$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01b54384-f309-452a-bce6-2793cf241f61.roa File: 01b54384-f309-452a-bce6-2793cf241f61.roa (raw, json) Hash identifier: nXYTWmGBTu9e9MmthRt0Zt8FCHrt9BOOEqF9CbLqDZQ= Subject key identifier: 03:1F:18:B1:9E:5F:3D:AE:FA:0D:98:A6:66:F5:A9:41:E6:8E:8C:10 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 701852162535F120DCF59286C9D74D2873CF487A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01b54384-f309-452a-bce6-2793cf241f61.roa Signing time: Mon 21 Apr 2025 15:50:02 +0000 ROA not before: Mon 21 Apr 2025 15:50:02 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:c8c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:18:52:16:25:35:f1:20:dc:f5:92:86:c9:d7:4d:28:73:cf:48:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:50:02 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=4f65623eaef93bb13b85de24df3ab6bbd0b7823eb7cd26d7d87899708d86db0e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:03:42:65:57:c5:3e:dd:12:dd:55:16:1a: d3:ca:e7:56:97:07:60:b5:48:5f:8a:40:a8:c9:1c: 6d:20:e9:07:f8:84:14:b6:b4:56:c3:41:c9:97:17: b2:7f:47:45:9c:a9:59:f9:e9:c1:cb:ca:79:bd:5b: 2c:95:92:b5:2f:92:0d:5d:ec:be:37:cc:7d:5d:ff: 0c:6a:ab:d1:2c:5a:25:5c:27:cc:2f:cf:85:fc:43: 0a:91:5c:40:5e:c7:69:c8:32:9c:27:90:d5:83:2a: 8d:64:e9:05:ec:e0:40:81:32:94:05:f7:09:aa:70: 28:a4:c5:d9:2b:cd:2b:d7:ea:39:da:e4:88:c1:42: d3:eb:5a:7f:51:2a:0e:d2:50:c0:6e:93:f1:62:88: 91:3c:20:6a:cb:d3:bb:04:ac:d5:b4:b4:57:e5:ee: b9:55:06:06:08:8a:a5:96:82:c1:85:b3:7e:c8:46: 55:47:fc:f4:48:79:b8:af:60:8d:c5:35:ce:08:52: 58:0b:1a:6f:e9:4a:db:50:3d:ea:5c:fa:18:d4:1f: 8a:c2:ed:c8:72:19:0e:fb:e3:99:d1:a7:a1:43:3f: 9f:1e:2b:01:cc:47:1d:ee:96:65:63:a2:a5:c2:27: a0:45:13:73:9a:ea:29:80:7e:b1:0b:9c:66:fc:f1: b4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1F:18:B1:9E:5F:3D:AE:FA:0D:98:A6:66:F5:A9:41:E6:8E:8C:10 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/01b54384-f309-452a-bce6-2793cf241f61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:c8c0::/46 Signature Algorithm: sha256WithRSAEncryption 8e:c9:ae:25:10:fa:e4:f6:f9:f0:9e:ca:f6:f2:5b:0f:6e:45: c2:18:38:ae:4e:ed:79:3d:2d:08:1c:6d:46:61:e7:67:cb:35: 11:2a:0a:88:67:9e:d9:33:bf:e2:24:21:bb:47:4e:c5:00:22: ff:9b:3f:ef:a8:94:0b:ad:52:c7:f2:7a:c2:df:fb:ee:48:0d: be:9e:c4:80:6e:47:24:bf:8d:d3:ad:0f:49:54:f5:d6:5a:aa: 23:50:ac:2d:18:b7:1c:68:f0:79:d0:a2:ec:5e:dc:48:f0:52: 61:0a:5a:6a:56:c3:08:f4:de:a7:72:08:02:56:89:fd:53:54: 5f:7b:d7:d6:6e:75:4d:42:76:2a:ca:85:7e:4d:57:20:23:a2: 75:48:e4:c7:64:a5:c3:d1:af:3d:03:94:04:40:7d:56:d2:c6: e2:f6:ce:fc:11:6c:29:5a:f5:a7:96:b7:12:8f:76:6a:a7:90: f3:b6:bf:5b:e7:13:43:92:05:60:9b:9a:07:8c:48:bc:f3:4e: 17:f9:b6:4b:e4:26:e6:85:77:29:4d:2d:7f:47:a6:9e:9f:56: f0:ea:30:67:48:c0:9f:96:aa:77:bf:2b:9a:76:94:30:00:db: 54:e0:08:cc:d1:d2:90:35:c6:52:99:f2:08:df:07:e5:8a:fd: b4:2c:ec:45 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcBhSFiU18SDc9ZKGyddNKHPPSHowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NTAwMloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANGY2NTYyM2VhZWY5M2JiMTNiODVk ZTI0ZGYzYWI2YmJkMGI3ODIzZWI3Y2QyNmQ3ZDg3ODk5NzA4ZDg2ZGIwZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys4DQmVXxT7dEt1VFhrTyudWlwdg tUhfikCoyRxtIOkH+IQUtrRWw0HJlxeyf0dFnKlZ+enBy8p5vVsslZK1L5INXey+ N8x9Xf8MaqvRLFolXCfML8+F/EMKkVxAXsdpyDKcJ5DVgyqNZOkF7OBAgTKUBfcJ qnAopMXZK80r1+o52uSIwULT61p/USoO0lDAbpPxYoiRPCBqy9O7BKzVtLRX5e65 VQYGCIqlloLBhbN+yEZVR/z0SHm4r2CNxTXOCFJYCxpv6UrbUD3qXPoY1B+Kwu3I chkO++OZ0aehQz+fHisBzEcd7pZlY6KlwiegRRNzmuopgH6xC5xm/PG0NQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAMfGLGeXz2u+g2Ypmb1qUHmjowQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAxYjU0Mzg0LWYzMDktNDUyYS1iY2U2LTI3OTNjZjI0MWY2MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba98jAMA0GCSqGSIb3DQEBCwUAA4IBAQCOya4lEPrk9vnwnsr2 8lsPbkXCGDiuTu15PS0IHG1GYednyzURKgqIZ57ZM7/iJCG7R07FACL/mz/vqJQL rVLH8nrC3/vuSA2+nsSAbkckv43TrQ9JVPXWWqojUKwtGLccaPB50KLsXtxI8FJh ClpqVsMI9N6ncggCVon9U1Rfe9fWbnVNQnYqyoV+TVcgI6J1SOTHZKXD0a89A5QE QH1W0sbi9s78EWwpWvWnlrcSj3Zqp5Dztr9b5xNDkgVgm5oHjEi8804X+bZL5Cbm hXcpTS1/R6aen1bw6jBnSMCflqp3vyuadpQwANtU4AjM0dKQNcZSmfII3wfliv20 LOxF -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net