$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9489db20-95e0-4921-9118-b2516a901b12.roa File: 9489db20-95e0-4921-9118-b2516a901b12.roa (raw, json) Hash identifier: MshizKWaUFu4j3LmyCfCKJ9TesGpI/dD94uqMkKWV6Y= Subject key identifier: 09:E5:6F:3A:C1:53:44:FA:4B:2F:78:5F:D1:36:E9:25:CB:4C:EF:B1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 341485F994348893C60A1A9479C449620E167414 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9489db20-95e0-4921-9118-b2516a901b12.roa Signing time: Sat 29 Mar 2025 00:00:55 +0000 ROA not before: Sat 29 Mar 2025 00:00:55 +0000 ROA not after: Sat 03 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:14:85:f9:94:34:88:93:c6:0a:1a:94:79:c4:49:62:0e:16:74:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 29 00:00:55 2025 GMT Not After : May 3 23:59:59 2025 GMT Subject: serialNumber=ff9258ca77e2613df5de4949205cfb04c8f2abc218d02e430eea0bd7e897e07c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:16:34:55:0c:e4:1d:dd:28:2d:a5:a3:a0:77: a3:9e:b3:d3:80:bc:13:0e:22:65:8e:fe:cf:cf:72: 8e:4f:16:99:11:a9:73:49:6d:d6:e0:e2:f0:19:84: b0:cd:4b:25:29:40:7c:29:59:e7:30:7d:ea:f0:1e: 2f:2c:89:90:a1:f5:8a:e4:4b:5a:80:ed:fd:02:c2: 4b:ca:ea:a2:b7:d3:b9:b6:46:c1:8c:c4:cf:9a:09: 5f:30:93:c1:ce:64:fa:23:31:b6:46:f0:49:34:4d: 14:a5:44:77:cf:2a:b5:8b:8b:93:f7:3f:5a:4f:aa: 0a:c8:c0:3d:32:a1:50:69:b6:ab:4f:20:cc:71:f7: fe:dd:cc:0e:0c:bd:5a:0d:dd:95:4e:f2:a5:70:6d: ee:9f:b0:c6:47:b1:dd:d7:15:0e:8f:e7:59:bd:fa: b5:c4:c3:5e:13:97:ab:09:bb:0d:10:09:e1:96:87: 86:5b:17:3c:3c:22:68:93:5c:5e:21:d6:a1:81:5a: e2:85:2d:ac:2f:8f:62:ce:c2:2a:33:ab:34:57:d2: d6:b2:af:b9:5a:11:47:f0:ec:37:e5:cb:1e:c9:04: 3b:8f:fd:07:63:16:4f:bd:7c:6f:53:88:72:19:58: 80:1c:7b:4c:d5:fb:f4:17:8a:89:c9:01:69:9b:a9: 4b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E5:6F:3A:C1:53:44:FA:4B:2F:78:5F:D1:36:E9:25:CB:4C:EF:B1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9489db20-95e0-4921-9118-b2516a901b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.72.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:01:fe:dc:9d:66:48:48:9f:a0:ed:f0:33:cb:84:7c:ca:ea: b4:6a:e1:79:81:7c:61:3f:7d:cf:b1:ec:2b:0b:a0:b0:9a:11: 2f:4e:7e:32:c8:99:aa:28:ed:f0:c7:b3:aa:22:67:8d:24:15: be:c6:f6:ad:29:f9:1f:3c:62:ca:8f:66:7c:47:1a:6a:3f:0d: 17:c6:1a:7c:60:67:a0:55:af:88:02:f0:fb:76:80:18:2c:6a: b2:2f:eb:9b:d4:9d:96:d1:cc:17:2e:0b:9a:63:c7:cb:61:83: f0:ee:8b:c9:e5:29:5b:7a:82:09:ad:94:f7:e4:84:13:7a:09: e7:66:ca:72:a5:79:24:9e:a3:40:6e:de:16:98:ed:6d:ce:5e: a8:c8:2f:de:2d:ea:3b:25:d7:3b:42:6a:22:04:82:d0:af:51: a2:b9:2c:ca:42:49:2e:1e:4f:8e:35:98:e4:db:54:72:7b:68: cf:71:18:8f:d7:44:53:f0:d5:15:17:56:6e:5c:b7:49:33:11: 54:ba:22:a1:98:9e:b0:d4:85:a5:8c:fc:07:47:b6:28:6c:69: d0:66:3a:67:6a:5b:76:dc:12:61:1e:76:ba:c1:14:65:a6:0a: 33:54:2f:e6:55:9a:d5:dc:f2:d7:6d:e0:42:28:fa:5b:f4:67: 23:da:74:4f -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUNBSF+ZQ0iJPGChqUecRJYg4WdBQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyOTAwMDA1NVoX DTI1MDUwMzIzNTk1OVowejFJMEcGA1UEBRNAZmY5MjU4Y2E3N2UyNjEzZGY1ZGU0 OTQ5MjA1Y2ZiMDRjOGYyYWJjMjE4ZDAyZTQzMGVlYTBiZDdlODk3ZTA3YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hY0VQzkHd0oLaWjoHejnrPTgLwT DiJljv7Pz3KOTxaZEalzSW3W4OLwGYSwzUslKUB8KVnnMH3q8B4vLImQofWK5Eta gO39AsJLyuqit9O5tkbBjMTPmglfMJPBzmT6IzG2RvBJNE0UpUR3zyq1i4uT9z9a T6oKyMA9MqFQabarTyDMcff+3cwODL1aDd2VTvKlcG3un7DGR7Hd1xUOj+dZvfq1 xMNeE5erCbsNEAnhloeGWxc8PCJok1xeIdahgVrihS2sL49izsIqM6s0V9LWsq+5 WhFH8Ow35cseyQQ7j/0HYxZPvXxvU4hyGViAHHtM1fv0F4qJyQFpm6lL/QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFAnlbzrBU0T6Sy94X9E26SXLTO+xMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk0ODlkYjIwLTk1ZTAtNDkyMS05MTE4LWIyNTE2YTkwMWIxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9hIMA0GCSqGSIb3DQEBCwUAA4IBAQBsAf7cnWZISJ+g7fAzy4R8 yuq0auF5gXxhP33PsewrC6CwmhEvTn4yyJmqKO3wx7OqImeNJBW+xvatKfkfPGLK j2Z8RxpqPw0Xxhp8YGegVa+IAvD7doAYLGqyL+ub1J2W0cwXLguaY8fLYYPw7ovJ 5SlbeoIJrZT35IQTegnnZspypXkknqNAbt4WmO1tzl6oyC/eLeo7Jdc7QmoiBILQ r1GiuSzKQkkuHk+ONZjk21Rye2jPcRiP10RT8NUVF1ZuXLdJMxFUuiKhmJ6w1IWl jPwHR7YobGnQZjpnalt23BJhHna6wRRlpgozVC/mVZrV3PLXbeBCKPpb9Gcj2nRP -----END CERTIFICATE-----Generated at Thu Apr 17 17:24:35 2025 by rpki-client