$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/085f913d-6f5b-47e4-8ad5-5a37d1473a41.roa File: 085f913d-6f5b-47e4-8ad5-5a37d1473a41.roa (raw, json) Hash identifier: rvvQdN6vH6GWnidemcr0+dazXQLsHiiy1tMAbUboXUE= Subject key identifier: 02:65:75:D1:14:FC:02:7E:84:B5:23:6A:9B:E7:66:73:31:61:1D:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0203F81FC944C73CF9F772993FEE168FA268AD64 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/085f913d-6f5b-47e4-8ad5-5a37d1473a41.roa Signing time: Mon 21 Apr 2025 15:00:17 +0000 ROA not before: Mon 21 Apr 2025 15:00:17 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:03:f8:1f:c9:44:c7:3c:f9:f7:72:99:3f:ee:16:8f:a2:68:ad:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:00:17 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=6d6fda901a43cadc49e6bb9e9d816b39872266e161348abdc399451b27e1d22b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7e:68:69:92:93:96:de:d6:cc:21:34:a6:d6: 27:c7:d5:2b:74:19:31:f2:c1:15:7d:c0:48:5f:2b: 99:2d:fc:2c:66:bc:4a:65:f6:99:dc:03:7a:62:04: 79:2c:64:a5:fe:24:b2:e2:cd:2b:36:74:a7:b6:dc: 1f:35:36:a1:74:c6:2f:c1:13:47:91:f7:ec:26:3d: 2f:9d:67:d9:b7:85:89:80:44:ed:dc:15:43:98:5a: 1a:e3:78:ab:f3:6d:80:3f:d5:71:4d:6a:b9:38:93: 29:70:17:d1:48:25:cd:d5:05:b4:92:bc:80:9f:f5: f9:f2:51:0a:b4:3c:7c:94:83:5a:e8:4c:51:ef:cd: 70:74:24:4c:50:7a:0c:f0:4c:b9:f3:38:75:60:86: ab:97:29:49:f6:b4:4c:21:b2:5a:66:df:51:c6:9e: 46:ef:c7:b2:ee:4d:52:19:7d:75:f5:c9:69:95:4a: da:da:61:13:5b:0a:c1:e9:42:c9:07:f7:ed:03:ec: 26:be:95:f5:55:b4:49:c7:71:96:7b:f9:61:4b:03: 17:16:0a:bf:4a:75:86:25:be:9b:43:37:6b:0f:c3: 67:b8:c2:64:ee:e6:65:df:72:9d:c4:82:93:4f:67: 60:a5:26:1f:1d:d3:7b:fd:80:7f:c9:fa:c2:3c:b7: cf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:65:75:D1:14:FC:02:7E:84:B5:23:6A:9B:E7:66:73:31:61:1D:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/085f913d-6f5b-47e4-8ad5-5a37d1473a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:b000::/40 Signature Algorithm: sha256WithRSAEncryption 28:42:21:2f:15:f6:b6:8e:ce:32:82:de:6a:fd:e4:8c:83:a2: f9:ff:34:cd:7b:5e:a9:b6:7a:79:a7:f3:22:e8:39:a8:fb:cb: dc:bf:ef:b0:73:d7:c8:bf:05:5b:c2:ff:4c:d3:65:ed:10:b2: c7:7b:47:c0:fa:1d:b5:65:c7:a8:bd:56:cf:69:fe:35:13:69: e1:09:79:2c:0a:87:4e:9c:09:bb:97:bd:27:db:27:11:2e:91: 2f:42:dc:20:29:1a:a0:86:19:60:92:09:82:df:65:85:70:4c: c7:4e:76:c0:ac:0b:d0:28:42:5c:5b:c1:19:37:c9:bc:38:c3: 87:44:b6:45:62:77:86:6d:75:bf:02:e1:bf:21:69:11:b8:66: ae:d4:72:91:f8:42:c6:20:38:80:ee:94:cd:ee:70:ba:a2:1a: 0c:74:05:cf:93:17:c8:e9:e6:3c:59:36:36:30:28:a0:3d:2a: d7:95:e8:af:15:02:db:67:f5:8c:08:11:dd:70:cb:35:6f:67: c2:94:27:b5:0f:c1:73:af:a1:0a:8d:cb:04:75:e7:fc:12:33: 8d:9c:29:c5:a3:9f:4f:26:02:11:5c:f1:81:37:63:0c:07:4d: b1:d9:4b:fb:89:d8:a8:82:bd:92:21:02:e5:c1:f7:b7:b0:5a: ed:89:45:ef -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUAgP4H8lExzz593KZP+4Wj6JorWQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MDAxN1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANmQ2ZmRhOTAxYTQzY2FkYzQ5ZTZi YjllOWQ4MTZiMzk4NzIyNjZlMTYxMzQ4YWJkYzM5OTQ1MWIyN2UxZDIyYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH5oaZKTlt7WzCE0ptYnx9UrdBkx 8sEVfcBIXyuZLfwsZrxKZfaZ3AN6YgR5LGSl/iSy4s0rNnSnttwfNTahdMYvwRNH kffsJj0vnWfZt4WJgETt3BVDmFoa43ir822AP9VxTWq5OJMpcBfRSCXN1QW0kryA n/X58lEKtDx8lINa6ExR781wdCRMUHoM8Ey58zh1YIarlylJ9rRMIbJaZt9Rxp5G 78ey7k1SGX119clplUra2mETWwrB6ULJB/ftA+wmvpX1VbRJx3GWe/lhSwMXFgq/ SnWGJb6bQzdrD8NnuMJk7uZl33KdxIKTT2dgpSYfHdN7/YB/yfrCPLfPEwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAJlddEU/AJ+hLUjapvnZnMxYR1IMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4NWY5MTNkLTZmNWItNDdlNC04YWQ1LTVhMzdkMTQ3M2E0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8rAwDQYJKoZIhvcNAQELBQADggEBAChCIS8V9raOzjKC3mr9 5IyDovn/NM17Xqm2enmn8yLoOaj7y9y/77Bz18i/BVvC/0zTZe0Qssd7R8D6HbVl x6i9Vs9p/jUTaeEJeSwKh06cCbuXvSfbJxEukS9C3CApGqCGGWCSCYLfZYVwTMdO dsCsC9AoQlxbwRk3ybw4w4dEtkVid4Ztdb8C4b8haRG4Zq7UcpH4QsYgOIDulM3u cLqiGgx0Bc+TF8jp5jxZNjYwKKA9KteV6K8VAttn9YwIEd1wyzVvZ8KUJ7UPwXOv oQqNywR15/wSM42cKcWjn08mAhFc8YE3YwwHTbHZS/uJ2KiCvZIhAuXB97ewWu2J Re8= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net