$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa File: 29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa (raw, json) Hash identifier: YBQx0UJ0KdD7QNHqsK5gfFe/MvuaWn0wtvGcBnvxQHk= Subject key identifier: 52:B1:8F:A4:19:5F:49:7F:56:6B:A6:A4:EE:73:B2:6D:FD:8B:51:33 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 2E3323F4DEF29359A369362A9C82CEC9266B7B27 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa Signing time: Mon 31 Mar 2025 15:01:24 +0000 ROA not before: Mon 31 Mar 2025 15:01:24 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:33:23:f4:de:f2:93:59:a3:69:36:2a:9c:82:ce:c9:26:6b:7b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Mar 31 15:01:24 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: serialNumber=a9c93eaa01f4300fb11c07d5a907fb653c0819e9174fbb33c1a377d37fc97c57, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:f0:3e:ff:ee:41:fd:f0:3c:06:fa:fd:ee: 6c:f7:c6:fa:e6:16:4d:dc:ca:2d:63:52:d2:9a:62: 89:17:cc:ac:2e:ca:0c:cd:9b:65:51:a0:47:92:c6: 37:4b:24:f7:35:7f:d8:a9:53:f6:f8:d5:84:bd:53: 2b:5e:b3:71:41:ec:e4:7e:61:4e:b3:28:19:19:7a: fc:ec:19:a9:b1:8f:cb:b0:a5:25:59:9e:0a:0a:43: 4e:26:b8:9c:8f:f7:86:01:f3:81:2c:d4:6b:6f:2e: 47:15:32:70:35:f1:f7:ef:9a:14:7e:15:af:bb:9c: 8e:bc:01:a0:76:8d:72:b9:d8:85:7a:41:3b:7c:68: 25:56:5e:08:03:f3:8e:97:73:4b:df:87:d1:bd:fc: e1:93:03:01:c4:82:3a:c5:e3:5e:a4:85:2c:ad:c9: 97:6f:11:20:6d:dd:1f:99:42:f7:88:55:07:74:78: 7b:7b:51:e6:4d:85:d7:13:76:a0:23:40:a9:e7:20: 80:1c:42:1d:0a:49:a5:41:d3:3b:66:10:84:0f:59: 75:bb:f0:71:15:fb:45:a9:44:bd:c9:78:47:51:8e: 1b:35:a8:01:8f:ee:c4:e5:e6:e1:8a:fa:d8:e1:3b: 05:52:4e:a4:8d:00:0a:27:1e:b7:af:1e:bb:f4:b9: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B1:8F:A4:19:5F:49:7F:56:6B:A6:A4:EE:73:B2:6D:FD:8B:51:33 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018:c00::/38 Signature Algorithm: sha256WithRSAEncryption 3a:62:36:29:80:b6:d9:00:ce:b5:cf:8e:db:de:a8:c1:c9:26: d4:98:b4:37:e7:4c:54:f3:0a:22:e1:f2:b8:95:d4:48:1d:ce: 6a:81:87:a9:6b:c8:c6:25:b9:3b:78:01:86:7f:ed:a0:43:0c: 91:3e:89:41:01:0e:ed:f0:53:d4:cd:5c:5e:6d:e3:a5:1f:f0: 96:7c:f6:1a:40:5a:15:b6:d8:ef:37:b3:38:a2:80:98:25:e3: 5c:0c:14:c1:41:38:6a:0b:92:b4:4f:79:f9:1d:ee:9b:3f:9c: c4:4e:cc:ad:1b:c8:6a:ea:c4:1d:98:09:0b:fa:46:4b:a8:c2: e0:ea:39:2f:8d:94:62:6b:13:2b:67:74:2c:96:e5:87:69:82: c9:db:66:cf:9a:e9:ba:64:67:16:97:06:3e:70:82:d9:ef:a9: 02:26:f5:b5:42:05:0e:c8:34:26:e7:13:8e:79:67:26:20:4a: 80:56:9c:f4:84:0e:4e:f9:3f:28:aa:df:6c:57:e6:b8:2b:95: bb:30:c6:5f:c6:c3:8d:d5:f6:48:e7:3d:78:b2:f4:ec:d3:87: aa:fb:75:bf:cf:24:aa:3a:10:6c:fe:be:a4:86:27:08:55:fe: 5d:6c:5b:c1:56:f8:c3:11:3a:7e:16:1a:ed:73:ba:89:0b:3c: be:39:c3:c1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULjMj9N7yk1mjaTYqnILOySZreycwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDMzMTE1MDEyNFoX DTI1MDUwNTIzNTk1OVowejFJMEcGA1UEBRNAYTljOTNlYWEwMWY0MzAwZmIxMWMw N2Q1YTkwN2ZiNjUzYzA4MTllOTE3NGZiYjMzYzFhMzc3ZDM3ZmM5N2M1NzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UzwPv/uQf3wPAb6/e5s98b65hZN 3MotY1LSmmKJF8ysLsoMzZtlUaBHksY3SyT3NX/YqVP2+NWEvVMrXrNxQezkfmFO sygZGXr87BmpsY/LsKUlWZ4KCkNOJricj/eGAfOBLNRrby5HFTJwNfH375oUfhWv u5yOvAGgdo1yudiFekE7fGglVl4IA/OOl3NL34fRvfzhkwMBxII6xeNepIUsrcmX bxEgbd0fmUL3iFUHdHh7e1HmTYXXE3agI0Cp5yCAHEIdCkmlQdM7ZhCED1l1u/Bx FftFqUS9yXhHUY4bNagBj+7E5ebhivrY4TsFUk6kjQAKJx63rx679LmeMwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFKxj6QZX0l/VmumpO5zsm39i1EzMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzI5ZmU0NDU0LWY3YTgtNDJmZC04YzM1LTc3YTZkNmY4ZTYwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AGAwwDQYJKoZIhvcNAQELBQADggEBADpiNimAttkAzrXPjtve qMHJJtSYtDfnTFTzCiLh8riV1EgdzmqBh6lryMYluTt4AYZ/7aBDDJE+iUEBDu3w U9TNXF5t46Uf8JZ89hpAWhW22O83sziigJgl41wMFMFBOGoLkrRPefkd7ps/nMRO zK0byGrqxB2YCQv6RkuowuDqOS+NlGJrEytndCyW5YdpgsnbZs+a6bpkZxaXBj5w gtnvqQIm9bVCBQ7INCbnE455ZyYgSoBWnPSEDk75Pyiq32xX5rgrlbswxl/Gw43V 9kjnPXiy9OzTh6r7db/PJKo6EGz+vqSGJwhV/l1sW8FW+MMROn4WGu1zuokLPL45 w8E= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net