$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0354404d-5bd3-455b-9059-7c313b673651.roa File: 0354404d-5bd3-455b-9059-7c313b673651.roa (raw, json) Hash identifier: gWtMEGnumqQVutL68mKIbWywX7TKYKhilGa4Huynxy4= Subject key identifier: AB:1E:CC:9B:5C:A0:1D:67:D2:9B:9D:35:3D:D5:95:38:A7:1E:FC:E8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 58F297AA57F8B941D3CA6C0D856BB9F3640A3759 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0354404d-5bd3-455b-9059-7c313b673651.roa Signing time: Thu 07 Aug 2025 17:07:08 +0000 ROA not before: Thu 07 Aug 2025 17:07:08 +0000 ROA not after: Thu 11 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.213.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f2:97:aa:57:f8:b9:41:d3:ca:6c:0d:85:6b:b9:f3:64:0a:37:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 7 17:07:08 2025 GMT Not After : Sep 11 23:59:59 2025 GMT Subject: serialNumber=a6f19079a895ee8749f24b44da49cd8531ce32358fbcf86d3510ed3ac17da12a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:5d:9c:c0:fc:47:94:aa:3b:e0:ce:ff:ed: 39:f9:fa:d7:9e:98:fc:07:bc:9a:d8:fa:7b:7d:5e: c4:e6:d7:0c:db:0a:75:87:a9:a8:72:d3:27:1d:05: a8:28:47:29:dc:85:b3:0b:82:2e:3d:98:33:88:19: 63:74:34:fd:be:09:d5:fb:a7:60:1f:44:07:a9:f8: 10:c1:97:02:5b:d2:5c:82:32:a8:68:b2:13:c1:d6: 63:74:a1:32:ef:82:08:9d:5e:95:d4:20:bf:0c:3e: 08:78:e9:4a:d3:24:20:af:0f:97:c7:c2:16:ca:a9: c8:52:a4:a7:80:60:63:90:ce:c6:dc:6a:5e:92:65: 54:bc:73:f6:19:11:ee:6a:2a:0a:83:09:7b:ce:c4: 50:3a:8f:32:d9:19:fd:3f:45:32:eb:54:ae:fb:2d: 86:55:b2:dd:e3:96:d6:ed:0e:f6:5a:21:85:4b:fd: f9:85:44:0c:13:89:67:d6:ba:7c:18:b8:28:74:3e: 1e:f7:65:cc:27:7c:f9:7c:99:fb:b8:d8:9e:67:ca: 4f:e1:6a:6e:d8:77:cd:c2:0a:39:32:21:3a:e9:53: f2:f6:f1:72:77:98:8a:bd:dd:d0:de:f6:f7:c4:1b: 54:65:c9:18:c3:d2:bd:9a:a5:2c:51:91:86:9a:c1: fd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1E:CC:9B:5C:A0:1D:67:D2:9B:9D:35:3D:D5:95:38:A7:1E:FC:E8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0354404d-5bd3-455b-9059-7c313b673651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.213.135.0/24 Signature Algorithm: sha256WithRSAEncryption c8:7c:de:9a:39:2f:74:9c:09:42:59:8a:f1:6e:12:55:94:3b: 9f:c7:08:9d:5c:b8:b2:29:38:33:6a:42:21:3b:26:00:3a:8d: 61:e3:c3:17:98:1e:7a:c0:07:04:bc:08:a9:49:fb:22:07:9a: 51:ba:44:fb:15:c1:f0:30:1e:71:45:4b:fc:a6:95:35:18:6f: 38:3c:55:0a:14:74:4d:6b:4e:b5:3d:07:d8:8a:fc:21:5c:62: 76:a8:c5:bd:a3:7f:2d:e1:cb:a4:99:db:2d:2a:5a:c9:f0:e5: c3:ea:f4:9e:d9:26:b2:17:a8:7d:ac:cf:9c:6c:51:f6:4c:64: 6e:1b:13:82:23:ca:e5:a2:8d:c8:c8:19:70:4e:63:11:5b:91: 8e:de:76:5e:9c:6e:17:f0:52:22:97:65:1d:0f:40:10:d5:7a: 64:7b:3b:13:0a:45:0f:8b:08:56:df:12:71:d1:aa:66:33:26: 33:f6:99:2a:2c:00:f4:69:1e:a1:ee:9f:00:61:d4:4b:56:b1: ca:df:86:68:5e:5e:94:fc:79:5c:11:f8:5b:31:af:7a:f5:47: e4:85:fc:12:e3:f4:a5:31:bd:81:a4:03:28:07:1c:63:cb:06: f8:e4:6a:3f:ef:ad:b4:58:12:2a:d4:fd:d6:55:bc:7f:71:94: 3a:55:9d:39 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUWPKXqlf4uUHTymwNhWu582QKN1kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwNzE3MDcwOFoX DTI1MDkxMTIzNTk1OVowejFJMEcGA1UEBRNAYTZmMTkwNzlhODk1ZWU4NzQ5ZjI0 YjQ0ZGE0OWNkODUzMWNlMzIzNThmYmNmODZkMzUxMGVkM2FjMTdkYTEyYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluZdnMD8R5SqO+DO/+05+frXnpj8 B7ya2Pp7fV7E5tcM2wp1h6moctMnHQWoKEcp3IWzC4IuPZgziBljdDT9vgnV+6dg H0QHqfgQwZcCW9JcgjKoaLITwdZjdKEy74IInV6V1CC/DD4IeOlK0yQgrw+Xx8IW yqnIUqSngGBjkM7G3GpekmVUvHP2GRHuaioKgwl7zsRQOo8y2Rn9P0Uy61Su+y2G VbLd45bW7Q72WiGFS/35hUQME4ln1rp8GLgodD4e92XMJ3z5fJn7uNieZ8pP4Wpu 2HfNwgo5MiE66VPy9vFyd5iKvd3Q3vb3xBtUZckYw9K9mqUsUZGGmsH9awIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKsezJtcoB1n0pudNT3VlTinHvzoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzNTQ0MDRkLTViZDMtNDU1Yi05MDU5LTdjMzEzYjY3MzY1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9WHMA0GCSqGSIb3DQEBCwUAA4IBAQDIfN6aOS90nAlCWYrxbhJV lDufxwidXLiyKTgzakIhOyYAOo1h48MXmB56wAcEvAipSfsiB5pRukT7FcHwMB5x RUv8ppU1GG84PFUKFHRNa061PQfYivwhXGJ2qMW9o38t4cukmdstKlrJ8OXD6vSe 2SayF6h9rM+cbFH2TGRuGxOCI8rloo3IyBlwTmMRW5GO3nZenG4X8FIil2UdD0AQ 1XpkezsTCkUPiwhW3xJx0apmMyYz9pkqLAD0aR6h7p8AYdRLVrHK34ZoXl6U/Hlc EfhbMa969UfkhfwS4/SlMb2BpAMoBxxjywb45Go/7620WBIq1P3WVbx/cZQ6VZ05 -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:45 2025 by rpki-client