$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ab8755a-b40e-412e-8b0b-d13e0c39aed0.roa File: 9ab8755a-b40e-412e-8b0b-d13e0c39aed0.roa (raw, json) Hash identifier: eL7/KAY27l1/0y6HoVztxYG0ZqiGRvjQ71FPvzXNI8k= Subject key identifier: AE:71:CE:7C:CB:0D:F1:13:2E:8C:BC:D3:76:21:CF:D8:A6:82:92:28 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 735A2EF4CF0BFAE9E9260DAFC8B9379A655B0743 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ab8755a-b40e-412e-8b0b-d13e0c39aed0.roa Signing time: Mon 31 Mar 2025 15:01:16 +0000 ROA not before: Mon 31 Mar 2025 15:01:16 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5a:2e:f4:cf:0b:fa:e9:e9:26:0d:af:c8:b9:37:9a:65:5b:07:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 31 15:01:16 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: serialNumber=39db219e7c7691d9c21de8e563d5d6611f9f1807284e9591940b34619773ae3d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:ee:51:df:8b:85:e2:44:23:e5:28:f5:cc: 92:8a:e7:8f:37:fd:9f:c2:10:c4:b8:b9:c9:0c:2c: 0c:02:22:16:e3:9e:14:81:ef:b7:8a:c5:86:4f:8a: c2:0f:52:f3:dc:2e:93:8f:80:b3:5f:2a:f4:7d:13: ca:50:dd:77:cd:4c:0d:ad:e4:61:09:f5:6a:ab:ad: 2d:b7:4c:45:0a:55:81:ab:24:59:ef:21:ef:ca:40: 7b:80:9c:de:ac:83:08:5d:71:8e:54:d3:db:14:9e: 08:5c:f7:66:fe:6f:47:a8:eb:b8:11:12:88:2b:bd: 1a:40:b4:87:0f:58:c0:0c:df:b7:46:fc:1b:db:8f: 1a:a1:6d:ce:1c:7b:86:9e:79:e0:c2:69:bd:39:e3: f8:bf:d7:98:d1:37:ef:51:e4:39:13:d2:4d:0e:3c: b2:ba:21:b7:70:9c:48:0c:09:cf:e9:f4:21:59:30: 74:d0:9d:6e:90:b0:71:c6:f8:cf:c5:2c:c6:51:72: f5:8f:ea:aa:fc:c7:83:26:57:db:7b:6a:91:83:c7: 5c:bc:d4:54:6b:22:a6:d7:75:37:ca:ee:0c:e2:57: b9:b0:cd:9f:c6:9e:bd:13:3e:08:a6:1b:57:c7:41: 65:45:ec:2e:66:76:ca:d8:b7:aa:6c:a3:d2:85:1a: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:71:CE:7C:CB:0D:F1:13:2E:8C:BC:D3:76:21:CF:D8:A6:82:92:28 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ab8755a-b40e-412e-8b0b-d13e0c39aed0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.53.0/24 Signature Algorithm: sha256WithRSAEncryption 67:5b:13:fc:80:d1:b2:93:b7:5f:23:97:0a:2e:92:af:19:0a: ea:c5:54:06:96:b5:00:58:69:7e:5a:33:05:f2:0b:31:67:d4: ed:37:55:23:19:41:47:66:c2:4c:85:d1:25:89:89:41:b9:b1: 74:03:07:4e:be:98:0e:ec:16:d8:f6:77:70:5f:53:23:94:e7: e5:e5:66:e4:ca:0d:c0:f6:6f:d0:93:2b:71:ac:b4:bf:67:6a: 01:d3:c6:16:15:28:ec:f7:10:94:30:67:3f:3b:12:dd:36:49: 9e:38:72:e7:00:a0:c0:3d:75:5a:12:2f:01:04:3b:ad:a3:5f: d1:32:58:23:20:9d:35:64:15:9b:2f:6e:71:08:ea:40:7e:33: 7d:e2:9f:82:42:4a:7a:b3:23:4d:f0:36:d9:2d:fe:31:c1:38: 12:77:ff:3d:e4:b3:cd:57:27:df:41:c5:64:6a:ab:7c:2e:c9: 57:95:2f:91:08:28:d4:be:a3:de:0d:75:b4:f2:cc:8d:fd:fd: ce:34:a4:f7:60:8f:f7:3b:2d:dd:18:0e:62:8d:14:be:5f:2b: fb:74:6e:15:e5:01:b1:89:54:03:32:03:58:c3:b9:d5:bc:78: 07:dd:74:04:3c:c2:97:ac:25:60:06:08:5b:8a:2b:d3:56:93: 50:05:90:fd -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUc1ou9M8L+unpJg2vyLk3mmVbB0MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMzMTE1MDExNloX DTI1MDUwNTIzNTk1OVowejFJMEcGA1UEBRNAMzlkYjIxOWU3Yzc2OTFkOWMyMWRl OGU1NjNkNWQ2NjExZjlmMTgwNzI4NGU5NTkxOTQwYjM0NjE5NzczYWUzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyPuUd+LheJEI+Uo9cySiuePN/2f whDEuLnJDCwMAiIW454Uge+3isWGT4rCD1Lz3C6Tj4CzXyr0fRPKUN13zUwNreRh CfVqq60tt0xFClWBqyRZ7yHvykB7gJzerIMIXXGOVNPbFJ4IXPdm/m9HqOu4ERKI K70aQLSHD1jADN+3Rvwb248aoW3OHHuGnnngwmm9OeP4v9eY0TfvUeQ5E9JNDjyy uiG3cJxIDAnP6fQhWTB00J1ukLBxxvjPxSzGUXL1j+qq/MeDJlfbe2qRg8dcvNRU ayKm13U3yu4M4le5sM2fxp69Ez4IphtXx0FlRewuZnbK2LeqbKPShRqPkQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFK5xznzLDfETLoy803Yhz9imgpIoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlhYjg3NTVhLWI0MGUtNDEyZS04YjBiLWQxM2UwYzM5YWVkMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9A1MA0GCSqGSIb3DQEBCwUAA4IBAQBnWxP8gNGyk7dfI5cKLpKv GQrqxVQGlrUAWGl+WjMF8gsxZ9TtN1UjGUFHZsJMhdEliYlBubF0AwdOvpgO7BbY 9ndwX1MjlOfl5Wbkyg3A9m/QkytxrLS/Z2oB08YWFSjs9xCUMGc/OxLdNkmeOHLn AKDAPXVaEi8BBDuto1/RMlgjIJ01ZBWbL25xCOpAfjN94p+CQkp6syNN8DbZLf4x wTgSd/895LPNVyffQcVkaqt8LslXlS+RCCjUvqPeDXW08syN/f3ONKT3YI/3Oy3d GA5ijRS+Xyv7dG4V5QGxiVQDMgNYw7nVvHgH3XQEPMKXrCVgBghbiivTVpNQBZD9 -----END CERTIFICATE-----Generated at Thu Apr 17 17:36:27 2025 by rpki-client