$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10466492-6e57-4b27-906d-531139de21f0.roa File: 10466492-6e57-4b27-906d-531139de21f0.roa (raw, json) Hash identifier: zBxe8ZzW58Vz8//JQVxFvKj+rKnTyTpxf7dnsp1xzas= Subject key identifier: E1:B7:47:B4:DA:83:F7:F8:67:4C:75:AF:CD:0F:CD:59:8D:2F:FD:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 43D3B3D07CDA2F976E4020EE083CFE8B9C543CDA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10466492-6e57-4b27-906d-531139de21f0.roa Signing time: Tue 11 Nov 2025 00:00:10 +0000 ROA not before: Tue 11 Nov 2025 00:00:10 +0000 ROA not after: Tue 16 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.218.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d3:b3:d0:7c:da:2f:97:6e:40:20:ee:08:3c:fe:8b:9c:54:3c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 11 00:00:10 2025 GMT Not After : Dec 16 23:59:59 2025 GMT Subject: serialNumber=f2589b095bcf0a5fa262bc17c5ba01e9aa0789797e2b25bac1249fa68831b7db, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2b:24:47:f4:6c:e9:d0:30:7f:2d:02:a1:59: 89:69:11:66:d7:95:c7:f9:0a:77:56:44:5b:15:87: db:94:a5:a8:4c:70:df:7f:ea:a1:74:a1:09:2d:8c: a7:1e:5a:57:c1:2e:bf:27:5f:be:af:7e:79:a5:08: 2a:a7:b9:d4:3e:d1:3e:91:da:1e:15:6b:f8:15:18: 70:3e:5d:32:4d:1c:f4:1a:bc:79:a1:d2:9e:2a:d8: 25:c8:e0:42:38:7b:62:69:c8:88:3c:1b:a5:2a:b8: 2a:18:87:6a:b2:37:e0:b1:2b:7f:55:59:09:7b:c8: a5:b1:8b:b5:ef:78:60:d3:57:c8:67:79:3d:ef:8d: 1e:fa:51:4b:a0:81:8b:f0:91:ca:96:c5:8b:a7:68: bc:be:60:37:87:42:0c:de:1b:c9:22:c1:48:ab:1a: 69:63:24:c3:8c:2c:4e:e4:fe:29:3a:3a:34:2f:f3: 9a:a2:69:af:72:c5:64:32:99:f9:38:64:be:2d:c5: 0d:76:28:45:15:a8:32:65:be:c5:c3:4e:4e:b1:1c: ff:fc:94:a3:31:92:18:67:23:42:5d:f6:11:3b:de: 7c:7e:43:e8:14:ce:88:81:19:df:5b:e8:05:3b:cd: d7:bf:6b:2e:c2:1a:39:63:a1:1a:99:1c:d7:ed:94: 8a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B7:47:B4:DA:83:F7:F8:67:4C:75:AF:CD:0F:CD:59:8D:2F:FD:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10466492-6e57-4b27-906d-531139de21f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.218.156.0/24 Signature Algorithm: sha256WithRSAEncryption 49:13:ba:da:02:dd:48:c7:b6:cb:6d:83:c2:0c:25:9b:ab:4f: 4a:d7:2f:b4:9d:b8:9f:d4:c6:3b:08:1b:69:44:aa:c5:6f:53: 0c:fc:35:a5:29:11:fd:04:f4:98:ab:f6:c2:68:03:c9:88:14: a6:f3:93:dd:62:04:c9:b6:e7:90:22:bc:3f:a1:38:38:2a:71: 04:41:9b:12:78:4e:93:17:37:41:bb:2c:68:79:d8:9c:5e:df: cf:6d:c8:ee:25:77:88:13:34:b0:9d:27:73:d7:51:74:d7:88: dc:8f:4f:3c:7d:58:64:0e:fa:45:0e:58:66:29:bc:75:ad:66: 1e:d6:e5:48:a9:5d:08:98:c4:1b:75:a1:1e:9c:b3:aa:f6:23: ff:e2:52:3f:85:e7:57:ed:e3:60:85:6f:78:8c:b5:49:f6:d0: 52:3f:62:42:92:16:60:38:de:c3:ee:a3:01:d4:c5:86:84:9f: 53:b7:7b:ec:36:2b:b6:d9:07:20:ef:5b:0a:21:c8:d9:f3:ea: 31:a6:15:d1:99:a8:d9:da:fc:3c:e5:82:75:29:55:29:40:f2: 5a:6b:5a:c0:03:85:ef:b8:43:8e:56:41:b9:bd:54:ba:62:22: 92:50:08:b5:bc:01:bb:6e:c6:b4:e4:9b:42:75:1c:25:08:ff: 86:ea:30:a7 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUQ9Oz0HzaL5duQCDuCDz+i5xUPNowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExMTAwMDAxMFoX DTI1MTIxNjIzNTk1OVowejFJMEcGA1UEBRNAZjI1ODliMDk1YmNmMGE1ZmEyNjJi YzE3YzViYTAxZTlhYTA3ODk3OTdlMmIyNWJhYzEyNDlmYTY4ODMxYjdkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliskR/Rs6dAwfy0CoVmJaRFm15XH +Qp3VkRbFYfblKWoTHDff+qhdKEJLYynHlpXwS6/J1++r355pQgqp7nUPtE+kdoe FWv4FRhwPl0yTRz0Grx5odKeKtglyOBCOHtiaciIPBulKrgqGIdqsjfgsSt/VVkJ e8ilsYu173hg01fIZ3k9740e+lFLoIGL8JHKlsWLp2i8vmA3h0IM3hvJIsFIqxpp YyTDjCxO5P4pOjo0L/OaommvcsVkMpn5OGS+LcUNdihFFagyZb7Fw05OsRz//JSj MZIYZyNCXfYRO958fkPoFM6IgRnfW+gFO83Xv2suwho5Y6EamRzX7ZSKzwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFOG3R7Tag/f4Z0x1r80PzVmNL/3rMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEwNDY2NDkyLTZlNTctNGIyNy05MDZkLTUzMTEzOWRlMjFmMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9qcMA0GCSqGSIb3DQEBCwUAA4IBAQBJE7raAt1Ix7bLbYPCDCWb q09K1y+0nbif1MY7CBtpRKrFb1MM/DWlKRH9BPSYq/bCaAPJiBSm85PdYgTJtueQ Irw/oTg4KnEEQZsSeE6TFzdBuyxoedicXt/PbcjuJXeIEzSwnSdz11F014jcj088 fVhkDvpFDlhmKbx1rWYe1uVIqV0ImMQbdaEenLOq9iP/4lI/hedX7eNghW94jLVJ 9tBSP2JCkhZgON7D7qMB1MWGhJ9Tt3vsNiu22Qcg71sKIcjZ8+oxphXRmajZ2vw8 5YJ1KVUpQPJaa1rAA4XvuEOOVkG5vVS6YiKSUAi1vAG7bsa05JtCdRwlCP+G6jCn -----END CERTIFICATE-----Generated at Tue Nov 18 09:36:47 2025 by rpki-client