$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa File: 3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa (raw, json) Hash identifier: hLuBq3UmKidpTo3DMcxHgBUZ93iGQg8lVdlz5XAed1U= Subject key identifier: 95:B8:5F:1F:06:A7:6A:4B:7E:96:25:19:AE:19:77:3D:D9:5F:78:D7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4D3AA8475685A63DA208C6CF231BA71457597F55 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa Signing time: Mon 21 Apr 2025 17:00:44 +0000 ROA not before: Mon 21 Apr 2025 17:00:44 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3a:a8:47:56:85:a6:3d:a2:08:c6:cf:23:1b:a7:14:57:59:7f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 17:00:44 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=7398e92ffb76c1fe157926448a7e67f3590fb883bbf694ea355db7150c764189, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:cb:e6:b6:30:5c:e5:6f:e9:49:2b:00:f3: 4e:95:3c:6c:ec:37:eb:b4:c1:74:20:0f:da:e6:03: cc:24:99:18:58:89:73:00:16:80:38:c8:7c:9b:60: 82:7a:2f:16:94:7b:68:8c:13:6a:e8:74:ab:f0:2f: be:8d:1a:05:c0:16:58:24:8e:25:c4:9e:c3:4b:8f: af:a5:87:ce:0e:e1:20:2c:f2:d4:1d:6c:34:d9:ea: 64:2c:c2:bf:70:b2:7c:53:10:f9:dd:d1:6e:c5:d5: 0c:19:9e:be:30:56:b2:fa:c7:8c:15:d6:57:bd:91: 48:7d:62:f7:de:8b:15:9c:18:d2:24:c8:22:56:2e: 48:c5:8b:a5:3e:da:09:57:e6:df:41:bf:66:f9:ca: cd:95:bd:e3:a6:78:f1:42:54:18:2f:e2:74:7f:00: ad:0c:36:82:87:1d:29:d9:b2:49:2f:8e:19:f8:ea: 85:4c:5f:af:11:95:2b:c8:a3:6e:e7:2f:69:ff:3c: d3:60:a2:e8:03:47:ba:bb:29:e2:6c:19:21:1c:94: cc:1c:1a:b0:2f:c8:82:f0:d4:17:6b:a9:a1:d0:ac: 57:e3:d3:d1:c3:ae:b9:90:02:94:05:ec:cd:5c:61: 5c:a0:0f:0d:4f:1f:d9:71:b0:36:9c:ca:34:af:c0: dc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B8:5F:1F:06:A7:6A:4B:7E:96:25:19:AE:19:77:3D:D9:5F:78:D7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.0.0/15 Signature Algorithm: sha256WithRSAEncryption 9f:56:b5:04:b7:03:80:19:15:c4:0d:3d:d7:62:b6:0a:fc:f0: 76:78:88:f9:f2:89:7b:56:98:a9:20:eb:6c:cb:5b:48:bf:7b: 7e:f8:25:db:65:22:33:e6:a2:61:5c:46:74:50:2e:21:37:3a: b3:68:40:af:1a:ac:3c:66:81:bc:75:9c:48:83:a3:4a:25:8a: f6:eb:6a:69:9b:c3:2f:bd:e7:2f:f2:08:28:de:4e:ff:e3:28: 34:bf:c6:f4:a2:bd:52:7a:14:f6:25:a7:b1:dc:db:a2:27:a1: 9d:92:21:af:2f:0f:78:ce:6b:62:57:b9:00:d4:86:e8:7d:fc: 29:85:07:e5:ee:85:d9:de:90:60:c9:db:eb:39:b3:00:1c:94: 97:cd:de:7d:80:77:f8:5d:bf:cd:77:ac:81:4e:e1:eb:59:21: cc:3d:65:c7:4f:44:9c:8e:5a:fa:76:a4:57:14:e7:7d:50:9b: a3:f5:ab:f4:63:f6:c5:12:18:0a:43:10:2e:19:1f:35:28:a3: ba:37:16:1a:fa:ee:a8:32:fa:0a:2c:41:21:c6:9f:eb:82:ad: 81:22:80:25:96:d0:c9:64:68:cd:a2:69:7c:7d:fd:eb:5c:d4: 6e:43:23:d8:df:a7:d2:3f:8e:88:10:d5:49:2f:2f:2d:b4:df: b2:d0:21:e4 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUTTqoR1aFpj2iCMbPIxunFFdZf1UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE3MDA0NFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANzM5OGU5MmZmYjc2YzFmZTE1Nzky NjQ0OGE3ZTY3ZjM1OTBmYjg4M2JiZjY5NGVhMzU1ZGI3MTUwYzc2NDE4OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfLL5rYwXOVv6UkrAPNOlTxs7Dfr tMF0IA/a5gPMJJkYWIlzABaAOMh8m2CCei8WlHtojBNq6HSr8C++jRoFwBZYJI4l xJ7DS4+vpYfODuEgLPLUHWw02epkLMK/cLJ8UxD53dFuxdUMGZ6+MFay+seMFdZX vZFIfWL33osVnBjSJMgiVi5IxYulPtoJV+bfQb9m+crNlb3jpnjxQlQYL+J0fwCt DDaChx0p2bJJL44Z+OqFTF+vEZUryKNu5y9p/zzTYKLoA0e6uynibBkhHJTMHBqw L8iC8NQXa6mh0KxX49PRw665kAKUBezNXGFcoA8NTx/ZcbA2nMo0r8DcXwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFJW4Xx8Gp2pLfpYlGa4Zdz3ZX3jXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhMmJjMmNjLTkyNzItNDFlYi1hM2U0LTIwNzYxZDE3MjlmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9QwDQYJKoZIhvcNAQELBQADggEBAJ9WtQS3A4AZFcQNPdditgr8 8HZ4iPnyiXtWmKkg62zLW0i/e374JdtlIjPmomFcRnRQLiE3OrNoQK8arDxmgbx1 nEiDo0olivbrammbwy+95y/yCCjeTv/jKDS/xvSivVJ6FPYlp7Hc26InoZ2SIa8v D3jOa2JXuQDUhuh9/CmFB+XuhdnekGDJ2+s5swAclJfN3n2Ad/hdv813rIFO4etZ Icw9ZcdPRJyOWvp2pFcU531Qm6P1q/Rj9sUSGApDEC4ZHzUoo7o3Fhr67qgy+gos QSHGn+uCrYEigCWW0MlkaM2iaXx9/etc1G5DI9jfp9I/jogQ1UkvLy2037LQIeQ= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:43 2025 by rpki-client on console.sobornost.net