$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/078b0050-3966-47ab-b77f-107656f738f5.roa File: 078b0050-3966-47ab-b77f-107656f738f5.roa (raw, json) Hash identifier: zJgxq3kQrBq43DqW21At/VnRbpRXVbrBxC5ZQkprGb4= Subject key identifier: C6:DE:FC:DC:C4:83:EB:87:4B:1A:EE:31:98:8E:95:B0:2C:56:8F:1D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D724CFE8AB4A179DAAEB0BC833ED660BF351D54 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/078b0050-3966-47ab-b77f-107656f738f5.roa Signing time: Mon 21 Apr 2025 15:20:18 +0000 ROA not before: Mon 21 Apr 2025 15:20:18 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:72:4c:fe:8a:b4:a1:79:da:ae:b0:bc:83:3e:d6:60:bf:35:1d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:20:18 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=8b05c46c8ea334912c0151d7160bed9c24a3a16abc68054bdad67474f43e322c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:aa:60:98:c4:4e:22:1e:81:6e:84:88:3c:b7: 4d:d9:4b:e7:5f:5b:8f:5b:c7:43:29:41:24:95:19: e4:47:c9:e0:e0:f0:e0:44:af:c2:a5:4f:94:82:7d: c8:b4:6f:94:86:03:f3:88:9b:23:a0:38:36:e5:0f: a4:8a:00:d4:0c:ae:0e:93:02:b7:c6:10:77:f1:06: 22:4e:bf:79:43:3e:13:83:e4:8c:3a:54:cd:5f:03: 31:1e:4c:ad:89:a4:e1:bf:15:4d:9a:13:c1:f1:eb: 91:ae:53:67:15:53:be:8f:df:8a:6f:62:10:e6:8f: 96:6b:aa:3f:11:8a:e4:6d:86:fb:76:72:3a:f9:c2: 26:66:c8:ae:58:10:c4:2a:e9:c8:3b:83:d7:8f:a9: b3:35:0c:f1:fd:f9:ea:b3:4e:99:d9:9e:68:ff:e2: ad:74:27:0f:c3:ff:cb:af:73:09:e2:d2:ea:1e:f8: 01:19:b3:bf:d1:fd:9a:a2:b9:43:88:f1:43:7e:b5: 86:1a:f8:e8:d4:40:1f:06:2a:24:51:10:20:11:03: c8:77:05:a9:45:de:0f:1a:73:e4:78:f5:9a:57:8f: f9:ce:42:c9:05:20:34:30:79:ec:75:fa:14:f1:f5: 5c:74:04:f6:90:4c:29:64:fa:a0:3c:3f:db:bc:36: 46:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DE:FC:DC:C4:83:EB:87:4B:1A:EE:31:98:8E:95:B0:2C:56:8F:1D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/078b0050-3966-47ab-b77f-107656f738f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:4800::/40 Signature Algorithm: sha256WithRSAEncryption 98:05:e9:82:49:86:92:72:24:e7:44:fe:f0:17:2d:03:75:64: 36:68:21:84:08:3b:3d:79:8f:d3:b4:46:83:66:66:07:38:a7: 23:dd:c3:6c:4b:fa:3e:36:a8:64:36:42:c2:8f:40:16:a0:b7: d7:b2:bc:e8:22:06:a0:bb:86:a7:0d:1d:cc:65:3f:df:ef:f1: 62:d0:47:c3:75:50:d8:74:b9:77:94:72:a5:e4:b8:e7:1c:bc: a7:3e:a4:fa:0f:b5:17:f4:b9:cf:90:0f:75:b7:f9:13:9e:dd: c0:75:01:9c:82:51:db:f1:dc:b3:5e:ba:05:d1:96:3c:1e:20: 98:79:d8:b8:ab:49:42:e3:4f:94:79:54:9f:c5:32:88:ab:54: 80:da:3c:75:df:3d:08:ab:8a:bd:63:8c:61:fb:30:ae:8f:f3: cc:59:8b:77:b2:a1:06:7e:e3:fa:cf:be:c6:bc:64:eb:65:f1: 7c:4e:3b:bb:5a:cc:2a:be:c1:8f:31:2d:ff:94:3d:a0:44:e5: ae:4a:11:3f:6f:1c:61:f8:6b:b7:0e:59:2b:f8:3f:94:74:e0: 80:ec:0f:a5:c8:2e:e1:27:e5:62:17:f0:04:d7:69:3a:c5:60: 3b:0e:b8:ed:8c:d2:b9:6a:81:91:af:fb:0b:f0:91:40:04:04: 63:5c:90:f5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXXJM/oq0oXnarrC8gz7WYL81HVQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MjAxOFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAOGIwNWM0NmM4ZWEzMzQ5MTJjMDE1 MWQ3MTYwYmVkOWMyNGEzYTE2YWJjNjgwNTRiZGFkNjc0NzRmNDNlMzIyYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzapgmMROIh6BboSIPLdN2UvnX1uP W8dDKUEklRnkR8ng4PDgRK/CpU+Ugn3ItG+UhgPziJsjoDg25Q+kigDUDK4OkwK3 xhB38QYiTr95Qz4Tg+SMOlTNXwMxHkytiaThvxVNmhPB8euRrlNnFVO+j9+Kb2IQ 5o+Wa6o/EYrkbYb7dnI6+cImZsiuWBDEKunIO4PXj6mzNQzx/fnqs06Z2Z5o/+Kt dCcPw//Lr3MJ4tLqHvgBGbO/0f2aorlDiPFDfrWGGvjo1EAfBiokURAgEQPIdwWp Rd4PGnPkePWaV4/5zkLJBSA0MHnsdfoU8fVcdAT2kEwpZPqgPD/bvDZG0QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMbe/NzEg+uHSxruMZiOlbAsVo8dMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3OGIwMDUwLTM5NjYtNDdhYi1iNzdmLTEwNzY1NmY3MzhmNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba90gwDQYJKoZIhvcNAQELBQADggEBAJgF6YJJhpJyJOdE/vAX LQN1ZDZoIYQIOz15j9O0RoNmZgc4pyPdw2xL+j42qGQ2QsKPQBagt9eyvOgiBqC7 hqcNHcxlP9/v8WLQR8N1UNh0uXeUcqXkuOccvKc+pPoPtRf0uc+QD3W3+ROe3cB1 AZyCUdvx3LNeugXRljweIJh52LirSULjT5R5VJ/FMoirVIDaPHXfPQirir1jjGH7 MK6P88xZi3eyoQZ+4/rPvsa8ZOtl8XxOO7tazCq+wY8xLf+UPaBE5a5KET9vHGH4 a7cOWSv4P5R04IDsD6XILuEn5WIX8ATXaTrFYDsOuO2M0rlqgZGv+wvwkUAEBGNc kPU= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net