$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dbe44f29-2c7d-46ec-898d-c756e1c81196.roa File: dbe44f29-2c7d-46ec-898d-c756e1c81196.roa (raw, json) Hash identifier: ha15D39Mc/fdepphbZdakn010qrj29ZuDhv+tspN3BU= Subject key identifier: 45:47:66:06:EE:53:07:DF:75:87:B5:0B:3A:CD:CB:BA:C8:0C:13:BF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6E2F97CA026FD14A19C367CFC78CE6A76B4FE7ED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dbe44f29-2c7d-46ec-898d-c756e1c81196.roa Signing time: Fri 17 Oct 2025 00:02:20 +0000 ROA not before: Fri 17 Oct 2025 00:02:20 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2f:97:ca:02:6f:d1:4a:19:c3:67:cf:c7:8c:e6:a7:6b:4f:e7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 17 00:02:20 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=23a0273e74738488d115a41bd61cad19721657e99ace79bb7c90a57b720c3864, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3d:19:c9:1c:0e:b4:12:b5:f2:b9:94:45:b9: a9:64:90:c0:e3:c2:b4:b4:97:e7:2c:7f:d5:eb:19: 79:1a:7a:e2:00:ab:66:ca:7e:9b:f7:75:ac:23:ec: 19:5d:c0:db:4b:ec:e2:90:fc:b9:29:e0:31:a0:5f: 25:7d:11:cf:ac:3d:2c:b4:a9:80:9f:08:9b:8f:e3: d5:59:4e:55:1d:cf:0f:04:14:59:b6:d7:d0:c4:a8: 7a:5e:0d:04:da:4d:fc:61:cd:25:a8:69:ec:76:84: 4b:7c:d3:bd:00:98:97:69:cf:48:72:26:04:ea:3c: 2f:7e:a5:8b:3c:b4:9c:04:a1:f0:24:95:4b:b2:e1: b8:22:bb:df:2f:bf:03:78:f7:82:56:a9:eb:dd:cf: e9:e4:63:42:9e:6c:ec:13:9f:c1:78:50:e2:e4:7e: 13:1b:63:04:6a:ba:d6:14:34:16:b6:a3:7a:24:a8: 0b:f1:6e:76:ad:90:de:b2:42:39:2f:53:d3:fa:75: ef:07:cf:48:6a:42:fa:e0:63:cc:be:66:34:7b:e8: 9d:96:9f:eb:9c:5b:92:27:83:7f:10:71:7e:90:90: e4:92:db:24:27:49:58:78:17:7a:53:0d:8a:3a:bb: c1:c9:f4:7f:9b:5d:5a:9e:7e:58:2e:39:88:42:13: bc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:47:66:06:EE:53:07:DF:75:87:B5:0B:3A:CD:CB:BA:C8:0C:13:BF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dbe44f29-2c7d-46ec-898d-c756e1c81196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.52.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:49:e0:c3:eb:61:97:0a:fa:68:ba:42:e6:fe:3e:d9:ef:33: 69:b9:50:5d:4c:df:36:47:61:09:e4:90:d0:40:49:74:6f:c0: 82:0e:ad:e2:12:f7:ab:a8:70:47:05:09:ed:ad:63:0a:36:20: 5f:23:ba:d4:a1:16:28:9a:5e:f4:5c:c7:9a:41:13:2e:1f:94: 66:b8:a0:fd:35:bb:61:48:d7:06:9f:44:c2:dc:6f:ef:33:30: d1:9c:b0:5f:d3:a9:57:2d:a9:9f:85:d9:7c:1e:fd:31:d0:01: ec:96:61:69:f9:8e:c4:0a:a8:90:f4:c0:62:ab:a8:41:51:51: 6b:87:74:5e:16:8d:0a:55:25:4b:f2:8f:15:be:59:44:92:c1: 83:9e:b3:b2:e5:3b:13:95:e6:c1:14:58:c3:3c:ea:9b:a2:f6: 40:07:92:61:34:ce:63:c5:f4:cf:99:2f:ce:fb:0b:12:db:36: 96:65:72:84:5d:46:28:f5:57:22:90:c3:48:42:90:4b:59:68: a9:2b:bc:c7:85:39:1b:92:19:b6:b4:9a:57:64:93:de:38:0a: cd:4a:94:5f:b5:38:39:f7:74:8b:ef:d0:c5:6f:b0:f7:c5:50: 49:a1:73:90:42:b4:6e:a9:84:53:77:1e:99:f2:aa:cd:d7:25: 5f:0b:ee:0d -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUbi+XygJv0UoZw2fPx4zmp2tP5+0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNzAwMDIyMFoX DTI1MTEyMTIzNTk1OVowejFJMEcGA1UEBRNAMjNhMDI3M2U3NDczODQ4OGQxMTVh NDFiZDYxY2FkMTk3MjE2NTdlOTlhY2U3OWJiN2M5MGE1N2I3MjBjMzg2NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T0ZyRwOtBK18rmURbmpZJDA48K0 tJfnLH/V6xl5GnriAKtmyn6b93WsI+wZXcDbS+zikPy5KeAxoF8lfRHPrD0stKmA nwibj+PVWU5VHc8PBBRZttfQxKh6Xg0E2k38Yc0lqGnsdoRLfNO9AJiXac9IciYE 6jwvfqWLPLScBKHwJJVLsuG4IrvfL78DePeCVqnr3c/p5GNCnmzsE5/BeFDi5H4T G2MEarrWFDQWtqN6JKgL8W52rZDeskI5L1PT+nXvB89IakL64GPMvmY0e+idlp/r nFuSJ4N/EHF+kJDkktskJ0lYeBd6Uw2KOrvByfR/m11ann5YLjmIQhO8CQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFEVHZgbuUwffdYe1CzrNy7rIDBO/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RiZTQ0ZjI5LTJjN2QtNDZlYy04OThkLWM3NTZlMWM4MTE5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9g0MA0GCSqGSIb3DQEBCwUAA4IBAQCeSeDD62GXCvpoukLm/j7Z 7zNpuVBdTN82R2EJ5JDQQEl0b8CCDq3iEverqHBHBQntrWMKNiBfI7rUoRYoml70 XMeaQRMuH5RmuKD9NbthSNcGn0TC3G/vMzDRnLBf06lXLamfhdl8Hv0x0AHslmFp +Y7ECqiQ9MBiq6hBUVFrh3ReFo0KVSVL8o8VvllEksGDnrOy5TsTlebBFFjDPOqb ovZAB5JhNM5jxfTPmS/O+wsS2zaWZXKEXUYo9VcikMNIQpBLWWipK7zHhTkbkhm2 tJpXZJPeOArNSpRftTg593SL79DFb7D3xVBJoXOQQrRuqYRTdx6Z8qrN1yVfC+4N -----END CERTIFICATE-----Generated at Mon Oct 20 07:22:44 2025 by rpki-client