$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa File: 0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa (raw, json) Hash identifier: wP4Hpdmr/OwNXZR/z2mxgpBvFN4dWJn2rSKiJOl3I1I= Subject key identifier: CB:4F:9B:30:02:00:A3:AC:52:56:02:B7:DB:3E:1F:35:AF:C0:22:68 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 7280AEECCF59F481000FBEAC8D7D272823450EF6 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa Signing time: Mon 21 Apr 2025 17:00:06 +0000 ROA not before: Mon 21 Apr 2025 17:00:06 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:80:ae:ec:cf:59:f4:81:00:0f:be:ac:8d:7d:27:28:23:45:0e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Apr 21 17:00:06 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=64737bbc536e39fb0174c321d5cc6e287c3f447455e3d252d03fd63fda3e1fd2, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:5d:67:8a:ef:62:b6:8f:36:f0:75:1f:08: d2:ac:a8:13:ad:c9:b0:5b:4c:cb:e5:3a:1f:79:45: 14:7d:f0:22:c7:a6:a1:cb:08:4e:cc:8d:5f:b9:7d: 84:34:f5:ed:85:08:3e:8f:97:68:ea:7e:46:93:aa: 27:e1:0f:c5:d9:3c:bc:9c:a9:71:34:19:8c:d3:7a: 94:7d:f1:48:8a:2f:fa:87:1d:07:ee:fb:1f:7e:2f: f6:7a:c1:89:3a:11:2a:39:5e:aa:6a:ab:24:08:96: fa:bf:4e:4d:14:78:a9:87:53:e1:ef:4b:ed:9b:83: 17:54:c4:2d:47:ca:d5:d3:95:37:97:33:be:3c:5c: aa:33:f2:4d:da:d1:ac:b2:2f:c0:4d:b2:87:a3:57: 9d:c5:f7:45:52:8a:70:f0:bf:1f:37:da:a1:fc:1e: 07:d4:10:1b:39:94:9c:0a:d0:12:c5:9e:73:a4:8f: a7:48:60:33:ea:05:e0:cc:b6:0b:50:fa:9e:8b:20: f5:66:fc:7a:3d:6f:5b:4f:c5:f0:ee:a1:d0:79:c8: 28:8b:bb:8e:87:e0:c7:07:7e:04:e9:11:2e:89:00: 94:be:28:45:f4:bc:ea:ca:af:37:69:6c:6a:75:37: 20:33:3c:98:c6:95:58:e5:60:44:86:fc:65:ac:70: fb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4F:9B:30:02:00:A3:AC:52:56:02:B7:DB:3E:1F:35:AF:C0:22:68 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1000::/48 Signature Algorithm: sha256WithRSAEncryption 03:88:d5:93:90:b9:1d:cf:fc:61:a2:6c:e8:a7:c2:13:a9:ad: 08:3f:6c:db:6b:17:0a:7c:e5:51:12:23:9d:d9:c7:39:7e:3e: 24:3b:06:18:4a:eb:97:ff:3d:2a:26:98:b4:a9:fe:62:e1:63: 36:7d:af:a3:a7:44:bf:bc:ff:55:d0:a3:a3:76:22:21:be:df: 69:f4:94:29:b5:07:d7:df:82:65:de:2a:c6:74:9d:41:0c:37: ed:7b:7e:43:43:50:ee:be:e1:59:34:21:ed:b7:61:ee:18:15: 27:3e:6e:9b:9e:89:f4:01:a3:7a:e9:12:27:5c:51:e4:18:8e: e3:6d:1d:9c:50:eb:2a:04:14:34:bc:1d:c4:fe:c1:0e:86:75: ec:5e:9e:05:14:e7:4a:3c:49:cd:c6:40:52:bb:86:fc:38:02: fc:00:e5:d6:ce:fc:b3:6a:fc:16:2f:e6:f0:5a:87:14:2c:17: db:40:d1:8d:1e:43:ab:7d:c1:5a:9e:71:9c:7b:db:4f:30:29: 05:9e:52:6b:91:f8:7a:2c:de:54:35:98:24:02:a4:91:6e:90: dd:b2:54:cf:32:07:13:5b:d7:50:21:a5:2f:35:ef:55:2d:b3: e8:e0:5e:1f:9c:46:83:52:4a:97:cf:ca:e8:e0:66:a0:b7:c8: 3e:5d:8c:c9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcoCu7M9Z9IEAD76sjX0nKCNFDvYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDQyMTE3MDAwNloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANjQ3MzdiYmM1MzZlMzlmYjAxNzRj MzIxZDVjYzZlMjg3YzNmNDQ3NDU1ZTNkMjUyZDAzZmQ2M2ZkYTNlMWZkMjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArANdZ4rvYraPNvB1HwjSrKgTrcmw W0zL5TofeUUUffAix6ahywhOzI1fuX2ENPXthQg+j5do6n5Gk6on4Q/F2Ty8nKlx NBmM03qUffFIii/6hx0H7vsffi/2esGJOhEqOV6qaqskCJb6v05NFHiph1Ph70vt m4MXVMQtR8rV05U3lzO+PFyqM/JN2tGssi/ATbKHo1edxfdFUopw8L8fN9qh/B4H 1BAbOZScCtASxZ5zpI+nSGAz6gXgzLYLUPqeiyD1Zvx6PW9bT8Xw7qHQecgoi7uO h+DHB34E6REuiQCUvihF9Lzqyq83aWxqdTcgMzyYxpVY5WBEhvxlrHD78QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMtPmzACAKOsUlYCt9s+HzWvwCJoMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzBiMGMyZDE4LTJiNDItNGU1My05ZTZhLWQ2ZjdkNWRjMjMzNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABAAMA0GCSqGSIb3DQEBCwUAA4IBAQADiNWTkLkdz/xhomzo p8ITqa0IP2zbaxcKfOVREiOd2cc5fj4kOwYYSuuX/z0qJpi0qf5i4WM2fa+jp0S/ vP9V0KOjdiIhvt9p9JQptQfX34Jl3irGdJ1BDDfte35DQ1DuvuFZNCHtt2HuGBUn Pm6bnon0AaN66RInXFHkGI7jbR2cUOsqBBQ0vB3E/sEOhnXsXp4FFOdKPEnNxkBS u4b8OAL8AOXWzvyzavwWL+bwWocULBfbQNGNHkOrfcFannGce9tPMCkFnlJrkfh6 LN5UNZgkAqSRbpDdslTPMgcTW9dQIaUvNe9VLbPo4F4fnEaDUkqXz8ro4Gagt8g+ XYzJ -----END CERTIFICATE-----Generated at Wed Apr 23 19:52:09 2025 by rpki-client on console.sobornost.net