$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8804dfec-79d7-4390-a6a3-68e44e2370c9.roa File: 8804dfec-79d7-4390-a6a3-68e44e2370c9.roa (raw, json) Hash identifier: YXYa+Yw734fg1yKxApXV55vTwpE3AvZcGJpLglmMwJs= Subject key identifier: 72:E7:6F:E0:73:D7:01:6B:96:DF:21:38:9A:8F:BA:F9:91:8F:BF:C5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7037C865475CF20906DD3CCD9D767C4AF3BE5757 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8804dfec-79d7-4390-a6a3-68e44e2370c9.roa Signing time: Tue 20 May 2025 00:00:27 +0000 ROA not before: Tue 20 May 2025 00:00:27 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:37:c8:65:47:5c:f2:09:06:dd:3c:cd:9d:76:7c:4a:f3:be:57:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 20 00:00:27 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=edc5b8d679e96838cc5128f62574bf58bd108cf0530b43a412f9c13ee4aa09d6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:6f:11:d4:fc:4f:9f:ea:fb:2c:bf:00:30: b3:45:a1:bc:72:8f:8b:b3:29:b1:56:4d:c4:00:7c: fa:b5:12:0e:b9:55:39:d9:9c:ae:6d:c2:da:37:01: ae:dd:84:af:c7:39:d7:f1:ba:4b:af:d4:2d:74:b3: 95:8b:52:a2:dd:45:5b:3d:42:9f:0b:34:70:65:d5: f3:80:6d:87:dc:51:68:89:e2:c1:e1:2c:95:9d:75: 14:67:c0:1d:1b:6d:ef:6a:ba:bc:8d:92:92:32:d4: 7f:56:7b:88:7b:9c:60:a4:5b:c1:72:cc:51:56:b0: b8:7a:1a:fc:6b:ed:76:53:c7:02:51:48:67:26:f9: a0:92:f5:4a:5e:74:e0:5c:e0:e4:7e:53:cd:aa:66: 4c:d2:8f:c8:d3:1f:e3:ad:50:8a:cf:df:e6:d0:28: 78:7a:f0:96:03:89:05:1f:d4:eb:f2:f6:23:23:cf: 38:70:97:35:07:50:93:51:c3:8c:75:70:ca:d8:df: d0:14:f3:51:0b:e0:e1:13:c5:e9:b7:13:01:32:d2: 7a:00:ce:e6:11:61:58:34:94:4c:48:6f:53:23:20: 45:0c:c0:fc:54:6f:e8:68:79:49:ce:6c:ed:f8:c5: 39:3b:d8:a8:09:d2:2a:bd:6a:c8:71:96:75:a4:fb: 8f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E7:6F:E0:73:D7:01:6B:96:DF:21:38:9A:8F:BA:F9:91:8F:BF:C5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8804dfec-79d7-4390-a6a3-68e44e2370c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.56.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:7d:29:91:6e:68:3c:fe:0d:23:ed:25:41:be:7c:df:01:07: 77:62:04:77:ee:8b:fb:cd:0c:8b:2b:d4:0d:50:30:6c:d1:53: ab:3d:2b:f5:78:5e:73:e6:2d:cc:21:6f:f5:37:0c:1d:f5:2d: 06:69:b3:5e:4c:23:9c:ac:5d:6e:40:08:7e:dc:99:7e:e6:3b: 21:08:64:34:5b:51:a3:df:dc:4a:ac:1e:97:32:25:b9:7d:0d: f8:d6:64:b7:d1:dc:55:e5:79:02:02:53:a0:39:3b:8c:de:75: 11:ca:d6:f2:82:8a:cd:96:24:00:f7:c7:0c:01:1b:1d:d7:46: 8a:78:ea:c1:4a:c0:48:f3:69:97:f9:c5:72:62:62:f8:44:b1: 56:42:86:54:a0:d0:fb:05:3e:73:90:f6:b6:b1:63:5b:33:7e: 3d:51:42:e7:21:f4:2d:5f:96:85:c8:47:c2:ea:a8:ef:03:64: 3d:14:bc:cd:56:88:a8:a8:3f:c3:5a:e8:e2:a9:db:13:11:a0: 9e:79:eb:bc:d7:77:4c:5e:18:ab:4a:89:18:fe:b3:f6:ee:b7: 8a:82:30:4a:32:af:ad:12:47:16:f2:91:d8:3b:c2:b2:18:b7: 11:80:64:44:5d:3c:81:ed:e4:bb:87:61:56:31:99:d4:f1:6b: 43:0d:4a:04 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUcDfIZUdc8gkG3TzNnXZ8SvO+V1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUyMDAwMDAyN1oX DTI1MDYyNDIzNTk1OVowejFJMEcGA1UEBRNAZWRjNWI4ZDY3OWU5NjgzOGNjNTEy OGY2MjU3NGJmNThiZDEwOGNmMDUzMGI0M2E0MTJmOWMxM2VlNGFhMDlkNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cpvEdT8T5/q+yy/ADCzRaG8co+L symxVk3EAHz6tRIOuVU52ZyubcLaNwGu3YSvxznX8bpLr9QtdLOVi1Ki3UVbPUKf CzRwZdXzgG2H3FFoieLB4SyVnXUUZ8AdG23varq8jZKSMtR/VnuIe5xgpFvBcsxR VrC4ehr8a+12U8cCUUhnJvmgkvVKXnTgXODkflPNqmZM0o/I0x/jrVCKz9/m0Ch4 evCWA4kFH9Tr8vYjI884cJc1B1CTUcOMdXDK2N/QFPNRC+DhE8XptxMBMtJ6AM7m EWFYNJRMSG9TIyBFDMD8VG/oaHlJzmzt+MU5O9ioCdIqvWrIcZZ1pPuPNQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFHLnb+Bz1wFrlt8hOJqPuvmRj7/FMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg4MDRkZmVjLTc5ZDctNDM5MC1hNmEzLTY4ZTQ0ZTIzNzBjOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9A4MA0GCSqGSIb3DQEBCwUAA4IBAQAvfSmRbmg8/g0j7SVBvnzf AQd3YgR37ov7zQyLK9QNUDBs0VOrPSv1eF5z5i3MIW/1Nwwd9S0GabNeTCOcrF1u QAh+3Jl+5jshCGQ0W1Gj39xKrB6XMiW5fQ341mS30dxV5XkCAlOgOTuM3nURytby gorNliQA98cMARsd10aKeOrBSsBI82mX+cVyYmL4RLFWQoZUoND7BT5zkPa2sWNb M349UULnIfQtX5aFyEfC6qjvA2Q9FLzNVoioqD/DWujiqdsTEaCeeeu813dMXhir SokY/rP27reKgjBKMq+tEkcW8pHYO8KyGLcRgGREXTyB7eS7h2FWMZnU8WtDDUoE -----END CERTIFICATE-----Generated at Tue Jun 3 23:28:54 2025 by rpki-client