$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa File: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (raw, json) Hash identifier: z1G8lq8NC4ogkuE1vqz8gyy6BCxT6xSZonearuQsSBs= Subject key identifier: 34:5F:31:F7:FD:4D:93:45:D5:B5:51:AD:6B:91:E7:BD:B2:E7:67:C5 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 416193AD8AAC53CCCCA6C634DC9EBD0F1442E24A Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa Signing time: Fri 17 Oct 2025 00:01:25 +0000 ROA not before: Fri 17 Oct 2025 00:01:25 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 122.248.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:61:93:ad:8a:ac:53:cc:cc:a6:c6:34:dc:9e:bd:0f:14:42:e2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Oct 17 00:01:25 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=94b6f9e067b3422c012684bcbdf5b13bf5188a059a504aa4d3485f52db967bb0, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:97:8c:c4:88:fb:34:9f:d0:3b:23:89:b1:4c: 9e:80:ab:92:45:4c:c5:4b:c2:af:78:8e:08:1e:c6: 1d:9f:57:98:83:16:01:bf:e6:38:62:a1:e6:31:cf: 51:fe:18:d3:d1:77:90:6b:7e:d9:d3:f6:86:fe:4a: 8e:c6:39:f2:31:1e:e3:e3:a8:67:0d:ed:85:a8:12: 2e:0c:5c:6a:7f:fe:07:13:80:25:f1:8a:35:5a:b8: a8:24:f5:bc:f9:ac:0b:a3:67:9a:4b:40:34:b3:4b: 84:9f:03:b1:3e:f8:1a:c6:0a:e9:e4:15:73:bf:dc: 48:59:f9:29:00:88:9c:6f:48:67:ff:7e:8a:f6:5b: 58:d4:93:93:a2:43:3e:19:34:0d:ba:c6:db:d5:12: bd:e0:db:c2:1d:46:87:0d:4b:d5:d5:a6:19:bd:ff: a6:f7:9b:de:5a:fd:0f:75:c5:6d:ff:48:f7:03:eb: 5c:31:df:7c:7b:ba:fb:bc:5f:16:81:10:b4:a4:d0: 79:47:5a:9b:80:08:e1:61:53:4f:ca:07:33:f3:23: ee:f5:90:61:fe:f9:72:29:7b:36:bb:fd:8f:bb:85: 2d:ea:4d:24:3e:74:c2:fb:72:04:2a:4e:a1:a9:9f: ec:df:e7:8f:3f:f9:a3:2b:28:74:e8:d3:8c:a6:03: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5F:31:F7:FD:4D:93:45:D5:B5:51:AD:6B:91:E7:BD:B2:E7:67:C5 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.240.0/20 Signature Algorithm: sha256WithRSAEncryption a4:98:53:58:70:ca:76:c7:b3:fe:d7:f1:fe:f7:a0:4c:22:a7: 18:c3:e6:ac:20:e0:1e:77:4a:dc:9b:07:77:e7:3a:51:94:84: a1:0c:71:9b:45:df:59:69:8f:9d:c7:14:96:25:d6:50:9d:e7: b6:03:07:28:4b:ed:ad:56:61:dc:9c:ac:de:00:dc:6e:c0:a2: 0b:46:3c:51:e5:3d:ab:3e:04:45:6e:9e:ba:29:e1:3f:f2:e3: 42:11:24:27:ce:93:bf:66:ed:a8:fb:6c:0f:1c:90:cf:41:d6: 5c:cb:42:32:c2:b2:b6:f5:67:e6:23:77:82:29:e4:34:c9:95: 23:b1:6a:37:6d:78:28:bd:e3:9b:48:13:4e:fb:45:77:81:47: df:da:e3:9f:fc:46:d8:89:73:a4:48:b6:4f:ea:98:1b:81:71: 3d:fa:1d:97:11:9a:a4:a3:12:85:10:51:10:65:59:d9:fd:cc: dd:4a:2d:2d:07:d4:c2:3b:ce:13:05:d4:c8:60:65:d9:b7:10: ac:d8:7e:f0:cb:dc:ba:e8:1a:a9:30:4d:14:40:d3:80:51:47: eb:cc:7f:ed:15:24:fa:34:e3:9a:b6:11:26:ca:fd:12:5a:93: 3e:50:03:80:0c:19:4c:06:04:ff:fc:1a:4a:6c:29:48:2b:48: 46:50:62:d1 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUQWGTrYqsU8zMpsY03J69DxRC4kowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTAxNzAwMDEyNVoX DTI1MTEyMTIzNTk1OVowejFJMEcGA1UEBRNAOTRiNmY5ZTA2N2IzNDIyYzAxMjY4 NGJjYmRmNWIxM2JmNTE4OGEwNTlhNTA0YWE0ZDM0ODVmNTJkYjk2N2JiMDEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5eMxIj7NJ/QOyOJsUyegKuSRUzF S8KveI4IHsYdn1eYgxYBv+Y4YqHmMc9R/hjT0XeQa37Z0/aG/kqOxjnyMR7j46hn De2FqBIuDFxqf/4HE4Al8Yo1WrioJPW8+awLo2eaS0A0s0uEnwOxPvgaxgrp5BVz v9xIWfkpAIicb0hn/36K9ltY1JOTokM+GTQNusbb1RK94NvCHUaHDUvV1aYZvf+m 95veWv0PdcVt/0j3A+tcMd98e7r7vF8WgRC0pNB5R1qbgAjhYVNPygcz8yPu9ZBh /vlyKXs2u/2Pu4Ut6k0kPnTC+3IEKk6hqZ/s3+ePP/mjKyh06NOMpgPgxwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDRfMff9TZNF1bVRrWuR572y52fFMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzE3N2M5NzAyLWVlMzktNDJkMS1iNzZmLTZjZWU3N2Y0ZmI0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEevjwMA0GCSqGSIb3DQEBCwUAA4IBAQCkmFNYcMp2x7P+1/H+96BM IqcYw+asIOAed0rcmwd35zpRlIShDHGbRd9ZaY+dxxSWJdZQnee2AwcoS+2tVmHc nKzeANxuwKILRjxR5T2rPgRFbp66KeE/8uNCESQnzpO/Zu2o+2wPHJDPQdZcy0Iy wrK29WfmI3eCKeQ0yZUjsWo3bXgoveObSBNO+0V3gUff2uOf/EbYiXOkSLZP6pgb gXE9+h2XEZqkoxKFEFEQZVnZ/czdSi0tB9TCO84TBdTIYGXZtxCs2H7wy9y66Bqp ME0UQNOAUUfrzH/tFST6NOOathEmyv0SWpM+UAOADBlMBgT//BpKbClIK0hGUGLR -----END CERTIFICATE-----Generated at Sat Oct 18 13:43:12 2025 by rpki-client