$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa File: e120613f-4f08-405b-bea7-3ea01da9b0df.roa (raw, json) Hash identifier: yECGEQw6qGiK+dSPcoyY24iBNylQdMeEhilzyBKy86c= Subject key identifier: BD:4F:0B:8F:BD:EF:FE:39:03:D7:3C:2C:9F:D1:2F:FE:44:37:8C:9A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E321544EE3CA7FE567DC67100EFE956FAC8AD25 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa Signing time: Fri 13 Jun 2025 00:01:00 +0000 ROA not before: Fri 13 Jun 2025 00:01:00 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:32:15:44:ee:3c:a7:fe:56:7d:c6:71:00:ef:e9:56:fa:c8:ad:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 13 00:01:00 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=3cc78227b91908bd30101333d4f068bdb664ed120d40603f3a0d3044539679da, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:41:fd:fa:73:58:26:66:c2:f4:7c:65:8d: 49:99:d5:4c:65:95:1b:28:81:c1:d6:1d:a0:e1:cd: 28:d9:f8:69:f1:df:7b:6c:dc:c1:13:b2:7b:87:50: 6a:d0:a8:85:31:99:ae:3d:3f:44:38:a1:b0:1b:d5: f3:d0:d3:a9:45:c2:c7:8c:5d:58:3d:36:47:08:64: 62:c8:12:e5:99:6d:ff:5b:f6:c2:a8:80:20:1f:ee: 03:3f:9d:e4:aa:b0:30:84:69:83:0d:4a:80:46:54: ce:63:e2:d8:87:05:af:78:36:0c:42:6f:c5:fd:25: 15:67:c2:d4:2a:00:16:b9:cf:36:24:a5:ce:19:09: 34:f0:a2:a3:7e:20:74:ca:88:33:0e:6e:47:62:d0: 1f:41:22:c0:b1:1a:57:5f:e9:10:86:b7:4d:2b:90: 5a:0a:b9:4f:bb:3c:6b:cd:fc:a7:8d:bb:51:f3:19: 55:a7:06:29:30:71:c8:91:7f:b4:e7:71:9a:60:4d: b8:aa:6e:bd:c6:42:cd:f6:67:5e:4b:61:56:47:72: e4:c1:75:bd:24:f1:90:1c:3a:bc:9d:22:26:e0:3e: b6:5d:c1:42:72:86:60:36:ac:bb:78:36:2c:17:cf: 23:d3:ff:9d:3a:d8:7b:31:92:6b:ad:cc:af:71:70: 5b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4F:0B:8F:BD:EF:FE:39:03:D7:3C:2C:9F:D1:2F:FE:44:37:8C:9A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.64.0/24 Signature Algorithm: sha256WithRSAEncryption 66:96:71:35:d3:b3:18:f0:93:f2:87:5d:07:49:1d:f3:40:50: 46:95:b9:1a:64:50:57:4e:d0:18:c3:a7:e0:a6:e1:15:2b:b3: 0b:ac:d8:ef:4b:0c:50:ec:bb:52:2f:72:a4:93:8b:7e:a5:9b: e5:70:1d:36:1f:69:1f:3d:75:2d:98:3c:03:9f:7d:60:b0:d7: 6f:ee:68:5f:e4:2d:1e:7a:c8:3a:d2:62:7d:ad:16:20:67:6a: bc:18:04:7b:9f:85:a1:c8:a1:99:f6:db:c8:c0:d9:3e:be:83: 37:87:92:52:65:ed:5b:a4:33:4e:a3:3d:9d:15:bf:95:85:b7: 85:51:67:ff:48:49:00:6d:f8:71:80:bc:93:d1:b4:cf:01:a7: a5:69:0c:6a:76:8e:5e:be:f4:a6:e9:4c:72:e6:b4:ea:1f:ef: 46:95:f9:67:03:72:de:42:aa:de:08:aa:ad:bf:5e:e7:3a:5f: 79:5f:e2:f1:1f:e3:0a:3d:ac:2f:ec:60:58:c3:0c:a6:5f:11: 81:70:69:d8:18:55:aa:d5:ac:bc:cc:99:db:0b:ab:48:1c:e4: 7d:7f:d4:ef:ba:15:f3:30:7d:a1:ac:b5:fe:1c:ca:d3:d3:90: 39:07:6e:57:83:07:8a:55:26:4d:95:47:ad:f5:2a:a6:30:19: ca:25:a6:f5 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUbjIVRO48p/5WfcZxAO/pVvrIrSUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMzAwMDEwMFoX DTI1MDcxODIzNTk1OVowejFJMEcGA1UEBRNAM2NjNzgyMjdiOTE5MDhiZDMwMTAx MzMzZDRmMDY4YmRiNjY0ZWQxMjBkNDA2MDNmM2EwZDMwNDQ1Mzk2NzlkYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTVB/fpzWCZmwvR8ZY1JmdVMZZUb KIHB1h2g4c0o2fhp8d97bNzBE7J7h1Bq0KiFMZmuPT9EOKGwG9Xz0NOpRcLHjF1Y PTZHCGRiyBLlmW3/W/bCqIAgH+4DP53kqrAwhGmDDUqARlTOY+LYhwWveDYMQm/F /SUVZ8LUKgAWuc82JKXOGQk08KKjfiB0yogzDm5HYtAfQSLAsRpXX+kQhrdNK5Ba CrlPuzxrzfynjbtR8xlVpwYpMHHIkX+053GaYE24qm69xkLN9mdeS2FWR3LkwXW9 JPGQHDq8nSIm4D62XcFCcoZgNqy7eDYsF88j0/+dOth7MZJrrcyvcXBbYQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFL1PC4+97/45A9c8LJ/RL/5EN4yaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxMjA2MTNmLTRmMDgtNDA1Yi1iZWE3LTNlYTAxZGE5YjBkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9hAMA0GCSqGSIb3DQEBCwUAA4IBAQBmlnE107MY8JPyh10HSR3z QFBGlbkaZFBXTtAYw6fgpuEVK7MLrNjvSwxQ7LtSL3Kkk4t+pZvlcB02H2kfPXUt mDwDn31gsNdv7mhf5C0eesg60mJ9rRYgZ2q8GAR7n4WhyKGZ9tvIwNk+voM3h5JS Ze1bpDNOoz2dFb+VhbeFUWf/SEkAbfhxgLyT0bTPAaelaQxqdo5evvSm6Uxy5rTq H+9GlflnA3LeQqreCKqtv17nOl95X+LxH+MKPawv7GBYwwymXxGBcGnYGFWq1ay8 zJnbC6tIHOR9f9TvuhXzMH2hrLX+HMrT05A5B25XgweKVSZNlUet9SqmMBnKJab1 -----END CERTIFICATE-----Generated at Sat Jun 14 05:49:34 2025 by rpki-client