$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa File: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (raw, json) Hash identifier: qce6iLO5G+n77P9JBoYkEe1xDrhIpqAcBDj7BJ77OkA= Subject key identifier: 31:0D:AF:09:DB:BA:E3:E3:DC:3C:86:81:63:B9:B9:38:24:61:23:D9 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 474345214F9C8B187CE64919F667BC517EF868D1 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa Signing time: Wed 23 Apr 2025 00:00:06 +0000 ROA not before: Wed 23 Apr 2025 00:00:06 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 122.248.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:43:45:21:4f:9c:8b:18:7c:e6:49:19:f6:67:bc:51:7e:f8:68:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Apr 23 00:00:06 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=5454bf12a68723128566fbb94ddbd188c7d6ef4f0729185b6b7ccc2d0e5fd351, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:28:10:35:00:c9:ed:1a:ac:94:3f:f0:26: d6:21:bd:08:cf:fa:18:a6:b9:c4:70:de:a9:b6:5d: c8:e7:3d:f6:fb:91:69:4a:c2:05:d4:e2:63:d5:ce: 20:23:9b:50:a3:2e:08:f6:a9:2f:42:20:ba:89:67: e0:8c:c5:41:de:3d:18:b1:1f:97:f6:68:38:67:c7: 38:b9:4b:da:20:45:07:e9:04:74:5f:01:c7:58:25: e8:27:40:e8:27:af:07:66:5d:d2:87:a2:f4:73:6a: f1:e5:ef:6e:17:9a:50:66:3e:be:c7:ec:be:f7:36: 98:df:dc:50:dc:73:c1:ea:53:01:6e:ca:a6:31:ce: 36:96:c7:17:8a:6b:7e:7f:e3:97:9b:bc:94:e3:75: af:36:d0:b2:f3:49:79:3d:53:a9:a8:a7:fc:6b:ad: 0c:b3:88:2c:d8:e3:36:3e:dc:60:84:00:a6:4d:56: af:80:f1:7f:62:02:0e:ad:ec:1d:f9:c9:b6:37:8c: e8:5c:5a:44:27:5b:7f:a5:45:e4:41:0f:4a:0d:3e: eb:85:c5:f4:08:7d:18:62:d2:83:04:ab:6c:d9:2f: 82:b9:ce:ec:d6:e9:06:17:0b:f8:9a:8f:b5:dd:6a: 16:4c:3c:ab:d9:d2:28:08:05:25:1b:35:c4:23:73: 3d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0D:AF:09:DB:BA:E3:E3:DC:3C:86:81:63:B9:B9:38:24:61:23:D9 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.240.0/20 Signature Algorithm: sha256WithRSAEncryption db:2b:61:1d:d7:4b:6d:13:71:a5:b1:64:99:ff:28:0b:d8:61: 86:f2:78:d8:36:1d:f4:e8:ff:a5:9b:50:e4:ce:79:89:d1:da: 4d:ec:5b:9f:58:5d:48:4c:0d:18:7d:22:25:93:57:cd:99:77: 17:bd:4e:da:bc:b1:40:70:68:e6:85:23:ab:bf:d8:e3:65:67: ab:bc:c3:00:81:90:68:5a:27:aa:73:a0:ee:32:1d:93:66:b4: ba:f1:5c:88:d0:d1:39:4b:d7:56:44:c1:f6:80:68:54:7e:52: d3:e7:bf:00:2d:22:83:9f:37:76:fe:47:f1:e1:92:73:b4:42: 29:18:91:b3:aa:f4:a8:63:ef:af:fb:cb:88:e4:4b:4a:9a:b7: 44:d6:f8:5d:47:df:5a:b8:f5:d3:2d:bf:69:c9:fd:09:b6:16: b7:50:cd:e6:63:0c:4b:5c:e1:c9:a4:e5:8c:bd:e8:ed:44:1f: 05:c0:48:0a:2a:1b:4a:09:85:7d:85:da:44:99:cc:89:5e:aa: 96:4d:37:53:44:f3:67:91:a2:a8:12:cf:d7:87:b3:a1:4b:fc: f6:ec:71:2d:4e:dd:96:14:d9:2b:e0:86:62:a3:fa:eb:43:5d: 6e:71:39:26:d9:02:b6:7b:8d:21:73:7f:0a:39:43:04:0e:e8: f3:28:0d:01 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUR0NFIU+cixh85kkZ9me8UX74aNEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MDQyMzAwMDAwNloX DTI1MDUyODIzNTk1OVowejFJMEcGA1UEBRNANTQ1NGJmMTJhNjg3MjMxMjg1NjZm YmI5NGRkYmQxODhjN2Q2ZWY0ZjA3MjkxODViNmI3Y2NjMmQwZTVmZDM1MTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZooEDUAye0arJQ/8CbWIb0Iz/oY prnEcN6ptl3I5z32+5FpSsIF1OJj1c4gI5tQoy4I9qkvQiC6iWfgjMVB3j0YsR+X 9mg4Z8c4uUvaIEUH6QR0XwHHWCXoJ0DoJ68HZl3Sh6L0c2rx5e9uF5pQZj6+x+y+ 9zaY39xQ3HPB6lMBbsqmMc42lscXimt+f+OXm7yU43WvNtCy80l5PVOpqKf8a60M s4gs2OM2PtxghACmTVavgPF/YgIOrewd+cm2N4zoXFpEJ1t/pUXkQQ9KDT7rhcX0 CH0YYtKDBKts2S+Cuc7s1ukGFwv4mo+13WoWTDyr2dIoCAUlGzXEI3M9QwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDENrwnbuuPj3DyGgWO5uTgkYSPZMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzE3N2M5NzAyLWVlMzktNDJkMS1iNzZmLTZjZWU3N2Y0ZmI0NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEevjwMA0GCSqGSIb3DQEBCwUAA4IBAQDbK2Ed10ttE3GlsWSZ/ygL 2GGG8njYNh306P+lm1DkznmJ0dpN7FufWF1ITA0YfSIlk1fNmXcXvU7avLFAcGjm hSOrv9jjZWervMMAgZBoWieqc6DuMh2TZrS68VyI0NE5S9dWRMH2gGhUflLT578A LSKDnzd2/kfx4ZJztEIpGJGzqvSoY++v+8uI5EtKmrdE1vhdR99auPXTLb9pyf0J tha3UM3mYwxLXOHJpOWMvejtRB8FwEgKKhtKCYV9hdpEmcyJXqqWTTdTRPNnkaKo Es/Xh7OhS/z27HEtTt2WFNkr4IZio/rrQ11ucTkm2QK2e40hc38KOUMEDujzKA0B -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net