$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa File: 245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa (raw, json) Hash identifier: bP7jHLVdYP5MwnCu+PA+upz5tkaqSzGp/AZKDxmcQO4= Subject key identifier: 5B:6D:2D:B0:D4:AD:60:2E:01:12:04:8F:37:54:08:86:55:05:60:57 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 78361717736823BBEE90D4460DE6416E0497C83D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa Signing time: Wed 15 Oct 2025 00:50:14 +0000 ROA not before: Wed 15 Oct 2025 00:50:14 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.249.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:36:17:17:73:68:23:bb:ee:90:d4:46:0d:e6:41:6e:04:97:c8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:50:14 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=1b71a2d67c07edfd66dbf1177573218e6ce30c270db7ed88781abaf125fd2e41, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:f8:2c:44:dd:fc:67:3f:83:a6:98:7e:1b: 90:33:33:7a:66:46:a2:c0:be:7c:e8:9d:16:84:6f: b4:16:2a:31:a0:69:7b:ea:1e:45:e5:f3:41:1d:9c: 13:85:62:1f:3d:c3:78:e0:95:ec:01:32:6f:a6:3b: 2d:58:fd:bc:be:13:ad:a0:37:e9:8c:f2:1b:08:d1: 53:70:ce:89:c1:af:50:47:06:28:fc:5f:e7:64:39: 63:2f:51:f7:34:2e:28:72:c2:74:73:be:00:4f:8f: 8f:7f:ef:53:58:a0:ff:42:47:55:6e:0f:92:31:75: 91:27:c9:c0:61:dc:47:a8:30:c6:17:5e:4c:ce:14: ed:74:5d:79:42:ea:52:57:94:e8:b2:38:5d:ab:b5: 06:b6:af:d7:c3:63:d9:a3:93:21:19:df:6e:90:0b: 03:d6:3e:79:1d:8c:ae:ef:c1:a0:43:c1:0c:da:e4: aa:20:83:d1:e2:33:16:3e:59:92:48:33:87:65:b4: 17:9d:63:52:a0:94:27:46:eb:9c:4c:e9:a6:61:9f: f2:b8:3a:7a:75:6e:9f:90:41:fa:63:7d:3c:a3:a6: 03:25:4a:9f:26:63:62:72:e3:1e:33:01:8a:6f:28: 97:f6:fe:77:c2:ce:90:a4:1d:46:95:f0:bc:03:ad: d7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6D:2D:B0:D4:AD:60:2E:01:12:04:8F:37:54:08:86:55:05:60:57 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.44.0/22 Signature Algorithm: sha256WithRSAEncryption c3:fa:53:5f:a6:4a:e1:05:e8:90:de:dd:05:fb:fe:29:af:60: 8e:3f:34:8a:26:dd:5c:69:31:0a:af:80:fb:53:4a:78:6d:96: 84:4f:91:5b:f7:a2:e8:5a:19:ea:6a:74:ef:7c:92:de:20:c2: 8d:97:3b:9f:7c:4c:f4:36:f4:d0:b9:8f:b9:c8:b9:c9:15:f1: 92:20:e8:70:92:ac:9c:a2:21:e0:1d:fd:a4:d2:fb:5e:d2:70: 04:41:fd:4e:8f:18:ae:51:22:08:c7:50:69:9a:c3:f6:34:a2: 6a:ec:b4:a7:a6:d2:d5:d5:a8:7d:a1:6a:fa:e8:08:27:9d:78: 55:95:02:f2:fe:29:e3:62:32:43:d2:be:c5:02:dc:f0:cb:d0: f9:77:be:f9:73:75:7f:17:e0:c6:c7:de:ae:9b:f1:ea:6e:b2: 00:f5:29:2a:91:c9:92:28:94:b6:29:d2:bc:91:bc:b9:3a:52: 8e:80:ee:d1:4d:86:71:16:8f:08:22:e4:23:c5:a3:7f:5f:16: b2:80:0c:01:c2:8a:34:60:98:6c:1b:0c:46:ae:18:84:21:f4: bd:ba:d0:f3:6b:44:c3:7a:ba:90:0d:54:e2:ad:e7:43:86:a3: 47:89:eb:36:7b:ef:ae:54:df:2a:b5:b2:3a:eb:27:0d:35:d9: d8:03:4a:8e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUeDYXF3NoI7vukNRGDeZBbgSXyD0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNTAxNFoX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNAMWI3MWEyZDY3YzA3ZWRmZDY2ZGJm MTE3NzU3MzIxOGU2Y2UzMGMyNzBkYjdlZDg4NzgxYWJhZjEyNWZkMmU0MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT/4LETd/Gc/g6aYfhuQMzN6Zkai wL586J0WhG+0FioxoGl76h5F5fNBHZwThWIfPcN44JXsATJvpjstWP28vhOtoDfp jPIbCNFTcM6Jwa9QRwYo/F/nZDljL1H3NC4ocsJ0c74AT4+Pf+9TWKD/QkdVbg+S MXWRJ8nAYdxHqDDGF15MzhTtdF15QupSV5Tosjhdq7UGtq/Xw2PZo5MhGd9ukAsD 1j55HYyu78GgQ8EM2uSqIIPR4jMWPlmSSDOHZbQXnWNSoJQnRuucTOmmYZ/yuDp6 dW6fkEH6Y308o6YDJUqfJmNicuMeMwGKbyiX9v53ws6QpB1GlfC8A63XbQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFFttLbDUrWAuARIEjzdUCIZVBWBXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0NWE2NWJiLTU5MWMtNDdiYy04YThjLTZjODZiMDkzZmQ4Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/ksMA0GCSqGSIb3DQEBCwUAA4IBAQDD+lNfpkrhBeiQ3t0F+/4p r2COPzSKJt1caTEKr4D7U0p4bZaET5Fb96LoWhnqanTvfJLeIMKNlzuffEz0NvTQ uY+5yLnJFfGSIOhwkqycoiHgHf2k0vte0nAEQf1OjxiuUSIIx1BpmsP2NKJq7LSn ptLV1ah9oWr66AgnnXhVlQLy/injYjJD0r7FAtzwy9D5d775c3V/F+DGx96um/Hq brIA9SkqkcmSKJS2KdK8kby5OlKOgO7RTYZxFo8IIuQjxaN/XxaygAwBwoo0YJhs GwxGrhiEIfS9utDza0TDerqQDVTiredDhqNHies2e++uVN8qtbI66ycNNdnYA0qO -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:28 2025 by rpki-client