$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a029338-7973-4195-baed-4c6117fce277.roa File: 1a029338-7973-4195-baed-4c6117fce277.roa (raw, json) Hash identifier: xmeTZL5pZyMXxXkMIiPrxNd40Nc/sjMPVfQJM8n922w= Subject key identifier: 41:F9:F7:7F:43:87:77:10:FE:0F:C2:83:5D:25:25:FC:2A:F6:37:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77FBF2F418A23F1CD80020790CBB32C9B3F5FF14 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a029338-7973-4195-baed-4c6117fce277.roa Signing time: Mon 21 Apr 2025 17:00:47 +0000 ROA not before: Mon 21 Apr 2025 17:00:47 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:fb:f2:f4:18:a2:3f:1c:d8:00:20:79:0c:bb:32:c9:b3:f5:ff:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 17:00:47 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=f9fc8c05171df20d9ebfff35f5a1ea37a04d5c7160f20f6fcce2b3732a20ffa7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:24:75:79:99:11:d0:41:a4:c8:5c:32:1a: c2:cc:8b:fd:f8:b1:1e:fe:f5:00:7a:98:e1:fb:72: 89:b8:88:6e:ea:2a:28:a6:46:1e:53:70:83:90:f9: 51:3f:e6:3b:e5:ee:13:88:19:16:f2:7f:64:cc:76: 00:7a:98:d8:7e:82:2e:be:ad:5f:41:cc:d4:6c:f8: f0:13:07:50:e5:dd:15:3d:d2:44:bb:69:6a:2d:4d: 87:3e:5c:ea:20:d1:aa:c9:c7:4a:e1:0b:2e:d3:55: 35:96:fe:f7:e8:17:4c:dd:92:94:ae:34:80:c5:4a: a8:7d:f5:b6:77:da:3b:cf:a4:75:3e:9a:d7:fa:a4: 16:a0:0b:cf:bf:70:53:8d:80:fe:1e:3d:bb:6e:c3: 62:3a:c3:6e:23:57:b0:da:dd:da:e7:c1:d1:7e:e6: 71:2b:5f:c9:27:82:5f:7b:24:c3:1d:21:0e:2a:12: 52:b6:48:b5:eb:5c:56:f0:5b:d7:72:95:1f:a6:3c: cd:bc:83:68:25:8c:7d:7a:87:4d:7c:88:94:16:02: bc:bc:5a:28:00:a4:e4:1e:7d:ab:b1:2d:34:0a:f1: bc:99:61:91:c0:5f:23:49:3d:9a:a9:b4:46:53:dd: 2d:84:2a:80:76:e5:57:c3:dc:ca:f6:e7:8d:57:c0: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F9:F7:7F:43:87:77:10:FE:0F:C2:83:5D:25:25:FC:2A:F6:37:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1a029338-7973-4195-baed-4c6117fce277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.69.0/24 Signature Algorithm: sha256WithRSAEncryption be:ce:b8:3a:fa:23:d7:70:4d:41:d8:8d:54:b4:c2:5a:74:8a: f9:03:74:66:31:bf:2a:bd:8b:b3:3b:aa:73:c9:56:c3:ee:a0: 67:fd:da:8f:08:f7:83:a1:53:bf:07:bd:8d:de:71:1d:06:34: 36:7a:6a:6a:f1:b1:f6:da:e0:e5:6e:51:6a:0e:ae:09:26:59: 7d:f1:ae:fe:ee:68:ab:e9:68:64:a2:e5:27:72:eb:e5:30:0e: 73:b8:20:3f:51:44:12:df:45:e4:4e:6c:a9:91:3d:b4:79:f9: 43:ff:a8:40:e9:ec:9e:33:80:04:55:05:60:9c:ac:29:a6:4b: c4:b4:51:bd:89:62:af:7e:74:95:80:ea:96:1f:e5:bb:76:04: 99:69:de:3c:eb:4c:4f:6e:9e:96:70:c3:9e:34:70:6e:60:c5: 9b:54:44:40:43:6d:b9:4a:2c:6c:37:91:8d:2c:b4:94:9b:ee: ef:ea:1e:50:2b:96:a3:65:49:55:f3:d5:82:20:9c:9a:46:12: 22:68:87:c4:53:be:e0:37:60:a0:3c:52:9e:b5:a6:bd:41:a4: 7d:91:cc:29:4c:9c:a0:62:9a:f2:20:1a:a9:57:a5:f6:ba:79: e5:47:9e:3f:29:dc:9c:9a:79:fa:5c:6a:e8:db:d2:22:7c:c9: 53:2b:03:5a -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUd/vy9BiiPxzYACB5DLsyybP1/xQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE3MDA0N1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAZjlmYzhjMDUxNzFkZjIwZDllYmZm ZjM1ZjVhMWVhMzdhMDRkNWM3MTYwZjIwZjZmY2NlMmIzNzMyYTIwZmZhNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8IkdXmZEdBBpMhcMhrCzIv9+LEe /vUAepjh+3KJuIhu6ioopkYeU3CDkPlRP+Y75e4TiBkW8n9kzHYAepjYfoIuvq1f QczUbPjwEwdQ5d0VPdJEu2lqLU2HPlzqINGqycdK4Qsu01U1lv736BdM3ZKUrjSA xUqoffW2d9o7z6R1PprX+qQWoAvPv3BTjYD+Hj27bsNiOsNuI1ew2t3a58HRfuZx K1/JJ4JfeyTDHSEOKhJStki161xW8FvXcpUfpjzNvINoJYx9eodNfIiUFgK8vFoo AKTkHn2rsS00CvG8mWGRwF8jST2aqbRGU90thCqAduVXw9zK9ueNV8DQZwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFEH5939Dh3cQ/g/Cg10lJfwq9jd7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFhMDI5MzM4LTc5NzMtNDE5NS1iYWVkLTRjNjExN2ZjZTI3Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9RFMA0GCSqGSIb3DQEBCwUAA4IBAQC+zrg6+iPXcE1B2I1UtMJa dIr5A3RmMb8qvYuzO6pzyVbD7qBn/dqPCPeDoVO/B72N3nEdBjQ2empq8bH22uDl blFqDq4JJll98a7+7mir6WhkouUncuvlMA5zuCA/UUQS30XkTmypkT20eflD/6hA 6eyeM4AEVQVgnKwppkvEtFG9iWKvfnSVgOqWH+W7dgSZad4860xPbp6WcMOeNHBu YMWbVERAQ225SixsN5GNLLSUm+7v6h5QK5ajZUlV89WCIJyaRhIiaIfEU77gN2Cg PFKetaa9QaR9kcwpTJygYpryIBqpV6X2unnlR54/Kdycmnn6XGro29IifMlTKwNa -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net