$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/a78b90df-233b-4ec6-89d2-de27ac2dc044.roa File: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (raw, json) Hash identifier: cBZSgyc9aRFZyj1jTmt6H/5F9c90GhLTVtOVx3JaGEA= Subject key identifier: 48:EF:B1:C1:FA:60:AC:1E:96:87:6B:E3:12:18:52:EC:A1:68:E7:B2 Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 20D02A2FA7DD761A38029062704474643D21F655 Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/a78b90df-233b-4ec6-89d2-de27ac2dc044.roa Signing time: Wed 23 Apr 2025 00:00:09 +0000 ROA not before: Wed 23 Apr 2025 00:00:09 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 175.41.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d0:2a:2f:a7:dd:76:1a:38:02:90:62:70:44:74:64:3d:21:f6:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Apr 23 00:00:09 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=8e5914bd6d6d1d4b5de7885c97c82412a53044a457df65d9014d24f9f849deed, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:ce:40:9b:23:d4:72:5b:ac:1d:27:91:d8: 6e:dc:d0:7b:95:ee:9b:83:b0:12:d8:ac:c7:04:0c: 2f:de:4a:0b:cf:09:79:dc:e4:4a:3e:ff:2c:b2:52: 46:01:56:6d:a5:fe:62:b9:97:d6:49:91:16:e0:0e: b6:5e:f5:c3:e4:43:51:ee:60:64:11:bd:ba:e9:a8: 71:9f:e5:64:f6:fd:94:aa:c0:a0:6d:cd:50:b5:de: 06:f3:41:bc:d5:29:fd:df:6a:3e:00:49:4b:fd:77: d9:68:87:c3:49:e4:d0:77:b1:86:70:82:f8:ad:4a: 69:2e:4e:39:5d:aa:62:a0:a0:00:81:f1:19:4d:e1: a5:63:e4:e4:e5:78:d6:1a:04:74:5d:0d:cc:4a:89: 58:3c:f8:28:af:07:26:8f:82:07:45:ad:a1:8d:63: c6:a8:ff:99:fe:cd:05:42:27:5b:e0:5b:c2:aa:2d: bd:51:89:1d:8b:09:64:ad:1c:ef:65:9c:00:ef:a2: c5:8e:4f:3c:81:72:e4:13:8b:45:84:70:97:19:a5: 99:a5:0d:95:4f:2e:e9:fd:8a:54:e3:29:1e:c9:dc: 2e:a2:d3:a8:80:8a:ab:fc:dc:41:e2:b4:aa:c3:18: b8:ac:15:9a:2c:30:19:ce:dd:9e:ef:16:0f:b2:e2: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EF:B1:C1:FA:60:AC:1E:96:87:6B:E3:12:18:52:EC:A1:68:E7:B2 X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/a78b90df-233b-4ec6-89d2-de27ac2dc044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.41.236.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:20:c9:77:fc:ce:3c:0e:df:c8:0d:43:96:68:90:95:a3:b0: fe:df:d7:51:9d:80:31:9b:9b:92:1a:5d:47:a0:32:d1:5d:ad: b8:7e:f1:dd:05:97:65:ba:0f:d8:e8:96:46:7d:5a:e0:ea:c6: 34:e5:f6:cb:94:6c:ec:91:8f:21:c0:8d:89:b5:9c:24:98:1c: ca:a6:b9:ff:ab:a9:0a:9c:ed:3c:15:34:2b:95:1e:d8:73:ff: 93:ad:a8:df:45:e2:b6:5c:0d:4d:57:37:e4:33:bb:62:22:a0: 2e:bc:15:f7:65:3c:bf:55:8b:93:07:3e:03:4b:79:45:a0:14: 77:74:36:c0:91:cc:65:bb:7c:42:a0:40:11:f4:4e:bc:af:49: 5c:c7:af:76:88:a7:cd:aa:24:a8:0c:eb:d3:d6:00:ca:29:c8: f3:54:84:d6:ce:42:b5:4c:04:99:27:fa:08:f0:f9:8d:d2:b2: 69:d2:03:81:57:f1:90:7b:bd:b3:27:c6:a0:d6:e5:f8:64:b9: 17:c2:cc:58:30:cc:f0:60:6e:6a:36:cb:3a:95:42:6a:7c:04: f4:29:bb:10:f5:8b:8c:f2:9e:02:4c:a2:6c:eb:57:6e:12:ed: 19:e7:0b:a5:34:c8:07:18:d8:31:9a:eb:4a:df:0a:3c:4a:50: bd:bc:f4:50 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUINAqL6fddho4ApBicER0ZD0h9lUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDQyMzAwMDAwOVoX DTI1MDUyODIzNTk1OVowejFJMEcGA1UEBRNAOGU1OTE0YmQ2ZDZkMWQ0YjVkZTc4 ODVjOTdjODI0MTJhNTMwNDRhNDU3ZGY2NWQ5MDE0ZDI0ZjlmODQ5ZGVlZDEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0LOQJsj1HJbrB0nkdhu3NB7le6b g7AS2KzHBAwv3koLzwl53ORKPv8sslJGAVZtpf5iuZfWSZEW4A62XvXD5ENR7mBk Eb266ahxn+Vk9v2UqsCgbc1Qtd4G80G81Sn932o+AElL/XfZaIfDSeTQd7GGcIL4 rUppLk45XapioKAAgfEZTeGlY+Tk5XjWGgR0XQ3MSolYPPgorwcmj4IHRa2hjWPG qP+Z/s0FQidb4FvCqi29UYkdiwlkrRzvZZwA76LFjk88gXLkE4tFhHCXGaWZpQ2V Ty7p/YpU4ykeydwuotOogIqr/NxB4rSqwxi4rBWaLDAZzt2e7xYPsuL9YQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFEjvscH6YKwelodr4xIYUuyhaOeyMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvZGI5YTM3MmEtMDliYy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5 L2E3OGI5MGRmLTIzM2ItNGVjNi04OWQyLWRlMjdhYzJkYzA0NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4 ZTVkYmQyMTkvNmVjYjNjY2EtNDg4ZC00M2I5LWE1MGItZDM3YzBjNTVhOWUxLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBrynsMA0GCSqGSIb3DQEBCwUAA4IBAQB+IMl3/M48Dt/IDUOWaJCV o7D+39dRnYAxm5uSGl1HoDLRXa24fvHdBZdlug/Y6JZGfVrg6sY05fbLlGzskY8h wI2JtZwkmBzKprn/q6kKnO08FTQrlR7Yc/+TrajfReK2XA1NVzfkM7tiIqAuvBX3 ZTy/VYuTBz4DS3lFoBR3dDbAkcxlu3xCoEAR9E68r0lcx692iKfNqiSoDOvT1gDK KcjzVITWzkK1TASZJ/oI8PmN0rJp0gOBV/GQe72zJ8ag1uX4ZLkXwsxYMMzwYG5q Nss6lUJqfAT0KbsQ9YuM8p4CTKJs61duEu0Z5wulNMgHGNgxmutK3wo8SlC9vPRQ -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:54 2025 by rpki-client on console.sobornost.net