$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa File: 8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa (raw, json) Hash identifier: F3x3YtVzsFoek337osB+HoGpO3ivD+tH//fkW4Iq0Tw= Subject key identifier: 5F:88:62:1C:5E:A0:EB:61:7F:C7:E1:3F:FB:C2:74:8C:36:E9:02:AF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 14AD86EF1FA1AC4D40F203986E27360EC7663194 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa Signing time: Wed 23 Apr 2025 00:00:13 +0000 ROA not before: Wed 23 Apr 2025 00:00:13 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ad:86:ef:1f:a1:ac:4d:40:f2:03:98:6e:27:36:0e:c7:66:31:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 23 00:00:13 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=5c4e47c453aac638a13655b652808b2ed6f0114ed43fd654858668cd3503dc13, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:8e:a3:cc:54:29:d1:fb:7b:68:df:3f:0b: 2c:39:9a:d4:8b:87:05:04:c4:f0:5e:98:a1:5b:c0: db:e2:a4:b0:ea:b2:2b:fc:8b:03:16:ed:7e:84:20: 53:c0:b6:82:81:e8:be:d9:a6:45:25:24:63:ea:c3: 2e:4d:13:a5:8f:33:f6:44:0d:b9:87:28:c7:6b:83: fa:61:03:b1:47:93:ac:c9:d0:b2:72:bf:4e:d2:ff: 8e:7a:ed:e5:f2:c5:98:f0:06:3c:a3:60:8e:37:02: 85:75:b9:dc:b6:d8:ad:af:59:25:0f:2e:7c:d1:12: 2c:19:d7:f2:3a:b6:11:7b:be:55:f6:55:65:d8:14: be:7e:d2:6e:00:73:5a:13:72:cd:f8:1c:19:9e:48: 71:91:ee:80:42:d6:82:38:6a:4e:89:0d:82:09:10: 96:6a:d0:3f:8b:d3:54:5c:24:64:45:c0:78:0c:ff: d5:6b:70:81:d8:3e:da:42:c3:44:05:f0:b2:90:ab: 7a:c1:a9:14:e3:98:ad:0c:f0:9c:38:1b:f0:09:bc: 96:d8:7a:e7:10:75:ab:82:8a:de:45:a7:fe:92:f7: 88:b5:fc:ab:cb:d0:23:5a:05:3e:2e:d3:a7:2d:89: c8:4c:04:10:75:66:7e:84:b1:5e:f1:19:00:85:05: 93:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:88:62:1C:5E:A0:EB:61:7F:C7:E1:3F:FB:C2:74:8C:36:E9:02:AF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.65.0/24 Signature Algorithm: sha256WithRSAEncryption cb:6b:c0:1a:8a:e4:db:b4:2b:35:52:1d:5f:5f:e8:53:da:42: ce:41:3d:96:6a:bb:bc:1f:eb:1c:41:1c:28:31:40:a1:bd:8b: 3d:87:cb:77:d2:65:41:ff:88:4b:41:c3:b4:d0:82:53:47:dd: 38:cf:d0:b7:2a:7e:7d:29:73:eb:5c:93:55:20:da:8a:37:76: f6:5a:56:c5:ba:34:13:aa:d4:fe:e5:64:4a:22:36:74:f5:91: 35:70:24:11:86:ee:60:72:2d:04:44:28:0d:ee:f9:b1:1c:df: 48:6f:bd:cc:60:42:97:13:31:71:3e:3f:1d:b1:8a:08:5a:96: 0a:e3:2d:5f:b8:96:88:86:1d:a7:8b:99:bb:e6:2b:f1:fe:8b: 6f:d8:fc:ec:c4:23:db:06:61:27:18:5a:88:2b:46:38:a7:a1: fa:43:d3:05:7f:aa:a9:a9:93:6d:a5:97:e0:26:85:b2:d3:e4: ad:0a:b1:e8:c4:08:1d:fd:bb:e4:7b:23:15:6e:3d:cb:0c:f2: 30:b5:0c:a9:8f:74:ea:c8:2d:e0:ca:54:63:f9:9a:84:bc:b2: 03:cd:60:18:5a:4b:df:ff:ac:49:1f:8f:ee:a9:20:15:bf:e8: c7:01:f1:92:a8:11:85:a7:ea:43:a4:2d:e2:23:dd:5c:42:56: 6e:6e:62:09 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUFK2G7x+hrE1A8gOYbic2DsdmMZQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMzAwMDAxM1oX DTI1MDUyODIzNTk1OVowejFJMEcGA1UEBRNANWM0ZTQ3YzQ1M2FhYzYzOGExMzY1 NWI2NTI4MDhiMmVkNmYwMTE0ZWQ0M2ZkNjU0ODU4NjY4Y2QzNTAzZGMxMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCWOo8xUKdH7e2jfPwssOZrUi4cF BMTwXpihW8Db4qSw6rIr/IsDFu1+hCBTwLaCgei+2aZFJSRj6sMuTROljzP2RA25 hyjHa4P6YQOxR5OsydCycr9O0v+Oeu3l8sWY8AY8o2CONwKFdbncttitr1klDy58 0RIsGdfyOrYRe75V9lVl2BS+ftJuAHNaE3LN+BwZnkhxke6AQtaCOGpOiQ2CCRCW atA/i9NUXCRkRcB4DP/Va3CB2D7aQsNEBfCykKt6wakU45itDPCcOBvwCbyW2Hrn EHWrgoreRaf+kveItfyry9AjWgU+LtOnLYnITAQQdWZ+hLFe8RkAhQWT3QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFF+IYhxeoOthf8fhP/vCdIw26QKvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxODdkN2ExLWVjNGUtNGNhYi1hOGM3LTkyMWE3NDkyZTg5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9hBMA0GCSqGSIb3DQEBCwUAA4IBAQDLa8AaiuTbtCs1Uh1fX+hT 2kLOQT2Waru8H+scQRwoMUChvYs9h8t30mVB/4hLQcO00IJTR904z9C3Kn59KXPr XJNVINqKN3b2WlbFujQTqtT+5WRKIjZ09ZE1cCQRhu5gci0ERCgN7vmxHN9Ib73M YEKXEzFxPj8dsYoIWpYK4y1fuJaIhh2ni5m75ivx/otv2PzsxCPbBmEnGFqIK0Y4 p6H6Q9MFf6qpqZNtpZfgJoWy0+StCrHoxAgd/bvkeyMVbj3LDPIwtQypj3TqyC3g ylRj+ZqEvLIDzWAYWkvf/6xJH4/uqSAVv+jHAfGSqBGFp+pDpC3iI91cQlZubmIJ -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net