$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa File: 8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa (raw, json) Hash identifier: q+1boeD2ZejaY+FLOvP80OLVe+NmeiNuSmc00tEon/M= Subject key identifier: 34:37:0B:DF:91:CC:EF:89:B2:F5:33:B8:3E:7B:AD:E4:16:21:CD:AF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5240A8E5A87BDA2BE98808D0A6B7F6ACC0383BC9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa Signing time: Mon 19 May 2025 15:00:56 +0000 ROA not before: Mon 19 May 2025 15:00:56 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:40:a8:e5:a8:7b:da:2b:e9:88:08:d0:a6:b7:f6:ac:c0:38:3b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 15:00:56 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=fad45e090e39b15b5edac39817670919b4a2539de9d9a631ed37c45bd931553e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:ac:85:e6:79:b7:60:fa:3c:a4:12:98:47: b8:1b:e5:f3:e2:15:9f:9b:46:46:eb:a7:ff:08:03: 9a:c0:8e:de:2c:e2:3e:d7:41:22:9c:9a:f7:60:d0: f8:57:02:cd:12:db:c6:f2:f7:b3:46:b3:90:62:1f: 11:90:bf:f4:6b:e6:2f:6d:6f:c5:06:98:59:e8:c6: 49:a5:16:d7:b9:4a:eb:fb:ed:d8:a1:84:ae:ad:b6: cb:fd:59:13:54:2d:cd:df:b3:32:e1:87:12:0c:05: 81:9f:0b:31:7e:b4:12:48:4d:dd:d6:5c:3d:5c:88: c7:7d:6b:42:8f:bd:5a:d9:dc:6f:99:63:0b:bc:bb: c6:d4:6c:62:4e:9a:3f:fe:b2:1f:3b:5a:59:c7:80: e0:15:3f:48:71:a5:d3:0c:18:fe:a7:c0:39:d4:60: d9:e3:df:d7:e9:a0:2d:a9:83:61:a0:4b:55:5c:f6: 9b:2a:ed:fd:5b:59:7d:3d:90:b0:e8:41:3a:81:e8: ca:09:0d:f1:4d:b0:f6:b9:1c:cc:d1:5a:cc:71:36: 30:ae:45:fb:54:0c:98:d6:77:22:94:73:7a:d9:8a: 71:c4:eb:14:fe:a5:19:94:25:66:d3:89:7b:93:6c: 2b:02:81:f2:ee:c1:a0:6a:b5:ed:ed:3a:2c:25:f5: 5d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:37:0B:DF:91:CC:EF:89:B2:F5:33:B8:3E:7B:AD:E4:16:21:CD:AF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.65.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:fb:c0:ac:4b:7a:fa:ad:60:71:0b:f3:9c:f0:84:63:dc:b3: c6:41:2c:aa:f7:eb:70:d2:d5:40:bd:30:e0:5e:87:65:bb:f8: 33:41:79:d1:2c:12:38:9c:dd:6e:ff:7b:24:ca:68:2d:58:2a: 23:7d:2a:63:a2:39:8c:b3:d4:ed:4e:d9:00:02:a8:3e:94:ec: fd:d8:09:7e:25:bd:6e:76:6c:be:12:48:ae:c6:4f:09:cb:26: 4b:57:29:01:7c:8c:fa:a9:05:2f:92:19:97:46:e7:49:dd:8d: 39:da:2a:97:49:71:b3:6b:8b:a3:4b:b8:da:6c:8a:d2:c0:b7: ae:f2:79:12:a6:2a:2a:2f:10:2a:5d:fc:83:7a:d4:de:9e:76: fe:08:c7:b5:d9:46:8d:96:7b:7a:14:83:a6:ac:ea:e0:6b:ac: a9:f4:c2:29:b0:fc:72:56:72:c6:46:eb:a5:26:38:93:54:49: 82:8a:0c:f6:b6:fe:77:ff:aa:7e:f0:55:f8:68:ef:37:74:a5: 4b:4f:c7:c2:4f:7e:3a:cf:95:1e:04:16:23:18:2b:63:49:70: 73:b5:ed:58:75:96:a0:b6:f4:09:ab:4d:20:07:62:77:f1:1d: 38:1e:3c:46:ca:00:2b:2c:27:51:3b:30:53:79:66:9c:38:f1: 7b:49:5d:0d -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUUkCo5ah72ivpiAjQprf2rMA4O8kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxOTE1MDA1NloX DTI1MDYyMzIzNTk1OVowejFJMEcGA1UEBRNAZmFkNDVlMDkwZTM5YjE1YjVlZGFj Mzk4MTc2NzA5MTliNGEyNTM5ZGU5ZDlhNjMxZWQzN2M0NWJkOTMxNTUzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg2sheZ5t2D6PKQSmEe4G+Xz4hWf m0ZG66f/CAOawI7eLOI+10EinJr3YND4VwLNEtvG8vezRrOQYh8RkL/0a+YvbW/F BphZ6MZJpRbXuUrr++3YoYSurbbL/VkTVC3N37My4YcSDAWBnwsxfrQSSE3d1lw9 XIjHfWtCj71a2dxvmWMLvLvG1GxiTpo//rIfO1pZx4DgFT9IcaXTDBj+p8A51GDZ 49/X6aAtqYNhoEtVXPabKu39W1l9PZCw6EE6gejKCQ3xTbD2uRzM0VrMcTYwrkX7 VAyY1ncilHN62YpxxOsU/qUZlCVm04l7k2wrAoHy7sGgarXt7TosJfVdKwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDQ3C9+RzO+JsvUzuD57reQWIc2vMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxODdkN2ExLWVjNGUtNGNhYi1hOGM3LTkyMWE3NDkyZTg5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9hBMA0GCSqGSIb3DQEBCwUAA4IBAQAs+8CsS3r6rWBxC/Oc8IRj 3LPGQSyq9+tw0tVAvTDgXodlu/gzQXnRLBI4nN1u/3skymgtWCojfSpjojmMs9Tt TtkAAqg+lOz92Al+Jb1udmy+Ekiuxk8JyyZLVykBfIz6qQUvkhmXRudJ3Y052iqX SXGza4ujS7jabIrSwLeu8nkSpioqLxAqXfyDetTennb+CMe12UaNlnt6FIOmrOrg a6yp9MIpsPxyVnLGRuulJjiTVEmCigz2tv53/6p+8FX4aO83dKVLT8fCT346z5Ue BBYjGCtjSXBzte1YdZagtvQJq00gB2J38R04HjxGygArLCdROzBTeWacOPF7SV0N -----END CERTIFICATE-----Generated at Tue Jun 3 23:09:22 2025 by rpki-client