$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a3607965-9901-471c-8ed4-712d48b362f1.roa File: a3607965-9901-471c-8ed4-712d48b362f1.roa (raw, json) Hash identifier: ncOFnep+1UMMW+V94kLusRN4O1q4zyWW10PXjjUi69M= Subject key identifier: 28:EB:65:52:92:AA:1E:A1:72:C2:64:36:6F:51:BE:7A:8F:92:26:A5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 725DB6C1FAD44DE6B92CBFC34DEA914304979F22 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a3607965-9901-471c-8ed4-712d48b362f1.roa Signing time: Mon 04 Aug 2025 15:00:32 +0000 ROA not before: Mon 04 Aug 2025 15:00:32 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 00:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5d:b6:c1:fa:d4:4d:e6:b9:2c:bf:c3:4d:ea:91:43:04:97:9f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Aug 4 15:00:32 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=cd8534c3fcf164d77051e08e9449ac3050480621a112ac06710bb94603576769, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:83:f4:e9:aa:94:ae:d8:9f:a3:67:2a:1d:f4: b7:e8:45:61:9c:ae:8f:8f:a6:b8:c2:8e:fc:d2:f1: 84:d7:7c:a7:04:56:1a:c5:41:b0:0a:64:d9:98:84: f3:10:69:54:79:6b:26:c3:12:4a:57:6a:aa:7b:10: a6:98:4a:fc:c7:d9:22:fc:5f:19:3f:36:18:68:be: 17:24:0d:67:aa:8c:cf:79:43:3a:62:7f:b9:d8:94: 4a:36:36:9a:01:3d:c5:fb:1e:f9:8d:3d:90:b4:68: 08:91:7d:ca:b8:13:d6:81:61:56:8d:8e:44:28:d3: 0b:80:dd:e1:92:f3:b4:f0:f1:41:bb:66:cc:fa:68: ef:bb:3d:e0:8f:a3:82:43:83:81:1e:49:e5:67:5a: 9e:9d:0e:d3:42:ca:dc:61:b2:24:18:a8:02:d3:42: 83:5a:5c:83:33:e5:7a:15:89:6c:84:06:25:70:b7: ca:85:20:ca:a3:9c:93:68:0b:3b:12:9e:04:cb:6a: 07:79:80:59:fd:46:3c:36:70:aa:ea:f8:11:18:11: 1b:7e:3c:62:e7:a8:13:5b:df:7b:26:1d:57:37:ed: cd:36:56:09:f7:ad:24:29:fd:49:77:cb:f3:9a:37: 64:f2:bf:d9:fa:73:c9:da:db:48:b9:d8:35:d6:4a: ed:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EB:65:52:92:AA:1E:A1:72:C2:64:36:6F:51:BE:7A:8F:92:26:A5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a3607965-9901-471c-8ed4-712d48b362f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.55.0/24 Signature Algorithm: sha256WithRSAEncryption 77:cc:c4:9a:be:88:f3:07:76:c1:70:74:b8:75:72:d1:a9:ef: 4a:a4:da:f2:46:79:b2:3e:ae:32:a0:ee:b5:ef:e5:bd:29:4e: 25:59:42:04:a0:76:e1:79:5e:be:5a:bd:4e:0f:2f:a7:50:6f: d1:88:94:4a:27:cd:25:be:40:b0:70:99:11:52:4b:11:ab:59: 7f:0d:e2:cc:1c:17:59:a3:f9:8b:01:2f:bd:fb:af:7f:81:a7: 04:5b:dc:bd:5e:f4:0b:f9:87:6e:d5:c6:ba:f3:38:c7:f9:e2: 95:ea:6b:22:4f:dc:51:d6:1b:7b:e5:d8:64:22:81:ad:5d:96: 21:81:6c:0c:35:02:d7:aa:d4:2d:fe:09:a2:e8:cc:f0:e9:a9: 57:47:83:17:96:1a:02:b0:15:80:9f:ec:77:35:d1:cc:db:75: 6d:9d:9f:a3:c1:41:f1:bf:e6:70:26:8c:1f:0f:ed:97:90:1a: d2:93:c8:10:d5:98:ee:19:29:cc:db:58:ea:7b:38:2b:9a:3c: de:2e:2c:13:69:fe:34:31:5b:9e:e0:74:c1:b0:9d:d2:8d:08: 7c:4d:03:6a:23:54:31:f9:dc:79:23:52:e8:f3:6b:f0:17:f2: 67:82:a2:e7:85:fd:48:d4:9d:81:87:ba:23:7f:1f:22:5e:df: 4b:12:5f:ec -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUcl22wfrUTea5LL/DTeqRQwSXnyIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDgwNDE1MDAzMloX DTI1MDkwODIzNTk1OVowejFJMEcGA1UEBRNAY2Q4NTM0YzNmY2YxNjRkNzcwNTFl MDhlOTQ0OWFjMzA1MDQ4MDYyMWExMTJhYzA2NzEwYmI5NDYwMzU3Njc2OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIP06aqUrtifo2cqHfS36EVhnK6P j6a4wo780vGE13ynBFYaxUGwCmTZmITzEGlUeWsmwxJKV2qqexCmmEr8x9ki/F8Z PzYYaL4XJA1nqozPeUM6Yn+52JRKNjaaAT3F+x75jT2QtGgIkX3KuBPWgWFWjY5E KNMLgN3hkvO08PFBu2bM+mjvuz3gj6OCQ4OBHknlZ1qenQ7TQsrcYbIkGKgC00KD WlyDM+V6FYlshAYlcLfKhSDKo5yTaAs7Ep4Ey2oHeYBZ/UY8NnCq6vgRGBEbfjxi 56gTW997Jh1XN+3NNlYJ960kKf1Jd8vzmjdk8r/Z+nPJ2ttIudg11krtPwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFCjrZVKSqh6hcsJkNm9RvnqPkialMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EzNjA3OTY1LTk5MDEtNDcxYy04ZWQ0LTcxMmQ0OGIzNjJmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9A3MA0GCSqGSIb3DQEBCwUAA4IBAQB3zMSavojzB3bBcHS4dXLR qe9KpNryRnmyPq4yoO617+W9KU4lWUIEoHbheV6+Wr1ODy+nUG/RiJRKJ80lvkCw cJkRUksRq1l/DeLMHBdZo/mLAS+9+69/gacEW9y9XvQL+Ydu1ca68zjH+eKV6msi T9xR1ht75dhkIoGtXZYhgWwMNQLXqtQt/gmi6Mzw6alXR4MXlhoCsBWAn+x3NdHM 23VtnZ+jwUHxv+ZwJowfD+2XkBrSk8gQ1ZjuGSnM21jqezgrmjzeLiwTaf40MVue 4HTBsJ3SjQh8TQNqI1Qx+dx5I1Lo82vwF/JngqLnhf1I1J2Bh7ojfx8iXt9LEl/s -----END CERTIFICATE-----Generated at Sat Aug 23 08:08:49 2025 by rpki-client