$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa File: ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa (raw, json) Hash identifier: dOfV3liBeF6xrQWktoyx5oXYoSJZnNegPtHzaXdDrnw= Subject key identifier: 3D:66:56:4E:4D:76:05:92:D3:FD:00:20:54:21:B4:4C:13:D9:32:45 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 76BBF2F808A3A5B735F1DCFFC6C36B11F38CE292 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa Signing time: Fri 16 May 2025 16:00:08 +0000 ROA not before: Fri 16 May 2025 16:00:08 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.220.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:bb:f2:f8:08:a3:a5:b7:35:f1:dc:ff:c6:c3:6b:11:f3:8c:e2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 16 16:00:08 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=ea88849fdcdaa17aeb2f355389492fd85fbba46e11ee8e21a884210c15944724, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0c:5b:cd:25:51:1a:46:fb:ff:fa:c1:a8:e4: a9:9a:fd:65:16:ea:94:47:d0:fd:49:91:c4:d6:84: 4c:9a:fd:01:51:e7:55:6d:b7:98:97:0a:70:1b:16: 6d:28:61:dd:c4:9e:97:30:47:73:c0:15:c0:28:cf: 15:33:87:2e:cc:d0:fd:7d:e2:9c:16:2b:93:d9:ee: 10:fd:f9:5d:88:80:4e:c0:c4:d1:68:bf:ea:66:2c: f4:71:c9:52:aa:f8:38:96:53:e4:40:18:ac:49:57: a6:b1:62:c1:33:57:ca:ab:39:8c:5c:bd:b2:0f:78: 7c:6e:7a:59:37:e5:84:14:26:7e:df:33:aa:7a:e8: d1:0d:e2:23:51:8c:a1:00:47:be:05:90:bf:08:96: 99:f0:f5:d6:7f:1f:38:b0:90:1c:ba:9c:d1:21:f6: 49:90:3c:57:76:99:13:0b:fb:26:75:58:1f:b6:65: 2b:fd:6f:a4:de:63:71:9c:29:62:eb:19:4f:1f:10: 97:43:b0:a9:31:fc:1c:83:f8:72:c9:6c:f7:4e:6e: 75:d0:5f:3d:54:74:ac:59:ea:0b:3d:d6:5d:15:1f: d3:a4:8b:66:91:97:7b:4e:76:15:88:d3:e9:64:8a: 60:8e:24:8a:cb:a2:c8:bf:ae:24:09:e0:cd:16:e8: 89:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:66:56:4E:4D:76:05:92:D3:FD:00:20:54:21:B4:4C:13:D9:32:45 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:2e:6e:2f:79:88:72:b9:b8:c1:a8:9e:02:e1:3d:a2:34:a3: bc:51:64:6a:56:a0:09:3e:45:00:9d:f0:be:29:a9:c7:93:17: 67:08:cb:f3:6f:60:b6:fe:e6:58:5f:06:09:e9:ff:53:57:69: 95:14:e5:1f:97:6b:d4:24:c8:8d:82:db:09:91:80:02:c5:73: 21:8d:7b:05:8d:f5:21:bb:d8:f0:37:81:c8:bd:35:9a:2d:ed: 92:5c:f9:19:81:8e:e7:d8:0d:24:70:92:cd:f1:5f:8d:cd:0c: 2b:5f:a9:83:33:58:84:7f:de:0b:32:62:75:66:9c:c7:59:ec: 24:e8:f9:f8:8f:e0:ef:0c:25:29:76:ab:4a:f5:5e:5d:99:68: 44:8a:e8:b6:f2:86:c7:00:21:90:fb:32:89:3e:19:32:90:fc: 06:ea:6e:c1:9d:3c:19:44:70:1b:96:c9:e5:9a:6b:c5:c8:5a: 90:94:2b:ab:aa:8c:5c:54:01:97:fa:e4:80:02:14:d0:d9:a3: ae:0a:3f:9c:9a:35:06:89:36:38:70:5b:14:ab:c1:2d:37:24: d4:2d:54:08:9d:93:81:28:8f:c9:20:4a:f5:9a:d8:f5:f1:44: 1c:75:65:31:21:24:23:df:ee:1c:80:2c:92:6f:4a:de:f6:4f: 53:d3:f9:37 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUdrvy+Aijpbc18dz/xsNrEfOM4pIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDUxNjE2MDAwOFoX DTI1MDYyMDIzNTk1OVowejFJMEcGA1UEBRNAZWE4ODg0OWZkY2RhYTE3YWViMmYz NTUzODk0OTJmZDg1ZmJiYTQ2ZTExZWU4ZTIxYTg4NDIxMGMxNTk0NDcyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwxbzSVRGkb7//rBqOSpmv1lFuqU R9D9SZHE1oRMmv0BUedVbbeYlwpwGxZtKGHdxJ6XMEdzwBXAKM8VM4cuzND9feKc FiuT2e4Q/fldiIBOwMTRaL/qZiz0cclSqvg4llPkQBisSVemsWLBM1fKqzmMXL2y D3h8bnpZN+WEFCZ+3zOqeujRDeIjUYyhAEe+BZC/CJaZ8PXWfx84sJAcupzRIfZJ kDxXdpkTC/smdVgftmUr/W+k3mNxnCli6xlPHxCXQ7CpMfwcg/hyyWz3Tm510F89 VHSsWeoLPdZdFR/TpItmkZd7TnYViNPpZIpgjiSKy6LIv64kCeDNFuiJawIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFD1mVk5NdgWS0/0AIFQhtEwT2TJFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VjYjg1ZGE1LTA3ZDItNGM1My04NzVkLWViZjMxNWIxZTU4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9wwDQYJKoZIhvcNAQELBQADggEBAEUubi95iHK5uMGongLhPaI0 o7xRZGpWoAk+RQCd8L4pqceTF2cIy/NvYLb+5lhfBgnp/1NXaZUU5R+Xa9QkyI2C 2wmRgALFcyGNewWN9SG72PA3gci9NZot7ZJc+RmBjufYDSRwks3xX43NDCtfqYMz WIR/3gsyYnVmnMdZ7CTo+fiP4O8MJSl2q0r1Xl2ZaESK6LbyhscAIZD7Mok+GTKQ /AbqbsGdPBlEcBuWyeWaa8XIWpCUK6uqjFxUAZf65IACFNDZo64KP5yaNQaJNjhw WxSrwS03JNQtVAidk4Eoj8kgSvWa2PXxRBx1ZTEhJCPf7hyALJJvSt72T1PT+Tc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:30 2025 by rpki-client