$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c886fdcc-d9c4-485a-a941-7aa2c7d093e3.roa File: c886fdcc-d9c4-485a-a941-7aa2c7d093e3.roa (raw, json) Hash identifier: 9Ll7t9/WTTsxTBkdfRyoeA45BBmMI7ZhKxzBip73jyw= Subject key identifier: 03:2C:C5:2F:C0:00:19:C1:2A:0F:9E:BB:77:B7:20:9C:BA:CC:7E:F4 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 52C13A4EB371CC187557E2677CEE4BB51318AA4E Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c886fdcc-d9c4-485a-a941-7aa2c7d093e3.roa Signing time: Mon 21 Apr 2025 17:00:12 +0000 ROA not before: Mon 21 Apr 2025 17:00:12 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fe:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c1:3a:4e:b3:71:cc:18:75:57:e2:67:7c:ee:4b:b5:13:18:aa:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Apr 21 17:00:12 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=21697aa3442de39de9fe2584ad8d3acda09c132ee0a4931c8d33828d3d5a0c42, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:57:ec:6c:9e:9c:6e:48:ee:8f:48:d3:0a:c2: cd:2b:77:ae:ae:81:f1:1e:fc:e4:c1:53:29:05:14: 97:c7:00:38:7d:85:37:a0:c5:94:5b:47:d5:3c:fe: 72:7c:0f:53:93:86:e7:a5:50:4e:96:99:16:25:da: 1a:c2:f6:cf:2a:1a:03:19:aa:67:57:cf:7d:64:21: 70:ae:86:a7:69:30:08:59:cd:75:75:40:c0:17:08: 5b:0b:c4:94:94:81:f3:e1:6f:51:6e:2f:3a:1a:2c: 89:b8:46:a9:cd:62:40:f4:f8:ec:24:87:24:49:20: 19:9c:6c:4a:ba:30:93:85:0b:b0:bc:14:e2:d4:6c: d4:f5:6a:b4:ef:36:32:ed:0b:72:26:4d:38:a4:f1: 33:c4:db:82:bc:df:b3:d2:50:39:33:00:82:76:7a: 04:4a:9e:7d:c4:e1:1d:aa:1e:d3:52:dc:bf:64:b7: bd:71:d9:12:eb:75:f7:d4:7b:1c:d8:37:b1:66:70: ad:aa:38:eb:9c:dc:41:b1:65:6f:3d:e8:97:45:a3: 38:d4:ca:97:29:50:79:58:c4:5e:ff:54:3d:0b:46: 80:5a:25:8a:bd:b1:48:97:53:dd:2f:05:7b:8d:6b: 9c:5f:54:e5:71:c9:a0:7c:b7:61:c0:5c:b2:04:3c: 5e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2C:C5:2F:C0:00:19:C1:2A:0F:9E:BB:77:B7:20:9C:BA:CC:7E:F4 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c886fdcc-d9c4-485a-a941-7aa2c7d093e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fe:4000::/40 Signature Algorithm: sha256WithRSAEncryption 41:68:6f:27:68:83:6b:50:0d:e0:ac:47:34:53:b5:03:f3:2b: 46:8e:3c:37:3b:2b:5a:24:3d:93:4a:a0:d4:2a:87:c7:23:6a: 67:20:44:7f:77:52:85:71:04:4d:5b:2d:b1:98:5c:9c:8d:88: 9a:3a:37:11:d6:68:21:7a:74:69:e1:58:2e:eb:5a:2c:13:27: d9:46:a0:e3:00:85:4d:8f:69:09:42:f6:57:cb:bf:65:83:c3: 4d:70:e7:9b:ca:a2:dd:b3:f3:f1:1c:33:e8:ed:68:d2:bc:13: 8b:8b:67:07:d2:91:ab:27:41:31:42:9b:0d:8a:fa:15:a7:d4: 0b:65:68:f9:bb:1b:68:10:08:5b:2f:d6:92:d2:1d:eb:fc:27: 99:aa:92:04:7b:01:76:5c:a5:06:6a:9e:4a:77:1e:51:39:92: 5a:66:3f:ad:bb:53:80:02:e8:4b:3e:10:2e:5a:e3:ae:53:d9: 03:36:b2:89:ba:bc:43:a4:04:9f:4f:46:e2:99:2b:50:fd:5e: f4:f8:a6:12:23:c0:f2:4f:29:fa:cf:5b:7a:9d:25:7b:b4:08: 3b:a6:c0:86:68:62:a6:4f:1c:b1:08:8e:83:2d:8a:e3:ef:f4: 0f:b1:48:e3:bb:66:77:bd:e6:5b:3b:23:7f:6e:bd:c2:72:86: 46:05:51:d6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUsE6TrNxzBh1V+JnfO5LtRMYqk4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDQyMTE3MDAxMloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMjE2OTdhYTM0NDJkZTM5ZGU5ZmUy NTg0YWQ4ZDNhY2RhMDljMTMyZWUwYTQ5MzFjOGQzMzgyOGQzZDVhMGM0MjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1fsbJ6cbkjuj0jTCsLNK3euroHx HvzkwVMpBRSXxwA4fYU3oMWUW0fVPP5yfA9Tk4bnpVBOlpkWJdoawvbPKhoDGapn V899ZCFwroanaTAIWc11dUDAFwhbC8SUlIHz4W9Rbi86GiyJuEapzWJA9PjsJIck SSAZnGxKujCThQuwvBTi1GzU9Wq07zYy7QtyJk04pPEzxNuCvN+z0lA5MwCCdnoE Sp59xOEdqh7TUty/ZLe9cdkS63X31Hsc2DexZnCtqjjrnNxBsWVvPeiXRaM41MqX KVB5WMRe/1Q9C0aAWiWKvbFIl1PdLwV7jWucX1TlccmgfLdhwFyyBDxenQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAMsxS/AABnBKg+eu3e3IJy6zH70MB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2M4ODZmZGNjLWQ5YzQtNDg1YS1hOTQxLTdhYTJjN2QwOTNlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJA+A/kAwDQYJKoZIhvcNAQELBQADggEBAEFobydog2tQDeCsRzRT tQPzK0aOPDc7K1okPZNKoNQqh8cjamcgRH93UoVxBE1bLbGYXJyNiJo6NxHWaCF6 dGnhWC7rWiwTJ9lGoOMAhU2PaQlC9lfLv2WDw01w55vKot2z8/EcM+jtaNK8E4uL ZwfSkasnQTFCmw2K+hWn1AtlaPm7G2gQCFsv1pLSHev8J5mqkgR7AXZcpQZqnkp3 HlE5klpmP627U4AC6Es+EC5a465T2QM2som6vEOkBJ9PRuKZK1D9XvT4phIjwPJP KfrPW3qdJXu0CDumwIZoYqZPHLEIjoMtiuPv9A+xSOO7Zne95ls7I39uvcJyhkYF UdY= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:54 2025 by rpki-client on console.sobornost.net