$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa File: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (raw, json) Hash identifier: aWmx8lm9+dbngOtB5H2OhOAmt3Vdrj6J7A7RESAkpCo= Subject key identifier: 3B:18:C8:16:A6:D6:6C:1D:9F:54:AD:B5:EB:93:4F:09:A8:1F:FE:5B Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 04FA6C8AE1C065CD78C99F71E0AADFB3D70E575F Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa Signing time: Sat 05 Apr 2025 00:00:02 +0000 ROA not before: Sat 05 Apr 2025 00:00:02 +0000 ROA not after: Sat 10 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 103.8.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 17:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:fa:6c:8a:e1:c0:65:cd:78:c9:9f:71:e0:aa:df:b3:d7:0e:57:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Apr 5 00:00:02 2025 GMT Not After : May 10 23:59:59 2025 GMT Subject: serialNumber=f176a76c282684bb853a737a165b43256117d71cd5f88312572fb46023545fb2, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:5f:5c:af:c5:09:08:7b:00:d5:a5:62:87: f3:76:52:70:f0:cc:a3:01:4b:63:65:75:db:3c:19: f5:82:c6:b3:23:e9:2d:49:c3:b4:06:19:c3:ff:8e: 6b:6a:7a:37:f8:df:8e:6d:47:bb:50:f8:96:d4:7f: ff:27:d1:d0:ee:1c:2d:81:57:84:a1:60:3a:16:6b: 5c:43:19:27:eb:17:3d:7a:a8:c0:c8:a2:c2:2f:c8: cb:41:af:06:29:63:39:90:32:5c:dd:e6:cd:ba:b9: a5:a9:47:21:17:94:c3:82:4e:59:7c:17:f1:41:a0: c0:3a:61:68:42:26:9f:dc:bf:8f:c8:e1:21:ca:ac: f0:ae:44:eb:a9:b1:bb:c9:95:b6:b4:b4:23:29:73: e3:52:af:d7:1e:82:d6:86:4e:c7:c0:25:de:af:33: 28:a1:37:6e:56:28:9f:bc:a8:2f:5c:f9:3f:79:2d: d4:42:42:c4:ac:0c:1f:f7:9d:e1:9a:51:4c:5d:a8: 80:8f:5f:f9:16:a9:14:f4:a8:6a:28:1b:19:91:6a: f3:8e:48:a4:4b:06:9c:3c:40:cf:99:ed:d7:9c:f3: 13:de:ed:fb:97:2f:4b:c4:bd:61:09:fc:07:ca:7b: b9:17:ab:e5:a9:42:0f:ff:3e:e9:22:03:09:de:1e: a2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:18:C8:16:A6:D6:6C:1D:9F:54:AD:B5:EB:93:4F:09:A8:1F:FE:5B X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.8.172.0/22 Signature Algorithm: sha256WithRSAEncryption 55:78:ec:df:9e:b9:60:13:68:2d:38:84:67:03:61:9c:0d:ad: d5:c5:bf:d6:ba:eb:bc:fc:bb:82:b6:13:e2:31:ec:e1:61:6e: f9:32:f1:b2:19:f7:83:22:4e:f7:c6:5b:56:9a:36:78:7b:42: f3:b9:4a:36:40:02:ad:51:d1:13:be:88:de:cb:5b:7c:cc:9e: 4a:b0:0b:60:fc:fc:a2:14:d5:05:05:90:99:be:cd:30:ff:45: 5a:ba:f9:23:4e:e1:a3:14:3f:e6:a9:73:a0:3b:d7:f1:51:c0: 3c:83:41:c1:4b:96:18:1a:46:ec:ae:6f:ec:60:04:9c:2e:0f: f4:e2:d3:4b:68:14:6a:f2:ac:c3:6d:16:31:30:13:88:ac:18: 18:c2:7c:d6:81:61:4c:30:3e:10:63:b7:6f:66:3d:e7:2c:4c: 57:91:55:c9:ec:01:49:7f:da:69:e1:8e:0c:e9:ef:35:2f:b2: 5b:8f:14:b4:aa:b4:cf:f8:00:5d:68:36:09:ed:8b:7e:61:56: 6b:95:af:a9:91:74:22:8c:bc:25:71:e1:a9:84:46:79:d1:80: 4d:5f:a8:d5:15:a3:fe:d6:19:e1:7c:2b:e9:d3:78:db:5a:de: 52:7b:e5:27:29:9b:cf:e5:bd:6d:bb:f0:ca:36:1b:76:ec:21: f0:79:4c:de -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUBPpsiuHAZc14yZ9x4Krfs9cOV18wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MDQwNTAwMDAwMloX DTI1MDUxMDIzNTk1OVowejFJMEcGA1UEBRNAZjE3NmE3NmMyODI2ODRiYjg1M2E3 MzdhMTY1YjQzMjU2MTE3ZDcxY2Q1Zjg4MzEyNTcyZmI0NjAyMzU0NWZiMjEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxxfXK/FCQh7ANWlYofzdlJw8Myj AUtjZXXbPBn1gsazI+ktScO0BhnD/45rano3+N+ObUe7UPiW1H//J9HQ7hwtgVeE oWA6FmtcQxkn6xc9eqjAyKLCL8jLQa8GKWM5kDJc3ebNurmlqUchF5TDgk5ZfBfx QaDAOmFoQiaf3L+PyOEhyqzwrkTrqbG7yZW2tLQjKXPjUq/XHoLWhk7HwCXerzMo oTduViifvKgvXPk/eS3UQkLErAwf953hmlFMXaiAj1/5FqkU9KhqKBsZkWrzjkik SwacPEDPme3XnPMT3u37ly9LxL1hCfwHynu5F6vlqUIP/z7pIgMJ3h6iPwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDsYyBam1mwdn1StteuTTwmoH/5bMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi L2VhMWQwMmFhLTZkMjUtNGIzNi1iNDJlLWJhODM3ZDQ5ZTI2MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZwisMA0GCSqGSIb3DQEBCwUAA4IBAQBVeOzfnrlgE2gtOIRnA2Gc Da3Vxb/Wuuu8/LuCthPiMezhYW75MvGyGfeDIk73xltWmjZ4e0LzuUo2QAKtUdET vojey1t8zJ5KsAtg/PyiFNUFBZCZvs0w/0VauvkjTuGjFD/mqXOgO9fxUcA8g0HB S5YYGkbsrm/sYAScLg/04tNLaBRq8qzDbRYxMBOIrBgYwnzWgWFMMD4QY7dvZj3n LExXkVXJ7AFJf9pp4Y4M6e81L7JbjxS0qrTP+ABdaDYJ7Yt+YVZrla+pkXQijLwl ceGphEZ50YBNX6jVFaP+1hnhfCvp03jbWt5Se+UnKZvP5b1tu/DKNht27CHweUze -----END CERTIFICATE-----Generated at Wed Apr 23 19:52:09 2025 by rpki-client on console.sobornost.net