$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4db7ce14-332d-4f0b-b437-64bdef5e29cd.roa File: 4db7ce14-332d-4f0b-b437-64bdef5e29cd.roa (raw, json) Hash identifier: CFHd7ZqrHhXGPS2bl0sdoDXWLgxLIqsgYF+XreLr/Uk= Subject key identifier: 68:78:17:B4:5E:33:E1:96:B7:01:05:31:EC:8D:07:D4:45:03:3D:92 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F76346A6A880913949E05BA5339D8A097386496 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4db7ce14-332d-4f0b-b437-64bdef5e29cd.roa Signing time: Fri 27 Jun 2025 00:00:09 +0000 ROA not before: Fri 27 Jun 2025 00:00:09 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:76:34:6a:6a:88:09:13:94:9e:05:ba:53:39:d8:a0:97:38:64:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jun 27 00:00:09 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=2d3cff9d58329133a7bfcf0a7376625f61edbca4986a0d8df86f7a0a745a599e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:5a:39:54:09:f6:83:74:d3:cf:0e:a7:4b: 70:7a:59:c4:ce:d0:70:25:d3:be:9d:58:2e:fe:04: 07:6c:eb:21:4c:c1:1d:a3:be:29:4c:8d:0c:83:8b: 68:29:e9:2f:c0:58:55:ed:e7:dd:a2:ea:1d:18:3e: b4:59:04:c0:a2:08:cf:5c:47:27:a9:50:97:87:29: 92:6c:4d:5e:d4:0a:bc:9c:92:e9:36:fb:15:71:cd: 5d:02:a5:f3:fb:98:ed:00:f7:b1:d2:68:68:89:23: 6c:af:42:42:68:75:2b:ec:e4:2e:62:ea:4b:22:76: 88:c9:7a:f8:c0:5a:a1:62:52:e8:fa:ad:09:01:21: d0:06:1e:86:eb:89:29:a1:77:3b:8f:61:8c:3b:7d: 9a:01:a6:1e:eb:27:ac:fc:72:5d:fa:4f:3a:fa:d8: d6:3e:dc:50:ef:4c:c5:85:54:01:83:0d:b7:d5:a8: fe:bf:b5:a0:c8:65:63:94:1e:78:5f:4c:70:2e:99: 00:dc:fe:4b:14:0f:1a:c8:f7:36:ff:da:97:0c:72: a2:9a:21:ef:28:0d:eb:2a:a8:92:c9:c9:47:bc:d3: f1:87:43:06:90:99:be:ac:0b:4e:35:ed:2e:da:31: af:3c:28:3b:06:b2:0e:72:1d:bd:fb:15:4c:24:99: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:78:17:B4:5E:33:E1:96:B7:01:05:31:EC:8D:07:D4:45:03:3D:92 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4db7ce14-332d-4f0b-b437-64bdef5e29cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.62.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:1e:b3:bf:1e:81:37:34:cb:22:c3:b7:c6:77:39:30:c3:6d: f5:d6:af:59:3a:08:ac:8c:e5:44:9a:ff:ac:cf:03:f2:38:65: 03:6a:4d:91:c2:7a:0a:4d:7d:a2:9d:d7:83:c0:fc:14:6c:2b: 23:45:f2:4b:65:f3:49:a5:21:fb:f6:a9:de:03:6c:98:9a:57: 93:37:8b:17:91:24:63:3e:64:e1:61:56:6a:c1:e3:7a:dc:70: 3a:e3:89:ae:11:4e:7d:09:53:68:75:d8:56:37:a7:a9:5a:b5: e9:57:d2:24:f1:ed:4a:af:de:ac:9b:5b:ae:55:39:13:04:81: e8:60:f8:a7:94:ac:7a:3b:28:f8:fa:41:c9:72:32:11:c7:93: fa:53:6f:8b:0b:45:c2:6a:00:71:23:fd:d9:c6:e5:36:66:ba: 3c:ad:93:fd:78:62:fe:5f:09:4f:da:e8:87:ad:6a:38:39:5d: 96:50:30:07:5c:af:33:9f:57:49:0d:3a:f8:39:2b:8a:02:9a: 5c:55:66:58:82:66:fd:07:a1:0b:1f:04:df:9c:87:6f:e1:f1: be:27:ae:47:a6:02:03:2f:ca:52:a3:14:e1:0a:90:8c:c4:dc: 1e:bd:bc:b7:21:ca:be:e2:de:6e:3d:26:98:b3:72:d6:90:43: b0:b4:5f:cf -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUf3Y0amqICROUngW6UznYoJc4ZJYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDYyNzAwMDAwOVoX DTI1MDgwMTIzNTk1OVowejFJMEcGA1UEBRNAMmQzY2ZmOWQ1ODMyOTEzM2E3YmZj ZjBhNzM3NjYyNWY2MWVkYmNhNDk4NmEwZDhkZjg2ZjdhMGE3NDVhNTk5ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywxaOVQJ9oN0088Op0twelnEztBw JdO+nVgu/gQHbOshTMEdo74pTI0Mg4toKekvwFhV7efdouodGD60WQTAogjPXEcn qVCXhymSbE1e1Aq8nJLpNvsVcc1dAqXz+5jtAPex0mhoiSNsr0JCaHUr7OQuYupL InaIyXr4wFqhYlLo+q0JASHQBh6G64kpoXc7j2GMO32aAaYe6yes/HJd+k86+tjW PtxQ70zFhVQBgw231aj+v7WgyGVjlB54X0xwLpkA3P5LFA8ayPc2/9qXDHKimiHv KA3rKqiSyclHvNPxh0MGkJm+rAtONe0u2jGvPCg7BrIOch29+xVMJJkc0wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFGh4F7ReM+GWtwEFMeyNB9RFAz2SMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRkYjdjZTE0LTMzMmQtNGYwYi1iNDM3LTY0YmRlZjVlMjljZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9Q+MA0GCSqGSIb3DQEBCwUAA4IBAQBrHrO/HoE3NMsiw7fGdzkw w2311q9ZOgisjOVEmv+szwPyOGUDak2RwnoKTX2indeDwPwUbCsjRfJLZfNJpSH7 9qneA2yYmleTN4sXkSRjPmThYVZqweN63HA644muEU59CVNoddhWN6epWrXpV9Ik 8e1Kr96sm1uuVTkTBIHoYPinlKx6Oyj4+kHJcjIRx5P6U2+LC0XCagBxI/3ZxuU2 Zro8rZP9eGL+XwlP2uiHrWo4OV2WUDAHXK8zn1dJDTr4OSuKAppcVWZYgmb9B6EL HwTfnIdv4fG+J65HpgIDL8pSoxThCpCMxNwevby3Icq+4t5uPSaYs3LWkEOwtF/P -----END CERTIFICATE-----Generated at Sun Jun 29 08:15:34 2025 by rpki-client