$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbd3bc41-641b-4341-a138-cdb37dbe5b09.roa File: fbd3bc41-641b-4341-a138-cdb37dbe5b09.roa (raw, json) Hash identifier: wqmlTATm3AqvFlolVokIkGRCpzKEB5xrXNwZLsj8azc= Subject key identifier: 6F:FE:F9:24:D3:C0:EF:3E:24:2E:74:4D:93:69:95:10:1E:0A:10:1D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2CF7CB1AA497D97473C223CB5CE4E4C5EBDD0464 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbd3bc41-641b-4341-a138-cdb37dbe5b09.roa Signing time: Wed 15 Oct 2025 00:50:13 +0000 ROA not before: Wed 15 Oct 2025 00:50:13 +0000 ROA not after: Wed 19 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.221.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f7:cb:1a:a4:97:d9:74:73:c2:23:cb:5c:e4:e4:c5:eb:dd:04:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 15 00:50:13 2025 GMT Not After : Nov 19 23:59:59 2025 GMT Subject: serialNumber=66133a9dbb76e6aa67b7f82cedf70de21df3b2497c78674d2a7caf2cda7639f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:24:1f:98:00:87:ab:80:0a:85:f2:66:16:01: 4e:ec:26:fb:d3:d7:62:7f:18:0b:cd:95:06:3a:b6: 4f:c0:5e:df:b2:96:14:d9:3c:e4:5f:a6:8e:4b:34: ca:b6:2b:fd:33:b4:06:09:fb:af:3d:dc:29:f6:86: f4:a7:2b:e9:44:7b:84:2e:ad:a0:c2:74:76:66:52: a9:a6:af:a4:b0:80:9c:d1:dd:8c:14:75:53:74:da: 1b:fa:72:b4:ff:5e:ca:d0:d6:6c:a4:21:f5:90:f3: 87:e9:c9:b4:6a:e3:77:9e:17:68:d5:ac:74:80:72: 37:08:ab:c2:b6:1e:a1:7e:0a:f1:2c:a0:36:a5:7f: a7:90:36:9e:14:d2:7a:37:ae:b3:37:ae:4d:93:5d: de:5d:87:37:c2:4f:3f:b1:33:92:9c:f1:c2:55:11: e3:10:61:77:0d:84:6d:8d:21:b7:28:c8:72:de:3e: 8d:d3:24:4e:15:77:19:35:49:1c:41:7f:b0:5f:fa: f2:e9:13:8e:fe:8d:73:7b:7b:ed:bd:74:de:60:b7: 21:06:2a:7e:18:ac:8e:ac:3e:39:66:3d:6e:0a:df: 4a:30:ae:bd:5e:43:1d:d2:52:fe:0a:aa:b0:c3:a3: 0c:af:4a:0c:12:50:72:e6:cd:87:9d:25:d4:09:f7: 35:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FE:F9:24:D3:C0:EF:3E:24:2E:74:4D:93:69:95:10:1E:0A:10:1D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbd3bc41-641b-4341-a138-cdb37dbe5b09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.221.0.0/16 Signature Algorithm: sha256WithRSAEncryption 05:a3:ca:28:e2:77:af:99:e5:c0:b5:0d:db:78:38:18:4c:c1: 1a:0c:bf:5b:0f:79:76:a7:4f:a0:f3:e4:64:48:93:8e:fe:28: 17:40:db:fe:d9:dd:37:96:af:0e:6d:3f:1f:c3:e8:9b:b8:ea: a6:ba:ad:15:a0:3a:58:ae:ae:98:3a:f0:26:3c:32:98:15:52: 5f:d9:be:34:38:70:36:37:4a:11:be:81:30:cf:60:c0:2e:6f: e2:c6:8d:21:75:7b:9c:a0:fc:7b:b5:97:ef:bd:2d:12:58:d6: b2:ad:bf:60:35:d3:31:75:f3:66:cc:74:50:7b:40:17:ff:93: ee:1a:5f:eb:67:d1:bf:3b:43:12:f8:97:9c:6a:95:72:69:43: f8:80:ec:8f:49:ab:11:fb:e3:00:80:4e:99:90:a9:8a:9e:1c: b4:f6:db:83:43:ef:92:5d:9c:64:f1:50:8a:a8:5c:76:19:8f: 77:4e:5c:07:25:da:6d:a4:f7:a1:4b:ec:9e:92:fa:52:1b:05: 48:5e:b8:18:82:a8:71:be:53:be:88:0a:95:cf:c9:21:c4:f8: 26:25:6f:2e:45:ec:c2:1e:6c:99:ae:5e:2c:c5:2f:29:70:d7: 94:0d:87:a3:42:81:78:55:2c:c7:81:1e:88:bb:be:07:30:08: 70:0f:76:17 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIULPfLGqSX2XRzwiPLXOTkxevdBGQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNTAwNTAxM1oX DTI1MTExOTIzNTk1OVowejFJMEcGA1UEBRNANjYxMzNhOWRiYjc2ZTZhYTY3Yjdm ODJjZWRmNzBkZTIxZGYzYjI0OTdjNzg2NzRkMmE3Y2FmMmNkYTc2MzlmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yQfmACHq4AKhfJmFgFO7Cb709di fxgLzZUGOrZPwF7fspYU2TzkX6aOSzTKtiv9M7QGCfuvPdwp9ob0pyvpRHuELq2g wnR2ZlKppq+ksICc0d2MFHVTdNob+nK0/17K0NZspCH1kPOH6cm0auN3nhdo1ax0 gHI3CKvCth6hfgrxLKA2pX+nkDaeFNJ6N66zN65Nk13eXYc3wk8/sTOSnPHCVRHj EGF3DYRtjSG3KMhy3j6N0yROFXcZNUkcQX+wX/ry6ROO/o1ze3vtvXTeYLchBip+ GKyOrD45Zj1uCt9KMK69XkMd0lL+Cqqww6MMr0oMElBy5s2HnSXUCfc1swIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFG/++STTwO8+JC50TZNplRAeChAdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZiZDNiYzQxLTY0MWItNDM0MS1hMTM4LWNkYjM3ZGJlNWIwOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK90wDQYJKoZIhvcNAQELBQADggEBAAWjyijid6+Z5cC1Ddt4OBhM wRoMv1sPeXanT6Dz5GRIk47+KBdA2/7Z3TeWrw5tPx/D6Ju46qa6rRWgOliurpg6 8CY8MpgVUl/ZvjQ4cDY3ShG+gTDPYMAub+LGjSF1e5yg/Hu1l++9LRJY1rKtv2A1 0zF182bMdFB7QBf/k+4aX+tn0b87QxL4l5xqlXJpQ/iA7I9JqxH74wCATpmQqYqe HLT224ND75JdnGTxUIqoXHYZj3dOXAcl2m2k96FL7J6S+lIbBUheuBiCqHG+U76I CpXPySHE+CYlby5F7MIebJmuXizFLylw15QNh6NCgXhVLMeBHoi7vgcwCHAPdhc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:56:38 2025 by rpki-client