$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c18b0845-fc95-41d6-b476-af4e1e466849.roa File: c18b0845-fc95-41d6-b476-af4e1e466849.roa (raw, json) Hash identifier: PZauguuoWfziE8tLh5uSzOxPakhX7smEyRkW4V6FbuY= Subject key identifier: 6B:F5:CE:46:E5:AF:54:8E:E8:A4:CF:C2:3E:99:1D:02:4D:B9:6D:1C Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 794CDD71D49356D209348660652866BCE2531C16 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c18b0845-fc95-41d6-b476-af4e1e466849.roa Signing time: Fri 11 Apr 2025 00:00:39 +0000 ROA not before: Fri 11 Apr 2025 00:00:39 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4c:dd:71:d4:93:56:d2:09:34:86:60:65:28:66:bc:e2:53:1c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Apr 11 00:00:39 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=1631c862372950ad7ec81ea4d41432bee6484840bae1c6b13f7747cb82734efb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:56:aa:ba:6a:2a:1f:98:56:e7:ab:eb:df: db:2a:34:ad:ae:c4:c9:70:b1:be:57:72:43:50:64: 1d:b6:44:20:c9:bb:33:ea:fb:bd:f2:ab:c6:ed:3e: c6:76:cc:3a:a5:da:a8:3a:7a:22:24:3b:ae:1e:d2: 87:49:94:1d:83:8c:f4:fd:fd:3d:a6:3a:4b:3a:5f: 5a:63:32:cf:e1:b2:82:6b:8c:35:6f:fc:1c:dd:f1: 30:da:fa:3a:b8:b7:80:83:8b:3d:cf:94:cf:cc:f9: fb:ac:30:76:69:30:78:40:04:7a:b5:4d:ad:1b:7b: 38:f9:d0:63:bc:60:75:a4:81:6f:5f:72:e9:e5:c6: 51:be:11:2e:8d:c9:65:52:6d:1e:4d:bf:d0:32:c5: 10:ba:dd:2d:93:a2:03:0f:10:cc:87:d3:be:0e:98: d0:6e:bc:85:d6:c7:d7:a4:a3:9e:1c:db:b2:34:b2: 0b:ca:63:37:42:8f:21:97:6a:b6:5b:9e:80:d6:cd: 4e:fd:ca:d9:f0:e9:25:7a:5f:e6:a2:73:17:3b:f2: 9d:ba:f1:f6:d5:da:af:c9:4c:8a:9c:57:c6:00:35: cd:5f:f4:3e:9b:6f:99:53:a1:98:78:f7:70:65:3d: 8a:cc:82:3d:ee:ac:63:94:7f:d5:b9:9a:8d:03:07: ac:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F5:CE:46:E5:AF:54:8E:E8:A4:CF:C2:3E:99:1D:02:4D:B9:6D:1C X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c18b0845-fc95-41d6-b476-af4e1e466849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.133.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:1a:43:a4:19:f2:5a:28:ec:4f:ea:61:04:49:e1:06:ce:74: 4a:45:78:8e:c6:49:24:37:9e:ef:2d:9e:43:19:e9:e0:a3:28: 69:07:69:40:17:bc:8f:d5:7f:6b:52:6a:db:54:a7:8d:24:bd: 14:1c:58:e4:55:0a:f5:54:6d:a4:d2:aa:e8:3f:94:0f:e9:37: ed:c6:09:5e:93:44:9f:64:77:06:d3:2d:a2:f8:03:5e:f9:78: e8:72:0a:03:9d:d1:35:c9:17:ed:05:ab:9e:07:32:9e:14:68: 4a:03:87:58:ef:c1:c8:47:4a:09:50:71:f5:61:91:77:6a:a8: ec:08:3e:6c:67:83:17:84:68:82:f8:91:4a:e8:ea:ba:45:aa: 64:26:9e:44:93:9c:52:17:76:28:ed:52:b7:94:e2:3b:b6:23: 3e:1d:36:21:86:3c:68:94:b1:6a:32:d1:e7:6e:d5:26:92:1e: 03:03:e8:cf:77:bc:bb:94:61:1a:63:46:3d:ff:14:1d:df:cb: 71:e3:83:1b:8a:d2:36:c1:23:1e:60:d5:e5:bd:c7:2c:2a:8a: 29:89:f3:1e:e4:98:f3:79:f8:00:78:c7:ed:f1:d2:06:bc:d2: c2:43:6e:73:4f:f2:65:0c:8d:79:5d:2c:44:74:69:8d:ae:ab: 2d:84:0d:eb -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUeUzdcdSTVtIJNIZgZShmvOJTHBYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MDQxMTAwMDAzOVoX DTI1MDUxNjIzNTk1OVowejFJMEcGA1UEBRNAMTYzMWM4NjIzNzI5NTBhZDdlYzgx ZWE0ZDQxNDMyYmVlNjQ4NDg0MGJhZTFjNmIxM2Y3NzQ3Y2I4MjczNGVmYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRZWqrpqKh+YVuer69/bKjStrsTJ cLG+V3JDUGQdtkQgybsz6vu98qvG7T7Gdsw6pdqoOnoiJDuuHtKHSZQdg4z0/f09 pjpLOl9aYzLP4bKCa4w1b/wc3fEw2vo6uLeAg4s9z5TPzPn7rDB2aTB4QAR6tU2t G3s4+dBjvGB1pIFvX3Lp5cZRvhEujcllUm0eTb/QMsUQut0tk6IDDxDMh9O+DpjQ bryF1sfXpKOeHNuyNLILymM3Qo8hl2q2W56A1s1O/crZ8Oklel/monMXO/KduvH2 1dqvyUyKnFfGADXNX/Q+m2+ZU6GYePdwZT2KzII97qxjlH/VuZqNAwesLQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFGv1zkblr1SO6KTPwj6ZHQJNuW0cMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MxOGIwODQ1LWZjOTUtNDFkNi1iNDc2LWFmNGUxZTQ2Njg0OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAn/iFMA0GCSqGSIb3DQEBCwUAA4IBAQCPGkOkGfJaKOxP6mEESeEG znRKRXiOxkkkN57vLZ5DGengoyhpB2lAF7yP1X9rUmrbVKeNJL0UHFjkVQr1VG2k 0qroP5QP6Tftxglek0SfZHcG0y2i+ANe+XjocgoDndE1yRftBaueBzKeFGhKA4dY 78HIR0oJUHH1YZF3aqjsCD5sZ4MXhGiC+JFK6Oq6RapkJp5Ek5xSF3Yo7VK3lOI7 tiM+HTYhhjxolLFqMtHnbtUmkh4DA+jPd7y7lGEaY0Y9/xQd38tx44MbitI2wSMe YNXlvccsKoopifMe5JjzefgAeMft8dIGvNLCQ25zT/JlDI15XSxEdGmNrqsthA3r -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:50 2025 by rpki-client on console.sobornost.net