$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa File: 3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa (raw, json) Hash identifier: FCXs+/Gbynv3G9QQL1MG9Dz5usVNCDZNPXjqFuIEULc= Subject key identifier: E2:A1:49:55:9B:26:47:97:F0:EE:05:A3:86:46:2E:04:90:81:E6:5C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3593BFE7EC6314744163E329311D594918A5F2AC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa Signing time: Sat 28 Jun 2025 00:00:21 +0000 ROA not before: Sat 28 Jun 2025 00:00:21 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:93:bf:e7:ec:63:14:74:41:63:e3:29:31:1d:59:49:18:a5:f2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 28 00:00:21 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=22bcbe4b473386a6ab57289534b14246ee22a41086b0b2f210c74718d87dca3f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2b:de:3c:e3:83:78:52:1b:9f:e7:4e:a0:e9: 40:cd:d4:26:b3:27:31:ca:42:12:bc:54:5d:d3:39: 42:a9:fe:44:60:2a:2c:61:3e:54:ae:72:7a:02:3a: f2:ff:08:1e:c1:09:aa:79:47:cd:08:22:35:d8:57: e2:f9:83:89:b1:5d:fe:c6:a7:71:5d:db:30:e9:b6: fd:cf:ba:63:d2:c9:9c:cd:87:f7:f7:22:3c:67:e0: bc:fe:67:f0:7e:44:c8:02:48:c6:d5:97:0c:b5:aa: 67:4f:48:05:81:5a:d6:da:f5:86:2d:75:97:e5:53: 7f:1d:1e:e9:ac:39:1b:c5:69:e0:d5:ea:da:df:7f: 3b:a5:40:32:51:be:04:1c:3f:09:34:b9:0a:86:79: a0:cb:aa:e7:f4:ab:76:f4:8f:00:fc:9a:bd:82:6a: ab:c5:8f:b4:0a:d9:8f:96:30:60:ad:c9:a2:3b:ff: 93:57:da:ae:ba:ab:bc:b6:ec:2d:4e:4b:56:04:db: a2:5c:d7:10:8a:5a:d7:81:82:4c:17:9a:17:4b:66: da:19:fe:78:79:cb:4a:9b:75:f5:00:ff:61:b2:49: 91:1f:e4:fd:ef:bd:d9:29:5e:31:99:00:c6:41:8a: f6:32:cd:c4:1a:90:22:1c:82:9a:b7:bb:b0:cb:96: 41:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A1:49:55:9B:26:47:97:F0:EE:05:A3:86:46:2E:04:90:81:E6:5C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.0.0/15 Signature Algorithm: sha256WithRSAEncryption 23:0a:c4:48:b5:4e:d4:0b:91:45:43:8b:98:47:f3:b3:f3:0c: 91:08:c1:7f:01:f6:71:18:a8:b3:60:c1:80:bf:70:63:81:c3: df:d7:e4:38:04:aa:f3:3d:85:6c:da:13:aa:e8:3c:01:40:75: 5d:f2:aa:4e:16:93:0e:91:47:3e:dd:0c:88:4c:5c:00:07:42: 1b:3d:f4:e8:e8:a9:5d:84:41:de:ae:ab:ef:9b:f2:80:70:0b: b5:51:6a:56:57:b4:af:57:e8:66:6a:f3:18:52:01:17:6a:a3: ec:c6:86:8b:56:84:9c:f1:e5:ee:6d:26:07:ae:87:d5:dd:80: 0f:08:d7:71:3b:34:88:2c:cc:4a:12:ef:33:9c:cb:44:17:a0: 56:0e:a2:4a:36:fa:bc:c2:7a:bc:b3:9a:8c:11:3c:42:12:fc: 6a:43:d4:c7:18:82:95:18:93:5a:2f:d4:e8:75:04:f9:fe:11: 6b:34:62:e2:b1:1a:6d:ac:8c:f5:15:56:eb:fb:82:20:8e:cd: 91:1b:aa:75:90:4e:85:1c:bc:c0:fb:80:a9:79:2c:c5:66:ab: ff:4f:20:a7:b6:05:59:1d:99:bb:62:f2:8b:a5:43:ba:2d:af: 9f:f2:fe:68:c6:21:db:6f:91:36:12:67:dc:ed:6c:0c:3b:ec: 9b:84:aa:35 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUNZO/5+xjFHRBY+MpMR1ZSRil8qwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyODAwMDAyMVoX DTI1MDgwMjIzNTk1OVowejFJMEcGA1UEBRNAMjJiY2JlNGI0NzMzODZhNmFiNTcy ODk1MzRiMTQyNDZlZTIyYTQxMDg2YjBiMmYyMTBjNzQ3MThkODdkY2EzZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ivePOODeFIbn+dOoOlAzdQmsycx ykISvFRd0zlCqf5EYCosYT5UrnJ6Ajry/wgewQmqeUfNCCI12Ffi+YOJsV3+xqdx Xdsw6bb9z7pj0smczYf39yI8Z+C8/mfwfkTIAkjG1ZcMtapnT0gFgVrW2vWGLXWX 5VN/HR7prDkbxWng1era3387pUAyUb4EHD8JNLkKhnmgy6rn9Kt29I8A/Jq9gmqr xY+0CtmPljBgrcmiO/+TV9quuqu8tuwtTktWBNuiXNcQilrXgYJMF5oXS2baGf54 ectKm3X1AP9hskmRH+T9773ZKV4xmQDGQYr2Ms3EGpAiHIKat7uwy5ZBBwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFOKhSVWbJkeX8O4Fo4ZGLgSQgeZcMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhMmJjMmNjLTkyNzItNDFlYi1hM2U0LTIwNzYxZDE3MjlmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9QwDQYJKoZIhvcNAQELBQADggEBACMKxEi1TtQLkUVDi5hH87Pz DJEIwX8B9nEYqLNgwYC/cGOBw9/X5DgEqvM9hWzaE6roPAFAdV3yqk4Wkw6RRz7d DIhMXAAHQhs99OjoqV2EQd6uq++b8oBwC7VRalZXtK9X6GZq8xhSARdqo+zGhotW hJzx5e5tJgeuh9XdgA8I13E7NIgszEoS7zOcy0QXoFYOoko2+rzCeryzmowRPEIS /GpD1McYgpUYk1ov1Oh1BPn+EWs0YuKxGm2sjPUVVuv7giCOzZEbqnWQToUcvMD7 gKl5LMVmq/9PIKe2BVkdmbti8oulQ7otr5/y/mjGIdtvkTYSZ9ztbAw77JuEqjU= -----END CERTIFICATE-----Generated at Sun Jun 29 03:13:40 2025 by rpki-client