$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/090248e1-67bf-4e35-a35a-d1596416a6af.roa File: 090248e1-67bf-4e35-a35a-d1596416a6af.roa (raw, json) Hash identifier: 71vitsrfrpPb9XmMskbUosw6BholZAevtezKnIrGxl8= Subject key identifier: 90:63:F9:C6:DE:AC:07:6D:8E:E4:BE:B3:36:6B:8A:60:1A:4D:8C:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D84A16CFE4C4A6488869D47233C13A38DD67161 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/090248e1-67bf-4e35-a35a-d1596416a6af.roa Signing time: Sat 19 Apr 2025 00:11:21 +0000 ROA not before: Sat 19 Apr 2025 00:11:21 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:84:a1:6c:fe:4c:4a:64:88:86:9d:47:23:3c:13:a3:8d:d6:71:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:11:21 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=4c051d028078aa1eae45e02e6a30363d3218f93cc9988391517d88518a4e1d34, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:6a:d0:6f:69:9e:a5:68:6c:a8:11:44:04: 05:71:e8:4d:41:16:b7:ea:34:b7:5d:f5:ae:74:e8: 74:75:42:29:2e:99:a4:84:b1:42:8b:fe:27:70:4c: 74:c0:b5:07:fe:04:3d:74:06:e7:b6:57:06:b4:2a: 04:5b:02:4e:83:10:1f:b0:55:11:88:5a:8a:ad:6f: c5:c1:c7:e7:4a:e0:35:25:76:e5:64:d2:40:d3:ec: 0b:c4:44:3e:6c:83:79:de:fa:48:e1:64:8a:a8:8b: 40:6a:ed:5a:79:cd:62:9e:05:f4:bf:00:bc:32:85: f9:35:b6:f3:e9:5d:49:96:fa:b4:2a:8f:19:c5:38: e1:c9:12:2d:81:3c:f3:98:0b:a4:c6:1d:b0:0b:d0: 95:90:1e:43:4b:81:50:0a:a0:8a:ba:b4:c0:78:9d: 1a:7f:da:fb:43:1c:6b:74:79:64:c6:38:74:e1:3d: 61:57:2f:c3:3d:8f:f9:c0:7c:eb:2f:36:dc:ed:e1: af:2f:2a:79:3e:c6:3c:d4:69:5b:a6:b5:11:2e:29: 8d:c5:d4:f3:d9:bb:e2:a3:75:3b:6c:77:3c:c2:dc: 67:69:f1:b2:b8:50:14:29:51:24:24:7d:c7:90:96: 25:df:d5:5b:10:1e:ee:14:a2:17:72:ef:48:60:eb: fa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:63:F9:C6:DE:AC:07:6D:8E:E4:BE:B3:36:6B:8A:60:1A:4D:8C:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/090248e1-67bf-4e35-a35a-d1596416a6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 90:50:67:ed:14:3d:ce:dd:bb:d8:1d:72:cd:d6:d3:95:87:07: b3:a4:af:c0:8e:bc:c0:71:c0:38:c5:ed:83:c2:0e:73:2f:46: b7:8f:be:9a:1e:5d:30:9e:a8:e3:09:9d:62:24:7e:e6:f3:6c: 96:ea:93:30:60:cf:a6:25:49:0f:9d:4a:b8:28:61:40:61:d6: 3f:a9:9c:2d:41:92:9f:b2:b4:58:2a:e6:f1:47:70:0c:52:ee: 45:f8:78:04:04:85:65:3e:fb:5a:07:a5:f2:d0:61:b5:5f:9b: 1b:e0:89:a5:ec:90:71:fd:dd:62:73:56:ef:df:85:bd:96:1e: 1c:71:02:8e:60:4f:8c:b8:1b:3d:a2:3d:11:43:4b:eb:8d:57: 79:0b:e7:04:76:f1:8e:68:71:ab:96:b3:04:35:98:28:f3:21: 2c:1a:f5:00:3e:78:aa:ff:38:36:0d:b2:63:d0:f2:69:f8:76: 7e:4a:f5:4b:6a:30:7e:68:c2:29:ed:aa:0f:15:77:28:32:39: 9a:0d:1f:df:43:63:4d:3b:39:8a:1d:c9:c7:62:c0:69:c5:d2: c3:12:ba:5b:3e:21:47:a7:13:36:ab:f2:12:fd:1e:42:89:1c: b7:23:83:ea:be:6a:a9:64:04:58:47:a2:8f:9c:52:f0:fb:b3: 1f:7d:fe:a3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbYShbP5MSmSIhp1HIzwTo43WcWEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMTEyMVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNANGMwNTFkMDI4MDc4YWExZWFlNDVl MDJlNmEzMDM2M2QzMjE4ZjkzY2M5OTg4MzkxNTE3ZDg4NTE4YTRlMWQzNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujpq0G9pnqVobKgRRAQFcehNQRa3 6jS3XfWudOh0dUIpLpmkhLFCi/4ncEx0wLUH/gQ9dAbntlcGtCoEWwJOgxAfsFUR iFqKrW/FwcfnSuA1JXblZNJA0+wLxEQ+bIN53vpI4WSKqItAau1aec1ingX0vwC8 MoX5Nbbz6V1Jlvq0Ko8ZxTjhyRItgTzzmAukxh2wC9CVkB5DS4FQCqCKurTAeJ0a f9r7QxxrdHlkxjh04T1hVy/DPY/5wHzrLzbc7eGvLyp5PsY81GlbprURLimNxdTz 2bvio3U7bHc8wtxnafGyuFAUKVEkJH3HkJYl39VbEB7uFKIXcu9IYOv6cwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJBj+cberAdtjuS+szZrimAaTYyrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA5MDI0OGUxLTY3YmYtNGUzNS1hMzVhLWQxNTk2NDE2YTZhZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9AjAMA0GCSqGSIb3DQEBCwUAA4IBAQCQUGftFD3O3bvYHXLN 1tOVhwezpK/AjrzAccA4xe2Dwg5zL0a3j76aHl0wnqjjCZ1iJH7m82yW6pMwYM+m JUkPnUq4KGFAYdY/qZwtQZKfsrRYKubxR3AMUu5F+HgEBIVlPvtaB6Xy0GG1X5sb 4Iml7JBx/d1ic1bv34W9lh4ccQKOYE+MuBs9oj0RQ0vrjVd5C+cEdvGOaHGrlrME NZgo8yEsGvUAPniq/zg2DbJj0PJp+HZ+SvVLajB+aMIp7aoPFXcoMjmaDR/fQ2NN OzmKHcnHYsBpxdLDErpbPiFHpxM2q/IS/R5CiRy3I4PqvmqpZARYR6KPnFLw+7Mf ff6j -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net