$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/280a1815-c4cc-48df-a16f-3277770f685f.roa File: 280a1815-c4cc-48df-a16f-3277770f685f.roa (raw, json) Hash identifier: I2M3hA/kU8J5/jHgViyp6Z3V4aGyLdmND8VeWR8LViM= Subject key identifier: C0:C1:DE:4A:93:A9:46:33:E2:53:7E:F2:4E:63:48:11:0A:6C:16:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 532D580F212E3C429C1098290384B082403DBF57 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/280a1815-c4cc-48df-a16f-3277770f685f.roa Signing time: Wed 09 Jul 2025 00:00:40 +0000 ROA not before: Wed 09 Jul 2025 00:00:40 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.214.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2d:58:0f:21:2e:3c:42:9c:10:98:29:03:84:b0:82:40:3d:bf:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 9 00:00:40 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=eeeab69c03dd3178472a6d3ac2387f7517e871147f66a2a0f1c44ab2f949e107, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:02:5d:a0:bf:39:cb:7c:be:6e:c0:6b:a9: 94:78:e6:7c:57:08:e1:b5:c2:17:56:99:41:eb:a0: 54:42:11:79:61:07:cd:6b:00:f1:41:4a:23:e1:6e: 28:b1:41:fa:57:76:30:6d:84:0c:3d:40:fc:c3:63: ab:e6:40:8f:b3:5b:43:70:84:80:60:68:13:d5:0e: bb:39:0b:c2:60:68:8e:56:bb:f7:c1:90:0e:f5:a5: c8:25:c0:c7:42:bc:db:ab:9d:d3:0d:bd:41:5c:4d: 5b:0d:51:df:24:0d:f8:2e:70:c8:1a:af:b0:36:bc: 8b:05:53:bd:b6:e9:62:1c:91:bc:02:07:11:32:52: a3:ea:ea:91:9f:00:e9:6e:9c:02:5c:25:8c:36:fc: d1:eb:b4:23:dc:41:29:5f:2f:25:c0:8e:7d:a6:70: 11:97:0b:d8:53:5a:8a:dc:30:50:b1:92:3f:b6:01: 14:59:80:83:32:79:24:76:43:50:ec:47:11:33:f0: ca:e4:64:a1:a9:35:90:b4:1e:33:2a:c8:10:04:89: 25:e4:4c:29:20:0b:d8:34:2d:18:af:bc:ca:58:b2: 2f:35:11:40:54:e7:7c:f1:ef:fe:7f:1a:6b:6b:37: 68:9e:95:5e:49:f0:06:01:5a:cb:53:be:ad:74:89: 04:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C1:DE:4A:93:A9:46:33:E2:53:7E:F2:4E:63:48:11:0A:6C:16:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/280a1815-c4cc-48df-a16f-3277770f685f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.214.0.0/15 Signature Algorithm: sha256WithRSAEncryption c9:bf:35:3d:7c:a2:06:dc:69:2c:2d:0f:fe:9f:83:46:22:81: fa:4f:61:51:be:fb:90:c0:3e:06:35:71:c6:ff:1c:b3:ad:ba: 53:17:47:d5:87:25:cf:02:a9:71:bc:01:39:6c:2e:19:34:2f: 72:1c:57:6c:8b:5a:2c:d6:b8:1c:a9:11:b4:85:f7:1b:ad:cb: 80:5f:6b:2a:e1:86:21:e2:90:b2:da:97:81:e0:f2:a1:9d:00: 6f:c6:70:50:00:18:44:22:70:03:06:50:f9:9c:53:3d:8a:21: 6b:42:59:24:73:0d:e9:4f:ff:46:93:ba:60:ef:80:57:73:de: 61:03:ab:5f:31:fe:95:7b:ed:0e:88:32:fd:f6:2a:44:c2:c3: 56:59:f7:35:88:ba:da:c7:ef:4e:32:63:2f:7a:30:71:43:d4: 98:86:7d:e6:83:08:e6:07:30:2b:16:bb:63:cd:71:a0:66:2a: 60:c0:ac:e7:33:35:9f:45:94:7f:6a:08:1e:4d:d8:b5:07:3a: 26:9e:1f:ac:af:75:36:13:7b:38:76:bc:27:af:a9:e0:f1:50: 16:b0:7d:48:0a:7d:32:4a:0b:44:8a:f2:62:c3:2e:33:59:40: 34:ee:c0:cc:fc:80:18:52:eb:2f:8e:55:7b:11:68:d4:ff:09: 9a:02:18:2b -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUUy1YDyEuPEKcEJgpA4SwgkA9v1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwOTAwMDA0MFoX DTI1MDgxMzIzNTk1OVowejFJMEcGA1UEBRNAZWVlYWI2OWMwM2RkMzE3ODQ3MmE2 ZDNhYzIzODdmNzUxN2U4NzExNDdmNjZhMmEwZjFjNDRhYjJmOTQ5ZTEwNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWYCXaC/Oct8vm7Aa6mUeOZ8Vwjh tcIXVplB66BUQhF5YQfNawDxQUoj4W4osUH6V3YwbYQMPUD8w2Or5kCPs1tDcISA YGgT1Q67OQvCYGiOVrv3wZAO9aXIJcDHQrzbq53TDb1BXE1bDVHfJA34LnDIGq+w NryLBVO9tuliHJG8AgcRMlKj6uqRnwDpbpwCXCWMNvzR67Qj3EEpXy8lwI59pnAR lwvYU1qK3DBQsZI/tgEUWYCDMnkkdkNQ7EcRM/DK5GShqTWQtB4zKsgQBIkl5Ewp IAvYNC0Yr7zKWLIvNRFAVOd88e/+fxprazdonpVeSfAGAVrLU76tdIkEgwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFMDB3kqTqUYz4lN+8k5jSBEKbBYBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI4MGExODE1LWM0Y2MtNDhkZi1hMTZmLTMyNzc3NzBmNjg1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9YwDQYJKoZIhvcNAQELBQADggEBAMm/NT18ogbcaSwtD/6fg0Yi gfpPYVG++5DAPgY1ccb/HLOtulMXR9WHJc8CqXG8ATlsLhk0L3IcV2yLWizWuByp EbSF9xuty4BfayrhhiHikLLal4Hg8qGdAG/GcFAAGEQicAMGUPmcUz2KIWtCWSRz DelP/0aTumDvgFdz3mEDq18x/pV77Q6IMv32KkTCw1ZZ9zWIutrH704yYy96MHFD 1JiGfeaDCOYHMCsWu2PNcaBmKmDArOczNZ9FlH9qCB5N2LUHOiaeH6yvdTYTezh2 vCevqeDxUBawfUgKfTJKC0SK8mLDLjNZQDTuwMz8gBhS6y+OVXsRaNT/CZoCGCs= -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:33 2025 by rpki-client