$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed477fef-770c-4148-9a17-5b7e04aa2ae0.roa File: ed477fef-770c-4148-9a17-5b7e04aa2ae0.roa (raw, json) Hash identifier: V7szGXC4tEI9LWuQptCGNF1cGZho/i3H6/Cq08Nx+z8= Subject key identifier: AC:90:CB:55:AC:1E:4A:C2:C8:36:88:05:0D:DE:50:54:C7:24:1E:E9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B2923568F488D8B96495E35B96FE266D76099A5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed477fef-770c-4148-9a17-5b7e04aa2ae0.roa Signing time: Sat 14 Jun 2025 00:00:47 +0000 ROA not before: Sat 14 Jun 2025 00:00:47 +0000 ROA not after: Sat 19 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:29:23:56:8f:48:8d:8b:96:49:5e:35:b9:6f:e2:66:d7:60:99:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 14 00:00:47 2025 GMT Not After : Jul 19 23:59:59 2025 GMT Subject: serialNumber=46ce19668745631753fcc5fc4d90234a8a572f558266de2374152a4727a60a88, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f4:b4:67:5b:74:c7:d8:1b:e2:38:c8:7d:94: bd:e8:9e:9b:b4:77:04:85:ad:83:33:f1:83:35:94: 20:28:ef:3d:12:c4:6f:a7:da:1f:8f:81:95:c2:6f: f1:65:86:7d:6b:9b:81:46:90:eb:79:d3:67:8d:5c: b0:69:e8:40:d6:5f:0a:26:d8:c4:40:68:12:ba:a5: 07:d1:a5:6f:9d:a4:de:3f:67:96:8a:da:5c:54:ed: 30:9c:ff:62:c2:af:f7:53:66:3c:8f:fb:9d:ad:fc: a0:28:ef:07:6e:15:83:98:af:5c:84:91:ab:41:bb: 48:6e:cf:f7:43:db:6d:04:70:df:91:f5:c3:44:af: 1f:84:fb:f4:34:51:8f:44:80:e2:9f:95:b8:44:e4: 4a:41:f4:ba:4b:82:87:eb:07:2a:53:ff:c6:bb:9d: 0f:31:b5:51:eb:fc:53:5a:97:b7:e0:ea:ee:5c:cc: a3:23:36:32:79:b0:ca:63:94:1e:1f:9a:07:52:05: a0:3d:b8:58:71:6c:f1:34:9b:b0:b0:17:d8:91:90: 0f:48:69:36:26:d9:1b:c9:1c:34:d5:c9:bc:7f:ca: 18:b0:7d:b3:fe:a9:b0:04:5f:3a:54:24:8e:61:d1: a8:d1:c4:4e:26:48:be:81:27:32:8d:bd:10:31:9a: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:90:CB:55:AC:1E:4A:C2:C8:36:88:05:0D:DE:50:54:C7:24:1E:E9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed477fef-770c-4148-9a17-5b7e04aa2ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.76.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:a2:14:61:52:b7:2e:a6:0c:35:54:6e:4e:37:b3:2e:6f:6e: 0c:7a:7b:0e:13:91:1c:84:b9:34:ed:13:83:cb:bc:90:51:b4: fb:23:22:ea:11:74:5a:93:e5:84:f4:ce:45:ef:9c:55:32:da: 73:83:39:fb:6d:04:af:6b:b0:61:47:e9:3c:e1:1d:c7:a6:52: 28:85:b4:45:7d:51:d1:f9:59:02:91:80:5d:99:c3:d6:a1:6a: 99:61:30:eb:3d:76:8e:df:b2:22:3e:50:c7:ee:35:e1:91:bd: 9b:83:9f:79:aa:9a:02:ef:9a:7d:47:b8:2e:35:63:35:f0:54: ef:73:40:53:89:32:05:f2:f8:98:5a:9a:7f:d6:34:5f:48:84: 25:e2:23:73:90:89:c2:61:f8:2f:a1:cf:02:82:ba:7e:2d:02: 0b:8d:2d:a0:05:7a:47:30:09:f3:ce:5a:44:9b:52:d7:09:39: 70:39:a3:51:17:33:49:1b:85:c2:bc:c7:bf:c0:96:c7:55:4e: f4:eb:ed:99:23:b7:46:cb:a1:1e:fa:31:0b:10:82:93:b9:87: 5c:09:f0:d2:5f:de:45:41:e9:3d:57:53:ad:85:ee:97:b0:24: 6a:a2:00:20:22:e9:b6:b6:36:3e:fb:e5:af:ee:44:cf:df:4b: f0:c7:31:24 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUaykjVo9IjYuWSV41uW/iZtdgmaUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYxNDAwMDA0N1oX DTI1MDcxOTIzNTk1OVowejFJMEcGA1UEBRNANDZjZTE5NjY4NzQ1NjMxNzUzZmNj NWZjNGQ5MDIzNGE4YTU3MmY1NTgyNjZkZTIzNzQxNTJhNDcyN2E2MGE4ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfS0Z1t0x9gb4jjIfZS96J6btHcE ha2DM/GDNZQgKO89EsRvp9ofj4GVwm/xZYZ9a5uBRpDredNnjVywaehA1l8KJtjE QGgSuqUH0aVvnaTeP2eWitpcVO0wnP9iwq/3U2Y8j/udrfygKO8HbhWDmK9chJGr QbtIbs/3Q9ttBHDfkfXDRK8fhPv0NFGPRIDin5W4RORKQfS6S4KH6wcqU//Gu50P MbVR6/xTWpe34OruXMyjIzYyebDKY5QeH5oHUgWgPbhYcWzxNJuwsBfYkZAPSGk2 JtkbyRw01cm8f8oYsH2z/qmwBF86VCSOYdGo0cROJki+gScyjb0QMZqROwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKyQy1WsHkrCyDaIBQ3eUFTHJB7pMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VkNDc3ZmVmLTc3MGMtNDE0OC05YTE3LTViN2UwNGFhMmFlMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9BMMA0GCSqGSIb3DQEBCwUAA4IBAQCcohRhUrcupgw1VG5ON7Mu b24MensOE5EchLk07RODy7yQUbT7IyLqEXRak+WE9M5F75xVMtpzgzn7bQSva7Bh R+k84R3HplIohbRFfVHR+VkCkYBdmcPWoWqZYTDrPXaO37IiPlDH7jXhkb2bg595 qpoC75p9R7guNWM18FTvc0BTiTIF8viYWpp/1jRfSIQl4iNzkInCYfgvoc8Cgrp+ LQILjS2gBXpHMAnzzlpEm1LXCTlwOaNRFzNJG4XCvMe/wJbHVU706+2ZI7dGy6Ee +jELEIKTuYdcCfDSX95FQek9V1Othe6XsCRqogAgIum2tjY+++Wv7kTP30vwxzEk -----END CERTIFICATE-----Generated at Sat Jun 14 06:40:25 2025 by rpki-client