$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa File: ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa (raw, json) Hash identifier: vLrbfYFBOF8tzgm2M42ljk8bcQT2VMjaHRPndTqyfZg= Subject key identifier: D2:81:52:67:8A:86:B3:F0:90:1B:22:54:BC:E9:E1:F5:54:76:BA:23 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F6926DC5C043EA5647FFE7703728893055FD079 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa Signing time: Mon 21 Apr 2025 17:00:52 +0000 ROA not before: Mon 21 Apr 2025 17:00:52 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.220.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:69:26:dc:5c:04:3e:a5:64:7f:fe:77:03:72:88:93:05:5f:d0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 17:00:52 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=ff82a237cae3959daf6dacc2d96d2af63a06a651e29b673bffb72dce17f5524c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f9:3c:fc:26:1e:be:6a:da:e0:71:a1:a2:3e: cf:63:22:3a:31:82:46:63:63:03:e2:eb:47:63:6b: 85:6b:d6:67:1c:57:42:ef:31:30:42:d9:4f:49:40: c3:a6:8a:43:88:e1:e6:9f:31:ba:63:de:6d:56:fa: 41:c2:b8:2d:61:94:8f:07:48:98:d4:68:e8:1e:07: f0:32:b0:1b:a2:95:9c:62:83:6e:ab:69:10:a9:3c: d7:29:7d:1a:e0:53:14:72:f2:26:b2:bd:98:b5:59: 90:91:cd:98:46:fb:1c:1e:9b:2e:6e:76:ba:07:ab: ea:cc:8b:6c:29:9e:bb:eb:4e:f7:c0:35:d3:d0:a8: 6c:18:71:aa:a6:60:70:92:34:fb:53:3d:64:30:ac: 0c:39:48:2c:3e:ec:bb:7e:79:91:42:cf:81:ef:af: 74:58:41:d8:b8:76:d3:79:c8:b7:42:00:ae:89:93: f2:9d:cc:5b:26:0e:2d:07:5f:44:d1:1a:31:74:95: d1:81:93:dc:52:6d:10:f5:e7:48:dd:bd:28:55:ac: b0:f4:d5:f6:05:49:98:d7:a1:3a:91:02:65:1b:d9: ae:38:c0:e9:2a:1b:46:e0:b7:f8:dd:de:94:74:91: 10:9a:d6:22:48:8c:ba:3a:98:0b:0c:c9:c8:e5:ba: b7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:81:52:67:8A:86:B3:F0:90:1B:22:54:BC:E9:E1:F5:54:76:BA:23 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ecb85da5-07d2-4c53-875d-ebf315b1e58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption c6:b5:07:cd:d4:0c:fd:e4:09:d4:eb:94:b4:cb:27:03:66:63: 6a:49:69:4c:00:79:11:63:a1:c1:19:a5:ca:ea:b0:c6:41:17: 5d:90:2f:93:36:75:18:a2:89:29:15:24:57:f9:78:74:0a:5c: ab:b3:4d:de:8b:65:9e:67:05:ff:c8:20:11:dc:ef:d4:ec:d2: e9:5b:6a:05:31:90:e7:ab:6c:fc:84:5c:87:43:d9:4d:88:54: 39:44:80:14:2d:9d:6e:1e:23:c1:95:93:be:0a:40:b6:41:e1: 09:70:0e:1a:69:21:ba:d8:2f:d6:30:a8:68:31:17:20:38:c0: 39:4e:62:ae:a9:fa:ff:e0:bb:07:4a:25:f9:92:91:54:1f:f6: b8:8e:00:44:ef:83:0d:91:92:ab:38:ec:f0:ab:17:18:3a:a2: b4:5f:87:76:aa:06:4d:62:ec:2e:53:ce:d3:96:66:1b:3a:60: fa:26:5b:3e:8b:04:c3:95:5b:17:76:22:d6:e0:10:e6:ff:7d: 95:36:7b:c9:f7:4c:a7:2d:3e:49:50:68:08:4e:74:ec:39:37: 68:f9:b3:e0:8e:3c:7b:e3:ad:6f:1f:7a:1e:85:34:ff:0d:b0: be:25:12:99:2a:2c:7a:df:a3:bc:cd:52:f2:6a:f0:d7:94:09: 63:05:22:da -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUf2km3FwEPqVkf/53A3KIkwVf0HkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE3MDA1MloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAZmY4MmEyMzdjYWUzOTU5ZGFmNmRh Y2MyZDk2ZDJhZjYzYTA2YTY1MWUyOWI2NzNiZmZiNzJkY2UxN2Y1NTI0YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Pk8/CYevmra4HGhoj7PYyI6MYJG Y2MD4utHY2uFa9ZnHFdC7zEwQtlPSUDDpopDiOHmnzG6Y95tVvpBwrgtYZSPB0iY 1GjoHgfwMrAbopWcYoNuq2kQqTzXKX0a4FMUcvImsr2YtVmQkc2YRvscHpsubna6 B6vqzItsKZ676073wDXT0KhsGHGqpmBwkjT7Uz1kMKwMOUgsPuy7fnmRQs+B7690 WEHYuHbTeci3QgCuiZPyncxbJg4tB19E0RoxdJXRgZPcUm0Q9edI3b0oVayw9NX2 BUmY16E6kQJlG9muOMDpKhtG4Lf43d6UdJEQmtYiSIy6OpgLDMnI5bq3/QIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFNKBUmeKhrPwkBsiVLzp4fVUdrojMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VjYjg1ZGE1LTA3ZDItNGM1My04NzVkLWViZjMxNWIxZTU4YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAK9wwDQYJKoZIhvcNAQELBQADggEBAMa1B83UDP3kCdTrlLTLJwNm Y2pJaUwAeRFjocEZpcrqsMZBF12QL5M2dRiiiSkVJFf5eHQKXKuzTd6LZZ5nBf/I IBHc79Ts0ulbagUxkOerbPyEXIdD2U2IVDlEgBQtnW4eI8GVk74KQLZB4QlwDhpp IbrYL9YwqGgxFyA4wDlOYq6p+v/guwdKJfmSkVQf9riOAETvgw2Rkqs47PCrFxg6 orRfh3aqBk1i7C5TztOWZhs6YPomWz6LBMOVWxd2ItbgEOb/fZU2e8n3TKctPklQ aAhOdOw5N2j5s+COPHvjrW8feh6FNP8NsL4lEpkqLHrfo7zNUvJq8NeUCWMFIto= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:52 2025 by rpki-client on console.sobornost.net