$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa File: e5ffe65e-7287-4628-8759-7c141866ee12.roa (raw, json) Hash identifier: DlhFiKx9KFISofAuF2dCzesfE71u9heCRKG1PDRlZBc= Subject key identifier: 3B:97:97:B2:C6:3B:08:BA:A2:CC:F4:28:A4:43:88:AB:15:5B:CB:CF Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 08B2427A252E418C43CF4DB8DFE92A157A8A574C Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa Signing time: Fri 18 Jul 2025 00:00:03 +0000 ROA not before: Fri 18 Jul 2025 00:00:03 +0000 ROA not after: Fri 22 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 00:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b2:42:7a:25:2e:41:8c:43:cf:4d:b8:df:e9:2a:15:7a:8a:57:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Jul 18 00:00:03 2025 GMT Not After : Aug 22 23:59:59 2025 GMT Subject: serialNumber=b912f2334f2ef4df8783d1b0a36afaecc70d7dcff3dd11dbfefd9d576e787316, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b4:2f:78:86:bd:19:12:08:2b:d0:37:2e:6b: bb:a8:87:8d:5d:09:26:98:5e:3a:ab:e9:05:90:47: 4b:13:75:65:94:c9:e0:a2:54:84:2f:80:01:13:71: 3e:a7:d9:ba:ce:10:52:1e:24:64:7e:d5:9b:14:d4: dc:1c:f5:64:b3:e8:20:4a:d7:78:a9:3e:ad:0f:61: 33:97:2b:c2:89:7f:ad:04:9a:c0:13:4c:8c:39:b9: fe:ef:06:6f:8b:99:db:d3:27:df:3a:43:94:7c:e1: 66:1d:cf:22:cf:2e:2c:4c:1a:ef:b9:b9:48:dd:87: f7:4d:94:4d:c3:ea:e5:7e:39:1c:ac:7b:f0:f2:f6: 89:ae:db:f6:1e:dc:53:ce:15:c1:d9:cc:78:b8:f1: b5:dc:6f:90:a5:8d:1c:2e:62:5d:ae:80:cc:e4:24: 67:fb:7c:70:10:45:5a:09:17:6b:36:a3:34:9d:81: 42:c3:5d:83:d0:89:b2:9d:b4:4c:f8:0f:a2:25:19: e5:b6:2c:cb:4b:e4:e1:16:13:ab:be:b2:88:5a:75: 32:55:1d:8d:f2:7a:c3:38:a4:e2:98:dd:77:20:f7: 6d:d9:fc:e6:a5:aa:7f:8b:dd:96:40:22:fd:66:06: 30:0d:fb:8f:70:04:53:bc:5d:11:a2:67:48:df:40: 24:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:97:97:B2:C6:3B:08:BA:A2:CC:F4:28:A4:43:88:AB:15:5B:CB:CF X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption 54:59:1c:c3:5b:5d:71:a0:ae:4c:68:c7:0d:04:1c:2e:a7:5c: 84:c5:07:59:99:44:c2:e1:28:e4:e9:d1:93:3d:ad:93:f0:d4: b8:17:ed:72:b9:65:83:9e:6b:f7:a8:68:9d:76:17:fd:ff:c0: dd:4d:46:53:e7:e9:97:cf:70:b9:b2:2e:9d:5b:db:80:9e:49: 34:2b:c9:f0:8e:49:52:46:88:78:e1:c6:42:ec:51:29:85:c5: 00:a5:f1:e8:82:6f:27:af:75:53:35:d7:e3:52:ce:61:d2:43: 08:fd:3f:8c:6c:61:0b:e1:7f:34:db:63:d6:9a:b0:ba:a4:54: 6e:1f:68:ad:39:89:58:0e:3d:aa:02:b5:d0:30:c5:c9:16:a5: 0e:8e:45:b9:f5:3d:ef:d3:26:29:cd:57:e9:1f:58:a8:79:94: 37:e6:01:24:d5:8e:20:0d:78:16:ca:df:6d:8f:e7:b6:18:a7: 1d:06:44:df:cb:33:2d:37:6a:af:be:77:f6:7b:fb:bd:9b:f3: 55:c8:eb:4b:de:2f:3f:ee:0c:bd:73:16:57:38:ac:9d:ef:c7: 47:51:26:d1:52:88:aa:92:cd:62:d8:53:78:c2:30:bc:b9:cb: ea:0d:7e:2e:e0:bb:5a:ba:90:48:99:f5:ae:f9:51:51:bf:43: b6:a9:fe:15 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUCLJCeiUuQYxDz0243+kqFXqKV0wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MDcxODAwMDAwM1oX DTI1MDgyMjIzNTk1OVowejFJMEcGA1UEBRNAYjkxMmYyMzM0ZjJlZjRkZjg3ODNk MWIwYTM2YWZhZWNjNzBkN2RjZmYzZGQxMWRiZmVmZDlkNTc2ZTc4NzMxNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbQveIa9GRIIK9A3Lmu7qIeNXQkm mF46q+kFkEdLE3VllMngolSEL4ABE3E+p9m6zhBSHiRkftWbFNTcHPVks+ggStd4 qT6tD2EzlyvCiX+tBJrAE0yMObn+7wZvi5nb0yffOkOUfOFmHc8izy4sTBrvublI 3Yf3TZRNw+rlfjkcrHvw8vaJrtv2HtxTzhXB2cx4uPG13G+QpY0cLmJdroDM5CRn +3xwEEVaCRdrNqM0nYFCw12D0ImynbRM+A+iJRnltizLS+ThFhOrvrKIWnUyVR2N 8nrDOKTimN13IPdt2fzmpap/i92WQCL9ZgYwDfuPcARTvF0RomdI30Ak8wIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFDuXl7LGOwi6osz0KKRDiKsVW8vPMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1ZmZlNjVlLTcyODctNDYyOC04NzU5LTdjMTQxODY2ZWUxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAn/gwDQYJKoZIhvcNAQELBQADggEBAFRZHMNbXXGgrkxoxw0EHC6n XITFB1mZRMLhKOTp0ZM9rZPw1LgX7XK5ZYOea/eoaJ12F/3/wN1NRlPn6ZfPcLmy Lp1b24CeSTQryfCOSVJGiHjhxkLsUSmFxQCl8eiCbyevdVM11+NSzmHSQwj9P4xs YQvhfzTbY9aasLqkVG4faK05iVgOPaoCtdAwxckWpQ6ORbn1Pe/TJinNV+kfWKh5 lDfmASTVjiANeBbK322P57YYpx0GRN/LMy03aq++d/Z7+72b81XI60veLz/uDL1z Flc4rJ3vx0dRJtFSiKqSzWLYU3jCMLy5y+oNfi7gu1q6kEiZ9a75UVG/Q7ap/hU= -----END CERTIFICATE-----Generated at Mon Jul 21 07:29:56 2025 by rpki-client