b:7f:16:5a:f8:6c:32:e0: dd:f2:d8:ce:7c:a9:5a:17:b0:1c:af:60:f3:61:d5: 80:5e:37:0a:e1:24:fe:29:7c:52:b2:50:e3:1c:16: a3:fb:3c:f7:2d:ee:1d:6d:eb:00:25:3a:dc:b9:6e: 7d:7d:79:3f:7e:bc:c4:6f:73:b4:63:41:9b:be:42: 44:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:82:1D:6A:95:FF:6E:77:DB:AE:DE:A6:E8:59:82:00:41:C2:F4:F4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/427017ca-fc05-4df1-9de8-dc6182848704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.198.0.0/15 Signature Algorithm: sha256WithRSAEncryption b7:6a:47:7a:86:f7:0f:80:7e:4b:94:2b:97:68:3e:72:25:fe: e8:5d:49:28:39:58:09:48:ad:33:a2:a6:b0:24:1d:5e:6f:28: f5:74:b5:c2:d3:a5:55:58:95:9b:24:9f:c0:48:8f:e4:49:8d: 1f:8a:f3:1a:7e:98:e9:91:00:3e:dd:d4:e8:1b:c1:29:32:71: 49:ec:76:fb:69:d6:7e:52:7b:87:fa:cc:d0:a8:62:8b:03:c1: 19:c9:6a:10:b4:c1:cd:ef:cb:76:99:31:01:32:38:5b:68:31: 29:fb:7b:6d:4c:6e:32:2d:df:4c:4e:69:77:27:ae:97:a0:24: 67:ce:86:24:ff:69:5b:94:a1:1a:7c:b5:8e:de:2e:ca:1b:77: 56:38:41:03:59:db:a0:64:bd:37:dd:ac:6c:9d:d6:41:4b:eb: c1:6e:c5:02:ed:e4:8d:f5:5b:6d:62:97:0b:bf:a6:5e:b8:f0: 98:60:b8:15:61:cd:81:79:94:2f:ee:cc:e3:79:1a:fa:31:00: 3c:a5:3e:5b:47:39:f7:7d:4c:88:f4:3c:fa:30:c2:c5:17:70: 97:99:74:ae:aa:91:90:54:58:bd:9f:8f:db:3d:4d:9b:5e:98: c4:cc:9c:fb:6b:97:34:2a:a5:9d:6d:ea:ca:0b:dc:de:5d:b2: b5:ff:ef:14 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUQIPJgT76BJRT2c3L2LtzypniSjMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwNTA0M1oX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNAMDUyMTlhODRkZGNjZjEzZTAyMzEz Mjg0ZWM0MTY4NjAxMDVjYzM5NWJmODFkODI5YjIxOGYxNTIyOGZkYmNmZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx71/EkUAigINoaiIn2tEBHX0O4my 8cZV+Ht2IcaBn3rc61brrLscNuToo2zQFVFMvcHydu4EF6Qvk+lqjy7qgLOaj1y/ JVYxyBLncuuimqOqB0JXv1/45CaOai+pXkaQ6PFyYKg89NkSAJV1Jj2oVF4QMwPE pCBJHEqtiks8LyNkjdtz3j9rvLGtv7CCWHD4Z4qdbVmKaAEkQOipqF/X8HYM+4Ou KLLOWME6+OdAIZD2853RFJD9HGCEW38WWvhsMuDd8tjOfKlaF7Acr2DzYdWAXjcK 4ST+KXxSslDjHBaj+zz3Le4dbesAJTrcuW59fXk/frzEb3O0Y0GbvkJELwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFBKCHWqV/253267epuhZggBBwvT0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQyNzAxN2NhLWZjMDUtNGRmMS05ZGU4LWRjNjE4Mjg0ODcwNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK8YwDQYJKoZIhvcNAQELBQADggEBALdqR3qG9w+AfkuUK5doPnIl /uhdSSg5WAlIrTOiprAkHV5vKPV0tcLTpVVYlZskn8BIj+RJjR+K8xp+mOmRAD7d 1OgbwSkycUnsdvtp1n5Se4f6zNCoYosDwRnJahC0wc3vy3aZMQEyOFtoMSn7e21M bjIt30xOaXcnrpegJGfOhiT/aVuUoRp8tY7eLsobd1Y4QQNZ26BkvTfdrGyd1kFL 68FuxQLt5I31W21ilwu/pl648JhguBVhzYF5lC/uzON5GvoxADylPltHOfd9TIj0 PPowwsUXcJeZdK6qkZBUWL2fj9s9TZtemMTMnPtrlzQqpZ1t6soL3N5dsrX/7xQ= -----END CERTIFICATE-----Generated at Wed Aug 6 09:38:43 2025 by rpki-client