$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0354404d-5bd3-455b-9059-7c313b673651.roa File: 0354404d-5bd3-455b-9059-7c313b673651.roa (raw, json) Hash identifier: 1JYTMWo6sdK+YhbW74pwQfP9t3NSIrciLt5XyYTD0JA= Subject key identifier: 54:A5:60:BB:CE:80:84:51:E7:C2:D0:60:F0:F0:61:67:FF:24:ED:3C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 217BB368BFA3DDAA06ADC0069A0943C73D4381D1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0354404d-5bd3-455b-9059-7c313b673651.roa Signing time: Fri 26 Sep 2025 00:01:11 +0000 ROA not before: Fri 26 Sep 2025 00:01:11 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.213.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7b:b3:68:bf:a3:dd:aa:06:ad:c0:06:9a:09:43:c7:3d:43:81:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Sep 26 00:01:11 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=d97f70db9982b7dd4d6654cc82d76b52b1b1ce2be823639d399320970973e87f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:50:ac:78:a7:78:6f:55:e4:45:ef:54:81: 18:d3:d0:e0:df:5e:48:c7:65:44:12:7b:b2:ee:e1: ca:af:e0:84:85:4f:43:f9:2d:1f:c0:25:d6:c2:33: 29:f6:29:f8:e1:bf:0a:2d:55:8e:d3:b0:ca:ba:4e: 93:0e:0e:f1:cf:87:4f:33:ec:86:14:c3:24:52:a1: 74:e7:57:d8:79:5c:1b:cf:c0:79:86:55:74:69:b5: d0:33:cf:8a:5c:e2:b1:46:40:14:4f:d3:91:ac:71: e2:71:70:d5:2e:19:1a:35:c7:66:e1:20:ab:3e:30: fb:19:59:ae:5a:2b:eb:59:e7:54:7b:10:84:4d:1b: 66:32:f2:86:c7:66:5d:a8:8a:de:09:1a:3d:db:60: bc:b9:8f:f0:2c:b7:02:43:11:45:b4:1e:d3:3d:81: 23:33:36:4d:e6:f0:72:1c:02:14:43:c3:b4:e6:dc: 06:44:59:18:f1:3b:30:c7:66:85:f0:57:44:74:e7: 87:5e:ec:c8:f5:79:f7:eb:23:ab:4e:d9:72:9d:59: d9:94:e1:67:af:88:1c:29:c4:b6:37:e1:b8:be:3c: 1a:9d:dd:e2:43:ff:9d:60:5f:48:ec:8b:a2:0a:c2: ea:f3:fe:3c:ae:35:f8:04:37:44:1c:d4:11:8f:2f: 99:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A5:60:BB:CE:80:84:51:E7:C2:D0:60:F0:F0:61:67:FF:24:ED:3C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0354404d-5bd3-455b-9059-7c313b673651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.213.135.0/24 Signature Algorithm: sha256WithRSAEncryption 88:a8:bf:6a:66:fd:95:60:06:4b:e5:1f:77:a5:da:ad:1c:09: ea:f3:c5:a3:5a:21:52:3f:4a:94:3b:30:2d:8f:b7:12:7a:38: ef:39:12:5e:12:4e:56:5f:0e:03:0c:a5:a6:21:70:98:ae:f2: f0:f3:b2:ba:ee:f6:be:d0:0a:10:db:3d:18:2e:1a:45:62:12: 8a:d8:66:4e:72:ef:01:8a:19:e3:9a:fa:3f:72:33:e4:df:28: de:eb:68:7d:57:ef:99:2d:82:d6:fe:aa:9b:31:ef:e5:47:d3: 04:7a:b1:e2:7b:a9:7d:99:39:49:b6:6e:f3:3d:c0:2b:c1:7f: 82:ad:47:be:96:97:51:74:83:3c:21:5f:f9:64:17:13:b2:be: c8:cf:53:3d:26:ab:44:41:02:d8:2c:59:c5:95:a6:11:c4:ab: 5c:a6:21:41:9e:f7:59:9c:08:df:23:bf:df:55:95:3d:87:68: 6f:69:56:b8:95:78:60:9f:7a:f0:8b:ba:1c:f2:54:86:90:51: c6:06:65:15:b5:48:f3:6c:fa:c6:ba:44:cb:55:50:88:b7:7e: dc:a8:ed:41:35:6b:fe:c6:42:c1:ea:42:82:7f:5d:16:1a:25: b0:32:d8:37:c2:82:e9:da:cb:49:3e:f8:2d:ca:d1:6b:ce:fb: 6e:1f:c4:51 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUIXuzaL+j3aoGrcAGmglDxz1DgdEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDkyNjAwMDExMVoX DTI1MTAzMTIzNTk1OVowejFJMEcGA1UEBRNAZDk3ZjcwZGI5OTgyYjdkZDRkNjY1 NGNjODJkNzZiNTJiMWIxY2UyYmU4MjM2MzlkMzk5MzIwOTcwOTczZTg3ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA041QrHineG9V5EXvVIEY09Dg315I x2VEEnuy7uHKr+CEhU9D+S0fwCXWwjMp9in44b8KLVWO07DKuk6TDg7xz4dPM+yG FMMkUqF051fYeVwbz8B5hlV0abXQM8+KXOKxRkAUT9ORrHHicXDVLhkaNcdm4SCr PjD7GVmuWivrWedUexCETRtmMvKGx2ZdqIreCRo922C8uY/wLLcCQxFFtB7TPYEj MzZN5vByHAIUQ8O05twGRFkY8Tswx2aF8FdEdOeHXuzI9Xn36yOrTtlynVnZlOFn r4gcKcS2N+G4vjwand3iQ/+dYF9I7IuiCsLq8/48rjX4BDdEHNQRjy+Z4QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFFSlYLvOgIRR58LQYPDwYWf/JO08MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzNTQ0MDRkLTViZDMtNDU1Yi05MDU5LTdjMzEzYjY3MzY1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9WHMA0GCSqGSIb3DQEBCwUAA4IBAQCIqL9qZv2VYAZL5R93pdqt HAnq88WjWiFSP0qUOzAtj7cSejjvORJeEk5WXw4DDKWmIXCYrvLw87K67va+0AoQ 2z0YLhpFYhKK2GZOcu8Bihnjmvo/cjPk3yje62h9V++ZLYLW/qqbMe/lR9MEerHi e6l9mTlJtm7zPcArwX+CrUe+lpdRdIM8IV/5ZBcTsr7Iz1M9JqtEQQLYLFnFlaYR xKtcpiFBnvdZnAjfI7/fVZU9h2hvaVa4lXhgn3rwi7oc8lSGkFHGBmUVtUjzbPrG ukTLVVCIt37cqO1BNWv+xkLB6kKCf10WGiWwMtg3woLp2stJPvgtytFrzvtuH8RR -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:22 2025 by rpki-client