$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/fcc4293c-b24f-4fac-9395-546f748b3b13.roa File: fcc4293c-b24f-4fac-9395-546f748b3b13.roa (raw, json) Hash identifier: M7/fVbzn2ZU58wUL74kOwtYZRLnj9Hd6D+JIcOLNTus= Subject key identifier: 57:EF:4D:AF:E1:DA:35:73:1C:4F:AC:A3:77:04:F8:33:43:44:D8:54 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 1E1D64C059395261DBA2BF36135985123C57366A Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/fcc4293c-b24f-4fac-9395-546f748b3b13.roa Signing time: Mon 31 Mar 2025 15:01:30 +0000 ROA not before: Mon 31 Mar 2025 15:01:30 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:8018::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:1d:64:c0:59:39:52:61:db:a2:bf:36:13:59:85:12:3c:57:36:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Mar 31 15:01:30 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: serialNumber=ba043efb75a82cd35a5184db1491227908a1d311d498be0cab4af84a047dcf70, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:70:92:1f:2b:85:eb:76:48:57:e1:4b:3c:3a: d4:31:be:49:b3:24:53:6b:f9:72:31:c2:54:90:f5: c8:3b:67:08:1b:07:6c:fa:2d:02:23:40:48:2f:d3: 4f:e0:c7:e6:b6:d7:8d:09:51:6b:f0:2f:dd:4e:5d: 49:f5:77:f4:71:ce:d0:72:56:77:fa:0b:6e:4e:90: 9e:50:2f:7d:e0:8a:15:7a:ea:37:75:04:ed:92:d7: a7:15:79:de:b1:a8:85:99:71:cb:f6:bf:a1:ca:98: 2f:7c:ca:2d:b0:2f:26:71:0c:3c:ad:cf:65:81:00: e7:27:3b:ed:a4:c9:9b:41:e8:d9:0f:e4:0a:91:6e: 15:15:93:6d:e7:c2:14:a0:a2:14:d4:44:43:8c:9a: bb:47:24:32:f0:d2:8a:2d:f3:e0:96:04:bb:c4:7e: 7d:83:7b:62:1d:c2:68:d4:58:3d:d1:63:29:18:3c: 43:25:91:e0:87:cb:7d:0f:4b:cb:78:e8:01:a2:7a: 7d:8c:0c:df:ad:60:2b:24:60:66:be:b9:0c:cc:ef: 05:0a:00:5a:28:cc:63:58:dd:c0:9f:23:eb:3e:78: 21:24:f7:ca:6d:4f:f1:17:7d:bd:ea:20:2a:67:01: d8:d2:9d:cb:0f:9e:7c:76:5a:ad:40:b7:55:0e:e0: 0a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:EF:4D:AF:E1:DA:35:73:1C:4F:AC:A3:77:04:F8:33:43:44:D8:54 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/fcc4293c-b24f-4fac-9395-546f748b3b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:8018::/38 Signature Algorithm: sha256WithRSAEncryption 52:71:5e:04:aa:3d:2c:15:da:28:14:13:ac:42:15:c7:3c:63: 8c:d5:f7:63:a9:17:71:0b:11:58:7b:a8:a5:01:70:c5:5f:06: 2c:f5:25:a0:be:d6:e2:91:7b:8c:0e:24:f2:38:49:d4:3d:d7: e0:b6:03:14:79:ed:90:8d:a2:f5:32:e7:1f:da:0d:ce:8e:58: d1:18:02:1c:83:8d:9f:54:eb:33:05:2c:3d:40:a0:92:55:6a: 1a:50:16:f2:3f:0d:c8:72:02:2b:ce:b7:82:2c:2b:57:4a:8e: 5f:6c:27:02:f2:e7:e6:1f:ed:aa:12:ab:18:fa:f5:66:13:10: 1b:ee:29:18:30:76:e7:87:e7:15:4b:ed:42:0e:f7:98:1e:1a: 3c:d4:0a:e6:02:09:21:0b:94:fc:cc:79:f6:17:6f:8b:58:09: 4c:ce:df:80:29:96:61:49:64:3f:f3:83:1e:25:25:87:8c:a6: 3f:5b:65:00:2b:3c:69:ca:ec:4d:1e:4a:67:a2:92:11:bc:33: 2f:62:e7:b6:6d:55:98:4a:e0:3e:28:c3:3b:a9:97:1e:ff:4f: b6:73:a5:49:b1:e7:bf:61:52:c1:96:c1:2f:fc:fa:02:d7:10: 63:06:da:a0:a1:0d:c8:1c:ae:b1:97:d2:00:d3:2b:82:52:35: 22:0a:5e:98 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHh1kwFk5UmHbor82E1mFEjxXNmowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDMzMTE1MDEzMFoX DTI1MDUwNTIzNTk1OVowejFJMEcGA1UEBRNAYmEwNDNlZmI3NWE4MmNkMzVhNTE4 NGRiMTQ5MTIyNzkwOGExZDMxMWQ0OThiZTBjYWI0YWY4NGEwNDdkY2Y3MDEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnCSHyuF63ZIV+FLPDrUMb5JsyRT a/lyMcJUkPXIO2cIGwds+i0CI0BIL9NP4MfmtteNCVFr8C/dTl1J9Xf0cc7QclZ3 +gtuTpCeUC994IoVeuo3dQTtktenFXnesaiFmXHL9r+hypgvfMotsC8mcQw8rc9l gQDnJzvtpMmbQejZD+QKkW4VFZNt58IUoKIU1ERDjJq7RyQy8NKKLfPglgS7xH59 g3tiHcJo1Fg90WMpGDxDJZHgh8t9D0vLeOgBonp9jAzfrWArJGBmvrkMzO8FCgBa KMxjWN3AnyPrPnghJPfKbU/xF3296iAqZwHY0p3LD558dlqtQLdVDuAKdwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFfvTa/h2jVzHE+so3cE+DNDRNhUMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2ZjYzQyOTNjLWIyNGYtNGZhYy05Mzk1LTU0NmY3NDhiM2IxMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJA+AGAAwDQYJKoZIhvcNAQELBQADggEBAFJxXgSqPSwV2igUE6xC Fcc8Y4zV92OpF3ELEVh7qKUBcMVfBiz1JaC+1uKRe4wOJPI4SdQ91+C2AxR57ZCN ovUy5x/aDc6OWNEYAhyDjZ9U6zMFLD1AoJJVahpQFvI/DchyAivOt4IsK1dKjl9s JwLy5+Yf7aoSqxj69WYTEBvuKRgwdueH5xVL7UIO95geGjzUCuYCCSELlPzMefYX b4tYCUzO34AplmFJZD/zgx4lJYeMpj9bZQArPGnK7E0eSmeikhG8My9i57ZtVZhK 4D4owzuplx7/T7ZzpUmx579hUsGWwS/8+gLXEGMG2qChDcgcrrGX0gDTK4JSNSIK Xpg= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:54 2025 by rpki-client on console.sobornost.net