$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbd3bc41-641b-4341-a138-cdb37dbe5b09.roa File: fbd3bc41-641b-4341-a138-cdb37dbe5b09.roa (raw, json) Hash identifier: axzhT+2S2TeoM9I4q1Q9FoAVgRwVr3n4JqcZ+bOW5n8= Subject key identifier: CC:B6:A1:68:44:E1:BD:8C:40:DB:83:A8:09:B4:2D:81:3F:22:CD:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 134D75301CEBCB0D7169E5DE51A1CC60C9C36D43 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbd3bc41-641b-4341-a138-cdb37dbe5b09.roa Signing time: Fri 01 Aug 2025 00:50:07 +0000 ROA not before: Fri 01 Aug 2025 00:50:07 +0000 ROA not after: Fri 05 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.221.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4d:75:30:1c:eb:cb:0d:71:69:e5:de:51:a1:cc:60:c9:c3:6d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 1 00:50:07 2025 GMT Not After : Sep 5 23:59:59 2025 GMT Subject: serialNumber=6371742557aa0077dd25facfda72b4a9ccdc050413572aa6a4b3499c146b7992, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:25:c3:92:34:5e:59:f4:74:cc:b3:aa:07:17: fa:64:39:ac:68:85:5b:f9:a6:03:cf:ce:4f:cc:42: c3:a1:f2:77:a7:15:d1:e0:b8:5a:1c:89:25:8e:14: 54:93:76:36:d5:28:1e:4a:65:e2:b9:06:dc:ac:6f: c9:ab:32:9c:d0:f0:30:ca:40:01:e1:f9:fe:9e:d4: 46:e9:14:26:14:2f:c9:3e:58:07:41:a1:85:9a:c9: 5f:0b:53:5c:3c:2f:ac:a2:06:1d:1e:31:5b:24:f6: d2:79:1c:2c:26:44:aa:f2:01:6e:70:6d:76:50:2d: 05:d7:d1:33:93:1d:39:8b:3c:6e:aa:08:23:81:2f: 76:c6:a4:26:78:30:a3:f1:b0:cb:3a:fe:92:85:f1: 6c:f5:d0:56:28:18:41:90:30:d7:eb:27:58:b9:2b: 33:99:4f:a9:c8:ce:fe:61:34:ef:ae:b0:af:53:f2: 96:b6:72:89:72:fe:44:f8:33:c5:f4:c6:d4:6d:93: 45:ad:93:2d:4c:28:40:87:2a:9d:32:c9:38:62:f4: 5b:61:de:4e:05:0e:f0:ab:e0:01:26:ff:85:bf:13: 0c:d1:fe:92:79:b0:c9:d9:76:c7:e4:36:d3:7e:95: 85:14:b9:cc:5d:aa:11:a1:a3:9a:08:5a:5d:1e:24: db:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B6:A1:68:44:E1:BD:8C:40:DB:83:A8:09:B4:2D:81:3F:22:CD:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbd3bc41-641b-4341-a138-cdb37dbe5b09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.221.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7d:80:75:e4:98:ae:8b:c9:49:e6:47:0f:96:77:06:2a:02:86: 0d:dc:0a:ff:7a:03:ae:2a:91:9c:35:c2:ae:2d:9b:e1:73:03: 3a:8e:69:d2:83:22:ca:c0:dc:7d:0c:75:31:ff:86:a4:c3:1c: c5:5f:f0:15:d3:63:67:de:11:ff:4b:e2:81:72:71:09:9d:66: 9b:54:83:ff:b1:77:c7:f8:05:74:07:9f:b3:9a:20:42:17:15: 1d:4f:c1:08:e0:f5:8a:00:fd:5b:ce:b2:ac:e8:c5:ee:35:c1: 90:ed:aa:44:21:a2:ab:ff:73:c2:64:cc:db:34:ec:1f:5d:3e: 0e:0f:5d:b9:8c:eb:d5:ba:b2:12:eb:e9:40:19:94:e6:a2:70: bc:f6:b8:ef:10:ec:35:83:8b:93:eb:11:61:c5:32:7b:a9:dd: 81:42:07:1a:e9:a0:6c:94:64:4b:24:be:13:21:74:d9:e2:d5: 5e:fc:fd:e7:f5:f9:fd:07:dc:b3:6f:e4:e4:bd:08:fe:cc:3a: 28:b2:dc:7b:73:de:22:17:63:c8:55:02:d6:be:11:98:c9:d2: f5:d9:68:2f:2b:2f:96:5b:87:b5:e9:94:af:fa:87:b9:75:b1: 0b:c6:3a:a7:df:08:9c:7b:1e:2b:4a:6c:3c:2e:72:88:95:92: 44:09:f0:78 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUE011MBzryw1xaeXeUaHMYMnDbUMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwMTAwNTAwN1oX DTI1MDkwNTIzNTk1OVowejFJMEcGA1UEBRNANjM3MTc0MjU1N2FhMDA3N2RkMjVm YWNmZGE3MmI0YTljY2RjMDUwNDEzNTcyYWE2YTRiMzQ5OWMxNDZiNzk5MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiXDkjReWfR0zLOqBxf6ZDmsaIVb +aYDz85PzELDofJ3pxXR4LhaHIkljhRUk3Y21SgeSmXiuQbcrG/JqzKc0PAwykAB 4fn+ntRG6RQmFC/JPlgHQaGFmslfC1NcPC+sogYdHjFbJPbSeRwsJkSq8gFucG12 UC0F19Ezkx05izxuqggjgS92xqQmeDCj8bDLOv6ShfFs9dBWKBhBkDDX6ydYuSsz mU+pyM7+YTTvrrCvU/KWtnKJcv5E+DPF9MbUbZNFrZMtTChAhyqdMsk4YvRbYd5O BQ7wq+ABJv+FvxMM0f6SebDJ2XbH5DbTfpWFFLnMXaoRoaOaCFpdHiTbtQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFMy2oWhE4b2MQNuDqAm0LYE/Is1RMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiZDNiYzQxLTY0MWItNDM0MS1hMTM4LWNkYjM3ZGJlNWIwOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK90wDQYJKoZIhvcNAQELBQADggEBAH2AdeSYrovJSeZHD5Z3BioC hg3cCv96A64qkZw1wq4tm+FzAzqOadKDIsrA3H0MdTH/hqTDHMVf8BXTY2feEf9L 4oFycQmdZptUg/+xd8f4BXQHn7OaIEIXFR1PwQjg9YoA/VvOsqzoxe41wZDtqkQh oqv/c8JkzNs07B9dPg4PXbmM69W6shLr6UAZlOaicLz2uO8Q7DWDi5PrEWHFMnup 3YFCBxrpoGyUZEskvhMhdNni1V78/ef1+f0H3LNv5OS9CP7MOiiy3Htz3iIXY8hV Ata+EZjJ0vXZaC8rL5Zbh7XplK/6h7l1sQvGOqffCJx7HitKbDwucoiVkkQJ8Hg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:25 2025 by rpki-client