$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa File: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (raw, json) Hash identifier: IHcjtmjimrvEPtGcAvpRZVP9Kv9U9xdlS5UZzVEnQe8= Subject key identifier: 5A:1A:74:34:0F:DE:FB:DD:C2:94:5A:9A:E6:23:D2:26:6A:73:C2:FC Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 6C3CCC443ED65857D136F1CF2D9CAD591E98E66A Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa Signing time: Sat 05 Apr 2025 00:00:04 +0000 ROA not before: Sat 05 Apr 2025 00:00:04 +0000 ROA not after: Sat 10 May 2025 23:59:59 +0000 asID: 7224 IP address blocks: 43.250.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:3c:cc:44:3e:d6:58:57:d1:36:f1:cf:2d:9c:ad:59:1e:98:e6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Apr 5 00:00:04 2025 GMT Not After : May 10 23:59:59 2025 GMT Subject: serialNumber=e6ab5c35d712a713ce013f7881363f749963625bd954ea432fdac4519f8b53cf, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:73:11:56:48:03:9d:b4:da:da:8a:af:a0: 7a:dc:0d:f1:d5:fd:20:f1:30:a5:09:a0:21:d5:b7: dc:70:24:dc:3f:4b:e3:c2:44:78:75:c4:bc:98:00: 4a:87:83:e0:b1:52:fc:b0:7d:66:c2:d0:78:ff:ab: 08:87:3d:4c:9a:c9:8c:2d:d3:aa:7a:ad:8c:20:9e: e2:e5:ba:1a:f2:93:9b:f1:33:5f:85:3d:e7:68:6f: 43:08:97:02:75:c0:a9:6d:94:db:cf:d6:f7:c6:41: 8f:4b:56:a8:ef:70:d0:da:58:7d:40:10:9a:43:1b: 8b:e0:82:fc:79:b9:33:8b:66:48:a4:82:94:1f:aa: 13:a0:54:f4:35:a3:18:03:81:f2:ea:e4:da:ce:bb: f0:00:98:c7:53:c1:97:13:81:de:68:a9:66:0f:5b: 1b:40:3d:ab:6e:b1:09:ab:ab:5a:b1:d5:94:a5:05: bf:ef:6d:30:39:55:13:16:5d:bd:67:31:25:b9:8c: 27:b8:46:b4:c8:32:08:fe:f5:05:ae:8b:ce:e5:c2: 97:e4:c3:49:76:9e:5c:a1:dc:50:c2:7d:97:ba:82: bd:16:50:93:c4:e1:dc:5f:6a:17:e4:52:5b:d5:e5: a9:8f:cf:98:6f:fc:b7:c1:d9:e5:6f:a7:ce:95:fc: 33:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1A:74:34:0F:DE:FB:DD:C2:94:5A:9A:E6:23:D2:26:6A:73:C2:FC X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.250.196.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:a2:c4:29:17:84:0a:98:9a:94:37:ee:d1:45:09:68:f4:7a: ea:3d:f7:c3:26:51:c6:5b:10:bd:c9:83:8a:73:c7:47:55:e9: 93:e4:70:06:b6:70:d3:10:78:90:c1:2c:97:8c:b0:6a:c8:b0: d4:b2:0c:47:8e:2b:47:6b:40:af:06:2b:c6:d2:fa:94:bb:89: cf:00:84:77:9f:fe:aa:82:01:e7:5f:eb:f4:e8:c6:b2:14:1f: 13:1c:de:c9:92:59:3f:51:e1:35:10:62:98:c9:70:ae:e7:cb: 1d:c4:37:84:37:a2:46:75:3b:37:98:de:78:6e:3c:e4:b7:b3: 69:01:df:4b:3e:ba:d7:cb:07:12:72:af:c1:7b:94:1b:b9:e2: 80:5c:2b:47:35:bd:90:e2:09:fa:26:ef:a9:dc:54:44:76:23: d1:b5:53:e5:f6:1e:41:d2:4c:e7:6f:a6:a6:0e:f3:f9:d6:15: 10:ef:66:0d:39:d2:c1:fa:43:09:c2:f2:d1:90:88:af:ee:45: e9:c3:d9:a1:88:c5:d8:2f:e5:58:6d:61:bd:ea:32:06:4a:9a: b7:79:3c:4b:22:b4:e1:52:16:cb:e7:25:fb:f1:2c:33:f1:0c: 6e:94:ea:9f:b8:10:13:df:4d:1b:9c:f1:2a:1e:b9:c9:f3:dc: 2c:a0:51:25 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUbDzMRD7WWFfRNvHPLZytWR6Y5mowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDQwNTAwMDAwNFoX DTI1MDUxMDIzNTk1OVowejFJMEcGA1UEBRNAZTZhYjVjMzVkNzEyYTcxM2NlMDEz Zjc4ODEzNjNmNzQ5OTYzNjI1YmQ5NTRlYTQzMmZkYWM0NTE5ZjhiNTNjZjEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCRzEVZIA5202tqKr6B63A3x1f0g 8TClCaAh1bfccCTcP0vjwkR4dcS8mABKh4PgsVL8sH1mwtB4/6sIhz1MmsmMLdOq eq2MIJ7i5boa8pOb8TNfhT3naG9DCJcCdcCpbZTbz9b3xkGPS1ao73DQ2lh9QBCa QxuL4IL8ebkzi2ZIpIKUH6oToFT0NaMYA4Hy6uTazrvwAJjHU8GXE4HeaKlmD1sb QD2rbrEJq6tasdWUpQW/720wOVUTFl29ZzEluYwnuEa0yDII/vUFrovO5cKX5MNJ dp5codxQwn2XuoK9FlCTxOHcX2oX5FJb1eWpj8+Yb/y3wdnlb6fOlfwznwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFFoadDQP3vvdwpRamuYj0iZqc8L8MB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 LzliOGU5NjNlLTdmYTItNGJhMS1hNzhhLTRkMWZkNzk4OWIzMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/rEMA0GCSqGSIb3DQEBCwUAA4IBAQB9osQpF4QKmJqUN+7RRQlo 9HrqPffDJlHGWxC9yYOKc8dHVemT5HAGtnDTEHiQwSyXjLBqyLDUsgxHjitHa0Cv BivG0vqUu4nPAIR3n/6qggHnX+v06MayFB8THN7Jklk/UeE1EGKYyXCu58sdxDeE N6JGdTs3mN54bjzkt7NpAd9LPrrXywcScq/Be5QbueKAXCtHNb2Q4gn6Ju+p3FRE diPRtVPl9h5B0kznb6amDvP51hUQ72YNOdLB+kMJwvLRkIiv7kXpw9mhiMXYL+VY bWG96jIGSpq3eTxLIrThUhbL5yX78Swz8QxulOqfuBAT300bnPEqHrnJ89wsoFEl -----END CERTIFICATE-----Generated at Fri Apr 25 06:03:03 2025 by rpki-client on console.sobornost.net