$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa File: ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa (raw, json) Hash identifier: snsJhxMKvDD3izSkoBNEu8L69IWTMkbF+D2y+fgVFtE= Subject key identifier: 5F:32:C8:CE:4A:4E:94:3F:07:E4:D5:3E:81:90:83:F8:DB:4B:CC:49 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0C7556B90B566F5CF1327881872286B947C5E797 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa Signing time: Tue 10 Jun 2025 16:00:15 +0000 ROA not before: Tue 10 Jun 2025 16:00:15 +0000 ROA not after: Tue 15 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.220.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:75:56:b9:0b:56:6f:5c:f1:32:78:81:87:22:86:b9:47:c5:e7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 10 16:00:15 2025 GMT Not After : Jul 15 23:59:59 2025 GMT Subject: serialNumber=ee7be6a99903edf3a7574d23acf4a911582f11a27649a35b64985c4f11b167e9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:5b:db:4d:9e:bf:44:91:73:f2:56:2f:f3: 50:56:03:aa:bf:a9:e2:16:45:08:7b:9e:cb:42:42: a6:f8:61:ef:03:fd:3f:43:d6:4d:c1:9d:1b:06:73: 81:76:1c:1a:ab:f8:c9:eb:2f:d9:8c:8e:46:09:93: 09:89:5c:1a:bd:ac:cc:8c:c8:28:d1:c3:30:17:43: ef:48:fa:88:6c:3a:38:7a:07:60:15:5d:d7:18:8c: 88:ea:5d:49:3a:db:fa:cd:dc:17:54:62:98:81:e2: 0c:f6:a1:34:65:23:ee:7f:44:49:09:d4:14:94:94: 01:43:94:3d:b7:29:31:6f:5a:8b:12:c4:85:f9:ec: 2f:0b:f2:83:7c:78:e8:92:ef:58:1e:81:ea:7e:66: 0d:90:be:50:44:e5:b1:99:1b:c8:a3:a7:89:54:02: 45:a9:99:f1:84:90:c2:7b:47:c5:ee:84:e6:54:9b: fe:c1:24:23:91:58:d6:4d:96:23:6e:04:83:ae:82: e0:03:11:8e:70:46:37:94:1b:63:15:de:a4:0b:5c: b2:42:8a:9d:17:44:7c:50:da:37:16:4d:14:2c:8f: f6:55:e0:49:1a:60:7c:88:92:23:09:39:70:32:72: 3e:a7:c2:3d:86:18:6c:82:ff:7c:43:1e:88:24:51: ad:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:32:C8:CE:4A:4E:94:3F:07:E4:D5:3E:81:90:83:F8:DB:4B:CC:49 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7d:4f:b7:3a:be:b9:44:50:b2:21:a8:ac:72:1d:a6:71:52:e2: 65:9b:bb:92:66:d1:7e:36:17:99:5b:d9:91:41:04:b5:90:55: 9c:fa:fd:e2:3e:60:1e:74:f4:6c:30:7f:49:2c:26:15:d0:76: d1:ea:55:43:b9:a9:41:09:db:72:f8:fd:9a:38:1e:b0:e7:96: 74:ec:9d:63:65:69:e2:90:94:cf:d5:3f:01:be:0f:c7:ca:59: f8:3d:01:b3:09:d2:41:eb:1f:43:ff:1c:cc:0e:ae:8b:9b:3c: cd:2c:7a:b5:78:28:3c:d8:30:67:f3:0a:7b:1f:53:72:b6:b8: 32:35:e2:b1:8b:43:86:65:79:27:b6:fb:c2:c6:ed:81:2c:e4: 1b:11:72:0d:88:a3:67:39:f2:b4:fe:0b:5b:fa:17:a4:44:52: 94:02:ac:30:c2:34:f5:54:de:e3:da:c4:ae:2f:67:4c:ab:1c: 80:bb:5c:a3:93:8d:65:45:17:66:52:a3:60:01:4f:d8:59:39: b2:2e:92:b2:aa:ac:95:2e:1b:c2:8d:eb:f3:9b:3a:57:40:d9: 05:bc:9b:10:27:33:35:44:11:0e:da:89:67:17:ef:c9:2d:06: 97:ee:75:bc:08:06:cb:32:7f:a0:c4:7e:18:d9:11:eb:97:5b: 04:03:0f:89 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUDHVWuQtWb1zxMniBhyKGuUfF55cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxMDE2MDAxNVoX DTI1MDcxNTIzNTk1OVowejFJMEcGA1UEBRNAZWU3YmU2YTk5OTAzZWRmM2E3NTc0 ZDIzYWNmNGE5MTE1ODJmMTFhMjc2NDlhMzViNjQ5ODVjNGYxMWIxNjdlOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY1b202ev0SRc/JWL/NQVgOqv6ni FkUIe57LQkKm+GHvA/0/Q9ZNwZ0bBnOBdhwaq/jJ6y/ZjI5GCZMJiVwavazMjMgo 0cMwF0PvSPqIbDo4egdgFV3XGIyI6l1JOtv6zdwXVGKYgeIM9qE0ZSPuf0RJCdQU lJQBQ5Q9tykxb1qLEsSF+ewvC/KDfHjoku9YHoHqfmYNkL5QROWxmRvIo6eJVAJF qZnxhJDCe0fF7oTmVJv+wSQjkVjWTZYjbgSDroLgAxGOcEY3lBtjFd6kC1yyQoqd F0R8UNo3Fk0ULI/2VeBJGmB8iJIjCTlwMnI+p8I9hhhsgv98Qx6IJFGt/QIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFF8yyM5KTpQ/B+TVPoGQg/jbS8xJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VjYjg1ZGE1LTA3ZDItNGM1My04NzVkLWViZjMxNWIxZTU4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9wwDQYJKoZIhvcNAQELBQADggEBAH1Ptzq+uURQsiGorHIdpnFS 4mWbu5Jm0X42F5lb2ZFBBLWQVZz6/eI+YB509Gwwf0ksJhXQdtHqVUO5qUEJ23L4 /Zo4HrDnlnTsnWNlaeKQlM/VPwG+D8fKWfg9AbMJ0kHrH0P/HMwOroubPM0serV4 KDzYMGfzCnsfU3K2uDI14rGLQ4ZleSe2+8LG7YEs5BsRcg2Io2c58rT+C1v6F6RE UpQCrDDCNPVU3uPaxK4vZ0yrHIC7XKOTjWVFF2ZSo2ABT9hZObIukrKqrJUuG8KN 6/ObOldA2QW8mxAnMzVEEQ7aiWcX78ktBpfudbwIBssyf6DEfhjZEeuXWwQDD4k= -----END CERTIFICATE-----Generated at Sat Jun 14 06:25:17 2025 by rpki-client