$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/280a1815-c4cc-48df-a16f-3277770f685f.roa File: 280a1815-c4cc-48df-a16f-3277770f685f.roa (raw, json) Hash identifier: VEXMPkcRjI9dkZqz1v5qd4sUloJe4Ol+xj3HTHCnmAs= Subject key identifier: 3E:07:43:22:B6:B8:08:3C:34:06:D4:51:F8:4E:95:D9:44:73:36:53 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 13562A0E57C23A30244779F9719E77752F797BD2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/280a1815-c4cc-48df-a16f-3277770f685f.roa Signing time: Tue 20 May 2025 00:00:31 +0000 ROA not before: Tue 20 May 2025 00:00:31 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.214.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:56:2a:0e:57:c2:3a:30:24:47:79:f9:71:9e:77:75:2f:79:7b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 20 00:00:31 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=a757ce50624d5c7298f62b2d10854ffecea753be9307a2ca8cc485259f7e1c04, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:13:99:b7:d5:2a:86:df:32:de:63:7d:7a:82: 30:91:2c:35:8d:af:91:4a:ba:64:78:ec:7d:f5:01: c3:ac:dd:ec:cf:4f:67:56:6c:65:9a:a1:0f:cd:f1: 0e:97:53:2e:d8:04:5c:2b:b7:8f:b8:a6:be:cb:ac: 2c:6f:20:43:db:09:dc:33:6b:25:5a:1c:5a:9a:92: 7c:04:13:db:a4:dc:ea:6e:bc:e4:d5:88:01:48:bd: 59:57:22:71:bc:cb:37:fa:be:cc:30:fd:c4:34:f2: 52:55:d3:98:b9:bc:48:21:3b:04:15:de:44:99:74: 7b:ba:59:28:e8:22:4f:71:fd:ea:00:80:7c:da:94: 55:d0:09:2c:ae:92:78:14:55:46:1f:00:d4:ca:e4: 3f:44:93:f4:05:27:1b:8f:e1:92:93:73:68:d7:95: 6a:44:9c:c2:9b:47:47:e7:cd:46:c1:0c:09:3f:53: e7:92:05:4a:0f:cc:16:be:b0:d5:06:65:1b:ad:db: 4f:74:18:ab:ff:2c:17:1a:05:d1:11:5d:9b:28:d4: 98:bf:d2:26:1a:69:8a:fd:67:22:79:df:c7:4b:43: cb:45:67:aa:50:ab:f8:dc:fc:90:3b:0c:95:de:84: 88:17:eb:d5:12:25:7d:9c:75:c1:7a:4a:de:a7:02: 63:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:07:43:22:B6:B8:08:3C:34:06:D4:51:F8:4E:95:D9:44:73:36:53 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/280a1815-c4cc-48df-a16f-3277770f685f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.214.0.0/15 Signature Algorithm: sha256WithRSAEncryption 0a:a1:3f:af:3d:17:d1:6d:d8:fd:21:44:31:77:7e:81:d2:31: 54:bb:b4:f6:19:91:ce:17:31:cb:c2:7f:b4:cf:87:3e:51:c2: b5:8e:41:ae:c1:f3:e2:7d:6d:ed:12:89:45:2e:43:08:2b:e9: 55:14:85:d6:21:bc:4c:bc:37:8a:c2:23:5b:8a:f7:7c:98:56: a3:25:e9:86:58:ba:20:c6:a8:16:ac:97:1d:b6:b9:ce:b9:d3: 35:fb:af:47:45:48:12:ae:14:ce:00:08:cb:09:50:c2:a9:10: 1c:ef:2e:ff:62:e2:c9:51:ef:55:53:6a:ba:06:15:d2:23:10: a8:27:63:05:ec:29:2a:33:3f:74:6b:9f:84:17:a4:52:ff:b5: aa:d5:ba:9d:b5:89:f3:12:86:88:de:f9:ef:95:11:2d:88:02: 1e:92:e9:11:24:04:13:c8:bf:37:70:83:34:bd:2b:27:68:80: da:e9:76:e6:29:b5:86:cb:b2:03:d3:1a:9d:5b:3a:bb:de:15: 50:a0:78:10:92:48:cc:a9:a2:97:b1:c9:8e:0a:c2:2e:89:27: 8a:26:ba:83:fe:24:2b:b2:d2:df:1e:a4:f5:de:68:a1:6c:57: 75:f3:ce:7e:eb:39:13:b3:41:24:d2:32:95:24:e8:94:95:b9: 4b:34:84:18 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUE1YqDlfCOjAkR3n5cZ53dS95e9IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUyMDAwMDAzMVoX DTI1MDYyNDIzNTk1OVowejFJMEcGA1UEBRNAYTc1N2NlNTA2MjRkNWM3Mjk4ZjYy YjJkMTA4NTRmZmVjZWE3NTNiZTkzMDdhMmNhOGNjNDg1MjU5ZjdlMWMwNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxOZt9Uqht8y3mN9eoIwkSw1ja+R SrpkeOx99QHDrN3sz09nVmxlmqEPzfEOl1Mu2ARcK7ePuKa+y6wsbyBD2wncM2sl WhxampJ8BBPbpNzqbrzk1YgBSL1ZVyJxvMs3+r7MMP3ENPJSVdOYubxIITsEFd5E mXR7ulko6CJPcf3qAIB82pRV0AksrpJ4FFVGHwDUyuQ/RJP0BScbj+GSk3No15Vq RJzCm0dH581GwQwJP1PnkgVKD8wWvrDVBmUbrdtPdBir/ywXGgXREV2bKNSYv9Im GmmK/Wcied/HS0PLRWeqUKv43PyQOwyV3oSIF+vVEiV9nHXBekrepwJjBwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFD4HQyK2uAg8NAbUUfhOldlEczZTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI4MGExODE1LWM0Y2MtNDhkZi1hMTZmLTMyNzc3NzBmNjg1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9YwDQYJKoZIhvcNAQELBQADggEBAAqhP689F9Ft2P0hRDF3foHS MVS7tPYZkc4XMcvCf7TPhz5RwrWOQa7B8+J9be0SiUUuQwgr6VUUhdYhvEy8N4rC I1uK93yYVqMl6YZYuiDGqBaslx22uc650zX7r0dFSBKuFM4ACMsJUMKpEBzvLv9i 4slR71VTaroGFdIjEKgnYwXsKSozP3Rrn4QXpFL/tarVup21ifMShoje+e+VES2I Ah6S6REkBBPIvzdwgzS9KydogNrpduYptYbLsgPTGp1bOrveFVCgeBCSSMypopex yY4Kwi6JJ4omuoP+JCuy0t8epPXeaKFsV3Xzzn7rOROzQSTSMpUk6JSVuUs0hBg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:28:30 2025 by rpki-client