$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5496107b-eefe-4905-9cf9-59440b1209c9.roa File: 5496107b-eefe-4905-9cf9-59440b1209c9.roa (raw, json) Hash identifier: 3wd0gCTnlxjH3OnaBBaMZN36vOq2wWkLJeZCwSwmmaY= Subject key identifier: B7:E4:3E:42:D5:1B:C0:92:2D:C7:FF:24:5E:E1:44:7E:A6:0C:6E:B8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A0F4E99167462CAE0A5D260C41638F42BB58835 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5496107b-eefe-4905-9cf9-59440b1209c9.roa Signing time: Tue 15 Jul 2025 00:00:15 +0000 ROA not before: Tue 15 Jul 2025 00:00:15 +0000 ROA not after: Tue 19 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0f:4e:99:16:74:62:ca:e0:a5:d2:60:c4:16:38:f4:2b:b5:88:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 15 00:00:15 2025 GMT Not After : Aug 19 23:59:59 2025 GMT Subject: serialNumber=7f19dd86bb18663785fb264a0210d4094909727657d41de35082a88028c70495, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:be:95:57:d9:12:44:05:34:1a:df:01:01:b1: f9:19:35:54:10:24:b2:11:ba:79:5d:4f:d0:4f:7e: 85:46:19:d6:b0:e5:f4:cf:9f:f8:50:d1:2f:3d:9a: 84:3a:d7:22:92:0e:68:da:f2:e5:37:f8:3e:66:9a: 6a:4e:e8:c2:fd:f0:d0:ec:1c:9d:4e:20:87:39:5f: 49:4a:95:d7:97:9d:32:c8:96:de:bd:b2:b7:16:f9: 25:ed:19:f3:76:dd:99:dd:99:fb:ac:ab:c9:3c:9f: 3c:6a:3f:e3:74:f0:30:24:9c:5e:54:6b:40:4d:c0: 59:f0:30:c4:01:53:8e:17:54:00:86:6c:ef:cb:8f: a5:cc:89:53:4e:86:16:cf:d4:0b:02:77:1a:ee:5a: 25:ad:26:a7:4e:20:41:96:f7:f2:2d:12:6a:3d:d5: 74:49:18:f3:fd:2c:ea:23:ea:49:d4:1f:bf:e1:37: 8b:47:e5:c3:f6:db:3f:88:eb:de:6d:79:6e:01:71: 33:bd:9e:8e:1a:72:cf:7c:9f:b0:5e:60:2c:87:5b: d9:d3:dd:58:76:ff:44:f0:ba:77:cd:d0:59:45:68: 5a:c3:ce:7b:f7:25:36:df:69:c8:ce:4f:1f:d7:89: 05:35:92:1c:03:95:71:1d:bf:f2:2d:b3:9d:61:c0: 09:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E4:3E:42:D5:1B:C0:92:2D:C7:FF:24:5E:E1:44:7E:A6:0C:6E:B8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5496107b-eefe-4905-9cf9-59440b1209c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.62.0/24 Signature Algorithm: sha256WithRSAEncryption ba:5c:1b:66:09:0a:8b:f1:87:8a:87:f6:29:40:f4:a8:46:70: d7:52:ae:e2:78:b2:18:16:fa:42:15:33:1e:53:37:ac:5b:6d: 6e:da:df:a2:9b:3d:13:f4:12:6e:6a:83:04:01:fd:dc:e2:a6: e0:01:ac:aa:db:f5:c1:b2:f9:17:86:d4:51:69:65:ac:6a:36: 60:ef:bd:72:8b:01:0b:be:e5:7f:8c:79:ee:e9:25:3e:76:ce: 1c:f7:bb:00:37:d3:de:b6:35:c5:9b:52:27:ad:29:05:2d:8c: 17:22:46:05:e7:c5:23:7a:76:54:57:c2:ff:9d:b5:50:f6:48: c8:16:04:69:2e:c3:dd:a2:34:70:d9:67:7d:ff:58:bd:fd:e7: f5:82:cb:e5:c2:e3:a5:d9:30:89:94:c7:e5:74:b0:6a:f8:94: bf:93:05:bc:9c:0f:f8:c3:11:22:fd:c9:36:ec:d5:c5:11:bb: 9c:39:20:bc:ca:aa:6e:7e:fa:c7:8c:d2:1e:2d:3a:a7:b6:4a: d8:76:ec:4a:c2:9a:cd:38:f7:2a:d0:44:c9:6f:ba:66:99:39: 6a:4c:8d:b6:19:0b:d4:10:c6:78:34:a9:31:0a:36:ea:a3:d7: 4c:09:85:96:1c:00:a8:af:68:a4:09:fb:d7:ab:a1:4b:fe:4e: ca:af:dc:be -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUOg9OmRZ0YsrgpdJgxBY49Cu1iDUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcxNTAwMDAxNVoX DTI1MDgxOTIzNTk1OVowejFJMEcGA1UEBRNAN2YxOWRkODZiYjE4NjYzNzg1ZmIy NjRhMDIxMGQ0MDk0OTA5NzI3NjU3ZDQxZGUzNTA4MmE4ODAyOGM3MDQ5NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8L6VV9kSRAU0Gt8BAbH5GTVUECSy Ebp5XU/QT36FRhnWsOX0z5/4UNEvPZqEOtcikg5o2vLlN/g+ZppqTujC/fDQ7Byd TiCHOV9JSpXXl50yyJbevbK3Fvkl7Rnzdt2Z3Zn7rKvJPJ88aj/jdPAwJJxeVGtA TcBZ8DDEAVOOF1QAhmzvy4+lzIlTToYWz9QLAnca7lolrSanTiBBlvfyLRJqPdV0 SRjz/SzqI+pJ1B+/4TeLR+XD9ts/iOvebXluAXEzvZ6OGnLPfJ+wXmAsh1vZ091Y dv9E8Lp3zdBZRWhaw8579yU232nIzk8f14kFNZIcA5VxHb/yLbOdYcAJ5wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFLfkPkLVG8CSLcf/JF7hRH6mDG64MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0OTYxMDdiLWVlZmUtNDkwNS05Y2Y5LTU5NDQwYjEyMDljOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9g+MA0GCSqGSIb3DQEBCwUAA4IBAQC6XBtmCQqL8YeKh/YpQPSo RnDXUq7ieLIYFvpCFTMeUzesW21u2t+imz0T9BJuaoMEAf3c4qbgAayq2/XBsvkX htRRaWWsajZg771yiwELvuV/jHnu6SU+ds4c97sAN9PetjXFm1InrSkFLYwXIkYF 58UjenZUV8L/nbVQ9kjIFgRpLsPdojRw2Wd9/1i9/ef1gsvlwuOl2TCJlMfldLBq +JS/kwW8nA/4wxEi/ck27NXFEbucOSC8yqpufvrHjNIeLTqntkrYduxKwprNOPcq 0ETJb7pmmTlqTI22GQvUEMZ4NKkxCjbqo9dMCYWWHACor2ikCfvXq6FL/k7Kr9y+ -----END CERTIFICATE-----Generated at Thu Jul 31 01:05:48 2025 by rpki-client