$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa File: e4a99edb-d5fe-48fe-a94d-645381e8080f.roa (raw, json) Hash identifier: ERJ7dB4goVSReE8PTzebUNIOlbP7fyTCK3BXGwDaPvE= Subject key identifier: F3:76:28:5C:62:61:47:68:AD:F3:47:F2:C3:D0:57:22:10:9C:81:66 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 48D5E74E5314D33027EE57EEBE07541DF1DF1919 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa Signing time: Mon 21 Apr 2025 17:00:49 +0000 ROA not before: Mon 21 Apr 2025 17:00:49 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.219.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d5:e7:4e:53:14:d3:30:27:ee:57:ee:be:07:54:1d:f1:df:19:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 17:00:49 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=0a2dff83a2ccc4cd6053d1d823985b24f2333ee981c6ef9b4d498c6f9574417b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:16:6b:80:10:96:10:3a:6e:0b:01:8c:ad:9a: d4:71:a5:41:a2:62:b8:4b:db:08:73:9b:e5:6f:d0: e5:78:72:4b:a0:dc:eb:58:96:81:e7:ca:f5:13:67: 77:5f:30:27:13:11:99:15:c3:39:ff:88:98:78:df: 86:34:45:32:cd:1b:32:53:5d:86:f2:cf:e4:69:a9: f5:05:42:e9:6a:14:c7:d8:7b:4f:b7:66:cb:e9:27: c7:7a:fa:ab:99:39:99:e3:cc:66:7d:21:d7:78:c4: 9e:2f:e9:b1:5c:30:0f:a8:c9:51:18:f2:46:d4:ae: cc:36:43:87:53:27:1a:8c:be:84:50:36:6a:02:97: b0:a0:66:e7:22:d0:8b:ad:9d:c0:9e:8e:8c:61:86: 5c:e4:e0:d7:a7:34:5f:c8:d4:92:92:65:f9:39:7e: 3c:cb:21:4a:62:37:68:b3:aa:11:43:84:f5:de:2d: a1:28:d5:8d:92:7d:b7:51:54:06:5f:7b:fd:6f:11: da:2f:14:41:4c:14:57:78:1a:59:a3:ae:e3:d0:33: 7d:9a:99:b3:bc:f4:c9:dc:12:34:70:81:ef:2c:a5: e7:0f:57:ac:4c:ee:99:5d:86:20:70:1f:fc:81:76: 77:45:d5:e3:18:08:e6:ce:15:84:f8:c1:32:a7:77: 89:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:76:28:5C:62:61:47:68:AD:F3:47:F2:C3:D0:57:22:10:9C:81:66 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e4a99edb-d5fe-48fe-a94d-645381e8080f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.219.0.0/16 Signature Algorithm: sha256WithRSAEncryption 55:df:d4:5c:39:37:89:a9:9e:8f:1e:e9:ef:3f:7b:fa:02:51: 19:79:d9:0f:f4:93:c5:41:e7:6b:80:52:6b:f7:6c:03:f7:0c: 3a:18:7d:6a:32:5f:26:43:c7:83:77:b2:15:0b:0f:4a:94:42: ba:ac:36:95:0b:1f:83:0d:5b:7f:a3:5c:d7:6e:23:f8:cb:aa: 42:27:08:23:af:ad:3f:ac:d1:4a:a8:66:9f:fe:eb:4e:10:7a: a8:24:54:3b:82:96:e7:e8:31:b5:b7:a1:8f:65:c1:f3:2f:c1: fb:46:0f:f3:02:7b:68:0c:a6:e0:26:0b:18:d0:1e:31:4a:72: 2e:8a:09:2a:7c:53:aa:a0:ab:b3:0a:af:54:67:11:57:3d:d9: d1:6d:45:9a:87:78:3b:dc:c3:b5:c7:92:60:e6:c8:0e:da:2d: 02:8a:93:f0:e9:2e:8c:bf:5c:9b:d7:4b:90:4e:04:2c:84:6a: d3:93:38:03:bf:6f:e9:dc:28:fb:7d:d4:ae:43:03:8b:26:b7: 9c:89:0e:33:7f:b4:42:85:f6:8a:fa:3d:6b:19:e3:b0:19:f2: 7b:cf:3d:e2:a0:c1:37:74:19:5d:94:a0:b5:3a:d8:de:9f:3c: 6e:5a:58:76:dc:1a:95:b9:f2:3b:79:e2:c2:98:39:4f:68:3f: 31:78:b7:ea -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUSNXnTlMU0zAn7lfuvgdUHfHfGRkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE3MDA0OVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMGEyZGZmODNhMmNjYzRjZDYwNTNk MWQ4MjM5ODViMjRmMjMzM2VlOTgxYzZlZjliNGQ0OThjNmY5NTc0NDE3YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xZrgBCWEDpuCwGMrZrUcaVBomK4 S9sIc5vlb9DleHJLoNzrWJaB58r1E2d3XzAnExGZFcM5/4iYeN+GNEUyzRsyU12G 8s/kaan1BULpahTH2HtPt2bL6SfHevqrmTmZ48xmfSHXeMSeL+mxXDAPqMlRGPJG 1K7MNkOHUycajL6EUDZqApewoGbnItCLrZ3Ano6MYYZc5ODXpzRfyNSSkmX5OX48 yyFKYjdos6oRQ4T13i2hKNWNkn23UVQGX3v9bxHaLxRBTBRXeBpZo67j0DN9mpmz vPTJ3BI0cIHvLKXnD1esTO6ZXYYgcB/8gXZ3RdXjGAjmzhWE+MEyp3eJUwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFPN2KFxiYUdorfNH8sPQVyIQnIFmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U0YTk5ZWRiLWQ1ZmUtNDhmZS1hOTRkLTY0NTM4MWU4MDgwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9swDQYJKoZIhvcNAQELBQADggEBAFXf1Fw5N4mpno8e6e8/e/oC URl52Q/0k8VB52uAUmv3bAP3DDoYfWoyXyZDx4N3shULD0qUQrqsNpULH4MNW3+j XNduI/jLqkInCCOvrT+s0UqoZp/+604QeqgkVDuClufoMbW3oY9lwfMvwftGD/MC e2gMpuAmCxjQHjFKci6KCSp8U6qgq7MKr1RnEVc92dFtRZqHeDvcw7XHkmDmyA7a LQKKk/DpLoy/XJvXS5BOBCyEatOTOAO/b+ncKPt91K5DA4smt5yJDjN/tEKF9or6 PWsZ47AZ8nvPPeKgwTd0GV2UoLU62N6fPG5aWHbcGpW58jt54sKYOU9oPzF4t+o= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:52 2025 by rpki-client on console.sobornost.net