$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0039c81b-fc89-4464-95a8-ff72c12ea5dc.roa File: 0039c81b-fc89-4464-95a8-ff72c12ea5dc.roa (raw, json) Hash identifier: TDrUTszbsXgGU76DTix+raLrZQDLClxISa9dSu9LsVg= Subject key identifier: E1:0B:15:02:19:29:C1:9F:BF:B5:6F:DD:D1:2C:D1:22:70:E8:B4:60 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D81D81827488D51D598CCDD11482854C0FA95E4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0039c81b-fc89-4464-95a8-ff72c12ea5dc.roa Signing time: Mon 21 Apr 2025 16:30:24 +0000 ROA not before: Mon 21 Apr 2025 16:30:24 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:81:d8:18:27:48:8d:51:d5:98:cc:dd:11:48:28:54:c0:fa:95:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:30:24 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=a999c71020ef66519deaebd939a18fd1c8ccd8889639d6167ee03cfa56a092b3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:1c:bb:c6:99:50:7f:cb:87:ad:6d:5f:31: 87:1d:58:b0:dc:33:e9:c5:6f:cc:f6:1f:2e:29:ac: 51:15:1c:db:f9:2b:dc:16:44:10:93:f7:cd:11:6f: ba:e2:d2:ed:d3:a1:b8:63:1f:ab:df:67:7a:5b:3c: 8d:65:e2:dc:3c:0e:60:bf:b2:5b:88:fd:f7:40:3b: e6:1c:cf:cf:2c:1e:9f:07:c4:e1:89:e8:93:ec:d0: 37:26:e4:15:fb:02:28:5b:1d:61:30:c4:64:14:1e: 11:c9:3e:77:ac:02:f5:b6:5b:91:29:7f:cd:21:c0: b5:77:be:6c:6c:7e:4b:92:46:09:1b:a0:07:c4:9f: e6:48:52:1c:f8:97:ee:8b:91:e6:5f:25:df:c6:f9: 5c:5f:3b:49:fc:e0:88:92:7c:3c:6d:ef:d8:26:af: 01:ea:1a:03:27:05:97:30:65:99:9e:be:99:0c:f5: 43:02:de:c7:69:24:e7:77:9b:2a:70:0f:4c:31:cd: 2f:ff:9b:bb:60:3b:dd:a6:67:39:fc:0e:69:f5:6e: c0:a7:97:7f:aa:9a:81:e1:e6:e8:57:21:0d:2b:74: 9a:27:11:32:8b:2c:52:79:fd:64:91:11:0a:50:db: 7f:ea:bd:bf:c1:ad:82:55:18:89:ee:c8:ec:9d:71: e4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0B:15:02:19:29:C1:9F:BF:B5:6F:DD:D1:2C:D1:22:70:E8:B4:60 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0039c81b-fc89-4464-95a8-ff72c12ea5dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:4000::/40 Signature Algorithm: sha256WithRSAEncryption 12:e8:0b:3d:00:6f:38:ef:8e:f2:e4:2d:ac:75:db:27:d6:7c: e2:e7:a0:35:36:d7:e6:d3:b0:26:eb:7d:14:8b:2b:8b:55:46: 97:2f:71:c5:16:e7:99:7e:c1:6d:72:d1:fd:b1:16:25:96:32: a8:f9:85:95:78:fb:c7:d9:b0:9a:a0:54:79:82:56:3e:ac:c0: 94:99:2a:92:45:c1:5d:c4:6f:86:ef:22:7f:28:0c:fc:53:b1: e8:30:7a:71:26:2b:d9:12:66:a7:28:2f:2b:57:c7:1a:80:b1: c5:10:67:af:f0:f2:25:40:8b:2d:f1:cb:ff:48:8b:cf:59:7b: 99:ab:e1:5b:48:7d:43:51:51:7f:d1:3c:f4:d2:01:57:53:c4: da:ed:12:6b:bb:18:61:c7:4f:67:07:02:b5:6e:33:69:b2:a9: 4f:77:34:6c:76:d0:1f:aa:f6:13:97:68:3e:13:17:34:13:28: 06:a9:7a:13:f5:3f:83:6c:57:f5:d3:11:5b:57:7b:8d:c8:4e: cc:ba:e1:55:5c:60:1a:62:eb:9f:0b:95:2b:d5:6e:b8:2c:56: c2:d3:d8:74:8e:54:72:2e:99:69:8d:ab:12:c2:14:cf:55:29: fc:6e:19:df:96:99:d7:3c:5d:b6:56:7c:e9:7b:1e:cf:3c:4a: b1:4d:46:11 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXYHYGCdIjVHVmMzdEUgoVMD6leQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MzAyNFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYTk5OWM3MTAyMGVmNjY1MTlkZWFl YmQ5MzlhMThmZDFjOGNjZDg4ODk2MzlkNjE2N2VlMDNjZmE1NmEwOTJiMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAkcu8aZUH/Lh61tXzGHHViw3DPp xW/M9h8uKaxRFRzb+SvcFkQQk/fNEW+64tLt06G4Yx+r32d6WzyNZeLcPA5gv7Jb iP33QDvmHM/PLB6fB8ThieiT7NA3JuQV+wIoWx1hMMRkFB4RyT53rAL1tluRKX/N IcC1d75sbH5LkkYJG6AHxJ/mSFIc+Jfui5HmXyXfxvlcXztJ/OCIknw8be/YJq8B 6hoDJwWXMGWZnr6ZDPVDAt7HaSTnd5sqcA9MMc0v/5u7YDvdpmc5/A5p9W7Ap5d/ qpqB4eboVyENK3SaJxEyiyxSef1kkREKUNt/6r2/wa2CVRiJ7sjsnXHkhQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOELFQIZKcGfv7Vv3dEs0SJw6LRgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAwMzljODFiLWZjODktNDQ2NC05NWE4LWZmNzJjMTJlYTVkYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauUAwDQYJKoZIhvcNAQELBQADggEBABLoCz0AbzjvjvLkLax1 2yfWfOLnoDU21+bTsCbrfRSLK4tVRpcvccUW55l+wW1y0f2xFiWWMqj5hZV4+8fZ sJqgVHmCVj6swJSZKpJFwV3Eb4bvIn8oDPxTsegwenEmK9kSZqcoLytXxxqAscUQ Z6/w8iVAiy3xy/9Ii89Ze5mr4VtIfUNRUX/RPPTSAVdTxNrtEmu7GGHHT2cHArVu M2myqU93NGx20B+q9hOXaD4TFzQTKAapehP1P4NsV/XTEVtXe43ITsy64VVcYBpi 658LlSvVbrgsVsLT2HSOVHIumWmNqxLCFM9VKfxuGd+Wmdc8XbZWfOl7Hs88SrFN RhE= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net