$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80b7e005-6c19-4f9e-9cbc-448f4073dd0c.roa File: 80b7e005-6c19-4f9e-9cbc-448f4073dd0c.roa (raw, json) Hash identifier: KVP2cCIr3HF4V0azXGMyT53egqSl5O+s2YlkCEOQic0= Subject key identifier: 28:36:8D:49:CB:B0:D0:8D:59:A7:96:6F:E2:F4:CE:C9:10:2F:AA:62 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 206816B9D9BEA2D3B1737303B787497A708AC689 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80b7e005-6c19-4f9e-9cbc-448f4073dd0c.roa Signing time: Mon 18 Aug 2025 15:00:46 +0000 ROA not before: Mon 18 Aug 2025 15:00:46 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:68:16:b9:d9:be:a2:d3:b1:73:73:03:b7:87:49:7a:70:8a:c6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 18 15:00:46 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=c8121a085e998e8f29a80e8fa1cd6e6f2a1d967916ab0c3078d436b3b7a3f1b7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:21:09:a2:58:a0:5e:42:ee:84:2b:a7:ba: 6a:97:13:4f:9b:e9:0d:43:4a:ee:fb:0f:8a:fc:41: 2a:f9:da:12:67:10:73:c9:d2:c5:1d:17:e5:f1:6e: c4:cd:29:9e:b1:e6:e7:b5:e7:23:17:e9:7d:86:38: f2:e5:62:08:f7:db:39:e1:31:e3:20:43:50:c6:00: 50:78:78:1f:41:27:ac:58:49:f4:5c:b8:bd:10:e1: 83:bf:c5:60:7c:e4:1d:c7:c8:1e:c7:3e:cf:3b:6c: f9:ed:25:b8:76:8c:6c:f8:97:55:bd:8e:8e:64:c0: 3d:d9:15:a2:a6:c4:38:0c:26:a5:59:86:61:74:35: 2a:e9:c0:6c:88:26:e2:40:61:46:6b:7f:82:1d:b9: d8:48:34:35:58:cc:1b:87:62:e0:2b:b3:81:cf:63: 8c:1c:a7:ad:68:86:b8:34:fa:41:ed:4f:ed:ef:7b: 58:d8:45:c2:70:3b:92:1a:df:1c:bc:64:ca:0b:ac: 58:06:64:f7:40:28:0b:25:7d:24:e8:84:6f:ad:c3: 7b:23:ad:0e:01:df:b4:37:e3:2c:68:2d:8c:08:91: e6:be:66:af:6c:35:80:b7:b5:d9:83:8f:ef:63:8f: ea:1a:df:ff:d7:b1:04:7b:7a:18:73:a4:6e:ad:38: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:36:8D:49:CB:B0:D0:8D:59:A7:96:6F:E2:F4:CE:C9:10:2F:AA:62 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80b7e005-6c19-4f9e-9cbc-448f4073dd0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.68.0/24 Signature Algorithm: sha256WithRSAEncryption 93:2d:1d:16:fb:a8:c8:00:b3:52:b9:99:52:b9:a8:57:86:0a: 6e:c6:11:2d:01:3c:89:ec:fc:b1:f2:43:11:37:b4:1b:3d:f3: 74:34:6f:f2:82:81:a4:09:88:5b:37:82:93:8b:4f:dc:5f:23: 37:96:a1:fc:f3:94:f2:af:fb:11:14:a4:4e:02:4a:d0:d2:fe: 72:ef:9c:88:a3:0c:ed:ac:71:f5:b1:e8:26:f0:80:dc:43:79: 7d:e8:ab:0c:0b:36:4a:cf:6c:fa:a8:88:0d:38:c8:22:93:33: 5a:c4:04:6a:a2:25:5a:c8:14:ba:fa:34:77:2f:5d:81:03:41: 38:2f:9d:0f:f6:f5:d9:92:74:74:e2:a1:5b:65:32:55:46:4d: 82:9a:54:a8:55:ac:f9:3e:ef:7c:46:4e:bb:8d:71:03:3b:d4: 7a:6d:46:e3:b5:4d:a3:8c:b7:35:44:57:bb:7b:0a:c7:47:0e: 02:a5:ef:ab:dd:90:2e:f4:df:84:be:be:c2:31:31:80:b5:b9: 9f:c0:76:34:49:f4:3f:4a:28:48:8b:e9:be:4c:b1:8a:cf:c2: 26:56:27:79:e3:d0:22:b6:e0:db:b1:b5:fa:59:61:dc:ef:f2: 22:af:d8:83:82:74:86:00:89:6f:a2:78:4b:f4:b8:0b:89:91: 97:a4:12:8a -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUIGgWudm+otOxc3MDt4dJenCKxokwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgxODE1MDA0NloX DTI1MDkyMjIzNTk1OVowejFJMEcGA1UEBRNAYzgxMjFhMDg1ZTk5OGU4ZjI5YTgw ZThmYTFjZDZlNmYyYTFkOTY3OTE2YWIwYzMwNzhkNDM2YjNiN2EzZjFiNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw8hCaJYoF5C7oQrp7pqlxNPm+kN Q0ru+w+K/EEq+doSZxBzydLFHRfl8W7EzSmesebntecjF+l9hjjy5WII99s54THj IENQxgBQeHgfQSesWEn0XLi9EOGDv8VgfOQdx8gexz7PO2z57SW4doxs+JdVvY6O ZMA92RWipsQ4DCalWYZhdDUq6cBsiCbiQGFGa3+CHbnYSDQ1WMwbh2LgK7OBz2OM HKetaIa4NPpB7U/t73tY2EXCcDuSGt8cvGTKC6xYBmT3QCgLJX0k6IRvrcN7I60O Ad+0N+MsaC2MCJHmvmavbDWAt7XZg4/vY4/qGt//17EEe3oYc6RurThMuQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFCg2jUnLsNCNWaeWb+L0zskQL6piMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwYjdlMDA1LTZjMTktNGY5ZS05Y2JjLTQ0OGY0MDczZGQwYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9REMA0GCSqGSIb3DQEBCwUAA4IBAQCTLR0W+6jIALNSuZlSuahX hgpuxhEtATyJ7Pyx8kMRN7QbPfN0NG/ygoGkCYhbN4KTi0/cXyM3lqH885Tyr/sR FKROAkrQ0v5y75yIowztrHH1segm8IDcQ3l96KsMCzZKz2z6qIgNOMgikzNaxARq oiVayBS6+jR3L12BA0E4L50P9vXZknR04qFbZTJVRk2CmlSoVaz5Pu98Rk67jXED O9R6bUbjtU2jjLc1RFe7ewrHRw4Cpe+r3ZAu9N+Evr7CMTGAtbmfwHY0SfQ/SihI i+m+TLGKz8ImVid549AituDbsbX6WWHc7/Iir9iDgnSGAIlvonhL9LgLiZGXpBKK -----END CERTIFICATE-----Generated at Sat Aug 23 12:13:14 2025 by rpki-client