$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15f0df98-8d36-4eb8-8d73-6075251475ae.roa File: 15f0df98-8d36-4eb8-8d73-6075251475ae.roa (raw, json) Hash identifier: DDGa3Dqmrqa2YjTdQuajrlpj263WWaTsmM7AMZ9fb88= Subject key identifier: A3:E4:9C:9A:2A:8E:FD:25:96:B0:94:CB:04:DA:07:27:3B:65:78:3A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2265F8398686EF138EA586A92265A65DB9FB93B8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15f0df98-8d36-4eb8-8d73-6075251475ae.roa Signing time: Mon 21 Apr 2025 17:00:50 +0000 ROA not before: Mon 21 Apr 2025 17:00:50 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.220.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:65:f8:39:86:86:ef:13:8e:a5:86:a9:22:65:a6:5d:b9:fb:93:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 17:00:50 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=44457e946fc2def36a99f02dbb19dcd33eaae9a8773d8956f75f7946a5937f95, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:3d:6f:55:d9:3f:cc:b0:41:75:36:0a:8f: 79:87:74:ec:45:1d:b9:e4:99:4c:fc:77:a7:f8:64: b2:4e:5f:69:44:43:24:13:9c:a6:ec:de:11:e6:79: d9:a4:62:3c:74:fa:d0:98:85:d4:de:78:37:82:e1: 10:4c:e0:88:64:8b:cb:a6:d6:88:67:02:c5:4e:57: fb:79:21:c9:a9:84:a2:c4:c5:98:48:c0:19:ce:a5: ce:3f:de:af:1a:65:67:56:5e:b0:7c:53:8d:c0:90: 0b:0a:a3:6f:0e:b5:0d:91:65:20:f3:6a:6a:65:61: 4d:8d:0c:cf:d5:df:95:36:39:70:e1:0b:35:02:de: 34:2f:c5:60:6d:15:bd:be:28:07:dc:dc:29:41:f2: ff:ff:a1:0e:ce:cd:50:0e:cc:2e:b5:a1:4a:f4:27: 0a:27:4e:22:32:14:27:72:f8:0f:aa:ca:38:c1:d0: e0:13:db:7e:cf:9e:85:d2:35:cd:80:47:a0:b1:bc: b7:82:69:5e:6d:9b:44:e3:60:29:c4:db:7f:c4:5a: a9:97:d3:41:c2:b8:1b:d0:f1:c8:27:d6:0e:eb:6b: 12:ef:48:fc:b2:14:96:fa:cd:fc:47:14:70:88:15: 02:09:f4:f3:bd:ce:86:3f:5c:82:b7:6d:e5:53:c4: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E4:9C:9A:2A:8E:FD:25:96:B0:94:CB:04:DA:07:27:3B:65:78:3A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15f0df98-8d36-4eb8-8d73-6075251475ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.220.0.0/15 Signature Algorithm: sha256WithRSAEncryption a9:a9:41:ea:f6:85:e7:a6:a3:85:42:7b:36:d9:0f:b8:f8:35: 3a:02:8c:1b:d4:3b:7c:4a:ef:df:ce:2b:54:c8:ad:27:ba:69: 8d:9d:0c:d1:1a:43:4b:56:05:83:f3:3a:74:71:64:fd:f0:02: b3:d8:d7:53:4a:19:ba:75:d0:f5:cc:28:6c:f1:da:3e:f2:63: 75:2b:1d:04:5c:92:12:6a:73:73:01:23:b2:24:27:47:ba:fc: 16:40:46:7f:51:86:21:8e:70:5e:16:22:1a:bb:d2:56:da:3e: 79:36:ec:ae:03:1d:43:be:3a:b2:5e:3f:fa:11:f1:f9:ef:a6: 69:56:4a:4d:ee:39:a7:02:5a:aa:7d:8d:ea:67:67:35:0c:92: eb:d4:5a:00:25:68:b1:2b:d6:3f:30:ff:85:89:14:7b:5e:25: d7:e6:80:a9:76:30:7a:fb:24:3e:82:ca:28:f4:61:a5:7d:3e: 94:5f:71:48:ae:0d:bc:12:a5:f2:4f:ee:68:8f:30:e4:dc:03: 2e:c2:1c:79:92:31:2f:33:88:fd:d5:2b:e7:10:1b:50:99:c6: c1:69:e8:ed:dd:a8:4b:d4:37:5a:aa:cb:a3:dd:25:59:3a:64: 8e:94:ee:00:c0:5c:a8:9b:71:9d:68:3a:d7:77:54:88:26:52: 44:ad:dc:ab -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUImX4OYaG7xOOpYapImWmXbn7k7gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE3MDA1MFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANDQ0NTdlOTQ2ZmMyZGVmMzZhOTlm MDJkYmIxOWRjZDMzZWFhZTlhODc3M2Q4OTU2Zjc1Zjc5NDZhNTkzN2Y5NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF89b1XZP8ywQXU2Co95h3TsRR25 5JlM/Hen+GSyTl9pREMkE5ym7N4R5nnZpGI8dPrQmIXU3ng3guEQTOCIZIvLptaI ZwLFTlf7eSHJqYSixMWYSMAZzqXOP96vGmVnVl6wfFONwJALCqNvDrUNkWUg82pq ZWFNjQzP1d+VNjlw4Qs1At40L8VgbRW9vigH3NwpQfL//6EOzs1QDswutaFK9CcK J04iMhQncvgPqso4wdDgE9t+z56F0jXNgEegsby3gmlebZtE42ApxNt/xFqpl9NB wrgb0PHIJ9YO62sS70j8shSW+s38RxRwiBUCCfTzvc6GP1yCt23lU8QmewIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFKPknJoqjv0llrCUywTaByc7ZXg6MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1ZjBkZjk4LThkMzYtNGViOC04ZDczLTYwNzUyNTE0NzVhZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9wwDQYJKoZIhvcNAQELBQADggEBAKmpQer2heemo4VCezbZD7j4 NToCjBvUO3xK79/OK1TIrSe6aY2dDNEaQ0tWBYPzOnRxZP3wArPY11NKGbp10PXM KGzx2j7yY3UrHQRckhJqc3MBI7IkJ0e6/BZARn9RhiGOcF4WIhq70lbaPnk27K4D HUO+OrJeP/oR8fnvpmlWSk3uOacCWqp9jepnZzUMkuvUWgAlaLEr1j8w/4WJFHte JdfmgKl2MHr7JD6Cyij0YaV9PpRfcUiuDbwSpfJP7miPMOTcAy7CHHmSMS8ziP3V K+cQG1CZxsFp6O3dqEvUN1qqy6PdJVk6ZI6U7gDAXKibcZ1oOtd3VIgmUkSt3Ks= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net