$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa File: 8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa (raw, json) Hash identifier: 7BGzibGqEJvsJTFK9oUxM0TupTvgT4Q7q1GI63o+obs= Subject key identifier: FC:E2:66:9D:50:3C:75:23:4C:97:46:5F:2F:98:D5:C6:FE:86:48:6A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0482669CA94496D79661EEFB341192275ECAE2F4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa Signing time: Fri 17 Oct 2025 00:02:18 +0000 ROA not before: Fri 17 Oct 2025 00:02:18 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 00:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:82:66:9c:a9:44:96:d7:96:61:ee:fb:34:11:92:27:5e:ca:e2:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Oct 17 00:02:18 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=32ad7f6232e4d5fa3cdc5ed31ad42dc7b455619cfe4c1a67106d539b6636e497, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9a:f0:25:e0:9b:c3:8e:cb:5d:0d:02:02:fd: d3:34:c9:61:00:3f:85:9e:db:05:b4:ad:93:ed:51: ce:bf:d5:ce:e5:f9:15:09:20:24:4a:26:73:6b:c2: 95:5e:ce:48:89:ce:a6:5b:ce:a2:3d:94:4c:d4:56: 89:72:be:d3:57:23:73:ca:b4:34:4f:ad:c4:85:71: 4a:96:c1:0b:f0:ce:21:02:1f:06:91:5f:91:f9:81: b4:73:a9:79:f7:99:ac:7e:de:d7:e4:10:2f:a5:46: 3b:cb:50:94:90:a9:a1:99:10:62:3a:3e:ca:6e:1c: e8:13:1c:82:c4:41:d8:49:8d:a2:71:69:19:53:5f: 2d:e7:4c:f7:34:ac:96:f6:2b:2b:29:08:98:d1:0a: 99:49:9b:17:de:e4:ce:eb:fc:4d:48:0d:3f:d9:d3: 8c:91:2e:78:3a:ce:1f:da:fe:6c:de:6f:c7:f8:9a: 2c:ae:30:2b:2d:2f:f6:0a:70:a9:68:44:1a:2f:ec: c6:1b:6d:27:54:75:f4:b5:f2:c7:30:32:0f:0e:ee: a4:06:9c:a8:d1:59:7b:28:58:5b:d0:d9:6a:2c:71: 57:99:6f:42:e3:64:76:47:3a:c2:ad:ce:95:73:d6: 0f:a2:1e:e9:db:bd:9c:18:0a:df:71:c9:ed:4c:fc: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E2:66:9D:50:3C:75:23:4C:97:46:5F:2F:98:D5:C6:FE:86:48:6A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.65.0/24 Signature Algorithm: sha256WithRSAEncryption 77:ff:c7:6c:9e:dd:21:e1:6c:31:fc:c1:e4:7c:8a:5a:65:57: 97:ea:b4:63:4f:31:ad:69:da:4f:cb:91:a6:30:3d:d5:4a:e0: 66:e9:37:1b:bd:d4:31:51:b0:6f:bf:1d:e8:1b:cc:90:c4:e6: 3b:a0:77:63:7b:a0:e0:a4:42:94:5e:13:d4:04:bb:6e:5c:89: f1:02:ae:5f:6f:e4:76:02:bd:32:da:0a:a7:11:11:e0:cd:ca: 25:39:0a:4f:b3:3c:d6:f1:17:e7:07:24:83:d3:f1:e8:d3:c4: fa:2d:68:76:6d:a3:46:7f:fb:8e:04:41:29:4a:31:97:3e:7a: b5:32:86:58:a7:15:ae:78:05:07:7f:68:4f:98:9b:6b:0e:a5: 42:5f:a4:d2:8c:da:0f:23:50:32:3c:44:3f:96:1c:e8:02:03: 02:a6:91:26:d7:24:3d:1a:ac:5b:74:2b:e9:4e:5f:d4:1b:ce: ef:19:36:3e:f6:4c:c7:3b:0f:08:a7:e1:77:94:fb:83:9d:8a: 8f:64:c1:ea:3d:8c:02:cb:b9:a4:8f:be:96:58:c1:3c:dc:0d: 17:8e:aa:0e:c2:f1:b5:ba:ec:4b:ef:94:a4:89:85:ac:1f:e5: 4b:05:8c:5e:24:56:c1:45:ba:69:06:70:c3:09:f1:8c:ca:ce: 49:3c:71:66 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUBIJmnKlElteWYe77NBGSJ17K4vQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTAxNzAwMDIxOFoX DTI1MTEyMTIzNTk1OVowejFJMEcGA1UEBRNAMzJhZDdmNjIzMmU0ZDVmYTNjZGM1 ZWQzMWFkNDJkYzdiNDU1NjE5Y2ZlNGMxYTY3MTA2ZDUzOWI2NjM2ZTQ5NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5rwJeCbw47LXQ0CAv3TNMlhAD+F ntsFtK2T7VHOv9XO5fkVCSAkSiZza8KVXs5Iic6mW86iPZRM1FaJcr7TVyNzyrQ0 T63EhXFKlsEL8M4hAh8GkV+R+YG0c6l595msft7X5BAvpUY7y1CUkKmhmRBiOj7K bhzoExyCxEHYSY2icWkZU18t50z3NKyW9isrKQiY0QqZSZsX3uTO6/xNSA0/2dOM kS54Os4f2v5s3m/H+JosrjArLS/2CnCpaEQaL+zGG20nVHX0tfLHMDIPDu6kBpyo 0Vl7KFhb0NlqLHFXmW9C42R2RzrCrc6Vc9YPoh7p272cGArfccntTPy+CwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPziZp1QPHUjTJdGXy+Y1cb+hkhqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxODdkN2ExLWVjNGUtNGNhYi1hOGM3LTkyMWE3NDkyZTg5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9hBMA0GCSqGSIb3DQEBCwUAA4IBAQB3/8dsnt0h4Wwx/MHkfIpa ZVeX6rRjTzGtadpPy5GmMD3VSuBm6TcbvdQxUbBvvx3oG8yQxOY7oHdje6DgpEKU XhPUBLtuXInxAq5fb+R2Ar0y2gqnERHgzcolOQpPszzW8RfnBySD0/Ho08T6LWh2 baNGf/uOBEEpSjGXPnq1MoZYpxWueAUHf2hPmJtrDqVCX6TSjNoPI1AyPEQ/lhzo AgMCppEm1yQ9GqxbdCvpTl/UG87vGTY+9kzHOw8Ip+F3lPuDnYqPZMHqPYwCy7mk j76WWME83A0XjqoOwvG1uuxL75SkiYWsH+VLBYxeJFbBRbppBnDDCfGMys5JPHFm -----END CERTIFICATE-----Generated at Wed Nov 5 12:55:24 2025 by rpki-client