$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/040ef713-ce1a-4ae1-9ad8-8ff2ed6645d9.roa File: 040ef713-ce1a-4ae1-9ad8-8ff2ed6645d9.roa (raw, json) Hash identifier: p/tcfqtGrVD9npxI6HGV+/xxFtKLBz7xRZIEXzsnlI8= Subject key identifier: 84:D1:E0:2D:A3:91:33:94:EA:78:82:99:33:B3:B9:70:29:4E:DD:9B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4EAFA7B38E43F8D0FD6A642AD14C8D3101250DD4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/040ef713-ce1a-4ae1-9ad8-8ff2ed6645d9.roa Signing time: Wed 23 Apr 2025 00:00:54 +0000 ROA not before: Wed 23 Apr 2025 00:00:54 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:af:a7:b3:8e:43:f8:d0:fd:6a:64:2a:d1:4c:8d:31:01:25:0d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 23 00:00:54 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=6c8950ef2bbbd94d14c9fc3266e1c0df35e88d7d222282a399e336e6ad645cf3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:74:98:6e:e9:49:9e:83:5a:47:27:84:49: 7c:5f:11:5c:ec:63:03:70:5e:71:a1:9e:01:74:21: af:2d:ef:eb:0f:f2:86:7e:bd:17:14:80:5c:03:96: 72:c8:5a:3c:4a:7c:26:79:df:47:99:7a:36:10:17: 17:a0:6a:24:f0:f9:40:0a:7c:1b:6b:b8:2a:ba:c9: 53:78:4e:e0:d6:a7:93:82:8b:b5:00:38:6d:d2:e3: 7d:85:7c:0b:8a:0f:b6:fb:be:52:61:7a:c2:4f:ea: 24:97:a1:b8:5d:9b:b9:c5:b4:a9:6d:d8:6c:f5:cb: a0:c6:1e:54:5f:b0:c8:ca:09:95:1e:09:8e:34:3d: 27:5f:9b:5a:11:69:1a:33:26:88:a6:96:07:63:92: da:53:f7:b3:01:c6:1e:9a:c8:3f:5c:79:9e:42:79: 05:cb:43:48:80:6a:a2:f2:89:b0:d2:91:c1:70:3e: 0e:eb:35:8d:d7:0b:0c:19:c4:70:54:f7:51:12:cd: f9:54:f1:7a:77:59:6a:49:48:08:7b:f2:be:44:95: f4:99:85:ab:93:cf:ed:10:f5:d6:af:0f:3e:b0:58: 08:84:48:b3:e1:ab:fe:70:e5:a0:b2:2e:f4:4b:41: 5d:c6:69:23:67:e0:f3:d1:78:77:3d:59:1b:97:b6: 79:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D1:E0:2D:A3:91:33:94:EA:78:82:99:33:B3:B9:70:29:4E:DD:9B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/040ef713-ce1a-4ae1-9ad8-8ff2ed6645d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:a000::/40 Signature Algorithm: sha256WithRSAEncryption 05:1a:17:f1:41:03:00:5f:81:ff:4a:49:d1:74:49:75:78:75: 3c:4c:d2:3b:57:07:c6:58:ff:44:35:f6:dc:fe:f5:e3:19:9a: ed:79:9b:ba:d7:f5:39:b3:a5:7a:20:6d:66:ac:10:29:b3:98: 1f:39:e3:69:68:b2:e8:e2:31:e8:e2:bf:4b:a4:05:7f:6f:da: 11:62:7e:3f:61:c2:d4:26:36:b0:19:29:05:88:4f:da:1d:ac: 55:6b:9f:41:f8:52:64:90:7f:50:53:9d:0e:55:c9:95:c7:ac: db:34:5a:31:e7:5d:e2:24:a9:e5:19:53:0e:24:cc:2e:27:9d: 40:55:d6:b1:20:c6:88:f3:a8:2b:76:3d:65:23:e5:16:a6:f6: 16:8f:97:10:b8:3b:12:fa:82:9c:7c:97:e0:35:7b:29:b0:c1: 8b:a7:1d:34:e4:ec:06:a4:3b:0b:8f:eb:e4:c1:0b:8a:b5:69: 08:9b:9e:e7:7d:3d:1c:e7:9a:cf:96:f0:d0:b5:49:5e:30:fc: 97:48:94:6e:2c:3d:b7:d8:ec:f3:78:12:c6:57:a2:43:0f:ff: 5a:24:f1:c8:0a:de:ed:2d:4e:41:72:09:2f:55:86:aa:48:a8: 23:48:8b:59:7a:3d:39:c1:a0:09:84:20:99:91:2b:1c:df:02: 25:cb:23:51 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTq+ns45D+ND9amQq0UyNMQElDdQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMzAwMDA1NFoX DTI1MDUyODIzNTk1OVowejFJMEcGA1UEBRNANmM4OTUwZWYyYmJiZDk0ZDE0Yzlm YzMyNjZlMWMwZGYzNWU4OGQ3ZDIyMjI4MmEzOTllMzM2ZTZhZDY0NWNmMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xt0mG7pSZ6DWkcnhEl8XxFc7GMD cF5xoZ4BdCGvLe/rD/KGfr0XFIBcA5ZyyFo8Snwmed9HmXo2EBcXoGok8PlACnwb a7gquslTeE7g1qeTgou1ADht0uN9hXwLig+2+75SYXrCT+okl6G4XZu5xbSpbdhs 9cugxh5UX7DIygmVHgmOND0nX5taEWkaMyaIppYHY5LaU/ezAcYemsg/XHmeQnkF y0NIgGqi8omw0pHBcD4O6zWN1wsMGcRwVPdREs35VPF6d1lqSUgIe/K+RJX0mYWr k8/tEPXWrw8+sFgIhEiz4av+cOWgsi70S0FdxmkjZ+Dz0Xh3PVkbl7Z5iQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFITR4C2jkTOU6niCmTOzuXApTt2bMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA0MGVmNzEzLWNlMWEtNGFlMS05YWQ4LThmZjJlZDY2NDVkOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaKAwDQYJKoZIhvcNAQELBQADggEBAAUaF/FBAwBfgf9KSdF0 SXV4dTxM0jtXB8ZY/0Q19tz+9eMZmu15m7rX9TmzpXogbWasECmzmB8542losuji Mejiv0ukBX9v2hFifj9hwtQmNrAZKQWIT9odrFVrn0H4UmSQf1BTnQ5VyZXHrNs0 WjHnXeIkqeUZUw4kzC4nnUBV1rEgxojzqCt2PWUj5Ram9haPlxC4OxL6gpx8l+A1 eymwwYunHTTk7AakOwuP6+TBC4q1aQibnud9PRznms+W8NC1SV4w/JdIlG4sPbfY 7PN4EsZXokMP/1ok8cgK3u0tTkFyCS9VhqpIqCNIi1l6PTnBoAmEIJmRKxzfAiXL I1E= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net