$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ab8755a-b40e-412e-8b0b-d13e0c39aed0.roa File: 9ab8755a-b40e-412e-8b0b-d13e0c39aed0.roa (raw, json) Hash identifier: 5InVo2L81sG+aRFMQPwFVcalyfkUS2QA5ah+tQzpfA4= Subject key identifier: A7:C9:4C:D0:75:63:BA:21:0F:16:86:1E:02:54:33:03:00:F7:BF:86 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1C2C5DF1D77EE4CAFD85E38A137CC072A6FC3C37 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ab8755a-b40e-412e-8b0b-d13e0c39aed0.roa Signing time: Wed 12 Nov 2025 00:01:02 +0000 ROA not before: Wed 12 Nov 2025 00:01:02 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2c:5d:f1:d7:7e:e4:ca:fd:85:e3:8a:13:7c:c0:72:a6:fc:3c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 12 00:01:02 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=3bc3410f07688a99a5eb84815d6801beea2a489a574e809f69f590e25ac68fa1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:09:d2:d5:7f:4d:83:f0:16:c3:ca:90:4e: da:06:c7:44:6b:d9:d8:89:fc:92:d4:a4:0e:82:8a: 6a:a7:e9:9e:ed:b5:35:cc:f8:d7:c4:5d:00:60:6d: a6:46:f7:c6:b0:3d:78:42:a0:b1:a5:44:5e:6e:e9: 11:4a:53:ea:15:4e:93:8a:55:3d:85:bf:32:8b:c0: 1d:95:2c:44:44:67:a3:d5:dc:58:43:f8:dd:2f:31: 21:d3:f7:6b:a5:ac:8b:b3:f2:36:1a:1e:ef:e1:01: 3d:49:00:d3:89:7a:30:0b:2f:89:30:ac:4a:c4:f9: d8:66:61:71:72:a8:b7:81:25:c4:75:05:0e:09:9b: cf:fc:60:5c:95:8f:8e:31:aa:9e:55:0b:60:db:ff: a4:cf:ef:4c:a3:74:8c:9a:e7:ca:4f:a4:f3:d3:32: 96:e7:52:06:54:37:77:0c:42:77:1d:b3:45:53:3f: 5e:c8:ae:e1:a3:10:b0:87:b0:84:91:6f:78:b5:21: ec:21:a5:77:5d:98:cb:1a:67:91:15:f8:61:b3:b3: cb:16:43:38:9b:2a:41:bd:70:fd:ca:d4:b4:55:40: aa:b5:e9:21:3e:11:0a:f1:eb:2f:d1:3e:24:3c:eb: db:62:84:77:51:61:29:e6:58:40:62:41:e5:b2:33: 16:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C9:4C:D0:75:63:BA:21:0F:16:86:1E:02:54:33:03:00:F7:BF:86 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9ab8755a-b40e-412e-8b0b-d13e0c39aed0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.53.0/24 Signature Algorithm: sha256WithRSAEncryption 62:c3:26:59:fa:02:cf:00:73:d4:6d:68:9c:87:71:e8:4b:b0: 0e:bd:9e:88:a2:d4:af:9e:ac:dc:82:f7:53:92:3e:9c:80:bf: 92:3d:6d:79:65:82:8f:5f:16:95:01:4a:72:3d:57:7e:3d:f6: 7a:73:51:d3:85:37:52:6b:f4:3d:b0:ed:52:24:27:9a:37:1f: c4:0a:f9:cc:59:47:98:88:e5:6a:40:9e:d7:83:68:79:84:ab: c1:61:fb:35:54:99:53:72:ea:02:2a:5b:40:80:a4:e3:1f:a9: f7:43:43:37:df:48:c5:39:25:7a:25:e4:b3:b0:c2:2c:c6:f8: 46:f0:f4:dd:2d:db:fb:db:62:75:43:2a:8d:da:ba:c4:33:a5: 59:8e:b7:47:f3:52:3c:43:e7:64:dd:56:6b:51:69:3c:95:5a: 3c:c2:2f:22:c7:dc:4a:26:14:0c:b5:76:ff:72:d2:f5:11:49: 12:17:1a:10:09:4b:25:d0:c5:b3:34:12:cd:da:2a:ca:19:37: a1:d5:6a:59:02:48:9d:26:cb:a4:8d:dc:27:2f:9f:5c:f7:b2: ff:11:19:37:92:c1:52:54:78:e0:f5:e0:27:57:5f:c3:cd:67: b9:98:bd:3d:2e:1c:6f:d8:be:85:05:fd:da:0b:87:f3:d9:27: 3e:e1:71:85 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUHCxd8dd+5Mr9heOKE3zAcqb8PDcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExMjAwMDEwMloX DTI1MTIxNzIzNTk1OVowejFJMEcGA1UEBRNAM2JjMzQxMGYwNzY4OGE5OWE1ZWI4 NDgxNWQ2ODAxYmVlYTJhNDg5YTU3NGU4MDlmNjlmNTkwZTI1YWM2OGZhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+IJ0tV/TYPwFsPKkE7aBsdEa9nY ifyS1KQOgopqp+me7bU1zPjXxF0AYG2mRvfGsD14QqCxpURebukRSlPqFU6TilU9 hb8yi8AdlSxERGej1dxYQ/jdLzEh0/drpayLs/I2Gh7v4QE9SQDTiXowCy+JMKxK xPnYZmFxcqi3gSXEdQUOCZvP/GBclY+OMaqeVQtg2/+kz+9Mo3SMmufKT6Tz0zKW 51IGVDd3DEJ3HbNFUz9eyK7hoxCwh7CEkW94tSHsIaV3XZjLGmeRFfhhs7PLFkM4 mypBvXD9ytS0VUCqtekhPhEK8esv0T4kPOvbYoR3UWEp5lhAYkHlsjMW4QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKfJTNB1Y7ohDxaGHgJUMwMA97+GMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlhYjg3NTVhLWI0MGUtNDEyZS04YjBiLWQxM2UwYzM5YWVkMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9A1MA0GCSqGSIb3DQEBCwUAA4IBAQBiwyZZ+gLPAHPUbWich3Ho S7AOvZ6IotSvnqzcgvdTkj6cgL+SPW15ZYKPXxaVAUpyPVd+PfZ6c1HThTdSa/Q9 sO1SJCeaNx/ECvnMWUeYiOVqQJ7Xg2h5hKvBYfs1VJlTcuoCKltAgKTjH6n3Q0M3 30jFOSV6JeSzsMIsxvhG8PTdLdv722J1QyqN2rrEM6VZjrdH81I8Q+dk3VZrUWk8 lVo8wi8ix9xKJhQMtXb/ctL1EUkSFxoQCUsl0MWzNBLN2irKGTeh1WpZAkidJsuk jdwnL59c97L/ERk3ksFSVHjg9eAnV1/DzWe5mL09Lhxv2L6FBf3aC4fz2Sc+4XGF -----END CERTIFICATE-----Generated at Tue Nov 18 10:40:15 2025 by rpki-client