$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa File: e120613f-4f08-405b-bea7-3ea01da9b0df.roa (raw, json) Hash identifier: vIoETg8+D8IMY7GUFUdig8wHPXpHpx3OOZ3caHIkj04= Subject key identifier: 51:31:F5:3C:0C:1C:7D:CA:44:3E:94:25:5B:21:1A:A3:85:47:F1:97 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 725ED12ED0F24DEEBEA021F699E6181C1FC768EE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa Signing time: Fri 17 Oct 2025 00:02:17 +0000 ROA not before: Fri 17 Oct 2025 00:02:17 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5e:d1:2e:d0:f2:4d:ee:be:a0:21:f6:99:e6:18:1c:1f:c7:68:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 17 00:02:17 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=3efeaa8e8f648562f10cf5094614b12793f92cb99db03cdd2a4965a5821aaae6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:d7:d5:a6:67:b4:18:83:74:67:0c:79:85: e7:7f:a3:35:c1:0e:a4:53:b6:01:b0:a1:e4:1b:a6: 7b:de:33:e8:c4:90:d8:20:33:35:0a:2a:0a:e0:82: 1e:4d:3c:cb:9a:bb:49:79:65:06:b7:e4:0c:eb:ea: f6:b9:0a:19:45:1d:a4:7b:3b:f3:78:d1:e0:d2:c2: c8:f1:0b:33:46:2b:52:a8:f7:2d:0f:1e:bd:ed:c5: 0c:e9:82:3c:40:a5:2d:94:64:33:e3:33:f8:a8:52: 39:a7:7a:26:1d:59:fd:d5:90:bb:61:b0:cf:56:60: 58:16:7b:1f:56:a3:93:54:e8:39:41:57:5f:c1:cc: 2b:45:83:1a:5d:78:a3:79:17:70:82:40:93:2a:ae: e6:f1:44:9e:71:16:f3:e9:43:fe:74:57:6a:50:b4: e7:fc:ef:a2:a2:08:51:d7:bb:0d:dc:85:ef:d4:41: 3e:20:77:ba:f0:2a:b5:a0:68:d1:16:64:2d:89:3c: 81:64:f0:4f:f4:a1:4b:ff:93:b8:9e:f0:58:4c:d4: c4:ec:4e:60:5a:ed:fb:15:0c:79:34:d4:df:f5:1a: 79:a7:9d:0c:57:51:b8:95:82:d3:de:1d:80:10:7f: 9a:88:25:f9:10:e6:47:59:e8:d1:d6:cb:04:b4:5c: 23:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:31:F5:3C:0C:1C:7D:CA:44:3E:94:25:5B:21:1A:A3:85:47:F1:97 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e120613f-4f08-405b-bea7-3ea01da9b0df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.64.0/24 Signature Algorithm: sha256WithRSAEncryption c6:eb:71:c4:8d:16:b9:fa:07:b3:82:43:87:21:14:47:33:92: 73:bd:ba:1f:1d:e2:99:53:08:cb:0c:09:aa:71:71:d6:49:e3: e8:d2:be:a2:df:21:97:da:82:8b:b8:78:3d:a2:62:62:f3:47: 95:aa:40:c2:9f:5a:35:21:08:93:3a:20:c2:d8:8e:e9:86:c9: 65:26:e4:92:61:02:21:4a:50:2e:94:1f:a0:c9:b8:52:fc:83: b0:3b:6d:96:7c:29:1d:c2:a8:93:87:2d:cc:44:c6:86:e4:d7: 84:51:cb:28:7f:34:cf:9d:9b:14:e6:eb:58:c8:73:f2:75:b3: 05:21:24:a4:3c:81:7b:1e:46:89:4c:a9:59:bc:09:f1:3a:0d: c8:8c:c3:95:6b:f4:c8:2d:e5:66:f1:5f:6a:6b:ce:fd:9f:aa: 64:38:34:b9:33:92:2f:71:11:19:fa:0e:56:a7:f9:1f:c3:f7: 94:97:7b:94:62:3f:3e:09:31:bb:dc:f6:00:36:c6:ad:21:7d: 31:53:b4:00:a0:ec:50:cb:2c:31:16:b6:3a:40:17:a2:84:cc: c3:33:12:97:e3:44:76:64:31:2c:99:ec:34:fd:f3:12:1e:98: 40:d3:c4:55:80:ac:5d:08:14:b6:6a:d4:6e:5b:76:98:75:4d: c9:25:d2:2c -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUcl7RLtDyTe6+oCH2meYYHB/HaO4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNzAwMDIxN1oX DTI1MTEyMTIzNTk1OVowejFJMEcGA1UEBRNAM2VmZWFhOGU4ZjY0ODU2MmYxMGNm NTA5NDYxNGIxMjc5M2Y5MmNiOTlkYjAzY2RkMmE0OTY1YTU4MjFhYWFlNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt7X1aZntBiDdGcMeYXnf6M1wQ6k U7YBsKHkG6Z73jPoxJDYIDM1CioK4IIeTTzLmrtJeWUGt+QM6+r2uQoZRR2kezvz eNHg0sLI8QszRitSqPctDx697cUM6YI8QKUtlGQz4zP4qFI5p3omHVn91ZC7YbDP VmBYFnsfVqOTVOg5QVdfwcwrRYMaXXijeRdwgkCTKq7m8USecRbz6UP+dFdqULTn /O+ioghR17sN3IXv1EE+IHe68Cq1oGjRFmQtiTyBZPBP9KFL/5O4nvBYTNTE7E5g Wu37FQx5NNTf9Rp5p50MV1G4lYLT3h2AEH+aiCX5EOZHWejR1ssEtFwjxQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFFEx9TwMHH3KRD6UJVshGqOFR/GXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxMjA2MTNmLTRmMDgtNDA1Yi1iZWE3LTNlYTAxZGE5YjBkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9hAMA0GCSqGSIb3DQEBCwUAA4IBAQDG63HEjRa5+gezgkOHIRRH M5JzvbofHeKZUwjLDAmqcXHWSePo0r6i3yGX2oKLuHg9omJi80eVqkDCn1o1IQiT OiDC2I7phsllJuSSYQIhSlAulB+gybhS/IOwO22WfCkdwqiThy3MRMaG5NeEUcso fzTPnZsU5utYyHPydbMFISSkPIF7HkaJTKlZvAnxOg3IjMOVa/TILeVm8V9qa879 n6pkODS5M5IvcREZ+g5Wp/kfw/eUl3uUYj8+CTG73PYANsatIX0xU7QAoOxQyywx FrY6QBeihMzDMxKX40R2ZDEsmew0/fMSHphA08RVgKxdCBS2atRuW3aYdU3JJdIs -----END CERTIFICATE-----Generated at Mon Oct 20 09:50:04 2025 by rpki-client