$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/036dddcb-4f0b-406f-9899-f83b4c0da917.roa File: 036dddcb-4f0b-406f-9899-f83b4c0da917.roa (raw, json) Hash identifier: 2GDySw2ny3OeIkiNEAGTMdkrnbx3pjg5fjlvKFQMCus= Subject key identifier: B5:A8:C3:75:88:3D:31:82:AB:0C:19:AC:14:DE:DF:7C:37:48:9A:50 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 72C17B7D1A9B801126659315924028D9E0EFFE76 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/036dddcb-4f0b-406f-9899-f83b4c0da917.roa Signing time: Sat 19 Apr 2025 00:31:21 +0000 ROA not before: Sat 19 Apr 2025 00:31:21 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c1:7b:7d:1a:9b:80:11:26:65:93:15:92:40:28:d9:e0:ef:fe:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:31:21 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=03a9b960144e49185d21695931c79fd8deb53fddfe02d810b80e25404467b1a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3a:11:49:37:0c:e8:ec:93:22:e7:f0:5f:7e: 98:08:da:06:3a:9e:32:2f:c6:66:43:9b:30:63:db: 9d:fb:ed:5e:d3:dc:0c:3a:1e:06:42:e1:78:7f:c6: 8f:6c:11:e9:b0:7e:4e:5f:be:59:4f:24:bd:ab:12: 04:01:9c:da:0b:31:9c:60:d1:bd:0f:f1:53:47:96: de:c0:f0:b2:8c:dd:ec:9e:36:ad:10:3a:cd:b7:00: f3:77:1b:c0:90:01:64:7d:b5:a2:30:dc:7d:ba:71: 30:62:e1:3c:b0:70:a2:52:d4:2b:e6:00:2f:3a:e7: ba:8f:99:01:9e:fa:d2:8f:f4:a4:da:12:7e:49:55: 6f:c3:97:c2:37:d9:6f:57:32:de:3a:4f:30:e0:58: a8:2b:c3:55:ce:13:1c:fd:9c:9b:0c:b0:15:71:a0: 90:1c:32:52:85:fb:71:8d:03:9d:2b:2a:f6:9e:25: f1:59:c6:2d:7c:de:bd:98:8c:73:c0:2e:dd:71:a8: b2:61:20:5b:31:4c:2f:df:78:5f:96:6a:11:f5:89: fc:00:f7:09:2c:b1:d6:bc:6f:2f:62:6f:bc:b2:aa: 3c:65:5c:e4:33:c4:db:21:9b:7c:b7:19:d4:e8:97: 28:e1:d4:98:c6:61:3e:8d:a8:65:90:f8:da:e1:c7: c5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A8:C3:75:88:3D:31:82:AB:0C:19:AC:14:DE:DF:7C:37:48:9A:50 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/036dddcb-4f0b-406f-9899-f83b4c0da917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:7080::/48 Signature Algorithm: sha256WithRSAEncryption 34:0c:5b:34:ed:9a:81:82:16:16:b1:46:e7:90:8c:60:79:a8: 68:46:28:14:16:33:15:88:69:13:db:da:01:5e:77:87:40:a5: be:d9:eb:c6:c9:12:fe:9b:7e:66:92:5b:09:2b:35:28:b5:bd: cd:5f:ea:e3:ae:25:a8:93:07:01:e9:96:b2:22:d1:92:0e:ac: 1c:e0:7b:a7:88:91:ac:9b:c0:db:06:cb:89:b4:b6:73:49:8c: 60:02:de:48:81:f9:4a:bf:70:96:a7:ac:c1:3e:77:c5:dc:d8: 4f:d6:12:6e:0f:0e:45:f3:f3:6d:ab:a4:98:b0:7b:0d:6a:37: 9f:38:ef:2c:56:fb:44:7a:a5:0a:2d:05:9c:1d:69:44:8f:bd: 3f:f9:fb:c7:20:db:8b:79:a0:d2:40:81:7c:62:f7:d2:2b:16: 20:76:a1:d3:01:e4:3b:dc:cb:62:1a:cf:8d:75:df:7c:80:c5: 88:78:d5:25:f4:8d:9e:a0:19:c2:b0:bc:23:f3:ed:09:f4:ae: c1:33:fd:a9:66:3e:fe:71:c1:73:33:42:d0:fd:52:4f:16:2e: 94:47:02:a2:ed:c9:c9:2f:6e:de:1e:fc:a3:68:a8:0e:b5:b4: da:46:c6:18:0f:cb:aa:83:03:5c:42:76:99:c0:cf:9a:9d:1e: e8:db:a9:b5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcsF7fRqbgBEmZZMVkkAo2eDv/nYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMzEyMVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAMDNhOWI5NjAxNDRlNDkxODVkMjE2 OTU5MzFjNzlmZDhkZWI1M2ZkZGZlMDJkODEwYjgwZTI1NDA0NDY3YjFhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzoRSTcM6OyTIufwX36YCNoGOp4y L8ZmQ5swY9ud++1e09wMOh4GQuF4f8aPbBHpsH5OX75ZTyS9qxIEAZzaCzGcYNG9 D/FTR5bewPCyjN3snjatEDrNtwDzdxvAkAFkfbWiMNx9unEwYuE8sHCiUtQr5gAv Oue6j5kBnvrSj/Sk2hJ+SVVvw5fCN9lvVzLeOk8w4FioK8NVzhMc/ZybDLAVcaCQ HDJShftxjQOdKyr2niXxWcYtfN69mIxzwC7dcaiyYSBbMUwv33hflmoR9Yn8APcJ LLHWvG8vYm+8sqo8ZVzkM8TbIZt8txnU6Jco4dSYxmE+jahlkPja4cfFEwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLWow3WIPTGCqwwZrBTe33w3SJpQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzNmRkZGNiLTRmMGItNDA2Zi05ODk5LWY4M2I0YzBkYTkxNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYXCAMA0GCSqGSIb3DQEBCwUAA4IBAQA0DFs07ZqBghYWsUbn kIxgeahoRigUFjMViGkT29oBXneHQKW+2evGyRL+m35mklsJKzUotb3NX+rjriWo kwcB6ZayItGSDqwc4HuniJGsm8DbBsuJtLZzSYxgAt5IgflKv3CWp6zBPnfF3NhP 1hJuDw5F8/Ntq6SYsHsNajefOO8sVvtEeqUKLQWcHWlEj70/+fvHINuLeaDSQIF8 YvfSKxYgdqHTAeQ73MtiGs+Ndd98gMWIeNUl9I2eoBnCsLwj8+0J9K7BM/2pZj7+ ccFzM0LQ/VJPFi6URwKi7cnJL27eHvyjaKgOtbTaRsYYD8uqgwNcQnaZwM+anR7o 26m1 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net