$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db0824bb-71b2-4f6e-b8ed-c10ee3d427ad.roa File: db0824bb-71b2-4f6e-b8ed-c10ee3d427ad.roa (raw, json) Hash identifier: e4xHK3CY+0wqA76G8/FkYCYeuQsyi/t/DgygIgFnr/I= Subject key identifier: D4:46:3D:97:B7:84:4E:A6:9A:C1:1A:72:6F:8B:07:85:DB:C3:F0:AC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4D5A212FA36481D1D813A264F758D2CA9FE39CA2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db0824bb-71b2-4f6e-b8ed-c10ee3d427ad.roa Signing time: Fri 17 Oct 2025 00:02:16 +0000 ROA not before: Fri 17 Oct 2025 00:02:16 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5a:21:2f:a3:64:81:d1:d8:13:a2:64:f7:58:d2:ca:9f:e3:9c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 17 00:02:16 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=d6a1130a0689103d5c7d5ccb9dba928703b4e3b35b1c96249080aa7b047eb8a1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:1d:bd:c6:db:b9:ab:7f:d1:b1:34:d3:c1: 7b:d0:77:a2:8a:4e:a2:5a:4a:94:f5:f5:91:50:08: 60:a5:d7:4c:e6:1d:9c:7d:a8:bf:90:74:eb:c7:e5: 24:af:08:11:f7:2e:19:11:b2:83:1c:66:7f:84:fe: 43:6a:6a:d5:0e:3d:6d:6f:e3:dc:b4:04:49:68:43: 64:50:5b:1d:ac:fd:7b:45:23:52:6a:fb:9f:56:ef: 8c:f1:da:e5:60:5a:be:4c:f9:7c:4a:4b:33:9c:0a: da:2f:f3:bf:c7:d2:b3:88:e8:9f:3d:8e:39:7e:b7: d7:e7:0d:ad:60:a2:cf:f1:87:42:04:ed:84:59:9d: 7a:df:80:8b:24:24:c1:bb:02:8b:0a:62:b8:79:2a: 21:c5:94:f9:8a:24:5a:61:b7:a7:3c:39:18:59:a2: 5f:2a:eb:5a:98:a9:ad:44:ca:b4:33:f6:86:97:15: 8f:57:c0:68:15:47:5e:d2:48:d0:22:48:ba:ed:0a: 60:1a:38:87:30:24:d0:9c:55:ae:b2:0b:53:33:9a: 6a:c7:12:04:5f:c7:68:69:a2:94:55:bb:62:3f:8e: 5c:32:7d:42:5b:60:92:e6:0a:de:06:9b:51:25:75: 1a:3c:2a:64:1d:4a:94:a8:0d:ec:86:98:f6:ea:f1: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:46:3D:97:B7:84:4E:A6:9A:C1:1A:72:6F:8B:07:85:DB:C3:F0:AC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/db0824bb-71b2-4f6e-b8ed-c10ee3d427ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.63.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:a5:86:f5:b3:45:8a:d0:4f:89:b8:65:e5:1c:01:fb:58:dd: 65:c3:69:0f:ce:3f:a6:6a:91:f4:0a:4f:4b:a5:dc:79:b0:4e: b5:42:7b:0f:3e:11:bf:c9:3b:15:79:6d:c8:58:72:e8:e0:69: a0:e7:6d:90:f3:72:42:ba:9c:bd:37:c8:19:cc:3a:61:e8:15: 47:90:77:a2:42:9b:c0:47:b5:5e:d9:f1:af:8b:78:94:7e:be: 25:cf:86:b5:7e:da:07:29:0e:32:10:b9:26:df:ab:5e:13:f9: 60:3f:47:a6:2f:fd:44:b1:89:77:e8:ca:73:a0:33:be:fd:55: ab:2a:95:e0:26:a1:00:28:f2:06:86:c0:eb:35:21:7b:dc:f9: 94:62:61:dc:eb:8b:2e:31:4b:df:c9:c5:55:e4:2c:9f:4d:ad: 46:96:7f:76:c3:99:c8:47:90:6a:9b:31:29:1c:05:df:10:66: 23:39:1d:c9:c3:28:3d:5f:25:d4:da:74:ef:eb:25:95:aa:20: 72:80:f0:45:c7:e9:95:35:ad:94:c8:92:b8:3b:62:5a:f8:cb: 5f:62:91:df:50:e3:76:41:b7:c0:9f:9e:06:0c:d4:e0:45:8a: 20:da:70:5a:b0:6c:a4:b4:12:57:e2:2e:67:20:f2:3e:53:bd: f8:36:83:d2 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUTVohL6NkgdHYE6Jk91jSyp/jnKIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNzAwMDIxNloX DTI1MTEyMTIzNTk1OVowejFJMEcGA1UEBRNAZDZhMTEzMGEwNjg5MTAzZDVjN2Q1 Y2NiOWRiYTkyODcwM2I0ZTNiMzViMWM5NjI0OTA4MGFhN2IwNDdlYjhhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts0dvcbbuat/0bE008F70Heiik6i WkqU9fWRUAhgpddM5h2cfai/kHTrx+UkrwgR9y4ZEbKDHGZ/hP5DamrVDj1tb+Pc tARJaENkUFsdrP17RSNSavufVu+M8drlYFq+TPl8SksznAraL/O/x9KziOifPY45 frfX5w2tYKLP8YdCBO2EWZ1634CLJCTBuwKLCmK4eSohxZT5iiRaYbenPDkYWaJf KutamKmtRMq0M/aGlxWPV8BoFUde0kjQIki67QpgGjiHMCTQnFWusgtTM5pqxxIE X8doaaKUVbtiP45cMn1CW2CS5greBptRJXUaPCpkHUqUqA3shpj26vHAMQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNRGPZe3hE6mmsEacm+LB4Xbw/CsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RiMDgyNGJiLTcxYjItNGY2ZS1iOGVkLWMxMGVlM2Q0MjdhZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9g/MA0GCSqGSIb3DQEBCwUAA4IBAQCMpYb1s0WK0E+JuGXlHAH7 WN1lw2kPzj+mapH0Ck9Lpdx5sE61QnsPPhG/yTsVeW3IWHLo4Gmg522Q83JCupy9 N8gZzDph6BVHkHeiQpvAR7Ve2fGvi3iUfr4lz4a1ftoHKQ4yELkm36teE/lgP0em L/1EsYl36MpzoDO+/VWrKpXgJqEAKPIGhsDrNSF73PmUYmHc64suMUvfycVV5Cyf Ta1Gln92w5nIR5BqmzEpHAXfEGYjOR3Jwyg9XyXU2nTv6yWVqiBygPBFx+mVNa2U yJK4O2Ja+MtfYpHfUON2QbfAn54GDNTgRYog2nBasGyktBJX4i5nIPI+U734NoPS -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:18 2025 by rpki-client