$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4eebfe87-ebaa-4640-b26f-714c512d27da.roa File: 4eebfe87-ebaa-4640-b26f-714c512d27da.roa (raw, json) Hash identifier: UJZIXzam8RWTm/L7I3xZ5v3L2X2ZWhrjBnDLg6KIpNU= Subject key identifier: 5C:26:D0:9E:EE:C7:DE:ED:E1:54:D4:0A:8D:EC:0F:4A:18:AB:BA:B0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 409C676F1CE416E337C24758A17FEF27C62E8FCC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4eebfe87-ebaa-4640-b26f-714c512d27da.roa Signing time: Tue 15 Jul 2025 00:00:17 +0000 ROA not before: Tue 15 Jul 2025 00:00:17 +0000 ROA not after: Tue 19 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.217.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:9c:67:6f:1c:e4:16:e3:37:c2:47:58:a1:7f:ef:27:c6:2e:8f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 15 00:00:17 2025 GMT Not After : Aug 19 23:59:59 2025 GMT Subject: serialNumber=dccafda17a7aa0d7096a9502ed5c19524d72ce540150df4d1c4bfdf5cc93ae75, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:77:2d:e7:22:c2:c7:9c:9c:6f:8d:55:44: ef:85:cc:57:fa:a2:b2:6e:91:fa:06:e8:19:a9:39: 13:9d:e0:e9:31:13:f1:12:1b:13:8e:ae:60:ab:46: ce:54:ff:4d:dc:d3:9d:5b:dc:cb:68:f2:3e:6e:ef: 53:63:f5:fb:3c:26:3a:8f:b8:d2:d7:55:07:c9:1d: ab:fd:e6:5d:5e:8e:9e:ab:07:4a:0e:9d:dc:c0:f2: a1:2e:84:37:e1:f3:ed:5b:de:b2:9f:37:dd:d4:49: 28:d8:cb:a1:1d:f8:9b:9d:01:c3:39:fb:a9:73:48: 8d:ac:21:ce:d4:83:33:b1:6a:6f:b3:8e:ef:c5:74: b1:c0:9e:03:ee:27:23:34:d8:b9:9f:50:e0:6d:39: 41:c1:34:ee:b4:27:37:6c:a8:08:58:06:98:b5:0d: e3:4d:8f:82:c2:0a:12:16:3e:f7:7e:35:77:e7:f0: 8b:4c:fb:05:fc:b0:8d:90:70:cd:de:3a:f5:9a:d8: a2:3e:5d:a9:7b:e6:6f:5c:41:3f:ac:66:f8:c8:78: e4:e2:db:a5:51:54:85:16:18:80:e5:b2:16:dd:33: 49:e7:44:49:b1:d0:49:ae:13:a5:26:6a:2a:d3:a8: 0b:fa:fb:c1:28:ce:fd:e9:65:3e:3c:2f:3c:26:a0: 85:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:26:D0:9E:EE:C7:DE:ED:E1:54:D4:0A:8D:EC:0F:4A:18:AB:BA:B0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4eebfe87-ebaa-4640-b26f-714c512d27da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.217.174.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:9a:db:bd:b0:f9:6b:e9:7d:a8:05:8b:7d:b7:f8:93:e4:7f: a5:3a:97:be:a1:e3:6f:5b:1f:70:2d:6d:54:0f:e7:8e:33:26: cc:ae:08:36:64:2b:1d:c7:08:e2:ca:9a:1c:c3:4c:48:e8:cd: 36:a9:c9:4d:3a:5d:2b:2b:51:60:5c:ae:37:70:3b:41:fb:e8: e3:ed:14:f6:d3:62:33:00:67:2d:85:3f:31:16:ac:60:11:4f: c2:f0:96:e3:b5:a1:7d:65:b4:80:0b:05:64:2e:21:8f:59:1d: 02:13:11:b6:7b:48:9d:c3:2f:b7:ae:4c:a6:85:a9:4d:fb:80: 24:d0:a6:fa:0d:62:41:23:99:84:25:18:76:32:fe:2a:e4:19: 7a:ec:e0:85:04:72:65:46:ad:8c:75:b0:b1:96:c7:f3:79:8f: a6:9b:36:61:81:53:7c:a0:e1:74:cb:e7:4a:ba:c9:fe:a5:39: fd:59:c9:0f:1a:36:bb:19:16:df:9b:43:4c:47:2e:f2:7d:ad: 26:db:78:c2:4e:8a:b5:32:3a:87:c7:2a:31:bd:d5:d6:7a:6f: ed:4d:ea:56:72:dd:e5:09:e6:9b:73:76:c7:d4:98:48:ba:f1: 77:2b:10:f0:45:c3:8c:31:f9:f7:56:ef:dc:67:72:26:8d:51: 3e:b1:44:cf -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUQJxnbxzkFuM3wkdYoX/vJ8Yuj8wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcxNTAwMDAxN1oX DTI1MDgxOTIzNTk1OVowejFJMEcGA1UEBRNAZGNjYWZkYTE3YTdhYTBkNzA5NmE5 NTAyZWQ1YzE5NTI0ZDcyY2U1NDAxNTBkZjRkMWM0YmZkZjVjYzkzYWU3NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7V3LeciwsecnG+NVUTvhcxX+qKy bpH6BugZqTkTneDpMRPxEhsTjq5gq0bOVP9N3NOdW9zLaPI+bu9TY/X7PCY6j7jS 11UHyR2r/eZdXo6eqwdKDp3cwPKhLoQ34fPtW96ynzfd1Eko2MuhHfibnQHDOfup c0iNrCHO1IMzsWpvs47vxXSxwJ4D7icjNNi5n1DgbTlBwTTutCc3bKgIWAaYtQ3j TY+CwgoSFj73fjV35/CLTPsF/LCNkHDN3jr1mtiiPl2pe+ZvXEE/rGb4yHjk4tul UVSFFhiA5bIW3TNJ50RJsdBJrhOlJmoq06gL+vvBKM796WU+PC88JqCFOwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFFwm0J7ux97t4VTUCo3sD0oYq7qwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRlZWJmZTg3LWViYWEtNDY0MC1iMjZmLTcxNGM1MTJkMjdkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9muMA0GCSqGSIb3DQEBCwUAA4IBAQAumtu9sPlr6X2oBYt9t/iT 5H+lOpe+oeNvWx9wLW1UD+eOMybMrgg2ZCsdxwjiypocw0xI6M02qclNOl0rK1Fg XK43cDtB++jj7RT202IzAGcthT8xFqxgEU/C8JbjtaF9ZbSACwVkLiGPWR0CExG2 e0idwy+3rkymhalN+4Ak0Kb6DWJBI5mEJRh2Mv4q5Bl67OCFBHJlRq2MdbCxlsfz eY+mmzZhgVN8oOF0y+dKusn+pTn9WckPGja7GRbfm0NMRy7yfa0m23jCToq1MjqH xyoxvdXWem/tTepWct3lCeabc3bH1JhIuvF3KxDwRcOMMfn3Vu/cZ3ImjVE+sUTP -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:49 2025 by rpki-client