$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa File: 070bdab9-7162-422b-9f8a-f8d4ae428be1.roa (raw, json) Hash identifier: jujS3AJOX4vQ8QA+yxzYxe/DcpuCTsanuDfV9BKtlGc= Subject key identifier: 1F:F7:83:98:BA:1F:E7:D6:D9:47:64:5D:50:03:B2:95:F2:1A:17:68 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3F8BF2C5BDC21ABC3A1B309C2BA87794E19DDC20 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa Signing time: Wed 02 Apr 2025 00:01:11 +0000 ROA not before: Wed 02 Apr 2025 00:01:11 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2a:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8b:f2:c5:bd:c2:1a:bc:3a:1b:30:9c:2b:a8:77:94:e1:9d:dc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 2 00:01:11 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: serialNumber=172e73962eae167e4a43fb11dade7dccab38822a7aa7c09e13d1b18ed03a85bc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:c7:3e:05:87:e7:ac:65:0c:38:7c:30:13: ba:ed:8b:7b:46:ce:77:2b:14:02:c9:e7:71:0f:be: bd:b0:10:c0:65:50:b5:b1:20:de:5c:58:7d:ae:70: 61:f9:1f:80:3b:dc:da:73:fa:2f:a9:5e:7b:f9:ea: 07:d8:92:39:88:3e:6b:c1:0a:33:a1:09:f8:25:c9: a1:74:4e:dc:d5:aa:7a:68:18:20:f8:9e:76:c4:8f: a0:80:46:f6:fb:ae:37:d3:12:26:54:f7:78:c8:f8: 9d:fe:10:63:ea:b1:a1:bb:c5:7f:b2:d8:3a:b7:b4: 07:87:41:11:5e:14:b5:3b:4c:e3:64:a1:8c:99:b5: cf:1b:b2:4d:49:2f:83:80:20:2e:52:b8:38:e8:96: 06:65:39:ec:fe:e5:9b:c8:e7:83:8a:5c:b9:74:00: ab:b8:e9:3c:04:f6:3b:22:3e:62:e1:35:a5:45:85: 7c:ac:a2:60:f9:6b:d0:72:72:db:1f:b7:97:ce:11: 19:9f:c0:2b:63:b5:7c:1c:fd:4f:67:fe:26:9d:08: cc:91:c6:93:8d:26:df:28:82:99:2c:b5:ba:26:c1: c6:24:43:b1:bc:8d:4d:62:6e:b5:0e:2b:5b:39:dc: bb:89:dc:f7:40:cf:92:76:e6:c2:2d:a7:99:f9:ae: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F7:83:98:BA:1F:E7:D6:D9:47:64:5D:50:03:B2:95:F2:1A:17:68 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2a:8000::/37 Signature Algorithm: sha256WithRSAEncryption 88:39:78:84:30:e1:bb:7f:7c:27:62:16:45:12:3f:9c:4f:94: 64:7d:13:bb:86:81:d0:74:e6:96:46:54:bc:d8:8f:19:27:9d: 07:61:53:77:01:eb:34:be:a0:c2:28:4d:51:bd:25:c2:67:42: 3e:a6:07:64:e8:3a:bd:e1:70:39:ab:67:61:76:7b:88:5d:ec: b4:41:fd:6c:27:4a:14:84:ad:da:1f:27:46:61:f1:44:a6:32: 00:63:c7:91:43:46:53:6b:9f:16:8b:6a:ea:b5:9f:73:ea:b3: 65:16:7c:aa:cb:31:4c:12:08:1c:de:22:9f:e2:d0:24:97:94: 6f:63:41:f2:55:d7:68:28:6c:20:1a:7f:ad:50:11:2e:d5:c3: 83:b2:77:ef:60:ee:a4:9e:19:9e:3f:a1:03:d9:13:73:5b:b2: fe:6c:ba:d1:a8:6f:f1:45:bb:64:46:84:7b:63:9a:3a:5d:f2: a4:c5:77:8f:e1:39:a7:d8:b4:63:49:1b:48:81:97:c3:d5:e9: 05:44:99:2a:89:7c:ba:9d:75:6a:60:af:fa:b7:de:37:94:8b: 29:ea:6e:33:c2:db:b7:2d:84:e0:0e:a9:0d:65:70:05:3c:79: d9:21:3e:9f:d6:34:f7:e7:49:70:3d:6b:92:0d:9d:fe:d6:2f: 90:39:ca:81 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUP4vyxb3CGrw6GzCcK6h3lOGd3CAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwMjAwMDExMVoX DTI1MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAMTcyZTczOTYyZWFlMTY3ZTRhNDNm YjExZGFkZTdkY2NhYjM4ODIyYTdhYTdjMDllMTNkMWIxOGVkMDNhODViYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB3HPgWH56xlDDh8MBO67Yt7Rs53 KxQCyedxD769sBDAZVC1sSDeXFh9rnBh+R+AO9zac/ovqV57+eoH2JI5iD5rwQoz oQn4JcmhdE7c1ap6aBgg+J52xI+ggEb2+6430xImVPd4yPid/hBj6rGhu8V/stg6 t7QHh0ERXhS1O0zjZKGMmbXPG7JNSS+DgCAuUrg46JYGZTns/uWbyOeDily5dACr uOk8BPY7Ij5i4TWlRYV8rKJg+WvQcnLbH7eXzhEZn8ArY7V8HP1PZ/4mnQjMkcaT jSbfKIKZLLW6JsHGJEOxvI1NYm61DitbOdy7idz3QM+SdubCLaeZ+a6eowIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB/3g5i6H+fW2UdkXVADspXyGhdoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3MGJkYWI5LTcxNjItNDIyYi05ZjhhLWY4ZDRhZTQyOGJlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYDJAbaKoAwDQYJKoZIhvcNAQELBQADggEBAIg5eIQw4bt/fCdiFkUS P5xPlGR9E7uGgdB05pZGVLzYjxknnQdhU3cB6zS+oMIoTVG9JcJnQj6mB2ToOr3h cDmrZ2F2e4hd7LRB/WwnShSErdofJ0Zh8USmMgBjx5FDRlNrnxaLauq1n3Pqs2UW fKrLMUwSCBzeIp/i0CSXlG9jQfJV12gobCAaf61QES7Vw4Oyd+9g7qSeGZ4/oQPZ E3Nbsv5sutGob/FFu2RGhHtjmjpd8qTFd4/hOafYtGNJG0iBl8PV6QVEmSqJfLqd dWpgr/q33jeUiynqbjPC27cthOAOqQ1lcAU8edkhPp/WNPfnSXA9a5INnf7WL5A5 yoE= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net