$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72c1271b-5ed8-4478-ba43-6741904af7c8.roa File: 72c1271b-5ed8-4478-ba43-6741904af7c8.roa (raw, json) Hash identifier: FQlrFCP1kSY1zbybrF7amOvh6FhvuWYUVk0NdoBJ/0Y= Subject key identifier: D5:9F:E2:C8:DA:97:17:A9:F8:2D:ED:6F:F1:3E:AD:53:D1:F9:38:94 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 69B986FF5CFD12046955D7478E804698B15FB48E Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72c1271b-5ed8-4478-ba43-6741904af7c8.roa Signing time: Mon 31 Mar 2025 15:01:06 +0000 ROA not before: Mon 31 Mar 2025 15:01:06 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b9:86:ff:5c:fd:12:04:69:55:d7:47:8e:80:46:98:b1:5f:b4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Mar 31 15:01:06 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: serialNumber=544bbc42c291070ef5337909d8fe54a1aec970b43cd4aed6077b815f573ae2d2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:f0:04:dd:5b:38:8e:8b:fa:72:d0:f7:43: b8:2c:e6:50:da:33:51:4c:d3:6c:d0:6a:ab:d2:7b: 43:b5:67:75:d2:15:7a:60:9f:ac:8e:b6:9b:e8:c7: b9:b5:cd:46:c9:e9:db:6e:7f:9b:fd:32:f0:6b:87: e1:5a:e3:e9:2c:13:f9:1b:1e:c0:d7:f1:d0:94:5a: 7a:cb:c1:ca:c8:ad:07:d8:18:1f:72:dd:eb:b8:51: b8:3d:e1:21:e9:01:f5:22:d7:36:2b:b8:f9:75:97: 44:fc:35:4a:9d:e2:42:40:1c:fd:a0:05:bb:c1:a0: 03:09:f0:67:e0:8f:f8:57:9b:eb:28:9b:fc:0f:77: c0:4b:2f:95:45:8a:77:da:01:ec:d6:55:17:8a:b3: f2:fa:1a:c8:a7:f3:a0:4f:c6:d6:08:b6:fe:57:05: 6f:02:ac:42:49:dc:df:26:ee:cf:23:75:55:39:3c: 92:21:36:2b:de:b7:ce:bd:a5:d9:ee:80:b7:ac:ab: 03:a9:ba:7f:0d:93:cd:46:e7:5a:c1:f1:0d:9e:f8: f7:60:8d:0b:92:30:e3:3e:93:d2:ea:78:6a:b8:64: 61:ac:bb:7c:4e:7d:eb:8b:c9:e5:fe:61:f2:c3:c4: 20:92:38:b5:e7:98:64:d4:e2:99:a7:03:b9:40:16: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9F:E2:C8:DA:97:17:A9:F8:2D:ED:6F:F1:3E:AD:53:D1:F9:38:94 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72c1271b-5ed8-4478-ba43-6741904af7c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.0.0/17 Signature Algorithm: sha256WithRSAEncryption 8a:8b:b7:7b:0f:5b:96:ba:bc:09:70:ba:18:bf:39:f9:05:4e: 84:b9:11:53:78:cd:84:98:97:19:83:3f:e9:ff:63:e7:f5:ad: d0:48:dc:b8:65:98:38:a7:42:9d:3c:3b:ef:1d:35:6e:8c:ff: 73:12:24:25:e7:7f:f7:52:ec:77:e6:01:de:60:31:11:ff:69: d1:86:1c:72:b6:bf:ba:21:0b:f3:e0:d1:4a:3d:c9:c1:82:e8: cc:a2:7a:fd:f8:68:cc:b8:c5:af:ea:f0:08:8a:4d:2c:d2:28: 8a:80:19:ab:65:34:cd:44:aa:6a:93:1a:96:31:18:4e:46:61: ba:f7:9f:40:55:02:3e:b4:4d:0f:80:f7:63:06:2a:14:99:8a: 55:88:d9:e5:fb:dc:fb:04:85:81:b4:44:af:d5:3e:b5:46:6e: b4:86:79:e3:55:8a:67:57:3d:85:1f:6d:86:b6:87:73:3c:28: 58:88:7b:c2:23:de:50:64:28:f5:8c:0c:2d:8d:41:f0:4d:a3: 6d:13:3e:e0:da:39:e6:49:5a:db:79:9c:d5:20:43:0f:98:a2: 7c:6a:b2:df:20:c0:66:b8:c3:50:51:4a:83:da:8b:28:60:8f: a0:49:0b:5d:b0:ec:7b:64:a2:51:f9:2f:5c:e6:b4:b2:af:84: e7:48:ce:ab -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUabmG/1z9EgRpVddHjoBGmLFftI4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MDMzMTE1MDEwNloX DTI1MDUwNTIzNTk1OVowejFJMEcGA1UEBRNANTQ0YmJjNDJjMjkxMDcwZWY1MzM3 OTA5ZDhmZTU0YTFhZWM5NzBiNDNjZDRhZWQ2MDc3YjgxNWY1NzNhZTJkMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCvwBN1bOI6L+nLQ90O4LOZQ2jNR TNNs0Gqr0ntDtWd10hV6YJ+sjrab6Me5tc1Gyenbbn+b/TLwa4fhWuPpLBP5Gx7A 1/HQlFp6y8HKyK0H2Bgfct3ruFG4PeEh6QH1Itc2K7j5dZdE/DVKneJCQBz9oAW7 waADCfBn4I/4V5vrKJv8D3fASy+VRYp32gHs1lUXirPy+hrIp/OgT8bWCLb+VwVv AqxCSdzfJu7PI3VVOTySITYr3rfOvaXZ7oC3rKsDqbp/DZPNRudawfENnvj3YI0L kjDjPpPS6nhquGRhrLt8Tn3ri8nl/mHyw8Qgkji155hk1OKZpwO5QBZ00wIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNWf4sjalxep+C3tb/E+rVPR+TiUMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcyYzEyNzFiLTVlZDgtNDQ3OC1iYTQzLTY3NDE5MDRhZjdjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQHn/gAMA0GCSqGSIb3DQEBCwUAA4IBAQCKi7d7D1uWurwJcLoYvzn5 BU6EuRFTeM2EmJcZgz/p/2Pn9a3QSNy4ZZg4p0KdPDvvHTVujP9zEiQl53/3Uux3 5gHeYDER/2nRhhxytr+6IQvz4NFKPcnBgujMonr9+GjMuMWv6vAIik0s0iiKgBmr ZTTNRKpqkxqWMRhORmG6959AVQI+tE0PgPdjBioUmYpViNnl+9z7BIWBtESv1T61 Rm60hnnjVYpnVz2FH22GtodzPChYiHvCI95QZCj1jAwtjUHwTaNtEz7g2jnmSVrb eZzVIEMPmKJ8arLfIMBmuMNQUUqD2osoYI+gSQtdsOx7ZKJR+S9c5rSyr4TnSM6r -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:46 2025 by rpki-client on console.sobornost.net