$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa File: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (raw, json) Hash identifier: p0tRTrL867HAf/Ewqo8kXKHkQDoLIGRb1bTw5dVBRtc= Subject key identifier: 30:C2:BA:EF:80:E9:95:A7:47:7B:A6:37:6C:AF:FD:02:51:40:7B:72 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 26BA7C0A720E13A2116AF8B709F332B7C09C13B9 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa Signing time: Wed 23 Apr 2025 00:00:10 +0000 ROA not before: Wed 23 Apr 2025 00:00:10 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ba:7c:0a:72:0e:13:a2:11:6a:f8:b7:09:f3:32:b7:c0:9c:13:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Apr 23 00:00:10 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=b8b648d85efa4b65e431377ed201613f924bcd3182b6e5fe66a7626c59df06ac, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:0f:77:9d:9b:c6:09:7c:3f:c4:1f:b2:ac: ba:e8:c7:9a:18:08:d9:0f:1c:2c:40:e5:1f:59:d6: b0:fc:05:b6:a2:0f:ea:44:88:f6:57:2d:e0:b4:e0: cd:86:5e:91:36:b2:c7:8c:51:fe:e1:4f:84:e4:53: d4:72:9b:92:2e:bb:60:e8:8c:1f:15:6b:e6:4a:ca: a4:de:6c:f2:ec:8d:5d:43:6b:94:42:8b:30:78:81: 9d:0f:bf:fe:33:b5:ec:d6:03:78:0e:93:7d:fa:62: 29:86:de:47:b1:58:87:e1:6d:09:26:6d:b0:51:88: ba:5a:48:7f:3d:a5:04:c1:8a:75:91:c9:f7:07:72: 75:8e:72:ee:70:c1:ec:94:74:dc:37:3b:a0:f7:c2: 9b:13:6c:73:29:4e:05:b3:65:bc:b2:0a:f9:e9:44: 77:45:ac:8d:77:dc:4a:ac:d1:74:aa:30:ee:4d:c6: 89:79:2e:62:ff:2a:5f:c3:aa:6b:70:11:00:ca:25: 94:f4:d0:53:22:61:8b:2b:8c:9d:ab:fa:fd:70:15: d1:7d:ec:91:01:94:ff:f4:2b:f0:da:65:c6:f9:66: c1:65:72:d5:0d:8a:d1:d8:94:76:7d:71:40:3b:0b: ba:42:ed:57:ce:07:d4:56:48:a9:41:f2:f1:29:4b: 07:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C2:BA:EF:80:E9:95:A7:47:7B:A6:37:6C:AF:FD:02:51:40:7B:72 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.196.0/22 Signature Algorithm: sha256WithRSAEncryption 25:5b:16:df:da:97:e5:f8:e8:08:3a:15:6e:76:b7:b5:a7:27: 08:a4:72:31:79:aa:6d:43:42:cd:6a:38:21:13:02:53:fc:b8: b1:a9:74:9f:12:d6:b5:25:1d:9b:cd:6f:0d:63:5a:74:e9:94: 39:59:f8:d4:b1:b3:40:62:6d:7d:a0:d3:bf:76:e6:3f:fa:a6: 59:2a:e7:71:6b:7a:70:73:ba:42:2c:55:74:a4:2f:25:af:1b: 83:b7:85:bf:a0:ad:8d:03:87:b1:96:61:6e:ee:64:3b:02:e1: 1e:5c:a1:e2:fe:cb:f9:09:de:c9:8b:f5:61:d4:c4:8e:8c:db: 02:9b:67:ff:49:57:13:89:b7:31:59:c6:35:f1:c8:38:04:71: a4:ab:b2:9b:22:aa:3c:ef:e8:bc:37:3a:f4:5d:ba:9d:d0:df: 39:0f:fc:3c:31:60:76:2c:11:14:b6:bc:d9:29:9e:a2:35:47: 11:b7:f9:30:e7:45:71:18:87:ef:bb:75:fb:eb:a7:08:14:8c: b9:a5:50:94:79:ee:5f:f1:8e:cb:a3:e8:f3:13:0a:3c:0a:b5: f1:31:50:b9:d7:73:30:69:93:e3:9f:f3:0e:95:56:75:a6:99: 59:a5:0a:fc:07:fb:04:74:a5:db:e5:3c:00:6a:00:04:d1:fb: d2:93:55:64 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUJrp8CnIOE6IRavi3CfMyt8CcE7kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDQyMzAwMDAxMFoX DTI1MDUyODIzNTk1OVowejFJMEcGA1UEBRNAYjhiNjQ4ZDg1ZWZhNGI2NWU0MzEz NzdlZDIwMTYxM2Y5MjRiY2QzMTgyYjZlNWZlNjZhNzYyNmM1OWRmMDZhYzEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZYPd52bxgl8P8Qfsqy66MeaGAjZ DxwsQOUfWdaw/AW2og/qRIj2Vy3gtODNhl6RNrLHjFH+4U+E5FPUcpuSLrtg6Iwf FWvmSsqk3mzy7I1dQ2uUQosweIGdD7/+M7Xs1gN4DpN9+mIpht5HsViH4W0JJm2w UYi6Wkh/PaUEwYp1kcn3B3J1jnLucMHslHTcNzug98KbE2xzKU4Fs2W8sgr56UR3 RayNd9xKrNF0qjDuTcaJeS5i/ypfw6prcBEAyiWU9NBTImGLK4ydq/r9cBXRfeyR AZT/9Cvw2mXG+WbBZXLVDYrR2JR2fXFAOwu6Qu1XzgfUVkipQfLxKUsHPQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFDDCuu+A6ZWnR3umN2yv/QJRQHtyMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzgyNDU2ZmYyLWY4YzQtNGM1YS05NDU4LTgyZDkwOWY4M2Y3ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCrynEMA0GCSqGSIb3DQEBCwUAA4IBAQAlWxbf2pfl+OgIOhVudre1 pycIpHIxeaptQ0LNajghEwJT/LixqXSfEta1JR2bzW8NY1p06ZQ5WfjUsbNAYm19 oNO/duY/+qZZKudxa3pwc7pCLFV0pC8lrxuDt4W/oK2NA4exlmFu7mQ7AuEeXKHi /sv5Cd7Ji/Vh1MSOjNsCm2f/SVcTibcxWcY18cg4BHGkq7KbIqo87+i8Nzr0Xbqd 0N85D/w8MWB2LBEUtrzZKZ6iNUcRt/kw50VxGIfvu3X766cIFIy5pVCUee5f8Y7L o+jzEwo8CrXxMVC513MwaZPjn/MOlVZ1pplZpQr8B/sEdKXb5TwAagAE0fvSk1Vk -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:54 2025 by rpki-client on console.sobornost.net