$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa File: e120613f-4f08-405b-bea7-3ea01da9b0df.roa (raw, json) Hash identifier: 25GQKLFszOEQZ3TevEfkV4hfY12nJjQM0RCfn0lpWXI= Subject key identifier: 5E:C4:0B:0B:22:9B:8A:15:35:E6:B0:F0:CE:F5:0F:FE:3D:9C:42:7D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6BD006A656B8290C7DD476A28A5E2DFDC12ACAB3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa Signing time: Sat 02 Aug 2025 00:00:52 +0000 ROA not before: Sat 02 Aug 2025 00:00:52 +0000 ROA not after: Sat 06 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d0:06:a6:56:b8:29:0c:7d:d4:76:a2:8a:5e:2d:fd:c1:2a:ca:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 2 00:00:52 2025 GMT Not After : Sep 6 23:59:59 2025 GMT Subject: serialNumber=95c27464900d65de0df67b4901149be22be7fb0c2ca7b3f0ef333088b69d2a88, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:bb:65:0d:1c:26:bc:ac:24:49:c8:05:e7: 7b:fa:2a:4a:bf:4e:42:91:0c:ae:0d:7b:c9:da:bd: 52:81:8d:e5:10:29:cc:65:fe:d2:b4:be:11:b2:47: 14:f8:0e:62:8c:c3:02:65:8a:ae:46:40:9f:63:1d: 35:ba:a1:e0:10:64:d8:be:6a:a9:27:81:11:b2:35: 1a:f7:0d:ca:7a:ac:85:54:56:58:25:84:4f:ef:c7: c0:f9:61:c6:c1:5a:24:48:4a:29:d8:86:62:74:47: 37:8b:ea:40:a1:97:43:e1:47:bf:91:88:03:f9:a7: 04:81:e1:6b:c7:01:a9:ae:85:b1:0c:b5:0e:9e:b1: f7:83:70:68:31:a2:a2:3e:bb:75:ba:05:ef:f0:31: f4:87:f4:6f:55:3d:8f:fe:2d:27:3e:f2:b8:e8:32: 6c:a1:91:0a:14:54:8f:b2:2d:25:5a:93:4b:c5:d5: e6:f7:28:15:1a:dd:3e:24:88:07:70:13:53:04:ea: b6:6e:4c:a1:33:74:da:b1:a3:45:ca:53:06:e1:03: a2:d0:17:07:17:4d:af:4d:97:ef:41:64:db:7e:c0: 02:75:ac:05:7e:37:fc:6f:92:d3:67:c3:7c:02:10: 49:3d:f3:16:68:b6:24:09:c6:43:57:b5:a6:38:02: 0c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C4:0B:0B:22:9B:8A:15:35:E6:B0:F0:CE:F5:0F:FE:3D:9C:42:7D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.64.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:f3:12:c4:0e:c7:a0:14:54:fd:c5:c2:c8:73:70:67:0b:91: 15:43:60:1b:8b:1b:84:32:97:c9:25:45:d1:c0:ab:93:f3:ab: fc:6c:30:a4:68:8e:21:bc:9e:30:98:10:af:77:dc:91:0b:31: 31:ee:13:a2:77:4f:c8:ae:6a:29:d9:6b:69:96:f3:69:0a:e0: 05:9c:5d:a0:18:8b:c8:d4:ea:90:e4:78:dc:e4:a8:65:83:8c: 60:7a:02:f2:4e:3b:c4:3f:21:fa:04:4b:34:84:4f:2e:88:1a: 52:8a:34:81:4e:3a:8b:ef:80:1d:e5:38:3c:3d:e1:23:e6:9f: 72:bb:db:a8:a2:53:36:0d:78:ee:75:a7:c8:32:25:7a:50:52: c9:75:70:75:8a:5a:79:65:dd:cd:93:65:1a:5a:6a:93:73:47: 83:e8:87:9a:58:03:b7:e8:cd:34:77:79:70:43:02:7b:46:74: 42:94:f8:85:e4:2c:3e:09:27:4a:d8:aa:82:2a:ea:08:5a:71: 02:16:d8:77:c1:ac:17:75:19:3d:23:63:fc:56:7c:eb:6b:01: 0a:51:fa:b0:8e:bf:f3:f3:d0:b3:ac:fa:2f:26:35:61:ad:c5: 8f:ac:1c:1d:9d:90:45:c9:8f:61:9f:b7:44:f7:fc:2a:25:a4: de:91:18:2c -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUa9AGpla4KQx91Haiil4t/cEqyrMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMjAwMDA1MloX DTI1MDkwNjIzNTk1OVowejFJMEcGA1UEBRNAOTVjMjc0NjQ5MDBkNjVkZTBkZjY3 YjQ5MDExNDliZTIyYmU3ZmIwYzJjYTdiM2YwZWYzMzMwODhiNjlkMmE4ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZi7ZQ0cJrysJEnIBed7+ipKv05C kQyuDXvJ2r1SgY3lECnMZf7StL4RskcU+A5ijMMCZYquRkCfYx01uqHgEGTYvmqp J4ERsjUa9w3KeqyFVFZYJYRP78fA+WHGwVokSEop2IZidEc3i+pAoZdD4Ue/kYgD +acEgeFrxwGproWxDLUOnrH3g3BoMaKiPrt1ugXv8DH0h/RvVT2P/i0nPvK46DJs oZEKFFSPsi0lWpNLxdXm9ygVGt0+JIgHcBNTBOq2bkyhM3TasaNFylMG4QOi0BcH F02vTZfvQWTbfsACdawFfjf8b5LTZ8N8AhBJPfMWaLYkCcZDV7WmOAIMYwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFF7ECwsim4oVNeaw8M71D/49nEJ9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxMjA2MTNmLTRmMDgtNDA1Yi1iZWE3LTNlYTAxZGE5YjBkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9hAMA0GCSqGSIb3DQEBCwUAA4IBAQB98xLEDsegFFT9xcLIc3Bn C5EVQ2AbixuEMpfJJUXRwKuT86v8bDCkaI4hvJ4wmBCvd9yRCzEx7hOid0/Irmop 2WtplvNpCuAFnF2gGIvI1OqQ5Hjc5Khlg4xgegLyTjvEPyH6BEs0hE8uiBpSijSB TjqL74Ad5Tg8PeEj5p9yu9uoolM2DXjudafIMiV6UFLJdXB1ilp5Zd3Nk2UaWmqT c0eD6IeaWAO36M00d3lwQwJ7RnRClPiF5Cw+CSdK2KqCKuoIWnECFth3wawXdRk9 I2P8VnzrawEKUfqwjr/z89CzrPovJjVhrcWPrBwdnZBFyY9hn7dE9/wqJaTekRgs -----END CERTIFICATE-----Generated at Mon Aug 4 16:00:13 2025 by rpki-client