$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15f0df98-8d36-4eb8-8d73-6075251475ae.roa File: 15f0df98-8d36-4eb8-8d73-6075251475ae.roa (raw, json) Hash identifier: Fn2odmJpODx6J86ZoHYdcSoTryd7lRi3QZ44NBhGXyE= Subject key identifier: 20:6C:AB:1C:83:54:5C:BD:CF:48:79:BE:CF:F7:B8:28:98:EA:5C:E4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 02F5CA0D5984B1428EDF23601E0405E32336379F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15f0df98-8d36-4eb8-8d73-6075251475ae.roa Signing time: Mon 07 Jul 2025 16:00:18 +0000 ROA not before: Mon 07 Jul 2025 16:00:18 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.220.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f5:ca:0d:59:84:b1:42:8e:df:23:60:1e:04:05:e3:23:36:37:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 16:00:18 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=d64adf30f0c4451db5ffec0f9d76334b08b36a4b9fe89d88152c675455729c5d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:cc:ff:6b:01:fc:7e:4d:c4:8f:27:7a:d3: d1:e7:31:82:2a:60:31:27:c1:a0:05:26:17:cd:3b: 45:48:e3:06:9e:47:cb:35:c0:ba:e6:ed:8d:6f:ba: 2e:38:aa:66:35:1a:4d:b5:3d:7e:c0:05:8c:b1:62: 0d:a1:a9:b9:67:fe:76:3d:73:a8:46:60:72:dc:b8: 86:2e:e9:57:29:a1:06:3a:8c:5e:17:56:d6:17:33: 8d:1e:12:4e:5d:93:10:86:03:68:5e:87:02:11:38: 5b:37:fa:0e:63:f5:30:04:cb:0a:e4:8d:2c:0e:df: b1:a5:38:a0:ce:53:cf:b6:04:a3:d1:fa:d3:90:bb: 0b:92:3f:d4:e9:2e:e5:cf:ca:27:c3:26:fe:8b:c9: a9:cb:14:71:fd:f9:51:1e:4b:0f:b3:ea:8a:ca:b2: d9:90:74:f3:2d:71:58:7e:04:21:b3:16:62:9c:2e: a8:e1:b4:a9:70:f3:a8:bd:de:7b:be:fd:6f:c8:3e: c8:84:3a:d0:dc:fc:cd:89:38:3e:66:93:8d:4a:b7: ae:19:82:22:97:aa:05:dd:34:32:d0:9d:00:4d:80: 5f:16:55:fc:a6:11:29:eb:3a:91:30:a2:70:25:05: 38:86:58:43:e2:cb:8b:63:cf:10:a8:85:54:89:45: b3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6C:AB:1C:83:54:5C:BD:CF:48:79:BE:CF:F7:B8:28:98:EA:5C:E4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15f0df98-8d36-4eb8-8d73-6075251475ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.220.0.0/15 Signature Algorithm: sha256WithRSAEncryption 92:5c:bb:d2:81:07:6b:d3:83:77:6c:f1:c7:d9:44:27:0b:8b: 2e:7c:71:1f:7f:34:32:0b:a6:a2:6d:49:97:c2:45:9b:2a:61: 22:22:af:a6:8f:ef:5f:97:9d:ce:4c:c8:56:90:58:4c:e4:8a: 1d:13:a3:d6:ef:5b:e6:2a:db:1d:e9:ba:90:05:06:b2:fc:56: 9f:26:34:e9:86:63:48:56:8f:04:41:5e:34:82:fa:4d:73:d9: ab:4c:ee:de:82:cf:0b:1f:8f:5a:4b:41:00:21:6b:5e:29:b1: b8:d3:18:fc:82:f6:61:16:6f:15:f5:bf:37:5e:66:52:9d:58: fa:c6:3a:9c:6b:9e:50:b7:49:00:c6:c6:42:c7:6b:9f:67:78: 72:0a:62:c7:08:13:3b:01:29:5f:07:06:2f:77:05:53:a3:ce: 01:b0:f9:a4:31:61:af:50:2a:11:80:b7:5d:ad:7a:07:23:af: f8:44:19:2d:1f:2a:e1:55:bb:07:4f:a0:e8:da:72:b8:b7:0f: 56:bb:76:e6:12:4d:c7:2f:0f:a8:19:88:85:a8:5a:77:45:72: a4:53:84:48:8e:44:34:04:ef:9c:ba:68:66:bb:8c:a1:46:00: 2a:41:14:ef:61:5e:97:fc:40:f9:e6:b4:ff:69:1e:d3:b6:8e: 12:6d:72:8a -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUAvXKDVmEsUKO3yNgHgQF4yM2N58wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE2MDAxOFoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAZDY0YWRmMzBmMGM0NDUxZGI1ZmZl YzBmOWQ3NjMzNGIwOGIzNmE0YjlmZTg5ZDg4MTUyYzY3NTQ1NTcyOWM1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6zM/2sB/H5NxI8netPR5zGCKmAx J8GgBSYXzTtFSOMGnkfLNcC65u2Nb7ouOKpmNRpNtT1+wAWMsWINoam5Z/52PXOo RmBy3LiGLulXKaEGOoxeF1bWFzONHhJOXZMQhgNoXocCEThbN/oOY/UwBMsK5I0s Dt+xpTigzlPPtgSj0frTkLsLkj/U6S7lz8onwyb+i8mpyxRx/flRHksPs+qKyrLZ kHTzLXFYfgQhsxZinC6o4bSpcPOovd57vv1vyD7IhDrQ3PzNiTg+ZpONSreuGYIi l6oF3TQy0J0ATYBfFlX8phEp6zqRMKJwJQU4hlhD4suLY88QqIVUiUWzmQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFCBsqxyDVFy9z0h5vs/3uCiY6lzkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1ZjBkZjk4LThkMzYtNGViOC04ZDczLTYwNzUyNTE0NzVhZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9wwDQYJKoZIhvcNAQELBQADggEBAJJcu9KBB2vTg3ds8cfZRCcL iy58cR9/NDILpqJtSZfCRZsqYSIir6aP71+Xnc5MyFaQWEzkih0To9bvW+Yq2x3p upAFBrL8Vp8mNOmGY0hWjwRBXjSC+k1z2atM7t6Czwsfj1pLQQAha14psbjTGPyC 9mEWbxX1vzdeZlKdWPrGOpxrnlC3SQDGxkLHa59neHIKYscIEzsBKV8HBi93BVOj zgGw+aQxYa9QKhGAt12tegcjr/hEGS0fKuFVuwdPoOjacri3D1a7duYSTccvD6gZ iIWoWndFcqRThEiORDQE75y6aGa7jKFGACpBFO9hXpf8QPnmtP9pHtO2jhJtcoo= -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:52 2025 by rpki-client