$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa File: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (raw, json) Hash identifier: BYXaRbdt8KoCkkTeiHvqn7XvTC5pBCIvMqVsYwPYkL0= Subject key identifier: 89:B9:BB:3F:0A:B5:A3:BA:BF:C3:C1:00:E9:C8:35:C1:FC:E5:6B:15 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 170E621286D924B2B76A43FFE165586FECE97190 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa Signing time: Wed 23 Apr 2025 00:00:08 +0000 ROA not before: Wed 23 Apr 2025 00:00:08 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0e:62:12:86:d9:24:b2:b7:6a:43:ff:e1:65:58:6f:ec:e9:71:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Apr 23 00:00:08 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=f7e755a5b6cae18a6b9ae9ae87586dc75d251ac3c8a69a9ca0c5bdc21e30a9be, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:11:7f:c6:77:c5:72:e1:40:40:7c:f1:b0:78: ee:94:e0:c5:6c:4c:db:e6:a0:78:56:84:4f:76:45: fc:1a:72:6e:ae:f9:82:fb:8d:0b:e7:bb:28:21:cd: dc:e7:dc:fd:92:fe:e9:3d:9d:0e:33:95:0b:b0:75: a8:03:1b:0e:79:1f:fe:3e:8f:b1:33:af:2f:dd:07: 44:15:dc:62:3c:38:c7:2a:f3:81:89:45:36:f7:84: 64:d8:6c:10:b3:66:8b:3a:d4:1e:62:b5:da:0b:58: 4a:17:8e:da:10:11:2c:45:fb:24:56:85:e8:b8:7a: 06:a5:0a:90:ba:4b:a3:6f:15:1e:d8:d9:c2:7f:e4: 78:da:89:29:b0:df:19:2d:32:93:a8:91:f4:1f:cf: 06:49:12:57:67:76:84:f6:5e:2f:6f:b2:cd:6b:29: 11:9f:80:26:64:02:d5:c9:cd:55:8c:9a:ab:db:2d: 2c:5f:00:81:b7:5d:5f:02:94:5f:ea:ca:c5:d8:81: ef:53:75:a7:b5:31:d8:fb:7a:23:07:3a:a0:2b:6f: 8c:9b:ee:6b:bc:28:c2:2b:de:03:2b:4c:6a:c7:ee: 8b:fd:90:26:2e:9d:d1:81:39:90:d0:61:6f:b8:11: c9:e8:4a:25:24:dd:9d:39:c8:86:76:48:dd:09:1a: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:BB:3F:0A:B5:A3:BA:BF:C3:C1:00:E9:C8:35:C1:FC:E5:6B:15 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/48a67156-122e-41d4-a2a8-8046cc5ecc41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.238.0/23 Signature Algorithm: sha256WithRSAEncryption 06:3f:5f:d0:95:76:76:c9:cd:ae:41:69:85:d1:23:46:85:a4: eb:74:a0:b9:06:4e:32:79:08:0c:75:78:bc:fb:e5:09:bf:fd: fc:ef:09:61:b1:5a:9c:75:d0:da:92:74:b0:1e:2c:21:db:11: b5:49:d6:89:f5:2f:8a:09:43:51:93:5c:ff:de:9b:a2:04:38: 96:a4:2e:f5:4f:c2:42:5c:44:8e:ef:c1:d5:5f:0c:21:f4:e8: 9c:97:53:fb:43:8b:5b:5e:10:44:10:7b:66:52:96:eb:b2:07: 7e:92:f5:41:b1:b1:68:d8:a1:a2:cf:7b:02:6f:13:c8:f7:cc: ae:d1:be:6e:29:98:f6:14:ad:71:2e:e1:82:64:a9:56:67:96: 6f:2e:e6:39:f7:d7:18:5e:56:10:55:b9:e3:68:b2:3c:35:6a: 14:07:e5:3b:13:d6:62:02:33:a2:3b:4e:65:1e:89:ac:16:58: 28:fc:f6:a5:cf:6d:69:26:be:c6:78:b7:38:c8:0a:54:2a:62: 6b:5b:f7:98:9a:40:16:9b:3b:4d:63:60:c5:99:55:16:81:bb: 55:c4:77:42:ba:a5:24:12:ec:09:33:91:32:66:a2:7e:cc:b8: 5e:c1:ff:db:b8:c0:91:bd:03:02:0d:f3:ef:20:d0:d9:17:14: be:a8:25:b3 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUFw5iEobZJLK3akP/4WVYb+zpcZAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDQyMzAwMDAwOFoX DTI1MDUyODIzNTk1OVowejFJMEcGA1UEBRNAZjdlNzU1YTViNmNhZTE4YTZiOWFl OWFlODc1ODZkYzc1ZDI1MWFjM2M4YTY5YTljYTBjNWJkYzIxZTMwYTliZTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBF/xnfFcuFAQHzxsHjulODFbEzb 5qB4VoRPdkX8GnJurvmC+40L57soIc3c59z9kv7pPZ0OM5ULsHWoAxsOeR/+Po+x M68v3QdEFdxiPDjHKvOBiUU294Rk2GwQs2aLOtQeYrXaC1hKF47aEBEsRfskVoXo uHoGpQqQukujbxUe2NnCf+R42okpsN8ZLTKTqJH0H88GSRJXZ3aE9l4vb7LNaykR n4AmZALVyc1VjJqr2y0sXwCBt11fApRf6srF2IHvU3WntTHY+3ojBzqgK2+Mm+5r vCjCK94DK0xqx+6L/ZAmLp3RgTmQ0GFvuBHJ6EolJN2dOciGdkjdCRpJ6QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFIm5uz8KtaO6v8PBAOnINcH85WsVMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzQ4YTY3MTU2LTEyMmUtNDFkNC1hMmE4LTgwNDZjYzVlY2M0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBrynuMA0GCSqGSIb3DQEBCwUAA4IBAQAGP1/QlXZ2yc2uQWmF0SNG haTrdKC5Bk4yeQgMdXi8++UJv/387wlhsVqcddDaknSwHiwh2xG1SdaJ9S+KCUNR k1z/3puiBDiWpC71T8JCXESO78HVXwwh9Oicl1P7Q4tbXhBEEHtmUpbrsgd+kvVB sbFo2KGiz3sCbxPI98yu0b5uKZj2FK1xLuGCZKlWZ5ZvLuY599cYXlYQVbnjaLI8 NWoUB+U7E9ZiAjOiO05lHomsFlgo/Palz21pJr7GeLc4yApUKmJrW/eYmkAWmztN Y2DFmVUWgbtVxHdCuqUkEuwJM5EyZqJ+zLhewf/buMCRvQMCDfPvINDZFxS+qCWz -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:54 2025 by rpki-client on console.sobornost.net