$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dbe44f29-2c7d-46ec-898d-c756e1c81196.roa File: dbe44f29-2c7d-46ec-898d-c756e1c81196.roa (raw, json) Hash identifier: n28VK11zXmc0U2C9Lec4lAZnGV5TEBh0Wgz7Bw8/tC4= Subject key identifier: 29:4B:F4:7C:D4:68:19:9F:41:98:BA:2D:6E:E8:08:EB:E8:BB:1F:73 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0BB92B1C2A68E81C3F671103DB77A4B5FC8C9AAB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dbe44f29-2c7d-46ec-898d-c756e1c81196.roa Signing time: Tue 08 Jul 2025 00:00:52 +0000 ROA not before: Tue 08 Jul 2025 00:00:52 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:b9:2b:1c:2a:68:e8:1c:3f:67:11:03:db:77:a4:b5:fc:8c:9a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 8 00:00:52 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=33530da2bd46a2789b4df18930134207a03395f044380e2f15ca49e1cad342c5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:42:98:9b:19:0c:c4:c2:99:73:02:f7:55: 1a:9f:10:f2:e6:b1:3e:ea:72:5f:be:d7:fe:b6:f3: 63:9c:bd:13:e9:50:94:13:fa:53:d4:a6:a0:dc:25: e4:f5:52:8f:b4:ec:97:36:af:48:fc:f9:30:45:0f: ae:9d:2a:a1:49:dd:a7:41:30:96:68:4e:c8:6a:ba: 4c:97:92:22:ba:77:4e:78:d9:a5:7a:aa:48:d5:ae: f9:5f:5e:c4:83:7f:17:31:8c:16:68:49:1e:a8:44: 04:df:95:52:45:80:08:d6:67:8d:8c:0a:d1:34:8c: 08:d6:d3:90:46:06:bd:f3:6f:91:60:77:7b:03:4c: fc:d9:73:01:e4:cd:02:be:b2:94:f0:64:62:64:35: da:b0:f9:7a:96:5b:67:5a:63:a4:f0:01:2a:ca:07: c2:65:4a:87:e4:42:41:67:b7:c9:8e:29:ae:b8:75: eb:85:34:dc:65:73:cc:cc:a6:f8:2d:07:52:22:97: 31:8b:a7:12:3b:2a:98:d6:ba:d1:1b:f5:31:ab:ca: 99:72:9d:76:73:cd:0f:01:84:ae:ae:19:74:55:44: 98:15:bd:10:a0:4b:aa:c2:ab:03:15:98:23:71:48: 6b:9f:37:b6:d3:7f:31:4b:20:91:a1:bb:db:bb:17: 78:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4B:F4:7C:D4:68:19:9F:41:98:BA:2D:6E:E8:08:EB:E8:BB:1F:73 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dbe44f29-2c7d-46ec-898d-c756e1c81196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.52.0/23 Signature Algorithm: sha256WithRSAEncryption 13:fc:5b:c1:14:a0:c9:27:8c:54:45:14:7b:48:2f:19:e6:ea: 4b:c0:4e:7b:b0:f3:94:e3:6e:8f:8a:b2:48:b1:3c:87:21:2e: 13:19:14:41:02:12:b1:f9:50:b6:34:c5:47:ff:ce:ac:4e:eb: 1d:b0:ff:43:ac:d1:6e:1a:ce:f2:58:1b:d3:01:fd:15:35:9d: 2d:e1:45:62:79:25:37:e7:56:b4:78:87:14:54:9f:0e:c6:10: 3d:33:55:ce:a1:20:3d:84:a9:f4:a4:04:bb:aa:04:43:51:c5: 4c:dd:36:7b:39:48:c0:a7:6b:c6:84:c3:f6:a9:5d:29:fd:eb: db:cf:74:cc:c2:d3:e6:89:d3:e1:96:11:d8:26:d3:a6:d4:da: 65:76:cd:46:f3:67:33:0e:a7:2f:93:bb:21:f7:14:0c:3b:42: 1d:8a:0e:71:7d:33:b0:54:1b:83:51:51:7b:b9:5e:96:49:42: a9:4a:62:7c:b0:d1:38:10:81:9d:07:44:af:c7:63:af:49:51: 9d:8b:35:78:59:fa:0b:bb:36:cc:2e:1d:78:9d:6f:e4:e1:ed: 5b:f8:44:b1:dd:64:0d:62:a2:e5:20:9a:15:f4:31:de:7c:bb: 12:aa:3d:a9:b5:03:ff:8d:e4:45:a0:f7:6e:e2:ea:9e:74:ad: 05:53:a6:c3 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUC7krHCpo6Bw/ZxED23ektfyMmqswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwODAwMDA1MloX DTI1MDgxMjIzNTk1OVowejFJMEcGA1UEBRNAMzM1MzBkYTJiZDQ2YTI3ODliNGRm MTg5MzAxMzQyMDdhMDMzOTVmMDQ0MzgwZTJmMTVjYTQ5ZTFjYWQzNDJjNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFRCmJsZDMTCmXMC91UanxDy5rE+ 6nJfvtf+tvNjnL0T6VCUE/pT1Kag3CXk9VKPtOyXNq9I/PkwRQ+unSqhSd2nQTCW aE7IarpMl5IiundOeNmleqpI1a75X17Eg38XMYwWaEkeqEQE35VSRYAI1meNjArR NIwI1tOQRga982+RYHd7A0z82XMB5M0CvrKU8GRiZDXasPl6lltnWmOk8AEqygfC ZUqH5EJBZ7fJjimuuHXrhTTcZXPMzKb4LQdSIpcxi6cSOyqY1rrRG/Uxq8qZcp12 c80PAYSurhl0VUSYFb0QoEuqwqsDFZgjcUhrnze2038xSyCRobvbuxd4LwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFClL9HzUaBmfQZi6LW7oCOvoux9zMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RiZTQ0ZjI5LTJjN2QtNDZlYy04OThkLWM3NTZlMWM4MTE5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9g0MA0GCSqGSIb3DQEBCwUAA4IBAQAT/FvBFKDJJ4xURRR7SC8Z 5upLwE57sPOU426PirJIsTyHIS4TGRRBAhKx+VC2NMVH/86sTusdsP9DrNFuGs7y WBvTAf0VNZ0t4UVieSU351a0eIcUVJ8OxhA9M1XOoSA9hKn0pAS7qgRDUcVM3TZ7 OUjAp2vGhMP2qV0p/evbz3TMwtPmidPhlhHYJtOm1Nplds1G82czDqcvk7sh9xQM O0Idig5xfTOwVBuDUVF7uV6WSUKpSmJ8sNE4EIGdB0Svx2OvSVGdizV4WfoLuzbM Lh14nW/k4e1b+ESx3WQNYqLlIJoV9DHefLsSqj2ptQP/jeRFoPdu4uqedK0FU6bD -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:17 2025 by rpki-client