$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08c68094-5359-4e76-9230-1465cd68f373.roa File: 08c68094-5359-4e76-9230-1465cd68f373.roa (raw, json) Hash identifier: qRFUymLAWNWgSR4UrcgiO0LPePBk0MW+RQn1oTua368= Subject key identifier: 51:68:D9:F9:F5:A7:C5:3B:C8:E0:7F:40:A8:A5:E6:55:4D:AB:D0:34 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6C93774B224BEB9B8D5BB55C5918383872D30E1C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08c68094-5359-4e76-9230-1465cd68f373.roa Signing time: Tue 15 Apr 2025 00:00:23 +0000 ROA not before: Tue 15 Apr 2025 00:00:23 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:93:77:4b:22:4b:eb:9b:8d:5b:b5:5c:59:18:38:38:72:d3:0e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 15 00:00:23 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=3c40a0a5bdd9c787b9f33a801b98294d102d49d622098d5756ca006222556b18, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:ed:72:7c:8a:be:68:72:ba:7a:97:7e:fc: 64:8f:19:d5:f0:c6:39:e0:af:e9:bc:2c:0a:ab:76: f0:42:c0:39:c9:58:3c:d7:cd:ec:16:c8:a2:5f:64: db:88:e2:84:5e:f4:9e:62:42:84:38:6e:7e:75:4f: 55:15:52:93:18:c8:73:5a:fa:4b:31:24:07:77:05: 4b:a4:66:65:62:5c:d1:99:5d:6d:38:c5:93:d0:b5: 5a:37:ae:55:d5:8a:48:00:d4:71:a4:2d:a4:27:57: 8d:5c:d1:4d:c9:71:54:61:af:53:d0:4c:fa:e0:a7: b5:b1:25:d2:49:b6:35:4d:8c:1e:60:0f:55:71:36: ca:1b:46:3a:6b:6e:d7:24:fd:60:dd:0d:4c:7f:76: c7:3a:a9:17:7b:94:52:06:eb:04:a8:9a:73:6b:d9: 00:48:51:d5:01:4c:a5:c9:40:ad:73:db:5e:e0:42: c1:e0:ea:1c:ce:21:0b:cd:64:2f:03:b3:a2:d7:85: dc:10:ef:78:0a:4f:8f:c4:27:83:a4:d1:a9:4f:91: 39:46:1d:bd:bb:91:36:92:ae:c5:d3:15:b2:76:0e: 8e:4b:24:cf:3d:49:b1:e1:c3:ad:e5:33:25:33:96: 9e:09:c7:89:54:3b:57:3a:2a:41:b6:cb:ea:95:62: b5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:68:D9:F9:F5:A7:C5:3B:C8:E0:7F:40:A8:A5:E6:55:4D:AB:D0:34 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08c68094-5359-4e76-9230-1465cd68f373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:c000::/40 Signature Algorithm: sha256WithRSAEncryption 0b:17:2a:af:db:ca:79:50:59:6f:cd:96:96:b7:2b:b5:12:7b: ec:d5:8a:ba:e3:17:30:ae:16:11:c6:de:9a:cf:27:80:66:87: da:0d:cb:f2:9d:e7:31:7c:07:31:fc:3d:9f:ce:c8:a0:6b:bd: 0e:9e:b0:c1:9d:32:56:fa:ec:60:72:ad:ab:6f:6c:5a:86:41: 8a:0c:4e:f3:00:0e:05:e7:63:8e:55:4e:58:cf:19:f5:3d:a4: 5a:5f:d3:21:11:ae:4f:1f:c0:cb:0b:0c:94:15:5e:b8:45:e8: b2:46:7d:ee:2b:cd:0b:07:64:17:b5:3f:6c:9a:fc:a4:be:74: 60:17:79:41:b6:f2:d7:4f:3b:b9:25:8d:f8:68:1f:47:5c:2f: 1c:f7:03:b1:31:e3:58:98:f1:cc:cb:19:89:a3:60:dd:4a:5e: 80:99:8e:60:52:58:f5:22:8d:f9:6a:11:c9:d4:ac:6c:24:8d: f4:e7:0c:29:3a:d8:61:31:df:03:e9:e1:27:e0:fa:38:f5:26: 77:d1:cc:13:a3:1e:b2:7c:a9:43:43:d0:5d:b2:a7:70:ab:a0: 3c:b8:a5:5b:02:4c:15:a4:e2:5a:4f:13:45:27:0e:fe:11:ef: ec:fd:d9:16:d1:0e:2d:0e:ab:d2:65:45:d5:68:60:1f:68:65: 0b:d1:5f:6e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbJN3SyJL65uNW7VcWRg4OHLTDhwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNTAwMDAyM1oX DTI1MDUyMDIzNTk1OVowejFJMEcGA1UEBRNAM2M0MGEwYTViZGQ5Yzc4N2I5ZjMz YTgwMWI5ODI5NGQxMDJkNDlkNjIyMDk4ZDU3NTZjYTAwNjIyMjU1NmIxODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnftcnyKvmhyunqXfvxkjxnV8MY5 4K/pvCwKq3bwQsA5yVg8183sFsiiX2TbiOKEXvSeYkKEOG5+dU9VFVKTGMhzWvpL MSQHdwVLpGZlYlzRmV1tOMWT0LVaN65V1YpIANRxpC2kJ1eNXNFNyXFUYa9T0Ez6 4Ke1sSXSSbY1TYweYA9VcTbKG0Y6a27XJP1g3Q1Mf3bHOqkXe5RSBusEqJpza9kA SFHVAUylyUCtc9te4ELB4OocziELzWQvA7Oi14XcEO94Ck+PxCeDpNGpT5E5Rh29 u5E2kq7F0xWydg6OSyTPPUmx4cOt5TMlM5aeCceJVDtXOipBtsvqlWK1rQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFFo2fn1p8U7yOB/QKil5lVNq9A0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4YzY4MDk0LTUzNTktNGU3Ni05MjMwLTE0NjVjZDY4ZjM3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYMAwDQYJKoZIhvcNAQELBQADggEBAAsXKq/bynlQWW/Nlpa3 K7USe+zVirrjFzCuFhHG3prPJ4Bmh9oNy/Kd5zF8BzH8PZ/OyKBrvQ6esMGdMlb6 7GByratvbFqGQYoMTvMADgXnY45VTljPGfU9pFpf0yERrk8fwMsLDJQVXrhF6LJG fe4rzQsHZBe1P2ya/KS+dGAXeUG28tdPO7kljfhoH0dcLxz3A7Ex41iY8czLGYmj YN1KXoCZjmBSWPUijflqEcnUrGwkjfTnDCk62GEx3wPp4Sfg+jj1JnfRzBOjHrJ8 qUND0F2yp3CroDy4pVsCTBWk4lpPE0UnDv4R7+z92RbRDi0Oq9JlRdVoYB9oZQvR X24= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net