$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa File: 4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa (raw, json) Hash identifier: 9Cu3sMIOvJbiXT4QemB0aP4Dse8bfnB6AkPJJ1M4Oro= Subject key identifier: 41:A6:66:C7:B6:4E:12:E3:30:37:36:C6:F9:CE:F6:70:F3:88:27:BB Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 7FFED990DC27594237AA3A38C32EA40E6CA04C12 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa Signing time: Mon 21 Apr 2025 17:00:05 +0000 ROA not before: Mon 21 Apr 2025 17:00:05 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2403:b300:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:fe:d9:90:dc:27:59:42:37:aa:3a:38:c3:2e:a4:0e:6c:a0:4c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Apr 21 17:00:05 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=34641ce20f7e83d9de26e464259d32e4a73492a80d79fd10529c85d725fdabb3, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:12:87:e4:cb:02:32:2c:14:05:bd:03:69: d5:f8:6c:cf:78:78:85:15:b4:17:d6:55:c3:06:26: f5:49:a9:95:a4:a9:89:9d:17:d0:54:a8:7c:eb:40: fd:d9:ed:af:98:a0:42:cb:97:3d:07:fc:e9:39:08: 8b:1a:e0:08:5b:4e:ce:fa:7b:32:cc:4f:d8:40:b6: 94:b0:5a:e8:f9:b4:33:b4:ce:ac:3a:5b:13:8c:b9: 7a:0b:f3:21:ce:9b:d1:27:ce:53:be:cd:81:1d:4b: d5:b3:0d:42:5b:7e:97:0c:35:60:7d:e2:da:b2:0f: 51:73:aa:ce:ee:34:a9:55:d5:76:95:2b:cd:86:7e: a8:33:6b:3e:10:67:e4:9e:3e:9a:a6:d6:76:12:d1: b9:69:6b:73:84:b5:50:c6:3c:3d:f9:7c:fb:ca:af: 27:bc:10:1f:3c:b6:1c:35:be:6c:b7:90:49:1e:d9: 30:88:66:cc:01:64:2d:4e:17:ea:b7:b6:45:10:26: 14:31:a2:0e:02:94:e3:1a:68:a7:24:73:1b:63:7c: 41:5a:f0:ff:d5:11:35:ac:0e:e6:f6:de:7d:a2:23: 3d:bf:86:16:9c:4b:96:32:95:cd:87:95:f3:3a:f7: ef:a7:72:8c:a4:41:6b:fc:b7:8f:04:97:b8:81:50: c1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A6:66:C7:B6:4E:12:E3:30:37:36:C6:F9:CE:F6:70:F3:88:27:BB X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/4bbd1bdf-866e-4b25-9ac6-e929a05080b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300:1000::/48 Signature Algorithm: sha256WithRSAEncryption 53:3b:66:7a:1f:d5:57:55:c7:5f:fa:e0:cd:63:57:68:e4:b4: b5:96:28:a5:48:31:f7:ff:d8:ac:ca:78:94:45:8e:47:3f:df: c3:e5:bd:be:b6:e7:10:00:cc:4c:dd:fa:6f:32:1f:64:34:93: c4:c4:2c:59:6e:55:8b:db:0d:ed:bd:bd:6b:a0:7d:7d:2d:5e: 2a:d2:84:1b:31:c3:41:09:e5:d1:8e:41:87:5b:14:04:b2:97: a5:be:52:2d:26:84:63:43:3e:2c:7f:9f:d0:e9:19:a0:f6:ab: 58:1e:95:8d:ee:31:7f:2e:fe:42:cf:bf:ad:73:d1:2a:0e:63: 40:73:a2:60:cb:5e:dc:52:68:bd:aa:47:bc:67:23:59:b7:25: 55:04:eb:7a:46:80:25:3a:85:07:58:85:8e:b9:08:b0:9d:65: 03:7b:5b:2d:7c:a7:2a:d6:83:90:2e:f0:f6:df:cf:eb:36:77: c6:4a:b5:1b:1d:75:8f:c5:79:5f:0c:b4:fe:3b:d5:93:b1:b3: a8:cf:6e:a5:00:70:13:fc:d7:b5:ad:70:cc:9c:f1:3a:20:06: 16:b0:a3:68:96:0b:fe:5c:23:b9:5c:a5:20:6d:69:0b:b8:93: 4a:b8:96:34:3f:2b:5d:3b:bf:6e:34:14:a5:29:ec:03:a8:8b: 5a:79:ce:79 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUf/7ZkNwnWUI3qjo4wy6kDmygTBIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDQyMTE3MDAwNVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMzQ2NDFjZTIwZjdlODNkOWRlMjZl NDY0MjU5ZDMyZTRhNzM0OTJhODBkNzlmZDEwNTI5Yzg1ZDcyNWZkYWJiMzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zQSh+TLAjIsFAW9A2nV+GzPeHiF FbQX1lXDBib1SamVpKmJnRfQVKh860D92e2vmKBCy5c9B/zpOQiLGuAIW07O+nsy zE/YQLaUsFro+bQztM6sOlsTjLl6C/MhzpvRJ85Tvs2BHUvVsw1CW36XDDVgfeLa sg9Rc6rO7jSpVdV2lSvNhn6oM2s+EGfknj6aptZ2EtG5aWtzhLVQxjw9+Xz7yq8n vBAfPLYcNb5st5BJHtkwiGbMAWQtThfqt7ZFECYUMaIOApTjGminJHMbY3xBWvD/ 1RE1rA7m9t59oiM9v4YWnEuWMpXNh5XzOvfvp3KMpEFr/LePBJe4gVDB/wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEGmZse2ThLjMDc2xvnO9nDziCe7MB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzRiYmQxYmRmLTg2NmUtNGIyNS05YWM2LWU5MjlhMDUwODBiOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzABAAMA0GCSqGSIb3DQEBCwUAA4IBAQBTO2Z6H9VXVcdf+uDN Y1do5LS1liilSDH3/9isyniURY5HP9/D5b2+tucQAMxM3fpvMh9kNJPExCxZblWL 2w3tvb1roH19LV4q0oQbMcNBCeXRjkGHWxQEspelvlItJoRjQz4sf5/Q6Rmg9qtY HpWN7jF/Lv5Cz7+tc9EqDmNAc6Jgy17cUmi9qke8ZyNZtyVVBOt6RoAlOoUHWIWO uQiwnWUDe1stfKcq1oOQLvD238/rNnfGSrUbHXWPxXlfDLT+O9WTsbOoz26lAHAT /Ne1rXDMnPE6IAYWsKNolgv+XCO5XKUgbWkLuJNKuJY0PytdO79uNBSlKewDqIta ec55 -----END CERTIFICATE-----Generated at Wed Apr 23 19:52:09 2025 by rpki-client on console.sobornost.net