$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ffa6b6d9-2bc2-429d-a6a8-618638babf4a.roa File: ffa6b6d9-2bc2-429d-a6a8-618638babf4a.roa (raw, json) Hash identifier: BjkUeViOpoJpnJLEvjzWVG8SAbQycZBlD6tEj091XGw= Subject key identifier: DA:A2:62:FC:12:81:90:7E:61:C5:88:E5:17:4E:43:C9:D4:0B:1B:75 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3180C2A04219D999E120C10C2CF2CE8AD0AB4E32 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ffa6b6d9-2bc2-429d-a6a8-618638babf4a.roa Signing time: Wed 09 Jul 2025 00:00:38 +0000 ROA not before: Wed 09 Jul 2025 00:00:38 +0000 ROA not after: Wed 13 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 18:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:80:c2:a0:42:19:d9:99:e1:20:c1:0c:2c:f2:ce:8a:d0:ab:4e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 9 00:00:38 2025 GMT Not After : Aug 13 23:59:59 2025 GMT Subject: serialNumber=854103874e10e6af819b18ba59a9c3b66c25276781dcd382c9649ce702ce570e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:09:0c:9a:b2:a4:8f:7d:42:93:d4:ca:1c: df:4b:86:21:76:87:54:cd:81:42:48:12:40:6f:ad: 8d:a2:50:dd:14:b4:1a:6d:13:1f:e6:61:1a:f9:25: cd:fa:d1:d4:9c:9f:94:fa:0c:65:e8:53:53:22:f8: 2d:cb:d9:80:14:85:da:67:0b:a3:8e:20:1d:17:2c: e4:86:98:4b:2a:a5:13:65:f9:66:23:01:2d:5e:89: 4b:68:d7:ca:aa:a6:1f:1b:e6:72:97:1f:fa:4a:b7: 6f:b2:e6:55:6e:ae:ba:97:2c:7f:a2:97:5b:c5:da: 9a:03:3a:0b:a7:ce:30:b9:51:f4:9f:79:48:9a:0e: 18:2d:c5:f2:13:0c:a1:c7:cc:0c:b3:b4:51:0c:79: ef:23:04:13:d0:75:dd:8d:74:4b:72:f0:69:92:0a: 65:22:fc:25:10:83:f1:47:92:48:ae:d1:e5:d7:3b: 9c:26:11:00:68:90:31:d2:f3:ff:96:2a:e8:d7:7a: 87:d8:2c:9a:e3:7d:f7:71:72:49:67:7e:15:58:90: 7e:76:e1:de:01:23:ae:db:7a:9c:59:95:74:fe:04: 6d:b9:3f:19:5f:6f:21:d8:14:6f:a0:47:cb:40:84: 1f:83:1f:5d:d1:43:d2:fd:20:95:9c:1d:fa:63:93: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A2:62:FC:12:81:90:7E:61:C5:88:E5:17:4E:43:C9:D4:0B:1B:75 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ffa6b6d9-2bc2-429d-a6a8-618638babf4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.0.0/15 Signature Algorithm: sha256WithRSAEncryption 5d:43:c9:f3:4d:74:43:96:2e:5a:49:f3:4b:06:ee:dc:9e:7c: a1:bb:52:10:0b:50:c2:d3:1f:29:14:3b:9d:5a:04:6f:68:f2: 18:ef:4b:3a:85:f4:f3:a7:21:1a:56:6f:3c:08:ef:b5:5b:d0: 57:97:11:97:12:e3:cc:50:92:e8:55:cd:fd:2c:46:de:0e:81: 57:59:d7:be:69:f4:bf:23:1f:ea:63:73:f0:5b:77:50:e6:f4: 9d:ad:5f:96:bc:eb:c8:e1:af:a8:2e:ec:b2:5f:d2:b8:aa:c0: 04:37:af:41:aa:89:ec:8b:b5:ab:44:ce:9b:82:ca:b0:fb:25: b1:df:1a:e9:d1:41:b9:6a:d7:25:a3:5c:e5:1e:fd:2e:b2:8d: 20:0b:63:49:84:82:9e:e7:bf:fc:5b:fc:8b:58:ef:2b:26:ab: e3:29:db:cf:a6:26:ea:96:54:4b:45:96:e2:0d:83:84:51:3a: cd:b8:a1:a3:79:51:e4:7b:3d:38:27:a6:a4:9f:17:a8:59:e3: 5b:50:4e:2c:a8:31:07:b1:20:84:b5:34:ea:a0:82:0d:cb:77: bc:a7:ab:d0:13:3e:15:c9:40:cb:2f:6e:7a:cb:bf:6e:2d:6c: 8e:d7:f9:82:af:99:2f:ff:7b:80:e2:7b:91:34:c6:5a:2f:2f: a1:7f:0e:3c -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUMYDCoEIZ2ZnhIMEMLPLOitCrTjIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDcwOTAwMDAzOFoX DTI1MDgxMzIzNTk1OVowejFJMEcGA1UEBRNAODU0MTAzODc0ZTEwZTZhZjgxOWIx OGJhNTlhOWMzYjY2YzI1Mjc2NzgxZGNkMzgyYzk2NDljZTcwMmNlNTcwZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvEJDJqypI99QpPUyhzfS4YhdodU zYFCSBJAb62NolDdFLQabRMf5mEa+SXN+tHUnJ+U+gxl6FNTIvgty9mAFIXaZwuj jiAdFyzkhphLKqUTZflmIwEtXolLaNfKqqYfG+Zylx/6SrdvsuZVbq66lyx/opdb xdqaAzoLp84wuVH0n3lImg4YLcXyEwyhx8wMs7RRDHnvIwQT0HXdjXRLcvBpkgpl IvwlEIPxR5JIrtHl1zucJhEAaJAx0vP/liro13qH2Cya4333cXJJZ34VWJB+duHe ASOu23qcWZV0/gRtuT8ZX28h2BRvoEfLQIQfgx9d0UPS/SCVnB36Y5PQvwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFNqiYvwSgZB+YcWI5RdOQ8nUCxt1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZmYTZiNmQ5LTJiYzItNDI5ZC1hNmE4LTYxODYzOGJhYmY0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9AwDQYJKoZIhvcNAQELBQADggEBAF1DyfNNdEOWLlpJ80sG7tye fKG7UhALUMLTHykUO51aBG9o8hjvSzqF9POnIRpWbzwI77Vb0FeXEZcS48xQkuhV zf0sRt4OgVdZ175p9L8jH+pjc/Bbd1Dm9J2tX5a868jhr6gu7LJf0riqwAQ3r0Gq ieyLtatEzpuCyrD7JbHfGunRQblq1yWjXOUe/S6yjSALY0mEgp7nv/xb/ItY7ysm q+Mp28+mJuqWVEtFluINg4RROs24oaN5UeR7PTgnpqSfF6hZ41tQTiyoMQexIIS1 NOqggg3Ld7ynq9ATPhXJQMsvbnrLv24tbI7X+YKvmS//e4Die5E0xlovL6F/Djw= -----END CERTIFICATE-----Generated at Thu Jul 31 00:57:21 2025 by rpki-client