$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/084c90dd-efab-414c-a838-24ba0e1082e3.roa File: 084c90dd-efab-414c-a838-24ba0e1082e3.roa (raw, json) Hash identifier: 5KrzCEJT0DmVzRl+4qs55EQZuoOOyCjH9Sq7rpgxOPk= Subject key identifier: 59:69:9F:ED:A3:E5:81:1A:3F:0B:45:D1:8A:89:7C:69:CC:0D:B3:0E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 51EC1CF3A76382FEF9BE9B4EDB048F53D3122CC0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/084c90dd-efab-414c-a838-24ba0e1082e3.roa Signing time: Mon 21 Apr 2025 15:02:05 +0000 ROA not before: Mon 21 Apr 2025 15:02:05 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:4880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ec:1c:f3:a7:63:82:fe:f9:be:9b:4e:db:04:8f:53:d3:12:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:02:05 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=ba1870c8911d6a92769bb9791f7f6b3dca3a35d3329319263618fa681c50b793, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:f6:50:02:8e:40:d5:42:ce:e9:2d:14:5c: ff:40:f6:ff:2c:8f:fa:3e:9c:d8:fa:be:74:5a:92: 81:05:68:62:8c:21:84:ee:b1:1f:90:30:6c:d4:3e: 9b:9f:71:68:35:42:8d:94:22:3a:4b:0e:ec:76:e7: db:fb:65:0c:d0:a7:91:43:f5:94:ed:00:f6:54:c4: 28:f5:bf:89:84:be:45:ca:b7:8c:cc:15:37:4b:35: 3c:79:ed:40:5c:df:68:05:5c:93:ce:a4:5b:e4:c7: d8:16:1c:ae:1a:4e:f9:85:d6:89:d6:09:29:50:93: 02:b5:58:64:eb:26:35:1f:63:57:9f:1b:1b:b9:98: 9a:eb:b4:0e:75:e1:5e:51:c1:0a:92:b2:7d:cb:73: 1f:1a:da:3a:94:eb:d3:cb:c9:f0:9e:d3:3a:8f:7b: 62:ca:60:9e:b3:39:de:dc:cc:ce:16:24:9e:7c:b4: 64:73:04:c5:b9:dc:62:c6:0f:96:68:99:31:e8:4b: a0:27:ad:dc:f0:cf:f4:42:7c:2b:b2:d2:d3:b3:19: da:26:fa:c6:c0:ac:10:de:3a:fa:0f:b3:e1:d7:52: 2a:c9:01:5d:f4:93:30:03:89:cc:10:b7:6c:ba:af: ca:38:30:2a:f7:9b:b7:8a:87:b4:4c:e2:75:60:65: 1f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:69:9F:ED:A3:E5:81:1A:3F:0B:45:D1:8A:89:7C:69:CC:0D:B3:0E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/084c90dd-efab-414c-a838-24ba0e1082e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:4880::/46 Signature Algorithm: sha256WithRSAEncryption 72:7c:d9:3a:24:16:06:67:28:6b:3f:7f:e5:5c:b4:e9:bd:ac: 1f:29:ba:6d:0e:65:45:3c:3b:f2:4f:19:4f:6b:ac:59:75:65: c7:70:5d:48:4f:d0:af:bf:d9:6d:c4:f7:d2:f9:20:38:12:15: c7:80:9e:4a:4f:97:7a:05:f9:b3:47:fb:51:c6:d6:8c:12:37: 89:b9:5c:2c:ac:c3:ea:e4:22:a7:79:7b:f3:f1:64:ac:48:9b: eb:47:6c:a1:ea:e9:20:7a:b3:18:13:21:4f:79:c5:47:a6:0e: 96:f6:5d:be:a1:a0:4a:81:cb:10:67:69:20:7e:1d:0a:24:68: 73:ef:74:03:b7:f0:74:b9:29:2b:c7:95:e3:96:f1:e6:65:36: fa:b8:03:0c:59:e5:2e:d8:bd:e1:1c:12:0c:79:1f:8a:cc:d9: 79:b0:9a:7f:5a:29:44:cc:7e:1e:b8:12:43:58:7f:74:95:51: b9:b5:04:d8:7e:20:b5:65:f6:8c:1b:ee:05:23:04:f7:f5:8d: b8:81:6c:ef:f2:9f:27:88:32:7c:33:66:ee:00:c3:3c:5c:78: 4e:00:be:27:a1:44:03:e0:40:d0:20:c6:97:17:ca:6f:4d:a4: 5d:80:5f:ad:9a:f2:e9:1f:8f:2d:75:10:61:74:00:b0:f7:64: d8:ce:d9:98 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUewc86djgv75vptO2wSPU9MSLMAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MDIwNVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYmExODcwYzg5MTFkNmE5Mjc2OWJi OTc5MWY3ZjZiM2RjYTNhMzVkMzMyOTMxOTI2MzYxOGZhNjgxYzUwYjc5MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3z2UAKOQNVCzuktFFz/QPb/LI/6 PpzY+r50WpKBBWhijCGE7rEfkDBs1D6bn3FoNUKNlCI6Sw7sdufb+2UM0KeRQ/WU 7QD2VMQo9b+JhL5FyreMzBU3SzU8ee1AXN9oBVyTzqRb5MfYFhyuGk75hdaJ1gkp UJMCtVhk6yY1H2NXnxsbuZia67QOdeFeUcEKkrJ9y3MfGto6lOvTy8nwntM6j3ti ymCeszne3MzOFiSefLRkcwTFudxixg+WaJkx6EugJ63c8M/0QnwrstLTsxnaJvrG wKwQ3jr6D7Ph11IqyQFd9JMwA4nMELdsuq/KODAq95u3ioe0TOJ1YGUfFwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFlpn+2j5YEaPwtF0YqJfGnMDbMOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4NGM5MGRkLWVmYWItNDE0Yy1hODM4LTI0YmEwZTEwODJlMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba90iAMA0GCSqGSIb3DQEBCwUAA4IBAQByfNk6JBYGZyhrP3/l XLTpvawfKbptDmVFPDvyTxlPa6xZdWXHcF1IT9Cvv9ltxPfS+SA4EhXHgJ5KT5d6 BfmzR/tRxtaMEjeJuVwsrMPq5CKneXvz8WSsSJvrR2yh6ukgerMYEyFPecVHpg6W 9l2+oaBKgcsQZ2kgfh0KJGhz73QDt/B0uSkrx5XjlvHmZTb6uAMMWeUu2L3hHBIM eR+KzNl5sJp/WilEzH4euBJDWH90lVG5tQTYfiC1ZfaMG+4FIwT39Y24gWzv8p8n iDJ8M2buAMM8XHhOAL4noUQD4EDQIMaXF8pvTaRdgF+tmvLpH48tdRBhdACw92TY ztmY -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net