$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa File: e5ffe65e-7287-4628-8759-7c141866ee12.roa (raw, json) Hash identifier: RRxrTylUoJkKAEjxwP+vK1kttbtccN3yY6tn3ob0ZHQ= Subject key identifier: 30:42:E3:B1:1A:B5:BF:CE:95:8A:CB:91:04:84:AF:B0:28:CF:38:64 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 1209C38FEE5A3397611E663D173940D78CE484FE Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa Signing time: Sat 11 Oct 2025 00:00:32 +0000 ROA not before: Sat 11 Oct 2025 00:00:32 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:09:c3:8f:ee:5a:33:97:61:1e:66:3d:17:39:40:d7:8c:e4:84:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Oct 11 00:00:32 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=9091e75d3aaa5e152491156addc9e3d443e04e64486bda0d11309a05ad1ab98f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:d1:7d:e3:2f:ae:84:fb:99:cc:e5:44:ee: a6:a4:0d:17:ce:bf:e4:1e:ff:0e:c2:f2:57:0b:c9: 4e:ec:05:23:c2:59:ff:48:62:e5:10:ec:49:1c:c9: 47:c5:89:43:fa:8c:fb:17:d7:32:2f:9d:c1:14:54: 31:a5:f3:21:79:7f:d0:1c:a2:c9:79:87:06:d4:46: b6:ed:9c:bf:f9:0d:9b:25:66:43:e8:87:3c:ca:b9: 89:4b:6a:d5:cf:ef:92:8a:f2:57:95:e1:22:25:2f: 84:f9:a9:30:df:b0:cc:86:69:6f:e9:76:bf:4c:76: dd:72:c2:f1:d1:d6:4e:25:70:16:3d:3e:4f:d4:a0: 3d:f6:30:20:eb:1d:88:aa:03:43:a4:cd:54:da:6a: a0:87:5e:b9:f2:7d:a1:59:05:2f:63:46:03:a8:03: 72:e9:7c:19:d8:a6:d6:be:ab:36:8d:9e:ce:43:c3: 4d:9b:66:c4:d1:29:55:73:96:47:24:75:0f:f8:7f: 06:df:8a:8a:53:60:44:fa:b5:70:34:30:5b:6f:b9: 7b:b1:ea:94:63:a4:bc:23:33:c5:32:2d:8c:b4:72: 4d:1e:99:b9:bb:87:54:aa:f2:f3:78:f2:3f:cb:a1: 6d:9b:6b:d7:f3:29:7a:02:94:31:72:3c:d4:4d:69: 3b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:42:E3:B1:1A:B5:BF:CE:95:8A:CB:91:04:84:AF:B0:28:CF:38:64 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6b:83:48:9d:69:92:03:83:87:c0:b6:7b:e2:37:d0:a8:ac:94: 8d:0b:32:95:da:cd:87:fb:6a:56:f5:ca:5a:60:7c:fc:38:76: 37:5e:9a:1b:f0:6b:e0:ef:b8:aa:88:5f:71:82:8b:8c:78:f5: 3c:2e:d8:79:a0:a9:a3:05:33:87:85:88:a6:4a:53:6a:a7:5d: a0:28:f5:2e:7a:89:28:e6:f6:2f:58:64:c8:d9:3f:a0:66:e1: 2b:5f:19:81:e4:f2:87:72:bf:7a:bd:9f:e3:fc:f0:5b:ab:cb: da:ba:bd:a1:77:c2:e8:53:cf:15:50:57:00:23:a0:f0:bf:c5: 2a:88:25:58:17:44:91:04:73:7e:c8:02:5f:54:aa:28:69:ec: b7:90:cc:71:74:86:1d:58:e7:b5:6c:8a:64:67:b1:9f:15:77: 70:a7:f7:07:e9:bf:2f:49:d8:8f:46:b8:f7:e9:0e:e1:35:9a: 81:26:87:5d:07:00:5b:43:2e:31:c2:6a:c9:2a:e2:83:7f:2b: d0:c2:e9:a6:a4:79:ae:e7:74:ec:c9:e7:ad:dd:5c:87:e2:07: 79:68:2e:db:69:25:10:33:d4:d7:c5:83:04:01:a9:1e:e5:df: 1d:94:83:d8:52:f3:21:7d:c4:4e:4e:fb:4e:ca:60:61:cb:81: f4:bf:28:fe -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUEgnDj+5aM5dhHmY9FzlA14zkhP4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MTAxMTAwMDAzMloX DTI1MTExNTIzNTk1OVowejFJMEcGA1UEBRNAOTA5MWU3NWQzYWFhNWUxNTI0OTEx NTZhZGRjOWUzZDQ0M2UwNGU2NDQ4NmJkYTBkMTEzMDlhMDVhZDFhYjk4ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnonRfeMvroT7mczlRO6mpA0Xzr/k Hv8OwvJXC8lO7AUjwln/SGLlEOxJHMlHxYlD+oz7F9cyL53BFFQxpfMheX/QHKLJ eYcG1Ea27Zy/+Q2bJWZD6Ic8yrmJS2rVz++SivJXleEiJS+E+akw37DMhmlv6Xa/ THbdcsLx0dZOJXAWPT5P1KA99jAg6x2IqgNDpM1U2mqgh1658n2hWQUvY0YDqANy 6XwZ2KbWvqs2jZ7OQ8NNm2bE0SlVc5ZHJHUP+H8G34qKU2BE+rVwNDBbb7l7seqU Y6S8IzPFMi2MtHJNHpm5u4dUqvLzePI/y6Ftm2vX8yl6ApQxcjzUTWk7MwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFDBC47Eatb/OlYrLkQSEr7AozzhkMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1ZmZlNjVlLTcyODctNDYyOC04NzU5LTdjMTQxODY2ZWUxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAn/gwDQYJKoZIhvcNAQELBQADggEBAGuDSJ1pkgODh8C2e+I30Kis lI0LMpXazYf7alb1ylpgfPw4djdemhvwa+DvuKqIX3GCi4x49Twu2HmgqaMFM4eF iKZKU2qnXaAo9S56iSjm9i9YZMjZP6Bm4StfGYHk8odyv3q9n+P88Fury9q6vaF3 wuhTzxVQVwAjoPC/xSqIJVgXRJEEc37IAl9Uqihp7LeQzHF0hh1Y57VsimRnsZ8V d3Cn9wfpvy9J2I9GuPfpDuE1moEmh10HAFtDLjHCaskq4oN/K9DC6aakea7ndOzJ 563dXIfiB3loLttpJRAz1NfFgwQBqR7l3x2Ug9hS8yF9xE5O+07KYGHLgfS/KP4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:36 2025 by rpki-client