$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0818112b-58fa-421a-8be9-c4d17b28b642.roa File: 0818112b-58fa-421a-8be9-c4d17b28b642.roa (raw, json) Hash identifier: seQvSGXF6Xnm0CA3BB9I9cwkimakNvFf0v7+Ev5b9hU= Subject key identifier: 3F:42:8C:AD:84:87:44:B2:62:8B:B2:0B:45:BB:0F:62:A9:E5:26:DF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6CFDBAC8D9DF22AB5482F9F04B7829730C0E2681 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0818112b-58fa-421a-8be9-c4d17b28b642.roa Signing time: Sat 19 Apr 2025 00:01:43 +0000 ROA not before: Sat 19 Apr 2025 00:01:43 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:fd:ba:c8:d9:df:22:ab:54:82:f9:f0:4b:78:29:73:0c:0e:26:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:01:43 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=ce31cb725b2ed8851c520912b1b3a5e2accbbd3ec80abd803cea60b7b37118d1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:05:d3:83:60:75:69:98:18:7f:4c:10:9f: 85:02:3e:94:21:ed:17:f8:c3:5b:91:8e:5b:d9:a5: fa:0a:5d:c8:ab:8f:0c:29:ac:c3:1f:b5:55:18:f4: 49:4e:73:f5:08:51:f2:51:ef:5e:a5:c3:26:e2:04: ed:50:fc:7e:a9:ee:b0:ae:30:b1:bd:9e:64:ba:6f: e0:ec:bd:4a:b6:5d:fe:0b:60:a2:f0:4a:b7:bf:da: ed:94:d9:18:64:f1:a9:f3:5b:ea:67:99:ed:cf:7f: c7:8f:ee:4c:65:98:54:9b:56:fc:cf:cb:b6:64:d0: 81:78:bb:10:b4:d3:18:67:e4:af:15:0b:25:86:c6: 01:53:ce:30:13:87:c2:17:d9:de:bd:d3:8e:ed:bd: 16:7a:be:3b:43:80:95:fc:f7:81:4a:1e:78:f1:a5: 4a:e6:b0:0a:7d:e6:60:7a:b3:c8:eb:5b:a3:8a:c4: b8:c7:9a:48:90:57:d6:f3:93:6d:a4:19:6d:3d:52: 48:ab:3f:33:13:f9:5c:d2:13:85:eb:d5:f1:64:c9: 1c:ff:5b:c2:b1:33:e5:f4:02:f8:c7:ff:7c:83:eb: b6:3f:e0:a8:82:d1:0d:8d:81:26:ac:1d:b8:2a:c4: 7e:cc:39:0b:19:66:0f:ff:9a:08:14:16:ab:3e:72: a2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:42:8C:AD:84:87:44:B2:62:8B:B2:0B:45:BB:0F:62:A9:E5:26:DF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0818112b-58fa-421a-8be9-c4d17b28b642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:8800::/40 Signature Algorithm: sha256WithRSAEncryption 2b:a1:d2:4c:37:7b:64:bc:9b:9b:0a:9c:08:fc:0e:3e:eb:1f: e3:ba:fe:a7:4e:cb:c7:a2:c6:34:0c:da:6e:c3:27:a8:08:e8: 9c:a6:93:43:63:a0:33:d6:b7:55:6c:76:df:c0:f2:49:f6:a6: 77:64:ef:22:bb:28:4b:e1:9f:38:43:2b:49:20:02:12:d1:c9: 1d:c6:7b:a8:34:ba:bf:c5:3b:49:4b:4a:39:6c:16:68:fd:a3: f2:69:37:5e:ca:59:8b:fd:e8:75:61:22:9c:07:59:67:2c:37: 35:20:ad:c5:6b:ab:2d:b3:fd:b8:be:73:20:d6:53:7a:5e:99: 87:e5:d1:78:67:1d:b3:39:94:7a:f8:6b:4a:e6:db:9b:16:70: 47:2f:18:57:e1:d3:4d:96:8d:dd:e1:c6:73:e0:54:35:26:6f: 38:3b:a9:07:96:26:50:3b:94:56:44:e8:88:94:2c:f7:07:47: 15:2e:3d:7f:dc:5b:b7:af:8d:91:60:20:84:c0:0b:b6:40:92: 79:2e:31:09:ea:99:b5:57:73:e1:15:04:c9:e8:49:45:d5:8d: 18:b1:e0:b0:1c:32:f0:3d:eb:8d:b9:6f:23:fc:56:8f:ba:ba: 3f:f1:d0:a7:a0:25:4c:6c:cc:f0:88:6f:fa:ad:2e:5f:9b:f9: 17:8b:b3:49 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbP26yNnfIqtUgvnwS3gpcwwOJoEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMDE0M1oX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAY2UzMWNiNzI1YjJlZDg4NTFjNTIw OTEyYjFiM2E1ZTJhY2NiYmQzZWM4MGFiZDgwM2NlYTYwYjdiMzcxMThkMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3AF04NgdWmYGH9MEJ+FAj6UIe0X +MNbkY5b2aX6Cl3Iq48MKazDH7VVGPRJTnP1CFHyUe9epcMm4gTtUPx+qe6wrjCx vZ5kum/g7L1Ktl3+C2Ci8Eq3v9rtlNkYZPGp81vqZ5ntz3/Hj+5MZZhUm1b8z8u2 ZNCBeLsQtNMYZ+SvFQslhsYBU84wE4fCF9nevdOO7b0Wer47Q4CV/PeBSh548aVK 5rAKfeZgerPI61ujisS4x5pIkFfW85NtpBltPVJIqz8zE/lc0hOF69XxZMkc/1vC sTPl9AL4x/98g+u2P+CogtENjYEmrB24KsR+zDkLGWYP/5oIFBarPnKi3QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFD9CjK2Eh0SyYouyC0W7D2Kp5SbfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4MTgxMTJiLTU4ZmEtNDIxYS04YmU5LWM0ZDE3YjI4YjY0Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9IgwDQYJKoZIhvcNAQELBQADggEBACuh0kw3e2S8m5sKnAj8 Dj7rH+O6/qdOy8eixjQM2m7DJ6gI6Jymk0NjoDPWt1Vsdt/A8kn2pndk7yK7KEvh nzhDK0kgAhLRyR3Ge6g0ur/FO0lLSjlsFmj9o/JpN17KWYv96HVhIpwHWWcsNzUg rcVrqy2z/bi+cyDWU3pemYfl0XhnHbM5lHr4a0rm25sWcEcvGFfh002Wjd3hxnPg VDUmbzg7qQeWJlA7lFZE6IiULPcHRxUuPX/cW7evjZFgIITAC7ZAknkuMQnqmbVX c+EVBMnoSUXVjRix4LAcMvA96425byP8Vo+6uj/x0KegJUxszPCIb/qtLl+b+ReL s0k= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net