$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0384c943-d0ac-4d4c-b5c3-a670c7e33c51.roa File: 0384c943-d0ac-4d4c-b5c3-a670c7e33c51.roa (raw, json) Hash identifier: khqltB/m4anhFgqFtflqyoqil3hFsUQNxaP9WzA2FY4= Subject key identifier: 61:B0:74:EA:F6:5C:7D:DD:14:7B:18:41:14:78:3F:24:44:F0:6F:18 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 59F4921153A40DCFE296A425D27702B0F8B346CA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0384c943-d0ac-4d4c-b5c3-a670c7e33c51.roa Signing time: Tue 15 Jul 2025 00:00:16 +0000 ROA not before: Tue 15 Jul 2025 00:00:16 +0000 ROA not after: Tue 19 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f4:92:11:53:a4:0d:cf:e2:96:a4:25:d2:77:02:b0:f8:b3:46:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 15 00:00:16 2025 GMT Not After : Aug 19 23:59:59 2025 GMT Subject: serialNumber=e4fa3b07488bd83853ed81fa592df4ec6d17d1dc3cd0f25e6031be296c8705bf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:75:ba:e8:5f:7a:ea:a8:fa:d7:3e:3f:73: b3:86:94:55:09:2d:0c:9c:01:ba:c1:34:e6:e6:19: 67:b6:11:92:a9:f2:a6:3c:d3:1d:20:98:14:80:e4: e3:c2:7c:15:e6:9b:ea:a2:5c:24:b4:44:ef:ed:18: 39:c6:32:b3:75:50:b7:19:e8:a1:80:c0:6b:5e:37: ba:47:30:5f:97:44:16:a3:d9:c1:59:60:57:e2:ff: 7a:54:1b:9b:8f:7e:69:74:38:52:a9:e5:ee:d7:0f: 30:95:82:6d:33:45:20:f8:96:62:d6:49:f6:d5:12: 14:80:d3:99:e0:d8:f7:b0:c8:47:21:dd:35:84:79: 8e:71:10:ef:32:39:9d:f4:6a:da:01:57:0c:f7:15: 75:2f:39:44:3b:a7:8f:c8:e5:3b:b5:a5:a5:18:cf: cb:df:ac:ce:54:c5:a4:c3:54:ae:32:65:93:46:2b: 9b:25:ec:2e:16:a7:17:36:e1:d0:2e:99:6f:44:fd: 60:d1:83:04:2c:04:44:0c:a3:92:db:0c:ee:f3:30: 39:81:b8:0c:25:b5:cf:f5:a3:48:81:35:ba:2a:5b: 2a:e3:ad:56:8a:a4:c8:cb:75:1c:1a:5f:39:87:27: 46:d2:a2:57:45:aa:f8:7a:a9:b4:6c:ee:8c:48:1a: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B0:74:EA:F6:5C:7D:DD:14:7B:18:41:14:78:3F:24:44:F0:6F:18 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0384c943-d0ac-4d4c-b5c3-a670c7e33c51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.0.0/15 Signature Algorithm: sha256WithRSAEncryption a8:9f:04:ad:97:f9:41:da:50:b0:a2:41:4a:a4:fa:8f:85:c3: 0d:2d:9b:d5:fe:a8:5e:59:b2:f0:a3:97:96:30:2a:81:3d:e4: aa:e9:08:04:81:61:9f:dd:6d:ea:0d:fe:3a:5d:25:36:10:54: 6b:be:9c:62:aa:41:87:99:8a:5e:c8:cc:75:b2:13:15:4d:8c: ee:e4:6c:c6:ba:30:47:ab:00:09:56:32:ee:a5:47:47:58:9a: 46:d5:c2:9e:13:d4:36:e7:22:d2:bf:ba:ba:84:1c:87:a6:e0: d0:03:3a:e9:26:7e:a9:ff:97:37:84:ae:91:a4:ae:57:2a:f1: 52:e4:08:45:b5:ee:11:50:eb:2b:3a:f5:4d:10:33:fc:01:3e: f7:e4:0b:7b:4e:3f:29:0d:68:29:28:69:c2:74:28:a8:98:61: ef:da:8a:3b:97:cd:b8:15:f7:b9:7d:0b:49:44:57:ce:cd:4e: b5:85:c7:58:bc:42:ba:3d:ca:d4:9d:e2:76:8c:0a:08:51:71: 88:2c:fd:c4:e9:c1:2f:83:41:2a:a8:94:98:95:1d:10:1f:3a: 49:cf:19:e1:21:ac:2d:58:a3:c9:a4:e9:d1:e5:be:bc:90:81: 01:d6:9d:39:f7:81:b1:16:08:28:cd:c4:7d:a1:88:3d:19:9d: d2:93:49:00 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUWfSSEVOkDc/ilqQl0ncCsPizRsowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcxNTAwMDAxNloX DTI1MDgxOTIzNTk1OVowejFJMEcGA1UEBRNAZTRmYTNiMDc0ODhiZDgzODUzZWQ4 MWZhNTkyZGY0ZWM2ZDE3ZDFkYzNjZDBmMjVlNjAzMWJlMjk2Yzg3MDViZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrx1uuhfeuqo+tc+P3OzhpRVCS0M nAG6wTTm5hlnthGSqfKmPNMdIJgUgOTjwnwV5pvqolwktETv7Rg5xjKzdVC3Geih gMBrXje6RzBfl0QWo9nBWWBX4v96VBubj35pdDhSqeXu1w8wlYJtM0Ug+JZi1kn2 1RIUgNOZ4Nj3sMhHId01hHmOcRDvMjmd9GraAVcM9xV1LzlEO6ePyOU7taWlGM/L 36zOVMWkw1SuMmWTRiubJewuFqcXNuHQLplvRP1g0YMELAREDKOS2wzu8zA5gbgM JbXP9aNIgTW6Klsq461WiqTIy3UcGl85hydG0qJXRar4eqm0bO6MSBo4iwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFGGwdOr2XH3dFHsYQRR4PyRE8G8YMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzODRjOTQzLWQwYWMtNGQ0Yy1iNWMzLWE2NzBjN2UzM2M1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9gwDQYJKoZIhvcNAQELBQADggEBAKifBK2X+UHaULCiQUqk+o+F ww0tm9X+qF5ZsvCjl5YwKoE95KrpCASBYZ/dbeoN/jpdJTYQVGu+nGKqQYeZil7I zHWyExVNjO7kbMa6MEerAAlWMu6lR0dYmkbVwp4T1DbnItK/urqEHIem4NADOukm fqn/lzeErpGkrlcq8VLkCEW17hFQ6ys69U0QM/wBPvfkC3tOPykNaCkoacJ0KKiY Ye/aijuXzbgV97l9C0lEV87NTrWFx1i8Qro9ytSd4naMCghRcYgs/cTpwS+DQSqo lJiVHRAfOknPGeEhrC1Yo8mk6dHlvryQgQHWnTn3gbEWCCjNxH2hiD0ZndKTSQA= -----END CERTIFICATE-----Generated at Thu Jul 31 00:58:27 2025 by rpki-client