$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa File: 07cfb406-d628-472a-94e3-493598a051d0.roa (raw, json) Hash identifier: 7ZqvnuHF4EMHO76FGcEfoAZxlKumGU1SPj8VgNS1OV8= Subject key identifier: D5:0C:F1:67:E7:19:C4:5B:C8:C3:33:E0:49:A8:7C:B0:D4:06:A6:F9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62FE5E1EC1E76A03A16801BB43BD7F2B939AB4C7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa Signing time: Sat 19 Apr 2025 00:20:53 +0000 ROA not before: Sat 19 Apr 2025 00:20:53 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:fe:5e:1e:c1:e7:6a:03:a1:68:01:bb:43:bd:7f:2b:93:9a:b4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:20:53 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=736291c3c4e757043c8f2be2af06ac07d7e725b459ba46b58fe580747d7d22e3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:88:66:c1:ca:6f:33:7d:0e:01:e6:0a:ab: 46:87:e1:1b:b9:e8:23:f0:dd:a9:f2:4f:26:55:d8: 60:f3:53:70:3c:7b:70:b3:e7:45:69:b1:a9:c2:45: 32:fe:32:ca:46:12:73:53:5c:63:43:51:98:2a:17: 26:d0:9b:7b:cd:a5:07:36:c1:ac:73:f5:69:c9:f9: e2:15:8b:eb:ee:21:36:67:cc:aa:11:8a:4f:ef:c4: 7c:70:6f:69:95:19:44:ce:ea:b7:b8:0a:90:be:3d: 66:10:89:f1:c4:11:c4:84:b1:4e:b3:b9:9c:71:2c: 47:ec:e3:91:9a:73:fd:57:c7:bb:25:2b:61:6b:d4: f8:7f:51:40:b2:0a:15:84:e8:fc:48:11:d3:43:37: 64:73:4d:1e:d1:b7:fe:65:a2:7a:f3:bc:00:37:90: cf:26:3f:0d:92:7e:c1:84:68:d1:75:f0:95:29:ee: ee:a2:55:ad:71:43:eb:bd:86:91:09:6d:50:91:a4: e8:71:45:ee:74:6d:05:53:0e:64:35:45:49:f0:e7: 61:0d:b3:94:be:0e:be:f1:4b:f3:91:22:81:2c:26: e2:3e:ab:59:f0:cb:16:9c:66:9e:9a:68:8a:9d:8a: fb:71:3f:fd:b2:5f:47:a2:89:e5:fa:89:d8:6b:45: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0C:F1:67:E7:19:C4:5B:C8:C3:33:E0:49:A8:7C:B0:D4:06:A6:F9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2040::/48 Signature Algorithm: sha256WithRSAEncryption 9b:e8:13:ac:e2:da:eb:a0:af:bc:46:20:e9:36:c9:fd:1b:75: 91:a7:a7:fa:b1:54:02:8a:4a:db:1c:64:3c:1b:78:6d:e2:23: c5:9c:b9:17:85:64:53:09:99:e7:7e:88:f8:df:3e:03:2c:a9: 3a:45:7b:76:ca:40:28:b8:dc:eb:7a:af:a5:ae:d1:b8:a6:50: 6d:9c:9b:9f:c9:bf:1f:e0:2f:f1:95:24:3e:2d:90:9a:cd:6d: 75:f9:28:f7:8c:23:70:42:8b:ae:6f:35:af:c5:7c:d7:ce:e2: b7:fa:cb:2c:34:0f:0e:9c:d9:80:45:dc:91:92:c9:7e:6b:5b: 83:53:24:62:3e:a2:51:d5:8a:d1:44:e7:44:fd:2f:c6:89:5d: 8d:3a:95:79:c7:fb:95:55:55:9f:43:5e:8e:14:0e:0f:33:0b: 22:05:ab:75:22:cd:f5:28:58:a5:43:f2:80:57:bb:44:9a:e6: 6a:4c:30:6b:43:73:d4:20:94:51:60:7e:98:73:f8:84:96:f4: dd:f5:a3:e1:72:3e:1c:76:83:91:2c:82:f2:8f:a7:07:6a:d4: a9:65:d4:35:00:0a:64:4c:15:75:f3:4e:ea:fc:82:89:eb:38: 14:a0:1d:b7:6a:da:ce:97:d1:34:05:58:34:37:71:9d:9a:fd: fb:29:e2:a8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYv5eHsHnagOhaAG7Q71/K5OatMcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMjA1M1oX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNANzM2MjkxYzNjNGU3NTcwNDNjOGYy YmUyYWYwNmFjMDdkN2U3MjViNDU5YmE0NmI1OGZlNTgwNzQ3ZDdkMjJlMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVOIZsHKbzN9DgHmCqtGh+Ebuegj 8N2p8k8mVdhg81NwPHtws+dFabGpwkUy/jLKRhJzU1xjQ1GYKhcm0Jt7zaUHNsGs c/VpyfniFYvr7iE2Z8yqEYpP78R8cG9plRlEzuq3uAqQvj1mEInxxBHEhLFOs7mc cSxH7OORmnP9V8e7JStha9T4f1FAsgoVhOj8SBHTQzdkc00e0bf+ZaJ687wAN5DP Jj8Nkn7BhGjRdfCVKe7uolWtcUPrvYaRCW1QkaTocUXudG0FUw5kNUVJ8OdhDbOU vg6+8UvzkSKBLCbiPqtZ8MsWnGaemmiKnYr7cT/9sl9Hoonl+onYa0UcrwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNUM8WfnGcRbyMMz4EmofLDUBqb5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3Y2ZiNDA2LWQ2MjgtNDcyYS05NGUzLTQ5MzU5OGEwNTFkMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaACBAMA0GCSqGSIb3DQEBCwUAA4IBAQCb6BOs4trroK+8RiDp Nsn9G3WRp6f6sVQCikrbHGQ8G3ht4iPFnLkXhWRTCZnnfoj43z4DLKk6RXt2ykAo uNzreq+lrtG4plBtnJufyb8f4C/xlSQ+LZCazW11+Sj3jCNwQouubzWvxXzXzuK3 +sssNA8OnNmARdyRksl+a1uDUyRiPqJR1YrRROdE/S/GiV2NOpV5x/uVVVWfQ16O FA4PMwsiBat1Is31KFilQ/KAV7tEmuZqTDBrQ3PUIJRRYH6Yc/iElvTd9aPhcj4c doORLILyj6cHatSpZdQ1AApkTBV1807q/IKJ6zgUoB23atrOl9E0BVg0N3Gdmv37 KeKo -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net