$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa File: e5ffe65e-7287-4628-8759-7c141866ee12.roa (raw, json) Hash identifier: W6Nd2FLuKDV9QnaU/n8fYV+MXzEEcIOrr0vIWb82Llo= Subject key identifier: 5F:28:CA:5D:37:43:56:96:08:02:BE:E0:EB:71:D5:B1:21:B4:61:D1 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 68AF68A5EA29139669A86BA864211C57EEB69E66 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa Signing time: Tue 06 May 2025 00:00:02 +0000 ROA not before: Tue 06 May 2025 00:00:02 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:af:68:a5:ea:29:13:96:69:a8:6b:a8:64:21:1c:57:ee:b6:9e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: May 6 00:00:02 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=2593c92efc88008cb10a751afabe916751cae033e6a8ebbb8871409001cb837a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5f:79:21:e3:e9:2f:21:f4:de:8a:32:5c:25: 08:66:f5:f0:2f:8b:7b:a4:4c:23:c7:ee:c6:b4:30: 44:b9:73:a1:92:33:35:fb:d6:8d:d3:f0:64:72:bb: 50:8f:1a:53:89:bd:1a:c6:27:ab:0c:cc:df:8d:0c: 23:3d:1d:39:3a:46:11:db:ad:c5:28:b3:bb:bf:52: 44:eb:d0:77:f9:e3:97:8c:ac:35:ae:99:44:92:8b: 6d:c7:52:11:bd:64:42:cc:c7:3e:37:05:0d:16:51: aa:07:15:b0:00:1e:d4:28:9b:eb:3a:36:a5:e2:f7: 8e:25:75:d3:eb:f6:58:6c:cd:e2:eb:28:72:41:4f: ca:d1:f1:ee:20:b2:dd:f4:ab:37:b1:6f:28:7f:10: f3:00:f5:65:c9:53:04:fc:a9:02:6c:51:56:50:ef: 34:ff:14:4d:c6:62:6b:b7:4b:ff:cd:b9:19:10:32: d3:ec:70:d6:32:8e:22:0e:d8:f1:88:3d:dd:9b:53: 1b:0a:56:9c:03:52:37:69:95:c0:00:03:e3:00:60: f7:d0:e8:62:7e:90:e2:d4:b2:4c:07:40:9d:19:ac: 0e:48:fd:b3:27:a2:ea:d2:60:f0:74:9f:29:d4:ac: f7:86:d4:15:e7:36:16:9d:8e:ea:b8:a9:e0:b0:ba: 43:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:28:CA:5D:37:43:56:96:08:02:BE:E0:EB:71:D5:B1:21:B4:61:D1 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption 56:8e:4b:2f:14:45:42:b1:bd:3b:ac:ee:6d:e8:2a:f6:fd:a4: c4:44:96:97:56:58:0e:01:af:74:c1:05:46:32:45:76:05:b2: 32:62:f7:33:d4:22:f7:e6:80:5c:c2:56:3a:af:ff:5f:2a:ba: 6d:31:ab:51:f7:24:63:80:88:69:5c:68:38:46:09:66:f5:0d: 57:64:f1:00:cc:cc:ea:46:c7:c5:89:3d:4a:ee:50:23:73:88: 28:15:91:25:13:ba:d0:c7:6d:41:a5:e2:5e:53:05:00:8e:85: be:88:4d:9a:c1:f8:1a:73:ae:74:af:c6:fb:00:fc:60:58:85: d8:f4:e9:28:dc:73:c9:8d:94:f1:9f:b0:0f:70:3e:96:a6:e5: 91:99:83:11:da:61:6c:0c:e7:f8:e3:6f:c5:74:50:df:83:a0: 23:be:da:49:a5:c0:7e:90:8b:f8:28:64:22:ec:3d:ca:3f:63: fd:72:7a:0a:5d:1c:ee:17:cd:da:a3:9e:19:f8:a2:37:e7:91: 23:c2:2a:4f:b0:a1:7a:36:8f:f3:5c:26:90:54:2f:59:de:16: 2f:68:65:af:5e:19:68:1b:8c:94:c1:7a:6b:b5:91:d6:96:51: ad:08:2a:2a:ad:4a:79:fe:c2:d7:fd:37:ab:c1:0b:f6:b0:68: 80:a3:e9:1a -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUaK9opeopE5ZpqGuoZCEcV+62nmYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MDUwNjAwMDAwMloX DTI1MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAMjU5M2M5MmVmYzg4MDA4Y2IxMGE3 NTFhZmFiZTkxNjc1MWNhZTAzM2U2YThlYmJiODg3MTQwOTAwMWNiODM3YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V95IePpLyH03ooyXCUIZvXwL4t7 pEwjx+7GtDBEuXOhkjM1+9aN0/BkcrtQjxpTib0axierDMzfjQwjPR05OkYR263F KLO7v1JE69B3+eOXjKw1rplEkottx1IRvWRCzMc+NwUNFlGqBxWwAB7UKJvrOjal 4veOJXXT6/ZYbM3i6yhyQU/K0fHuILLd9Ks3sW8ofxDzAPVlyVME/KkCbFFWUO80 /xRNxmJrt0v/zbkZEDLT7HDWMo4iDtjxiD3dm1MbClacA1I3aZXAAAPjAGD30Ohi fpDi1LJMB0CdGawOSP2zJ6Lq0mDwdJ8p1Kz3htQV5zYWnY7quKngsLpDBQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFF8oyl03Q1aWCAK+4Otx1bEhtGHRMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1ZmZlNjVlLTcyODctNDYyOC04NzU5LTdjMTQxODY2ZWUxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAn/gwDQYJKoZIhvcNAQELBQADggEBAFaOSy8URUKxvTus7m3oKvb9 pMRElpdWWA4Br3TBBUYyRXYFsjJi9zPUIvfmgFzCVjqv/18qum0xq1H3JGOAiGlc aDhGCWb1DVdk8QDMzOpGx8WJPUruUCNziCgVkSUTutDHbUGl4l5TBQCOhb6ITZrB +BpzrnSvxvsA/GBYhdj06Sjcc8mNlPGfsA9wPpam5ZGZgxHaYWwM5/jjb8V0UN+D oCO+2kmlwH6Qi/goZCLsPco/Y/1yegpdHO4Xzdqjnhn4ojfnkSPCKk+woXo2j/Nc JpBUL1neFi9oZa9eGWgbjJTBemu1kdaWUa0IKiqtSnn+wtf9N6vBC/awaICj6Ro= -----END CERTIFICATE-----Generated at Sat May 10 16:44:53 2025 by rpki-client