$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b315d37b-5fed-4398-8cbe-bcccf2224ffb.roa File: b315d37b-5fed-4398-8cbe-bcccf2224ffb.roa (raw, json) Hash identifier: UdWd3v+/N4pwTPuZJO0qPQtEelDpFcZg/CX0PJujYVI= Subject key identifier: C5:D7:E1:39:20:7C:EA:DF:A1:2A:03:69:62:12:2F:84:9B:DE:0B:76 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74A1A85B052957F77445963603D20AF62138196E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b315d37b-5fed-4398-8cbe-bcccf2224ffb.roa Signing time: Wed 06 Aug 2025 06:23:02 +0000 ROA not before: Wed 06 Aug 2025 06:23:02 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 43.214.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a1:a8:5b:05:29:57:f7:74:45:96:36:03:d2:0a:f6:21:38:19:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 6 06:23:02 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=abe6bfb0bd4c8afef3e611d2f7a7bab327c1c8f3ab4e51462762ec5923e3b616, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1c:27:d6:86:08:da:c0:c1:ed:b6:ba:d3:02: 61:69:79:3c:cb:5e:d2:bb:4c:e3:bf:92:a4:19:7d: 79:fb:a0:b0:0c:40:bb:6f:8b:5c:31:f1:6c:55:03: d5:28:1d:78:29:d3:b6:e4:06:73:f6:50:ab:4f:2b: e9:3f:c3:6d:93:41:48:5e:a6:14:6f:2c:18:99:f5: df:f9:c5:1d:8d:63:66:09:cf:dc:45:92:95:a2:92: 77:6e:02:38:66:d9:c2:36:84:97:32:ae:b7:61:22: 82:e3:db:63:b2:9e:e0:7c:12:a4:3c:a9:24:97:e4: 0d:28:0a:16:19:41:ad:e3:2b:6a:0c:8c:81:bc:d8: 02:e3:e9:f9:8d:d1:f7:c1:ad:17:c3:73:99:22:59: 8e:21:b1:52:a4:5b:6f:b6:67:21:6b:69:a4:4a:a1: 37:9c:61:df:c4:4e:5a:13:a8:f9:4a:74:40:c4:37: 77:27:af:75:bf:24:ba:e0:07:af:98:d7:8b:3e:d7: 1e:1c:1d:0a:e5:92:56:da:8b:61:04:a6:9f:b9:95: 4c:66:2e:cc:f7:eb:72:ec:19:27:8b:00:ad:da:cd: a7:7b:f2:43:e2:67:65:37:4d:13:00:20:d5:3d:c3: b0:b0:5f:7b:ed:39:40:88:98:b4:d2:17:ea:06:99: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D7:E1:39:20:7C:EA:DF:A1:2A:03:69:62:12:2F:84:9B:DE:0B:76 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b315d37b-5fed-4398-8cbe-bcccf2224ffb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.214.0.0/15 Signature Algorithm: sha256WithRSAEncryption 04:2f:34:39:bf:8a:76:d7:54:1f:b6:01:0e:9b:c7:38:73:c6: ab:69:eb:32:5e:ee:a6:04:1c:3c:b5:b7:65:df:84:8f:48:a4: 7d:38:f5:16:c2:27:07:62:b2:c6:ac:86:66:bc:4e:60:69:b2: 72:88:86:5a:46:eb:45:3c:27:89:da:8f:77:97:23:a5:49:06: 7a:ee:77:fd:23:a1:bc:31:4a:c3:c5:08:2c:74:61:e6:09:76: 64:29:f6:c8:21:2f:ec:18:ca:c6:f5:d0:00:2e:8b:f8:73:62: 18:43:ad:f0:d3:cb:76:f6:2d:24:e5:19:e6:0c:cd:65:18:08: 1b:ba:47:d4:47:f8:5e:c9:b5:7a:84:2c:ef:78:35:67:c9:a1: eb:5e:ca:e8:9d:6b:c8:bf:c0:54:84:e2:9a:f6:b8:a1:f8:47: ca:20:1f:10:fe:23:9e:9e:d6:18:4f:0e:25:78:3a:bb:d4:2e: 8f:0d:98:8b:35:8a:f9:60:4b:84:b0:76:2b:e7:bc:2e:f1:c5: b2:0b:94:9b:42:44:04:36:17:40:d0:87:6c:16:a4:e0:68:8d: 30:ac:1a:e5:cc:48:a9:b6:66:94:4c:f8:1f:7f:7a:9e:53:62: c0:d8:c2:b8:ab:c1:fe:93:21:b1:51:34:b2:89:d2:fe:1e:5a: 87:46:9b:a1 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUdKGoWwUpV/d0RZY2A9IK9iE4GW4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwNjA2MjMwMloX DTI1MDkxMDIzNTk1OVowejFJMEcGA1UEBRNAYWJlNmJmYjBiZDRjOGFmZWYzZTYx MWQyZjdhN2JhYjMyN2MxYzhmM2FiNGU1MTQ2Mjc2MmVjNTkyM2UzYjYxNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rwn1oYI2sDB7ba60wJhaXk8y17S u0zjv5KkGX15+6CwDEC7b4tcMfFsVQPVKB14KdO25AZz9lCrTyvpP8Ntk0FIXqYU bywYmfXf+cUdjWNmCc/cRZKVopJ3bgI4ZtnCNoSXMq63YSKC49tjsp7gfBKkPKkk l+QNKAoWGUGt4ytqDIyBvNgC4+n5jdH3wa0Xw3OZIlmOIbFSpFtvtmcha2mkSqE3 nGHfxE5aE6j5SnRAxDd3J691vyS64AevmNeLPtceHB0K5ZJW2othBKafuZVMZi7M 9+ty7BkniwCt2s2ne/JD4mdlN00TACDVPcOwsF977TlAiJi00hfqBpk+5wIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFMXX4TkgfOrfoSoDaWISL4Sb3gt2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzMTVkMzdiLTVmZWQtNDM5OC04Y2JlLWJjY2NmMjIyNGZmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9YwDQYJKoZIhvcNAQELBQADggEBAAQvNDm/inbXVB+2AQ6bxzhz xqtp6zJe7qYEHDy1t2XfhI9IpH049RbCJwdissashma8TmBpsnKIhlpG60U8J4na j3eXI6VJBnrud/0jobwxSsPFCCx0YeYJdmQp9sghL+wYysb10AAui/hzYhhDrfDT y3b2LSTlGeYMzWUYCBu6R9RH+F7JtXqELO94NWfJoeteyuida8i/wFSE4pr2uKH4 R8ogHxD+I56e1hhPDiV4OrvULo8NmIs1ivlgS4SwdivnvC7xxbILlJtCRAQ2F0DQ h2wWpOBojTCsGuXMSKm2ZpRM+B9/ep5TYsDYwrirwf6TIbFRNLKJ0v4eWodGm6E= -----END CERTIFICATE-----Generated at Sat Aug 23 08:08:39 2025 by rpki-client