$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa File: ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa (raw, json) Hash identifier: RWjdApjpAjLtswGcSwyDj8SSkyU0mJC2TkCKHn4IlIE= Subject key identifier: 69:53:91:33:95:5C:39:FA:67:09:62:DE:0C:28:14:EE:E3:CD:F7:B3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6471BCA046C743A7C3C853CE6B484FBD149AD00D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa Signing time: Mon 07 Jul 2025 16:00:18 +0000 ROA not before: Mon 07 Jul 2025 16:00:18 +0000 ROA not after: Mon 11 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.220.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:71:bc:a0:46:c7:43:a7:c3:c8:53:ce:6b:48:4f:bd:14:9a:d0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 7 16:00:18 2025 GMT Not After : Aug 11 23:59:59 2025 GMT Subject: serialNumber=4eceb33d7e01e9b9a598f1b8dc5560d16155d469baf10f38f65e0bc8b91fcb41, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c6:71:01:1d:9d:33:81:12:67:ca:38:d4:40: ee:9f:a4:b3:c3:60:05:b4:35:9c:3b:b2:37:be:c7: 29:79:f2:78:64:1d:c3:13:a7:b0:0e:71:5a:1d:67: ae:5a:32:1f:92:93:d4:ed:76:e6:7c:61:bc:98:af: a3:0b:9e:c4:2f:90:f0:24:7c:c5:4c:ba:49:6e:04: de:1c:59:0c:04:0e:8e:63:96:d2:f9:64:87:7d:01: c3:a0:71:fc:d7:ec:ba:6d:b3:b4:63:8c:8d:11:c2: 16:6e:5b:1c:e1:26:45:f0:b6:78:10:3a:25:b5:26: 41:65:b4:d9:f9:6c:01:e8:35:e6:bc:f1:dd:74:e4: ce:e4:b2:1e:ef:b2:f6:2e:07:60:60:a8:96:c8:bb: 6f:36:f1:19:03:8e:38:52:c6:04:76:37:d2:da:c9: a6:bc:a0:f8:fe:58:f2:24:19:b6:c5:0a:bd:51:13: b0:e8:15:5a:0b:ae:7d:1b:10:70:19:1e:b6:ad:29: 2b:80:7a:2a:48:19:4c:98:a3:5b:7c:fd:a5:a2:b0: 99:34:6e:d7:d3:08:5a:67:48:32:58:19:24:07:0f: 1d:e5:75:91:70:9c:95:6d:ed:98:de:df:12:d3:f0: 40:d5:41:4a:11:44:71:56:ab:0d:3b:84:2d:8d:bc: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:53:91:33:95:5C:39:FA:67:09:62:DE:0C:28:14:EE:E3:CD:F7:B3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 56:8a:57:92:f8:be:9f:a9:8d:01:36:b7:e0:d6:50:39:57:c1: 86:70:cf:d9:d2:97:4c:3f:da:4e:cb:c2:90:83:0a:ca:f9:f4: 80:16:ae:22:f9:84:36:10:a0:8f:3a:a0:0a:de:51:c7:55:80: 45:fe:9c:e0:b6:8f:a6:0f:c8:58:3a:bf:12:c9:f5:55:2d:08: 1e:68:eb:39:59:c9:c7:a7:45:91:a4:1a:19:fa:4b:cb:1e:73: 80:91:18:75:ff:23:13:06:2f:cc:8b:ef:3b:d0:40:f9:45:d1: a8:de:a8:b7:25:33:fb:4f:19:1f:67:58:4e:f0:bd:b9:73:be: 42:70:c2:14:e5:0d:4a:36:94:74:c8:83:9a:8b:27:01:1c:ff: ff:31:c7:12:0c:79:1d:5e:6b:0a:3d:cb:4d:23:ff:ca:d3:cc: 78:7a:74:78:88:19:70:1d:79:61:be:8f:12:84:77:15:c2:73: d1:4f:cf:2c:91:22:cb:30:8d:2e:96:6c:b6:65:9e:82:75:1d: 37:4f:47:cd:1c:56:0b:51:de:73:b6:db:22:62:9d:78:a7:71: 02:aa:a5:02:13:5b:51:d0:6a:7a:59:23:9d:27:6b:35:8a:a2: 30:c3:13:70:2b:ae:56:f4:e0:c7:75:6b:59:2e:4a:48:e2:45: 0c:29:2a:62 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUZHG8oEbHQ6fDyFPOa0hPvRSa0A0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwNzE2MDAxOFoX DTI1MDgxMTIzNTk1OVowejFJMEcGA1UEBRNANGVjZWIzM2Q3ZTAxZTliOWE1OThm MWI4ZGM1NTYwZDE2MTU1ZDQ2OWJhZjEwZjM4ZjY1ZTBiYzhiOTFmY2I0MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMZxAR2dM4ESZ8o41EDun6Szw2AF tDWcO7I3vscpefJ4ZB3DE6ewDnFaHWeuWjIfkpPU7XbmfGG8mK+jC57EL5DwJHzF TLpJbgTeHFkMBA6OY5bS+WSHfQHDoHH81+y6bbO0Y4yNEcIWblsc4SZF8LZ4EDol tSZBZbTZ+WwB6DXmvPHddOTO5LIe77L2LgdgYKiWyLtvNvEZA444UsYEdjfS2smm vKD4/ljyJBm2xQq9UROw6BVaC659GxBwGR62rSkrgHoqSBlMmKNbfP2lorCZNG7X 0whaZ0gyWBkkBw8d5XWRcJyVbe2Y3t8S0/BA1UFKEURxVqsNO4QtjbxtbwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFGlTkTOVXDn6Zwli3gwoFO7jzfezMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VjYjg1ZGE1LTA3ZDItNGM1My04NzVkLWViZjMxNWIxZTU4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9wwDQYJKoZIhvcNAQELBQADggEBAFaKV5L4vp+pjQE2t+DWUDlX wYZwz9nSl0w/2k7LwpCDCsr59IAWriL5hDYQoI86oAreUcdVgEX+nOC2j6YPyFg6 vxLJ9VUtCB5o6zlZycenRZGkGhn6S8sec4CRGHX/IxMGL8yL7zvQQPlF0ajeqLcl M/tPGR9nWE7wvblzvkJwwhTlDUo2lHTIg5qLJwEc//8xxxIMeR1eawo9y00j/8rT zHh6dHiIGXAdeWG+jxKEdxXCc9FPzyyRIsswjS6WbLZlnoJ1HTdPR80cVgtR3nO2 2yJinXincQKqpQITW1HQanpZI50nazWKojDDE3Arrlb04Md1a1kuSkjiRQwpKmI= -----END CERTIFICATE-----Generated at Thu Jul 31 01:02:32 2025 by rpki-client