$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2247f34f-e5b1-423c-ac0f-7142ad86bd9b.roa File: 2247f34f-e5b1-423c-ac0f-7142ad86bd9b.roa (raw, json) Hash identifier: cEY4Noh6hv3NzekM9gkQ2Q3KLW2OEGVG+wuoZx32E2c= Subject key identifier: 38:F9:14:5A:19:A6:B8:DD:60:4C:53:C9:CB:49:CA:B5:14:7C:71:58 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 477149638090534A706BE3F27FA1C9A1524686B2 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2247f34f-e5b1-423c-ac0f-7142ad86bd9b.roa Signing time: Mon 21 Apr 2025 17:00:09 +0000 ROA not before: Mon 21 Apr 2025 17:00:09 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80f9:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:71:49:63:80:90:53:4a:70:6b:e3:f2:7f:a1:c9:a1:52:46:86:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Apr 21 17:00:09 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=46bbf99672f331999f7cd1565cc17cf13e1af0e28326a3442bfcbed9364de997, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3a:ac:a6:ff:f9:fa:15:f5:0b:af:6e:3f:03: 85:8f:d6:a5:b1:cc:f3:4d:21:8f:6b:90:a2:d1:35: 0b:7f:f8:23:32:b0:f0:95:62:4c:19:b3:1e:9b:ee: 69:ff:1a:a6:4c:8f:40:c7:2b:a2:f9:ae:9d:81:3f: 0f:89:64:23:e7:0e:16:5b:48:c5:bd:c3:48:e5:99: 18:02:3f:7c:09:f8:2a:61:af:71:28:c3:b7:a0:77: 9b:46:a3:dd:be:b2:d3:26:7f:63:dc:ba:a0:1b:21: 0f:10:93:5f:cf:a2:24:16:ff:92:2e:29:76:f5:67: 1b:a7:0b:f5:95:16:e5:6d:f9:1e:b6:b1:6a:dd:98: 2a:df:b9:34:26:b0:e9:b2:0b:cc:76:7c:bc:f6:0e: 48:fa:6c:d9:0f:b9:ec:91:03:3e:44:32:37:c7:60: 83:9f:7d:f2:72:e7:63:fe:a2:8f:2f:27:e0:10:14: 05:0c:d0:d1:b4:c6:44:4f:8a:ec:a3:11:7d:1f:f4: 52:a6:f1:53:14:92:76:37:a2:49:6e:0b:09:1c:80: cc:3d:6b:1c:c4:19:84:3d:c2:1d:27:14:1e:f9:cc: 37:f9:45:31:60:cb:17:7a:5b:d6:af:f2:52:de:2f: 4e:3b:40:9b:01:7f:45:7c:93:17:b1:f5:e7:84:b2: c1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F9:14:5A:19:A6:B8:DD:60:4C:53:C9:CB:49:CA:B5:14:7C:71:58 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2247f34f-e5b1-423c-ac0f-7142ad86bd9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80f9:8000::/40 Signature Algorithm: sha256WithRSAEncryption b2:49:44:bc:d8:6e:9a:3a:0a:24:b1:b1:41:a7:58:aa:ce:c6: 21:13:72:d9:bb:42:e0:2a:e4:a2:e4:d6:5b:80:43:0a:b3:74: 17:56:cc:83:63:26:4f:32:df:ab:ea:b2:db:20:3d:b6:94:84: 38:da:d6:45:90:d2:e6:e9:56:47:2b:7c:5a:3f:46:d6:6b:ff: bf:86:cc:6d:01:2c:95:19:84:f1:75:f3:25:be:fd:26:87:08: 63:4d:3b:e0:8a:26:fc:a5:ac:d0:6d:df:ea:bd:40:bd:59:00: 6e:1c:03:73:ce:4d:d1:46:93:c7:79:b0:e6:91:51:ea:47:e3: 3a:e3:cf:8d:f5:f0:d2:ce:97:a5:33:cc:a7:f5:4f:b0:5b:31: f6:4a:9e:3d:27:05:0d:02:27:31:c5:ae:82:26:72:9e:53:39: d4:e7:ab:83:fc:de:1f:1c:6e:56:57:6f:cb:68:ce:71:e1:28: 0f:2b:4a:6d:a5:7d:25:e2:45:b8:53:a3:9a:14:66:7d:6a:71: 31:46:06:c3:50:68:34:10:9b:24:d7:a0:f8:27:15:05:29:dc: 69:75:cc:34:78:b6:e2:23:1e:49:45:0e:a8:59:8c:a3:3f:d6: 55:5c:85:da:92:61:bd:b6:c5:72:e3:0d:34:87:5a:40:80:93: 10:db:4c:4e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUR3FJY4CQU0pwa+Pyf6HJoVJGhrIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDQyMTE3MDAwOVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANDZiYmY5OTY3MmYzMzE5OTlmN2Nk MTU2NWNjMTdjZjEzZTFhZjBlMjgzMjZhMzQ0MmJmY2JlZDkzNjRkZTk5NzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjqspv/5+hX1C69uPwOFj9alsczz TSGPa5Ci0TULf/gjMrDwlWJMGbMem+5p/xqmTI9Axyui+a6dgT8PiWQj5w4WW0jF vcNI5ZkYAj98CfgqYa9xKMO3oHebRqPdvrLTJn9j3LqgGyEPEJNfz6IkFv+SLil2 9Wcbpwv1lRblbfketrFq3Zgq37k0JrDpsgvMdny89g5I+mzZD7nskQM+RDI3x2CD n33ycudj/qKPLyfgEBQFDNDRtMZET4rsoxF9H/RSpvFTFJJ2N6JJbgsJHIDMPWsc xBmEPcIdJxQe+cw3+UUxYMsXelvWr/JS3i9OO0CbAX9FfJMXsfXnhLLBxQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDj5FFoZprjdYExTyctJyrUUfHFYMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzIyNDdmMzRmLWU1YjEtNDIzYy1hYzBmLTcxNDJhZDg2YmQ5Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A+YAwDQYJKoZIhvcNAQELBQADggEBALJJRLzYbpo6CiSxsUGn WKrOxiETctm7QuAq5KLk1luAQwqzdBdWzINjJk8y36vqstsgPbaUhDja1kWQ0ubp VkcrfFo/RtZr/7+GzG0BLJUZhPF18yW+/SaHCGNNO+CKJvylrNBt3+q9QL1ZAG4c A3POTdFGk8d5sOaRUepH4zrjz4318NLOl6UzzKf1T7BbMfZKnj0nBQ0CJzHFroIm cp5TOdTnq4P83h8cblZXb8toznHhKA8rSm2lfSXiRbhTo5oUZn1qcTFGBsNQaDQQ myTXoPgnFQUp3Gl1zDR4tuIjHklFDqhZjKM/1lVchdqSYb22xXLjDTSHWkCAkxDb TE4= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net