$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/653a4574-339b-4bb5-9b34-5450c0c7e304.roa File: 653a4574-339b-4bb5-9b34-5450c0c7e304.roa (raw, json) Hash identifier: mtCdnf9O0h9QeNC3yiIaGcm9G2k+NtgFkl/lYsRUDD0= Subject key identifier: 38:F4:84:24:E8:48:DF:5E:A9:4C:C3:98:71:C7:20:F4:42:59:C7:2D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 610250ED33CBC493F727922536B9BD3E74231ABB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/653a4574-339b-4bb5-9b34-5450c0c7e304.roa Signing time: Sat 14 Jun 2025 00:00:15 +0000 ROA not before: Sat 14 Jun 2025 00:00:15 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:02:50:ed:33:cb:c4:93:f7:27:92:25:36:b9:bd:3e:74:23:1a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 14 00:00:15 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=057d13bef6499bc79e7897d75b3b99a54abbd45757e328c7869631e823fd3c04, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ca:c5:c4:9d:e8:f7:88:66:f7:4f:2b:42:44: d9:7f:1d:64:17:79:10:99:13:85:9b:dc:29:3f:26: 8c:f1:b0:b7:aa:64:f4:e3:b8:11:63:64:ff:b2:6b: 58:31:00:13:f3:ea:94:30:33:d4:20:ff:70:72:41: 24:4d:92:dc:a0:b8:a5:67:a2:5f:e1:e5:cf:fe:ec: bf:22:b3:f4:83:42:44:8e:de:d0:fd:dc:fb:43:b7: 3e:eb:d3:90:5d:46:25:d4:c6:7e:d2:fd:c9:a8:bb: 17:47:d6:fc:10:3e:99:27:af:3d:93:d5:cc:82:1a: 42:36:4f:5c:06:07:22:4b:2f:36:0c:11:3c:6b:69: 02:92:ab:1e:32:f0:4c:c7:de:a3:da:81:89:1b:ca: 78:73:69:7a:e4:8c:b7:90:ce:bb:7c:6f:8a:0a:ab: 8e:ea:b5:96:e3:42:10:f7:2d:c1:85:99:99:a5:6c: 72:f6:c2:ad:f4:6b:ab:4d:be:75:d4:35:54:be:fa: 78:46:b1:00:0d:1c:c1:b4:64:da:ff:1a:06:ef:5d: cc:ce:25:9d:4c:c3:c6:f3:87:2a:d5:a2:e3:7f:4f: 92:df:b5:a6:84:4f:16:ee:76:5b:42:fa:ca:cb:b8: 52:de:c9:4b:95:35:d0:5c:12:32:da:ca:fa:ec:28: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F4:84:24:E8:48:DF:5E:A9:4C:C3:98:71:C7:20:F4:42:59:C7:2D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/653a4574-339b-4bb5-9b34-5450c0c7e304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.54.0/24 Signature Algorithm: sha256WithRSAEncryption 47:c6:58:36:8c:2c:04:c5:e9:be:34:3d:52:31:28:ba:4d:c7: 91:f5:32:34:3e:5c:f3:69:02:ff:8e:b8:2b:67:9e:51:19:38: e5:2b:b1:85:42:36:f2:03:21:43:a0:88:d4:83:7a:ef:de:58: 93:a3:0a:ef:90:ee:7a:b5:b4:8c:e9:34:09:b9:01:02:70:7b: 4c:e7:6b:c9:03:26:d1:74:dd:33:f5:71:6c:d7:95:5c:01:61: 27:2b:42:a3:69:b9:c0:e1:1a:46:76:ab:3f:32:21:94:95:3a: a4:e7:68:47:28:6e:e4:e0:f9:b3:77:db:a6:d1:80:26:1e:97: 8f:2e:69:7f:95:d1:97:96:d6:1f:cb:0b:2c:85:e5:5a:7c:7c: 48:b8:7d:74:73:e1:a5:24:6d:61:33:ac:67:3a:e7:06:85:4c: b4:d8:a4:fa:73:4c:95:af:5c:64:f1:51:11:e2:c8:5d:e3:44: 01:d7:cb:d4:5e:71:bc:3f:06:e1:ca:a9:05:14:21:71:4f:2c: 98:b4:34:78:60:b6:79:98:de:d1:cf:f5:05:57:03:eb:51:ec: 05:97:58:5f:b9:ca:a3:4f:db:1d:b5:ab:a5:17:b0:44:ac:d0: e5:77:f4:62:ee:3d:ab:06:52:94:4c:39:96:77:a1:c6:9f:48: ca:a5:1e:62 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUYQJQ7TPLxJP3J5IlNrm9PnQjGrswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxNDAwMDAxNVoX DTI1MDcxOTIzNTk1OVowejFJMEcGA1UEBRNAMDU3ZDEzYmVmNjQ5OWJjNzllNzg5 N2Q3NWIzYjk5YTU0YWJiZDQ1NzU3ZTMyOGM3ODY5NjMxZTgyM2ZkM2MwNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78rFxJ3o94hm908rQkTZfx1kF3kQ mROFm9wpPyaM8bC3qmT047gRY2T/smtYMQAT8+qUMDPUIP9wckEkTZLcoLilZ6Jf 4eXP/uy/IrP0g0JEjt7Q/dz7Q7c+69OQXUYl1MZ+0v3JqLsXR9b8ED6ZJ689k9XM ghpCNk9cBgciSy82DBE8a2kCkqseMvBMx96j2oGJG8p4c2l65Iy3kM67fG+KCquO 6rWW40IQ9y3BhZmZpWxy9sKt9GurTb511DVUvvp4RrEADRzBtGTa/xoG713MziWd TMPG84cq1aLjf0+S37WmhE8W7nZbQvrKy7hS3slLlTXQXBIy2sr67ChUrQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDj0hCToSN9eqUzDmHHHIPRCWcctMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY1M2E0NTc0LTMzOWItNGJiNS05YjM0LTU0NTBjMGM3ZTMwNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9A2MA0GCSqGSIb3DQEBCwUAA4IBAQBHxlg2jCwExem+ND1SMSi6 TceR9TI0PlzzaQL/jrgrZ55RGTjlK7GFQjbyAyFDoIjUg3rv3liTowrvkO56tbSM 6TQJuQECcHtM52vJAybRdN0z9XFs15VcAWEnK0KjabnA4RpGdqs/MiGUlTqk52hH KG7k4Pmzd9um0YAmHpePLml/ldGXltYfywssheVafHxIuH10c+GlJG1hM6xnOucG hUy02KT6c0yVr1xk8VER4shd40QB18vUXnG8PwbhyqkFFCFxTyyYtDR4YLZ5mN7R z/UFVwPrUewFl1hfucqjT9sdtaulF7BErNDld/Ri7j2rBlKUTDmWd6HGn0jKpR5i -----END CERTIFICATE-----Generated at Sat Jun 14 06:47:30 2025 by rpki-client