$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00971cda-f8a5-49a0-a1dc-2285c68a8e9f.roa File: 00971cda-f8a5-49a0-a1dc-2285c68a8e9f.roa (raw, json) Hash identifier: me3gPXTinUuJopxUFtTgH7YAw+kOBPmPy4WWcy5tzG8= Subject key identifier: 2F:5F:98:F9:14:0A:60:79:E5:2D:7D:93:A9:10:A6:8B:C1:7E:4F:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A71A737C12E67879BB10E0FED87522E4D1B93C9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00971cda-f8a5-49a0-a1dc-2285c68a8e9f.roa Signing time: Sat 20 Sep 2025 00:50:11 +0000 ROA not before: Sat 20 Sep 2025 00:50:11 +0000 ROA not after: Sat 25 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 43.200.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:71:a7:37:c1:2e:67:87:9b:b1:0e:0f:ed:87:52:2e:4d:1b:93:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 20 00:50:11 2025 GMT Not After : Oct 25 23:59:59 2025 GMT Subject: serialNumber=06dbf1028a763ad44798eaef1033d09f353c19429f581eb9726c45bcb7b53c8c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6c:29:e7:b4:57:5a:b6:b3:84:4c:8d:7f:49: 50:a7:b9:16:8e:7c:db:e3:a0:de:c3:bc:e2:01:2e: 1f:b4:a5:0e:c2:51:8f:97:76:4b:69:63:f0:ef:9c: ef:e4:59:44:0f:86:25:ca:67:2f:ad:6f:12:28:20: ff:2c:08:bd:e7:9c:8a:fe:40:39:9d:c5:85:50:3f: dc:e0:a9:cb:3f:f0:67:21:b0:00:60:54:ea:83:cc: da:26:94:6d:05:b7:b5:96:ad:51:04:db:a4:4f:89: d6:51:bd:8d:35:26:fc:7d:c3:c7:bf:41:d2:4e:79: ee:01:ba:f4:30:14:2e:de:e7:da:b4:55:01:d6:0d: 3a:d0:de:2f:0c:6d:aa:c7:81:0b:fd:2a:56:01:0a: e9:c8:f7:0f:0f:f7:81:3b:9b:ac:8a:8a:97:23:d7: fa:e0:16:72:56:8c:aa:7c:a1:3c:43:59:8b:38:33: 1b:6f:a0:cd:8a:67:eb:e2:e3:6f:ce:ae:98:7b:9a: a7:d1:b1:aa:a2:7a:dd:08:c4:29:08:eb:4d:90:26: 89:68:8c:23:32:f3:57:08:08:fe:65:a0:92:aa:ad: 6f:d9:a5:c9:8b:31:a9:69:33:26:53:53:01:9b:67: 59:cf:50:fd:f7:5b:87:a1:2d:c8:fd:c3:0b:b9:f0: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5F:98:F9:14:0A:60:79:E5:2D:7D:93:A9:10:A6:8B:C1:7E:4F:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/00971cda-f8a5-49a0-a1dc-2285c68a8e9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.200.0.0/13 Signature Algorithm: sha256WithRSAEncryption 43:1c:b7:91:93:86:cd:c6:74:a3:6e:d4:c9:f4:71:9b:4d:c7: 5c:d2:f5:4b:f6:da:df:27:95:fd:b4:b6:7b:62:19:e8:ef:86: cf:20:57:8b:d0:d1:8e:3e:eb:bb:77:f9:9e:d4:4b:ef:11:91: 9f:2d:9c:37:3b:ce:8c:4b:35:ff:d4:1e:05:b4:85:bc:b3:2f: 16:2d:8d:65:99:c1:c7:d4:06:6b:c0:2e:97:55:ac:70:92:11: 0e:6f:99:f1:7f:24:f3:e5:d0:ba:ae:de:fc:47:65:5b:42:6a: 02:bc:f3:3a:c0:2a:1e:28:8e:8a:f1:f2:12:a3:0e:69:ef:44: c8:91:41:73:1d:93:ba:66:37:02:69:81:70:5b:97:a2:9a:8c: 57:03:92:72:e7:10:f9:86:43:71:7d:02:7a:3e:ac:25:24:6d: 97:d2:2d:c0:33:fa:5c:0a:f0:dc:74:b5:f9:94:b1:6e:be:35: 5d:0c:cf:98:9f:6d:29:64:49:00:f6:fd:5a:a9:f5:4f:1b:10: db:c5:62:99:b0:a7:cc:e4:bc:27:ae:c1:0a:43:b9:07:c0:99: 02:c8:4b:8e:63:33:a8:f8:55:ea:52:44:a3:d5:2b:a8:d1:45: ab:11:92:00:4f:c9:ed:b4:e3:6a:95:8f:69:c4:98:1d:85:7c: d2:0d:ff:23 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUKnGnN8EuZ4ebsQ4P7YdSLk0bk8kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkyMDAwNTAxMVoX DTI1MTAyNTIzNTk1OVowejFJMEcGA1UEBRNAMDZkYmYxMDI4YTc2M2FkNDQ3OThl YWVmMTAzM2QwOWYzNTNjMTk0MjlmNTgxZWI5NzI2YzQ1YmNiN2I1M2M4YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWwp57RXWrazhEyNf0lQp7kWjnzb 46Dew7ziAS4ftKUOwlGPl3ZLaWPw75zv5FlED4YlymcvrW8SKCD/LAi955yK/kA5 ncWFUD/c4KnLP/BnIbAAYFTqg8zaJpRtBbe1lq1RBNukT4nWUb2NNSb8fcPHv0HS TnnuAbr0MBQu3ufatFUB1g060N4vDG2qx4EL/SpWAQrpyPcPD/eBO5usioqXI9f6 4BZyVoyqfKE8Q1mLODMbb6DNimfr4uNvzq6Ye5qn0bGqonrdCMQpCOtNkCaJaIwj MvNXCAj+ZaCSqq1v2aXJizGpaTMmU1MBm2dZz1D991uHoS3I/cMLufAb0QIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFC9fmPkUCmB55S19k6kQpovBfk9bMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwOTcxY2RhLWY4YTUtNDlhMC1hMWRjLTIyODVjNjhhOGU5Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMDK8gwDQYJKoZIhvcNAQELBQADggEBAEMct5GThs3GdKNu1Mn0cZtN x1zS9Uv22t8nlf20tntiGejvhs8gV4vQ0Y4+67t3+Z7US+8RkZ8tnDc7zoxLNf/U HgW0hbyzLxYtjWWZwcfUBmvALpdVrHCSEQ5vmfF/JPPl0Lqu3vxHZVtCagK88zrA Kh4ojorx8hKjDmnvRMiRQXMdk7pmNwJpgXBbl6KajFcDknLnEPmGQ3F9Ano+rCUk bZfSLcAz+lwK8Nx0tfmUsW6+NV0Mz5ifbSlkSQD2/Vqp9U8bENvFYpmwp8zkvCeu wQpDuQfAmQLIS45jM6j4VepSRKPVK6jRRasRkgBPye2042qVj2nEmB2FfNIN/yM= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:02 2025 by rpki-client