$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/045f365a-d378-4715-9b15-1b09a05b7ff1.roa File: 045f365a-d378-4715-9b15-1b09a05b7ff1.roa (raw, json) Hash identifier: 42qxibKOCWnjcvN41o2HZGAO30S1l6alWlWm/ykoCVY= Subject key identifier: 70:52:FA:9E:C4:DC:E1:31:59:F3:F1:57:30:3E:38:4A:9C:83:4C:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 626EFFCC370F4AA7EF9E74ED82D0597172D341FA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/045f365a-d378-4715-9b15-1b09a05b7ff1.roa Signing time: Mon 21 Apr 2025 16:41:03 +0000 ROA not before: Mon 21 Apr 2025 16:41:03 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1b:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6e:ff:cc:37:0f:4a:a7:ef:9e:74:ed:82:d0:59:71:72:d3:41:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:41:03 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=a02f9ae1511697b938c9340d846e4b97117dd277b399cbe79bc7906d6cb313f8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:cc:48:22:79:f6:74:dc:10:65:32:e5:b7:70: 72:c4:24:34:19:5d:7a:b5:b0:6d:6c:24:d3:d4:6e: 9d:97:32:83:d2:e8:ca:21:8c:96:a9:de:3a:4d:30: f9:74:9c:94:47:9c:68:17:07:19:df:e7:44:3e:d5: f1:5d:81:30:9d:4b:31:7d:b4:e7:0b:4f:ce:a8:20: ee:29:1f:85:fd:35:97:c2:a0:37:83:95:d2:15:ed: da:bd:2f:54:a7:4e:6c:92:29:87:fd:f3:ea:43:19: c5:27:72:6f:f3:bc:19:07:0c:2c:29:86:5a:c7:be: 8d:ac:6f:f7:50:a9:7c:8f:79:1d:7f:5d:25:eb:2e: cc:6f:47:21:d5:ef:12:73:dd:b6:cd:e6:49:ba:76: 90:6a:2b:fb:4c:78:09:05:05:ae:b1:42:e2:ca:00: ca:e7:6a:34:89:a0:13:92:60:ff:86:c9:48:8c:f2: ed:eb:ff:7d:f6:cf:bd:67:5f:b9:8d:d1:20:ad:1c: 02:c0:fd:28:24:10:0f:a5:fa:94:21:87:aa:1f:3e: 9b:8a:55:fc:07:a2:59:0a:b2:03:56:c0:4b:aa:ef: cb:ea:63:47:07:2b:f0:3d:de:13:43:fd:1d:b7:ce: 44:2e:b5:f0:84:40:28:a1:53:80:3b:9a:2c:c5:a9: e3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:52:FA:9E:C4:DC:E1:31:59:F3:F1:57:30:3E:38:4A:9C:83:4C:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/045f365a-d378-4715-9b15-1b09a05b7ff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1b:400::/38 Signature Algorithm: sha256WithRSAEncryption b1:d8:62:c2:2b:9d:13:2e:14:f8:24:45:29:30:44:40:c9:65: f2:6f:29:67:15:a1:64:9e:de:c6:93:29:8a:52:43:cc:eb:f7: 7d:7c:97:3d:54:07:73:1f:b7:cc:73:59:b0:0f:f2:62:06:1b: 2c:84:e5:2e:23:5e:71:ba:31:f7:3e:17:c1:6d:28:d4:91:5d: cd:45:8e:c2:d0:77:73:8e:da:c2:59:51:c5:71:23:48:b0:db: 3b:c3:73:30:04:a6:11:d7:54:d4:03:0e:0a:fd:2a:74:95:ec: 93:c6:1d:36:79:c0:2a:53:9d:39:ce:e6:1b:62:f8:ee:07:36: 2c:dd:af:0b:39:63:07:cf:93:50:f4:4c:3c:0d:0f:f7:11:f5: 4e:b0:aa:ce:fb:b7:f6:f4:5c:91:86:49:97:99:15:ef:27:94: c0:c0:0f:b8:7d:bf:10:03:df:1a:4a:53:48:aa:59:9c:66:37: 86:c9:89:bd:35:3e:fc:05:30:21:dc:a3:bd:27:cf:3d:a6:dd: 38:db:4e:22:e3:e0:03:00:02:2d:db:e2:5f:54:c0:6b:d2:67: 97:a6:4d:61:b7:7b:77:2f:3f:83:a5:95:51:9c:f6:69:b7:b2: f6:00:6f:a8:ad:1b:5e:0e:1f:0a:7e:3f:dc:2c:bd:65:fc:56: 5f:b0:87:a0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYm7/zDcPSqfvnnTtgtBZcXLTQfowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2NDEwM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYTAyZjlhZTE1MTE2OTdiOTM4Yzkz NDBkODQ2ZTRiOTcxMTdkZDI3N2IzOTljYmU3OWJjNzkwNmQ2Y2IzMTNmODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88xIInn2dNwQZTLlt3ByxCQ0GV16 tbBtbCTT1G6dlzKD0ujKIYyWqd46TTD5dJyUR5xoFwcZ3+dEPtXxXYEwnUsxfbTn C0/OqCDuKR+F/TWXwqA3g5XSFe3avS9Up05skimH/fPqQxnFJ3Jv87wZBwwsKYZa x76NrG/3UKl8j3kdf10l6y7Mb0ch1e8Sc922zeZJunaQaiv7THgJBQWusULiygDK 52o0iaATkmD/hslIjPLt6/999s+9Z1+5jdEgrRwCwP0oJBAPpfqUIYeqHz6bilX8 B6JZCrIDVsBLqu/L6mNHByvwPd4TQ/0dt85ELrXwhEAooVOAO5osxanj+QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHBS+p7E3OExWfPxVzA+OEqcg0xBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA0NWYzNjVhLWQzNzgtNDcxNS05YjE1LTFiMDlhMDViN2ZmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGwQwDQYJKoZIhvcNAQELBQADggEBALHYYsIrnRMuFPgkRSkw REDJZfJvKWcVoWSe3saTKYpSQ8zr9318lz1UB3Mft8xzWbAP8mIGGyyE5S4jXnG6 Mfc+F8FtKNSRXc1FjsLQd3OO2sJZUcVxI0iw2zvDczAEphHXVNQDDgr9KnSV7JPG HTZ5wCpTnTnO5hti+O4HNizdrws5YwfPk1D0TDwND/cR9U6wqs77t/b0XJGGSZeZ Fe8nlMDAD7h9vxAD3xpKU0iqWZxmN4bJib01PvwFMCHco70nzz2m3TjbTiLj4AMA Ai3b4l9UwGvSZ5emTWG3e3cvP4OllVGc9mm3svYAb6itG14OHwp+P9wsvWX8Vl+w h6A= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net