$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bce91dc-229b-42a7-9c92-722aa69f577e.roa File: 0bce91dc-229b-42a7-9c92-722aa69f577e.roa (raw, json) Hash identifier: Tq02+VsNDPgxtglG4sTK3zI4gWCHP4euCKrTHech8Ag= Subject key identifier: C2:65:7D:D4:87:87:DD:21:36:21:29:48:BC:2C:37:15:BE:9F:C6:2B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5BBAA663076994E7F97616B6072CF01F3C53B458 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bce91dc-229b-42a7-9c92-722aa69f577e.roa Signing time: Mon 21 Apr 2025 17:00:23 +0000 ROA not before: Mon 21 Apr 2025 17:00:23 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.198.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ba:a6:63:07:69:94:e7:f9:76:16:b6:07:2c:f0:1f:3c:53:b4:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 17:00:23 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=c2dcc64565c93f71bee9c2568f29ba14786dd2f5d86f94c63f105280c34b48f4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8c:d6:68:71:3a:47:41:f4:89:d4:93:ec:7d: d1:fa:a3:3e:3e:b7:d4:b0:05:71:e1:97:08:1d:19: b1:61:6f:2b:b6:66:65:b1:a1:50:97:04:dc:ac:61: 7e:97:a9:0f:29:ca:33:36:28:8c:49:8b:e4:8d:36: 31:9b:64:81:7e:90:f8:36:63:0b:ce:2b:43:0f:12: 6a:7d:b0:05:24:87:78:18:73:40:2c:59:ab:7f:bd: 8b:5d:42:eb:6e:0c:7a:68:51:80:0b:e4:6c:49:ae: c3:11:95:ad:e0:90:73:31:05:cd:e2:a4:7e:e6:71: ef:dc:28:4e:86:e2:be:ef:f6:0b:61:b2:c6:02:41: f8:00:96:f3:55:54:67:9d:6d:f5:b8:fc:a8:b4:5e: 1c:13:76:a2:11:6a:b9:90:22:d1:7f:66:0c:6f:51: b2:7a:58:a1:21:79:1a:99:59:fe:4e:9a:79:ec:56: bf:f9:3d:97:97:cc:70:bd:ab:cc:0e:b5:ba:9f:a0: d4:a8:fb:07:c8:1d:77:4b:82:d1:f7:02:81:da:eb: 47:3f:9c:a8:73:38:ee:8d:9a:be:82:0d:04:e9:89: c2:7d:3b:4f:a5:ca:2d:6f:25:a4:92:27:02:28:e2: 4f:f2:e2:ad:83:c3:6c:20:a2:27:4c:c7:41:cf:ea: 9e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:65:7D:D4:87:87:DD:21:36:21:29:48:BC:2C:37:15:BE:9F:C6:2B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bce91dc-229b-42a7-9c92-722aa69f577e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.198.0.0/15 Signature Algorithm: sha256WithRSAEncryption 8d:bf:da:ef:00:a4:81:98:bd:1d:a6:a5:e0:d2:61:fa:a7:ec: b3:2e:ec:cd:0f:99:ff:af:1a:dd:50:c2:4c:94:7a:dd:26:8d: 46:cd:4e:3b:87:ad:7a:ae:8e:5c:7b:91:fa:5c:73:66:1b:87: a7:b8:c6:7f:c6:ec:3e:2d:ed:ce:c5:ab:87:16:04:c5:a0:77: 43:99:41:7e:a0:43:4b:76:76:f1:a7:ee:47:3b:25:d1:21:25: cc:53:26:85:b2:27:01:ab:29:a7:b9:c9:07:4f:d2:c6:04:9c: 1e:29:70:3f:1a:8a:3f:1d:21:64:0e:5c:93:71:a2:2f:1e:3a: 19:14:6c:69:3a:53:98:5f:a5:ee:2d:10:20:a6:c6:09:d4:22: bd:e7:e8:15:4a:3a:a4:dd:96:31:2c:f6:99:47:98:79:87:28: a9:90:eb:56:a1:9b:2d:0a:19:cf:b2:03:bd:eb:47:95:5d:48: 1c:55:7e:5b:a3:29:c0:85:c4:67:1f:3a:cb:ef:0f:66:f2:f2: 0e:4a:93:2b:42:14:1c:a3:b8:4a:86:a6:ab:f2:c4:29:89:84: 54:64:28:9e:9f:16:a5:13:f6:30:45:8f:8f:41:a9:e6:75:be: ad:21:89:60:63:20:39:24:e8:74:b9:ee:18:0a:36:b6:dd:0d: 95:4c:c4:e8 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUW7qmYwdplOf5dha2ByzwHzxTtFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE3MDAyM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYzJkY2M2NDU2NWM5M2Y3MWJlZTlj MjU2OGYyOWJhMTQ3ODZkZDJmNWQ4NmY5NGM2M2YxMDUyODBjMzRiNDhmNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34zWaHE6R0H0idST7H3R+qM+PrfU sAVx4ZcIHRmxYW8rtmZlsaFQlwTcrGF+l6kPKcozNiiMSYvkjTYxm2SBfpD4NmML zitDDxJqfbAFJId4GHNALFmrf72LXULrbgx6aFGAC+RsSa7DEZWt4JBzMQXN4qR+ 5nHv3ChOhuK+7/YLYbLGAkH4AJbzVVRnnW31uPyotF4cE3aiEWq5kCLRf2YMb1Gy elihIXkamVn+Tpp57Fa/+T2Xl8xwvavMDrW6n6DUqPsHyB13S4LR9wKB2utHP5yo czjujZq+gg0E6YnCfTtPpcotbyWkkicCKOJP8uKtg8NsIKInTMdBz+qe3wIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFMJlfdSHh90hNiEpSLwsNxW+n8YrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBiY2U5MWRjLTIyOWItNDJhNy05YzkyLTcyMmFhNjlmNTc3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK8YwDQYJKoZIhvcNAQELBQADggEBAI2/2u8ApIGYvR2mpeDSYfqn 7LMu7M0Pmf+vGt1QwkyUet0mjUbNTjuHrXqujlx7kfpcc2Ybh6e4xn/G7D4t7c7F q4cWBMWgd0OZQX6gQ0t2dvGn7kc7JdEhJcxTJoWyJwGrKae5yQdP0sYEnB4pcD8a ij8dIWQOXJNxoi8eOhkUbGk6U5hfpe4tECCmxgnUIr3n6BVKOqTdljEs9plHmHmH KKmQ61ahmy0KGc+yA73rR5VdSBxVflujKcCFxGcfOsvvD2by8g5KkytCFByjuEqG pqvyxCmJhFRkKJ6fFqUT9jBFj49BqeZ1vq0hiWBjIDkk6HS57hgKNrbdDZVMxOg= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net