$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e19dc7f-7a49-4d2e-840b-9f3162a4af2b.roa File: 0e19dc7f-7a49-4d2e-840b-9f3162a4af2b.roa (raw, json) Hash identifier: g73XnBx0oVTgR38vlVKssk6cohKl4N5kFYpMPT7Oj5U= Subject key identifier: C1:2B:33:28:55:0A:03:A9:3B:D2:A3:9B:A5:39:88:7B:F7:33:22:FB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 305E5583F20A9902DFF970736621DAB6168BA387 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e19dc7f-7a49-4d2e-840b-9f3162a4af2b.roa Signing time: Wed 23 Jul 2025 00:00:16 +0000 ROA not before: Wed 23 Jul 2025 00:00:16 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5e:55:83:f2:0a:99:02:df:f9:70:73:66:21:da:b6:16:8b:a3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 23 00:00:16 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=e54bf29bea598b26a96bc15a0bb609093560b9bfba2a5f9c07fe00937abe0136, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:48:e1:46:06:fa:da:07:6b:3a:2f:00:c5:48: 21:d4:0d:b8:cf:dc:f7:14:5a:d1:ac:57:ee:51:62: 72:76:06:f3:2d:72:b8:f1:50:e8:b3:c8:d7:10:79: 3c:0a:6d:55:79:be:ab:e3:01:0c:a9:96:20:f8:96: b3:47:7e:c1:4d:51:9e:f2:c2:f3:0f:d8:cb:c1:f0: 9c:07:10:99:95:21:35:5f:2e:b6:f1:19:65:b6:16: 65:a5:09:eb:74:72:f7:d1:b8:a6:d7:ba:85:83:be: 62:de:d5:bb:2c:c8:da:f2:31:c4:80:af:22:5d:16: e3:f8:9a:71:40:5a:1c:68:f4:89:8c:45:b3:9e:e1: 23:82:dc:a3:a5:72:04:d3:f0:a2:b9:60:16:4d:64: a1:4f:fa:5d:32:6f:b6:47:30:23:48:bb:fa:0b:c9: 16:77:b3:ae:fc:a4:a8:6c:11:21:01:c3:e2:a0:4c: 8e:45:ac:b3:cf:03:1b:d0:a6:29:68:64:6a:5c:36: bf:32:94:19:d7:a3:77:ef:06:7d:e3:7a:90:c3:8e: a8:c7:e2:37:21:fc:b5:96:7a:fe:24:28:d1:26:7c: ab:29:27:c7:14:78:45:2a:e6:1a:19:0f:42:35:86: ca:1c:24:77:be:73:ab:8c:f1:82:70:f4:a5:36:15: e1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2B:33:28:55:0A:03:A9:3B:D2:A3:9B:A5:39:88:7B:F7:33:22:FB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0e19dc7f-7a49-4d2e-840b-9f3162a4af2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.66.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:47:ac:3d:20:b3:83:5e:9d:d1:ae:ca:1b:25:9f:d1:15:2d: ce:29:65:88:b1:7b:20:cd:32:6c:c3:ee:1b:7b:68:0b:a4:87: 2d:b5:bb:8a:9b:c3:46:f3:ce:dd:ee:0e:44:45:96:a7:92:1f: be:c2:34:33:93:6a:f9:c5:d6:e2:b1:1e:3b:1a:f1:22:96:2e: 11:94:cd:02:6e:17:67:c5:b2:c8:db:c5:13:e3:72:94:23:b2: 77:3e:d5:2a:96:1c:5e:8e:27:b9:de:62:5f:a6:8c:89:64:ef: c4:ac:7b:58:2d:41:be:df:f7:6a:ac:f3:76:07:3c:b2:87:70: 18:f8:8c:08:bf:dc:7c:39:37:1e:c2:61:20:31:51:13:72:b5: b8:57:a7:46:1e:dc:be:df:99:3e:9f:52:92:9a:81:74:a6:3b: b4:72:fd:df:39:a8:1e:36:69:36:56:92:ab:d8:4e:83:74:d9: a3:50:a1:f8:7f:63:dc:55:19:d2:bb:49:4e:7e:c7:fc:93:c7: ae:9b:0c:37:4b:3d:0c:53:02:fa:f2:d7:28:77:4b:d9:ce:e4: 16:5b:ab:5e:ba:44:39:43:9b:04:b9:52:46:41:ab:0e:d7:15: dc:cf:ec:04:e7:07:57:9a:dd:ee:6b:e0:6c:ef:3d:ea:60:5f: 5f:20:66:28 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUMF5Vg/IKmQLf+XBzZiHathaLo4cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcyMzAwMDAxNloX DTI1MDgyNzIzNTk1OVowejFJMEcGA1UEBRNAZTU0YmYyOWJlYTU5OGIyNmE5NmJj MTVhMGJiNjA5MDkzNTYwYjliZmJhMmE1ZjljMDdmZTAwOTM3YWJlMDEzNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkjhRgb62gdrOi8AxUgh1A24z9z3 FFrRrFfuUWJydgbzLXK48VDos8jXEHk8Cm1Veb6r4wEMqZYg+JazR37BTVGe8sLz D9jLwfCcBxCZlSE1Xy628RllthZlpQnrdHL30bim17qFg75i3tW7LMja8jHEgK8i XRbj+JpxQFocaPSJjEWznuEjgtyjpXIE0/CiuWAWTWShT/pdMm+2RzAjSLv6C8kW d7Ou/KSobBEhAcPioEyORayzzwMb0KYpaGRqXDa/MpQZ16N37wZ943qQw46ox+I3 Ify1lnr+JCjRJnyrKSfHFHhFKuYaGQ9CNYbKHCR3vnOrjPGCcPSlNhXh3wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFMErMyhVCgOpO9Kjm6U5iHv3MyL7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBlMTlkYzdmLTdhNDktNGQyZS04NDBiLTlmMzE2MmE0YWYyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9RCMA0GCSqGSIb3DQEBCwUAA4IBAQAsR6w9ILODXp3RrsobJZ/R FS3OKWWIsXsgzTJsw+4be2gLpIcttbuKm8NG887d7g5ERZankh++wjQzk2r5xdbi sR47GvEili4RlM0CbhdnxbLI28UT43KUI7J3PtUqlhxejie53mJfpoyJZO/ErHtY LUG+3/dqrPN2Bzyyh3AY+IwIv9x8OTcewmEgMVETcrW4V6dGHty+35k+n1KSmoF0 pju0cv3fOageNmk2VpKr2E6DdNmjUKH4f2PcVRnSu0lOfsf8k8eumww3Sz0MUwL6 8tcod0vZzuQWW6teukQ5Q5sEuVJGQasO1xXcz+wE5wdXmt3ua+Bs7z3qYF9fIGYo -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:14 2025 by rpki-client