$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa File: 245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa (raw, json) Hash identifier: 1Taup0GIax5zdwdTNbaZsfakS29HVoE9s8ZbjXeU0+0= Subject key identifier: 59:BF:A1:2D:CF:CB:25:B3:8B:EB:CE:AF:01:AD:5A:8C:C9:42:77:A2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 42E2CCBB93505A60B33FE83D3BEC2653808F4537 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa Signing time: Sun 09 Nov 2025 00:40:52 +0000 ROA not before: Sun 09 Nov 2025 00:40:52 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.249.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e2:cc:bb:93:50:5a:60:b3:3f:e8:3d:3b:ec:26:53:80:8f:45:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:40:52 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=2ff830d883c6bc3fd290601b6642d6ac8cbd5f2c232e9d7b3af4ea51c598cd4e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a3:cf:fb:95:b4:e3:18:96:e7:8e:13:af:e4: e7:a7:dc:65:33:c2:f8:6f:8f:55:24:66:f1:5e:cc: fd:3e:21:35:c3:21:c2:6c:9b:d0:c7:77:30:c1:77: 15:3b:7b:ba:b9:27:6c:bc:97:6d:04:67:3d:b8:f1: 34:a7:00:88:9d:22:0f:4a:d5:e4:c6:50:2b:3c:6d: b4:1e:bb:d7:c1:35:d5:fd:63:b6:31:04:17:3a:ff: c7:fc:72:7c:97:72:94:d0:b0:33:a0:e6:f8:7d:02: b0:73:95:6e:be:80:87:de:48:a9:92:33:02:cc:06: 41:68:e8:2b:15:67:9c:a3:a0:4b:bd:10:84:ef:1e: 0c:42:9c:06:98:39:81:8e:5f:04:3f:a0:20:0f:5d: 76:43:2f:e3:c2:aa:b2:8f:74:9b:77:ea:a4:82:a1: 28:ca:1d:40:2e:8e:62:54:e1:da:f9:65:84:5f:a5: 18:a1:f3:4d:64:7b:7a:88:4f:7f:0d:cf:27:a3:11: d6:9e:0a:39:1d:e2:fe:3e:9a:f3:3d:7a:88:0b:54: b1:4f:98:4c:3d:2b:4e:09:10:ef:d4:ec:f7:a2:8c: 44:23:ce:31:c1:c7:56:04:f4:97:73:6f:55:10:1f: c2:91:ec:7e:e4:ee:c8:69:e3:31:6a:d0:be:bd:1c: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BF:A1:2D:CF:CB:25:B3:8B:EB:CE:AF:01:AD:5A:8C:C9:42:77:A2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.44.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:ce:a3:c3:39:c8:98:94:63:15:6b:de:80:14:cb:bb:3b:15: f1:4d:3b:b8:34:9b:99:c6:21:88:8a:42:a0:bf:81:d0:7f:a4: 82:10:1b:5a:c3:ac:9e:2b:be:45:4e:df:d5:e0:2f:f8:99:5d: 63:42:26:ae:ff:17:d6:dc:a6:6d:f5:01:25:dc:29:51:45:37: b0:70:50:07:85:90:f9:ff:43:c8:b4:fa:24:b8:ac:17:0a:2d: 76:58:be:84:55:31:b4:04:eb:a7:c8:bd:71:c8:53:fb:c9:3e: f8:2d:7c:0f:a6:9a:7b:3c:f8:af:aa:cd:50:9d:73:70:79:7c: 0a:01:c8:70:82:eb:3d:92:28:c0:a1:0f:b1:22:b7:ca:98:b5: 85:78:7e:5e:ef:36:5b:9f:6a:aa:87:b2:09:b6:e7:c4:50:9f: f6:97:13:ce:74:ac:d2:ea:c7:73:1e:65:69:49:2a:1c:f4:82: 8f:61:01:b8:20:a5:92:ad:64:60:07:01:e6:67:20:c0:80:f9: 9a:5b:cd:ef:ac:dc:fb:cc:3e:86:d0:94:4f:41:53:25:5b:a7: c5:70:51:40:ed:3f:51:6c:a9:de:d2:de:db:44:2c:0c:17:c3: 8c:a2:f4:96:76:1b:53:1a:32:1f:2a:5d:39:00:b6:0b:81:44: fa:57:84:4e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUQuLMu5NQWmCzP+g9O+wmU4CPRTcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwNDA1MloX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAMmZmODMwZDg4M2M2YmMzZmQyOTA2 MDFiNjY0MmQ2YWM4Y2JkNWYyYzIzMmU5ZDdiM2FmNGVhNTFjNTk4Y2Q0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqPP+5W04xiW544Tr+Tnp9xlM8L4 b49VJGbxXsz9PiE1wyHCbJvQx3cwwXcVO3u6uSdsvJdtBGc9uPE0pwCInSIPStXk xlArPG20HrvXwTXV/WO2MQQXOv/H/HJ8l3KU0LAzoOb4fQKwc5VuvoCH3kipkjMC zAZBaOgrFWeco6BLvRCE7x4MQpwGmDmBjl8EP6AgD112Qy/jwqqyj3Sbd+qkgqEo yh1ALo5iVOHa+WWEX6UYofNNZHt6iE9/Dc8noxHWngo5HeL+PprzPXqIC1SxT5hM PStOCRDv1Oz3ooxEI84xwcdWBPSXc29VEB/Ckex+5O7IaeMxatC+vRya2QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFFm/oS3PyyWzi+vOrwGtWozJQneiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0NWE2NWJiLTU5MWMtNDdiYy04YThjLTZjODZiMDkzZmQ4Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/ksMA0GCSqGSIb3DQEBCwUAA4IBAQBbzqPDOciYlGMVa96AFMu7 OxXxTTu4NJuZxiGIikKgv4HQf6SCEBtaw6yeK75FTt/V4C/4mV1jQiau/xfW3KZt 9QEl3ClRRTewcFAHhZD5/0PItPokuKwXCi12WL6EVTG0BOunyL1xyFP7yT74LXwP ppp7PPivqs1QnXNweXwKAchwgus9kijAoQ+xIrfKmLWFeH5e7zZbn2qqh7IJtufE UJ/2lxPOdKzS6sdzHmVpSSoc9IKPYQG4IKWSrWRgBwHmZyDAgPmaW83vrNz7zD6G 0JRPQVMlW6fFcFFA7T9RbKne0t7bRCwMF8OMovSWdhtTGjIfKl05ALYLgUT6V4RO -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:11 2025 by rpki-client