$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed477fef-770c-4148-9a17-5b7e04aa2ae0.roa File: ed477fef-770c-4148-9a17-5b7e04aa2ae0.roa (raw, json) Hash identifier: v9gsJoC2NlAvfVed6NdeJ5SbHrhRQA1DPFi64GnQP6M= Subject key identifier: 05:51:EA:1F:C6:08:57:1A:21:A5:7D:48:53:8E:53:33:78:BC:99:35 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 54BEA0201C5AD2BCBA718D7436F3E1CC90AD7636 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed477fef-770c-4148-9a17-5b7e04aa2ae0.roa Signing time: Fri 25 Apr 2025 00:01:13 +0000 ROA not before: Fri 25 Apr 2025 00:01:13 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:be:a0:20:1c:5a:d2:bc:ba:71:8d:74:36:f3:e1:cc:90:ad:76:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 25 00:01:13 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=f392786045db403d11d586ac8df26ad6b89a7dd1b72380b6fa84b9631e6e5b99, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fd:7f:92:e2:69:89:5e:7c:9c:73:16:29:89: fd:9f:66:a7:cc:d9:c4:f4:6d:64:e6:ea:40:68:fd: 3c:bd:e5:05:1e:22:9b:84:d1:db:46:a1:cc:00:18: 29:41:85:f8:ce:84:e1:3e:79:15:5c:b0:5b:e4:9d: a1:dc:04:d5:f4:76:67:2f:41:5f:fc:e9:c5:71:ef: 9f:fc:2e:04:54:38:de:aa:89:64:89:13:b2:5e:ef: 7d:4b:1b:25:84:20:b7:0b:ad:8e:99:94:ce:9d:57: f2:56:00:47:18:cb:76:77:4d:dd:3b:d4:56:5b:b6: fb:2f:e1:9a:90:ac:63:e1:de:e9:8f:ff:e2:50:e6: fd:f3:21:47:74:84:01:42:1b:5c:09:6f:b8:6b:c0: f7:11:6b:f1:58:32:c7:c0:10:55:a0:ce:7b:8e:18: 05:b8:8d:52:3b:8a:4a:f6:ac:8d:8f:88:e6:44:3e: 63:3d:47:a8:5d:8c:02:66:c2:a1:50:ca:f9:37:a7: 98:d9:de:1c:68:4a:28:ac:10:f9:f1:50:ba:06:a5: 0c:70:9f:db:90:80:51:56:4b:aa:b1:47:cc:6d:8f: 80:98:35:f6:d3:ee:5d:19:ae:c8:05:72:a3:9a:74: e3:60:b5:0d:bf:96:6e:67:fa:4e:e1:74:09:b0:29: 2f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:51:EA:1F:C6:08:57:1A:21:A5:7D:48:53:8E:53:33:78:BC:99:35 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed477fef-770c-4148-9a17-5b7e04aa2ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.76.0/23 Signature Algorithm: sha256WithRSAEncryption 67:fc:36:eb:38:2f:dd:85:a7:e1:72:b4:d2:0e:92:2e:f4:2f: cb:18:de:0f:54:d4:86:a0:e5:1d:0a:80:2e:48:2a:d4:b8:03: 0f:d8:bc:56:95:4a:33:b3:67:78:9e:e8:e2:3a:bf:60:22:73: cc:1e:c0:c3:0f:c6:bd:06:0c:4a:67:a4:35:6a:d5:b2:a2:9d: ad:ba:de:16:34:22:0b:9b:a7:7b:cb:e7:84:91:41:91:e9:54: 24:e8:42:c8:9c:17:64:6b:7c:8b:25:d9:b7:e1:5a:10:1f:32: 83:bd:ae:ca:3f:ac:66:45:71:43:36:22:3f:27:ef:35:63:a8: 0f:0e:22:c0:94:cb:20:4d:ac:33:4e:26:50:1e:1d:78:b5:03: 4c:49:81:f7:1c:65:af:0b:9d:83:da:76:c2:be:d4:bf:96:b1: 6e:d7:c2:9c:02:d9:76:7c:a2:40:bb:3a:a2:b3:4b:d8:a3:c7: ca:4e:05:f2:84:f4:f4:80:8c:0f:66:1e:af:4d:bf:05:ad:0f: 8f:13:1a:50:4d:09:02:9c:2e:cf:05:fe:dd:38:5d:bb:9f:d6: 05:0d:a3:61:ad:cd:7f:4e:af:84:29:c6:ac:6f:c4:dd:79:1f: f0:7c:bc:37:a3:6b:8c:9e:ef:4e:3f:2e:8c:e9:6b:15:89:ac: 9d:af:9a:ab -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUVL6gIBxa0ry6cY10NvPhzJCtdjYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyNTAwMDExM1oX DTI1MDUzMDIzNTk1OVowejFJMEcGA1UEBRNAZjM5Mjc4NjA0NWRiNDAzZDExZDU4 NmFjOGRmMjZhZDZiODlhN2RkMWI3MjM4MGI2ZmE4NGI5NjMxZTZlNWI5OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf1/kuJpiV58nHMWKYn9n2anzNnE 9G1k5upAaP08veUFHiKbhNHbRqHMABgpQYX4zoThPnkVXLBb5J2h3ATV9HZnL0Ff /OnFce+f/C4EVDjeqolkiROyXu99SxslhCC3C62OmZTOnVfyVgBHGMt2d03dO9RW W7b7L+GakKxj4d7pj//iUOb98yFHdIQBQhtcCW+4a8D3EWvxWDLHwBBVoM57jhgF uI1SO4pK9qyNj4jmRD5jPUeoXYwCZsKhUMr5N6eY2d4caEoorBD58VC6BqUMcJ/b kIBRVkuqsUfMbY+AmDX20+5dGa7IBXKjmnTjYLUNv5ZuZ/pO4XQJsCkvLwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFAVR6h/GCFcaIaV9SFOOUzN4vJk1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VkNDc3ZmVmLTc3MGMtNDE0OC05YTE3LTViN2UwNGFhMmFlMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9BMMA0GCSqGSIb3DQEBCwUAA4IBAQBn/DbrOC/dhafhcrTSDpIu 9C/LGN4PVNSGoOUdCoAuSCrUuAMP2LxWlUozs2d4nujiOr9gInPMHsDDD8a9BgxK Z6Q1atWyop2tut4WNCILm6d7y+eEkUGR6VQk6ELInBdka3yLJdm34VoQHzKDva7K P6xmRXFDNiI/J+81Y6gPDiLAlMsgTawzTiZQHh14tQNMSYH3HGWvC52D2nbCvtS/ lrFu18KcAtl2fKJAuzqis0vYo8fKTgXyhPT0gIwPZh6vTb8FrQ+PExpQTQkCnC7P Bf7dOF27n9YFDaNhrc1/Tq+EKcasb8TdeR/wfLw3o2uMnu9OPy6M6WsViaydr5qr -----END CERTIFICATE-----Generated at Sat Apr 26 07:36:44 2025 by rpki-client