$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa File: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (raw, json) Hash identifier: 1IAXFIoP8Io5D68vUZ+0gvZCz7Ph9J6XToVIIdcTuTQ= Subject key identifier: 70:1F:27:B8:AA:A8:51:72:E3:54:30:74:F1:28:7C:1A:4C:10:C1:DD Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 150768CC5110091156460FAA91A34838AFC3051C Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa Signing time: Wed 23 Apr 2025 00:00:05 +0000 ROA not before: Wed 23 Apr 2025 00:00:05 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:07:68:cc:51:10:09:11:56:46:0f:aa:91:a3:48:38:af:c3:05:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Apr 23 00:00:05 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=e821a99a5dd2ca8b7c209a0762a25b2851b8d488198636336c7ed07fc54de504, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:d7:34:aa:ed:0e:48:bf:6f:10:44:fd:cb: b7:7c:b7:b8:31:41:a4:9f:13:8f:13:ff:05:1e:cd: de:53:00:84:69:a7:7b:74:d3:23:8e:31:05:8e:8a: 15:5b:2a:db:e9:92:1c:dc:d4:07:21:e0:51:42:85: b6:4f:68:48:4f:d3:e5:cf:57:1b:0c:65:5f:b4:9a: 1f:4e:40:04:df:97:41:ce:f0:a3:76:c8:83:30:59: f7:00:73:33:87:81:7b:3c:50:29:6a:38:b2:bf:d2: dd:ec:4d:af:11:50:d5:45:59:e3:19:f8:48:7c:22: 25:96:66:27:d2:78:96:e5:15:49:78:39:63:e8:b8: b3:3a:67:01:f5:90:5c:a4:50:01:34:c6:4f:0e:41: b0:d0:ba:27:cb:91:81:c6:59:ed:b0:52:90:11:47: 02:7d:3b:c4:e8:cb:26:21:2d:db:7c:1b:a9:b0:4d: 90:f6:ba:52:c2:82:33:5b:79:e6:0f:5a:b8:6b:49: 6a:1f:07:4e:ad:fb:ca:78:e7:1a:d3:01:f6:e8:25: e2:9c:78:ed:bc:a9:3a:56:3e:d2:ed:84:fa:bf:9e: 2d:18:c4:73:ca:0f:4c:0d:05:8b:4b:f0:4e:8a:cb: c5:58:4c:21:b6:2e:71:86:b5:7b:71:3a:f5:31:e3: 88:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1F:27:B8:AA:A8:51:72:E3:54:30:74:F1:28:7C:1A:4C:10:C1:DD X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.192.0/18 Signature Algorithm: sha256WithRSAEncryption b9:f6:67:f9:bc:7d:44:b6:3a:9d:4a:d5:af:8e:73:70:2d:62: e2:61:b7:8b:b0:fa:35:72:3e:d9:63:68:ed:fc:63:56:98:47: 2f:d0:13:ac:be:e0:fc:df:d5:d5:6f:8f:f7:6f:fc:6e:52:00: bd:12:ec:0d:38:72:d0:d7:38:18:e8:9a:45:35:1e:d1:ba:1b: c2:72:57:a2:04:be:f3:d6:fa:1a:af:77:1e:b6:b0:b8:eb:62: 16:75:c0:99:0c:9d:44:13:0d:55:af:42:06:3b:a9:23:c1:34: 68:74:0b:1a:80:8f:3b:1f:08:ee:cf:4b:64:4d:5b:23:8b:b1: 11:2d:7a:f6:1a:f2:f6:55:0a:19:c2:34:8e:e8:bb:88:8f:00: d6:d1:30:b5:37:88:eb:c0:20:b4:99:bd:a1:d3:c4:93:9b:8e: 8c:f0:7d:d5:85:01:3e:60:6f:ff:c3:93:df:9e:fc:1b:e8:f8: 1e:e3:c5:03:0c:ff:02:dc:80:df:26:24:9a:52:cf:0f:ac:02: ec:32:2e:43:0e:8a:71:bb:43:6e:b8:09:51:fd:e8:68:22:bb: 8d:1e:65:36:a1:c7:f5:54:a5:7d:7d:95:71:f7:87:2b:9c:62: 4f:2d:9b:4f:ee:19:14:1e:51:7d:14:2f:d4:12:9f:6f:d7:a3: c9:0a:dc:8e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUFQdozFEQCRFWRg+qkaNIOK/DBRwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDQyMzAwMDAwNVoX DTI1MDUyODIzNTk1OVowejFJMEcGA1UEBRNAZTgyMWE5OWE1ZGQyY2E4YjdjMjA5 YTA3NjJhMjViMjg1MWI4ZDQ4ODE5ODYzNjMzNmM3ZWQwN2ZjNTRkZTUwNDEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWvXNKrtDki/bxBE/cu3fLe4MUGk nxOPE/8FHs3eUwCEaad7dNMjjjEFjooVWyrb6ZIc3NQHIeBRQoW2T2hIT9Plz1cb DGVftJofTkAE35dBzvCjdsiDMFn3AHMzh4F7PFApajiyv9Ld7E2vEVDVRVnjGfhI fCIllmYn0niW5RVJeDlj6LizOmcB9ZBcpFABNMZPDkGw0Lony5GBxlntsFKQEUcC fTvE6MsmIS3bfBupsE2Q9rpSwoIzW3nmD1q4a0lqHwdOrfvKeOca0wH26CXinHjt vKk6Vj7S7YT6v54tGMRzyg9MDQWLS/BOisvFWEwhti5xhrV7cTr1MeOIBQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFHAfJ7iqqFFy41QwdPEofBpMEMHdMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzdhNjQ2ZWMzLWZjMGUtNDBlNy1hZGI0LTgyZDVmZDgzZjAyOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGrynAMA0GCSqGSIb3DQEBCwUAA4IBAQC59mf5vH1EtjqdStWvjnNw LWLiYbeLsPo1cj7ZY2jt/GNWmEcv0BOsvuD839XVb4/3b/xuUgC9EuwNOHLQ1zgY 6JpFNR7RuhvCcleiBL7z1voar3cetrC462IWdcCZDJ1EEw1Vr0IGO6kjwTRodAsa gI87Hwjuz0tkTVsji7ERLXr2GvL2VQoZwjSO6LuIjwDW0TC1N4jrwCC0mb2h08ST m46M8H3VhQE+YG//w5Pfnvwb6Pge48UDDP8C3IDfJiSaUs8PrALsMi5DDopxu0Nu uAlR/ehoIruNHmU2ocf1VKV9fZVx94crnGJPLZtP7hkUHlF9FC/UEp9v16PJCtyO -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:54 2025 by rpki-client on console.sobornost.net