$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5496107b-eefe-4905-9cf9-59440b1209c9.roa File: 5496107b-eefe-4905-9cf9-59440b1209c9.roa (raw, json) Hash identifier: +1sc88WoCQe+2oM8GbbRg2B8ndrptTFJuT8ebfSFYBc= Subject key identifier: E6:5F:2A:0D:2D:74:C7:67:79:73:31:16:AF:45:70:BB:17:46:2C:50 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 11744C77514A230E6DCE37AB958E00363EE50AD0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5496107b-eefe-4905-9cf9-59440b1209c9.roa Signing time: Fri 24 Oct 2025 00:00:32 +0000 ROA not before: Fri 24 Oct 2025 00:00:32 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:74:4c:77:51:4a:23:0e:6d:ce:37:ab:95:8e:00:36:3e:e5:0a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 24 00:00:32 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=e3fbccfd913b4763888aabb05bc970385207cfe653be5b626169db1551f3a6b5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:32:31:b8:1d:24:4c:47:b2:00:be:13:a0: 9f:1a:c6:c3:ff:30:6d:ec:96:77:91:f8:ab:44:6e: 33:55:2d:53:c7:0e:2a:20:d5:09:2c:49:fd:fb:9d: 26:ed:ca:c2:df:80:3d:c8:79:c0:36:70:0b:78:ad: 31:4d:2a:80:b7:d7:97:85:30:f0:3d:bd:d8:c2:63: 31:41:3c:f3:65:11:73:f7:fb:ec:e1:00:5a:c0:b9: 8a:5f:76:31:1f:79:a2:ad:82:03:8c:1e:9a:c7:2f: 07:c4:f6:11:8e:42:f7:5d:cc:a1:d5:20:2b:9d:c0: c7:58:47:56:46:a1:3a:31:6f:47:fc:bf:d7:2a:7f: 51:58:f2:be:af:59:18:98:56:99:95:f2:d5:2b:eb: da:a2:68:a5:55:f5:dc:7f:6f:a9:d1:68:dd:17:0f: 40:b4:46:2a:7e:15:28:12:09:34:dd:37:b2:98:fb: 3e:1e:c7:f9:fe:7c:ca:77:17:18:bd:dd:73:13:dc: 32:62:f9:ec:9b:ba:a2:91:79:46:fb:0e:57:5a:40: 53:17:09:49:0b:4d:4f:f6:97:6e:cc:c4:cf:a5:3e: 11:ec:7e:62:b0:87:b2:c3:4f:c3:15:6c:ae:da:2a: 87:43:23:da:9b:d2:31:d7:aa:51:aa:ef:c0:37:2f: 3b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5F:2A:0D:2D:74:C7:67:79:73:31:16:AF:45:70:BB:17:46:2C:50 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5496107b-eefe-4905-9cf9-59440b1209c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.62.0/24 Signature Algorithm: sha256WithRSAEncryption 10:65:4e:38:ad:a2:13:89:b2:62:37:7f:2d:d8:27:84:02:9c: ec:d5:03:86:76:ab:3d:33:1b:bb:a6:e3:0b:c2:6f:2d:85:1a: b8:d4:d2:28:ad:05:70:70:20:79:f3:72:bb:d7:39:d1:0f:21: d8:d2:f3:72:e1:6a:11:16:27:ab:52:c5:54:df:69:0d:6b:ca: 73:89:7f:ce:ee:1d:e0:06:f2:a8:92:61:83:72:d4:8a:00:93: 8e:cf:58:86:2d:7e:70:e5:23:2a:17:cd:c0:df:ce:d7:30:b6: 3f:f2:91:31:c7:80:7a:74:d8:c4:78:ba:62:03:68:59:a1:ee: 94:b5:ab:16:ae:34:d8:78:81:d9:c1:d9:60:54:bc:7b:fb:fe: 2b:d4:00:68:a6:e9:0a:96:8a:23:4f:6b:ff:4c:f7:16:27:a3: eb:95:88:5c:78:ac:f1:32:05:11:e8:05:e0:cd:86:6d:06:49: 5d:0e:78:06:f0:3c:82:58:98:43:10:ae:d6:1c:31:c8:96:fc: ed:61:e1:c1:f8:3e:e3:f2:58:a2:b6:1c:a7:ac:12:0c:28:9f: 8a:50:67:c4:6a:b2:16:bb:b8:e2:87:a6:12:7b:59:ff:88:4c: a7:38:44:85:03:5a:48:6b:93:98:70:fc:b2:e8:29:ef:c0:a7: 5a:68:31:74 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUEXRMd1FKIw5tzjerlY4ANj7lCtAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAyNDAwMDAzMloX DTI1MTEyODIzNTk1OVowejFJMEcGA1UEBRNAZTNmYmNjZmQ5MTNiNDc2Mzg4OGFh YmIwNWJjOTcwMzg1MjA3Y2ZlNjUzYmU1YjYyNjE2OWRiMTU1MWYzYTZiNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwicyMbgdJExHsgC+E6CfGsbD/zBt 7JZ3kfirRG4zVS1Txw4qINUJLEn9+50m7crC34A9yHnANnALeK0xTSqAt9eXhTDw Pb3YwmMxQTzzZRFz9/vs4QBawLmKX3YxH3mirYIDjB6axy8HxPYRjkL3Xcyh1SAr ncDHWEdWRqE6MW9H/L/XKn9RWPK+r1kYmFaZlfLVK+vaomilVfXcf2+p0WjdFw9A tEYqfhUoEgk03TeymPs+Hsf5/nzKdxcYvd1zE9wyYvnsm7qikXlG+w5XWkBTFwlJ C01P9pduzMTPpT4R7H5isIeyw0/DFWyu2iqHQyPam9Ix16pRqu/ANy870wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOZfKg0tdMdneXMxFq9FcLsXRixQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0OTYxMDdiLWVlZmUtNDkwNS05Y2Y5LTU5NDQwYjEyMDljOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9g+MA0GCSqGSIb3DQEBCwUAA4IBAQAQZU44raITibJiN38t2CeE Apzs1QOGdqs9Mxu7puMLwm8thRq41NIorQVwcCB583K71znRDyHY0vNy4WoRFier UsVU32kNa8pziX/O7h3gBvKokmGDctSKAJOOz1iGLX5w5SMqF83A387XMLY/8pEx x4B6dNjEeLpiA2hZoe6UtasWrjTYeIHZwdlgVLx7+/4r1ABopukKloojT2v/TPcW J6PrlYhceKzxMgUR6AXgzYZtBkldDngG8DyCWJhDEK7WHDHIlvztYeHB+D7j8lii thynrBIMKJ+KUGfEarIWu7jih6YSe1n/iEynOESFA1pIa5OYcPyy6CnvwKdaaDF0 -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:16 2025 by rpki-client