$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa File: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (raw, json) Hash identifier: cyHtC7AcRsWl+Ra73qIokyphBJjoCr44tUWIwFSv9ho= Subject key identifier: F7:B0:F0:44:E6:15:47:09:64:7F:CF:A7:F2:B1:E9:6E:8B:8E:7B:DC Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 50282E7A1AF6298BE7C48B1D25CE93E5460BE574 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa Signing time: Mon 31 Mar 2025 15:01:02 +0000 ROA not before: Mon 31 Mar 2025 15:01:02 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:28:2e:7a:1a:f6:29:8b:e7:c4:8b:1d:25:ce:93:e5:46:0b:e5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Mar 31 15:01:02 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: serialNumber=1e304dfecc4fde38ba02a2c41612aff07a2a9c3809484609d4e05c66a3896f1a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:22:55:9f:9c:4d:97:25:2d:86:a3:c0:8c:16: 53:d7:aa:7c:db:74:a7:99:0e:fc:19:c4:f0:eb:c5: 4d:24:c9:65:94:9b:a8:73:2c:df:6f:8e:ae:17:85: c3:85:c7:a2:df:b0:ae:c6:6d:21:14:a6:fb:dd:e3: 6a:30:d8:f1:00:a9:c6:79:36:bb:5a:e0:90:b4:0d: bc:bc:05:46:53:e4:61:2b:a3:e4:74:da:79:04:b5: 3f:0b:18:f1:2c:0a:84:dd:3f:60:6e:04:d1:98:56: 51:45:42:89:2e:2a:d2:d4:9f:3f:79:c9:4f:45:32: fc:97:8b:2f:b8:2e:42:0f:af:00:de:49:f9:8e:39: c0:85:de:13:af:df:d3:c8:8e:e7:84:3b:30:fa:73: 51:a5:32:c0:6f:e9:52:2a:e2:64:c6:15:7c:96:19: 62:ab:7d:a7:ae:00:61:34:ef:e0:4a:e4:b6:e2:93: 25:77:77:1c:d9:fd:18:e9:5a:e2:bb:80:3c:cf:3d: c3:eb:c1:40:07:77:b3:a2:62:85:fa:87:9a:55:a0: 07:dd:88:64:f9:ac:3b:06:30:64:87:a7:53:52:f8: 59:5b:f8:ab:e3:6c:51:a9:08:b9:b2:f6:ab:6b:85: 3b:1f:ca:d6:cd:f3:36:b8:08:3d:fe:fe:63:4d:37: 49:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B0:F0:44:E6:15:47:09:64:7F:CF:A7:F2:B1:E9:6E:8B:8E:7B:DC X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.216.0/21 Signature Algorithm: sha256WithRSAEncryption 84:93:9b:c0:0b:f7:f1:f3:2c:00:0b:fa:bc:3d:b2:2f:65:75: 50:99:43:42:5d:17:e4:0a:75:b9:05:22:61:bc:7a:c3:83:32: 3e:57:ba:bc:c3:ea:c0:d3:9e:a9:4f:4f:f0:5e:eb:1c:21:8e: 98:5d:de:a3:5e:bc:4e:4e:18:5e:e9:80:af:c5:75:44:68:06: 6b:aa:1b:86:eb:27:67:cf:7c:c3:7e:8a:b3:dd:3d:82:b8:bf: dc:0a:ad:9f:26:63:f6:aa:04:c0:e3:e8:cf:46:b2:32:8b:ce: cd:0f:a6:54:f4:fb:24:5e:51:f8:6f:e9:d5:20:25:d4:0d:a2: 6e:bf:a2:18:c6:74:d5:1a:69:f0:26:bb:71:d5:7d:05:97:95: 6e:c9:5f:50:56:02:c3:2f:5a:30:3c:29:4a:f3:00:f7:ea:91: 95:2b:00:39:79:ea:3e:58:c2:19:26:d1:24:bd:9f:cd:0c:fc: d0:96:21:d2:ae:b2:fa:72:76:c7:63:de:3a:6d:b1:dd:bc:e9: d1:e8:ce:f1:5d:c0:39:a8:0f:05:fd:27:b6:20:9d:c8:91:59: 09:33:61:c5:c7:fa:f0:63:36:2c:57:bb:e4:51:74:f2:12:2f: f6:15:4b:cb:2c:1e:79:74:b2:69:69:72:03:7c:15:d0:89:74: 0a:36:b5:24 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUUCguehr2KYvnxIsdJc6T5UYL5XQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MDMzMTE1MDEwMloX DTI1MDUwNTIzNTk1OVowejFJMEcGA1UEBRNAMWUzMDRkZmVjYzRmZGUzOGJhMDJh MmM0MTYxMmFmZjA3YTJhOWMzODA5NDg0NjA5ZDRlMDVjNjZhMzg5NmYxYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiJVn5xNlyUthqPAjBZT16p823Sn mQ78GcTw68VNJMlllJuocyzfb46uF4XDhcei37Cuxm0hFKb73eNqMNjxAKnGeTa7 WuCQtA28vAVGU+RhK6PkdNp5BLU/CxjxLAqE3T9gbgTRmFZRRUKJLirS1J8/eclP RTL8l4svuC5CD68A3kn5jjnAhd4Tr9/TyI7nhDsw+nNRpTLAb+lSKuJkxhV8lhli q32nrgBhNO/gSuS24pMld3cc2f0Y6Vriu4A8zz3D68FAB3ezomKF+oeaVaAH3Yhk +aw7BjBkh6dTUvhZW/ir42xRqQi5svara4U7H8rWzfM2uAg9/v5jTTdJXQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPew8ETmFUcJZH/Pp/Kx6W6LjnvcMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1ZDZjYmFlLThiN2YtNDVhOS04ZDliLTQ1OGQxMGE5YjFjYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDn/jYMA0GCSqGSIb3DQEBCwUAA4IBAQCEk5vAC/fx8ywAC/q8PbIv ZXVQmUNCXRfkCnW5BSJhvHrDgzI+V7q8w+rA056pT0/wXuscIY6YXd6jXrxOThhe 6YCvxXVEaAZrqhuG6ydnz3zDfoqz3T2CuL/cCq2fJmP2qgTA4+jPRrIyi87ND6ZU 9PskXlH4b+nVICXUDaJuv6IYxnTVGmnwJrtx1X0Fl5VuyV9QVgLDL1owPClK8wD3 6pGVKwA5eeo+WMIZJtEkvZ/NDPzQliHSrrL6cnbHY946bbHdvOnR6M7xXcA5qA8F /Se2IJ3IkVkJM2HFx/rwYzYsV7vkUXTyEi/2FUvLLB55dLJpaXIDfBXQiXQKNrUk -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:44 2025 by rpki-client on console.sobornost.net