$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c131403-c0db-4229-b10c-238da60a9c57.roa File: 0c131403-c0db-4229-b10c-238da60a9c57.roa (raw, json) Hash identifier: tYyYeZgz461L1rDf4OtaheiUcmIbQPWd/gNsjVygrTI= Subject key identifier: 5A:F3:FB:F4:15:FD:AB:7A:F0:3C:99:BC:52:E2:F2:B2:DB:B9:8F:F0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4849A62553EF0D435F1473EAC43440ED7D71D858 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c131403-c0db-4229-b10c-238da60a9c57.roa Signing time: Sat 19 Apr 2025 00:00:53 +0000 ROA not before: Sat 19 Apr 2025 00:00:53 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:49:a6:25:53:ef:0d:43:5f:14:73:ea:c4:34:40:ed:7d:71:d8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:00:53 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=1efb48e75c34594fce9c034fd2bb23c41ceceb40a7441a16e174b3ec9f5365f5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:51:ed:69:b6:ef:44:1b:a5:9c:a7:c8:cb:71: dd:f1:7f:1a:e2:c1:bc:62:0f:01:9b:e4:4b:38:b9: de:9b:11:69:34:2b:48:07:93:f3:8c:47:96:ba:88: 96:3a:64:99:12:4b:de:a3:e3:dc:98:e3:9d:78:0d: a8:85:6f:fe:8b:72:29:20:de:75:81:cf:a9:3e:48: 4e:4a:80:e7:a5:51:4c:fe:dd:98:45:91:40:69:fd: ab:1a:7a:a6:0d:2e:15:7e:66:5d:09:a4:41:f7:9f: 7c:ee:d1:9c:b5:28:5f:ff:16:38:fe:f5:59:35:ff: 05:23:5b:4d:00:54:a9:27:6b:0b:d8:89:20:c2:f8: 26:d8:2f:0f:67:31:e6:61:a4:26:00:d5:9f:84:29: e6:00:7c:c9:cb:27:07:13:79:4c:91:22:fa:01:93: 80:5a:22:66:96:7a:00:9d:7e:c0:43:b9:c1:26:39: 94:9d:6b:22:e8:2a:22:e7:b2:d3:9b:a0:cb:ed:c4: 26:de:41:0e:ea:e2:e3:a7:2c:8b:b6:ca:97:08:52: 3e:69:3d:08:59:a5:d9:fa:29:93:22:63:e4:10:94: b3:bc:a2:fa:40:16:a8:72:e6:85:a8:a5:18:92:4b: c7:96:43:b7:58:77:38:92:f5:2f:81:56:d9:3a:91: 8f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F3:FB:F4:15:FD:AB:7A:F0:3C:99:BC:52:E2:F2:B2:DB:B9:8F:F0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0c131403-c0db-4229-b10c-238da60a9c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c880::/48 Signature Algorithm: sha256WithRSAEncryption ae:2b:0a:b4:cd:3d:d8:db:2c:9d:3d:a7:3b:ae:ab:93:9c:d7: 66:8b:2a:1c:b5:f6:1f:f7:db:1b:00:2c:a9:6c:7d:a5:2a:ba: ca:2f:71:3d:ee:f2:5f:00:9c:30:0d:b1:05:f3:ed:bd:1c:35: 9f:7a:b6:bd:13:82:24:74:e4:18:b9:94:0d:4c:2b:db:a5:3c: d1:f1:4f:24:4a:18:b9:b2:d8:2f:aa:22:6f:10:20:9d:b4:90: c5:26:0b:98:3e:f5:84:a7:c5:b8:6a:c4:4b:59:50:03:53:26: 3b:7e:26:eb:94:09:ec:22:c2:99:23:a3:f1:89:b3:fb:73:81: fc:0e:e0:84:73:6b:9d:3a:52:ff:8a:df:f2:18:e6:d9:94:4c: df:98:ec:e1:65:dd:87:85:cb:bb:8c:a2:df:8a:bb:e1:8a:cb: c5:b7:fd:d9:26:7a:1c:e0:f1:10:76:94:2a:4f:d9:90:45:69: 57:ca:35:fb:d7:e0:82:20:36:80:5e:29:40:1e:b7:02:59:bd: d7:cd:d6:7b:23:aa:30:de:c8:4f:30:23:5f:90:b3:72:c2:fb: 17:f7:08:af:cd:97:e0:94:9d:3c:17:97:3c:cc:48:29:f6:57: 25:94:bf:58:93:95:f2:90:5e:55:4b:5a:c4:8e:1b:9a:5e:81: be:19:c3:b7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSEmmJVPvDUNfFHPqxDRA7X1x2FgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMDA1M1oX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAMWVmYjQ4ZTc1YzM0NTk0ZmNlOWMw MzRmZDJiYjIzYzQxY2VjZWI0MGE3NDQxYTE2ZTE3NGIzZWM5ZjUzNjVmNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklHtabbvRBulnKfIy3Hd8X8a4sG8 Yg8Bm+RLOLnemxFpNCtIB5PzjEeWuoiWOmSZEkveo+PcmOOdeA2ohW/+i3IpIN51 gc+pPkhOSoDnpVFM/t2YRZFAaf2rGnqmDS4VfmZdCaRB95987tGctShf/xY4/vVZ Nf8FI1tNAFSpJ2sL2Ikgwvgm2C8PZzHmYaQmANWfhCnmAHzJyycHE3lMkSL6AZOA WiJmlnoAnX7AQ7nBJjmUnWsi6Coi57LTm6DL7cQm3kEO6uLjpyyLtsqXCFI+aT0I WaXZ+imTImPkEJSzvKL6QBaocuaFqKUYkkvHlkO3WHc4kvUvgVbZOpGP4wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFrz+/QV/at68DyZvFLi8rLbuY/wMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBjMTMxNDAzLWMwZGItNDIyOS1iMTBjLTIzOGRhNjBhOWM1Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYciAMA0GCSqGSIb3DQEBCwUAA4IBAQCuKwq0zT3Y2yydPac7 rquTnNdmiyoctfYf99sbACypbH2lKrrKL3E97vJfAJwwDbEF8+29HDWfera9E4Ik dOQYuZQNTCvbpTzR8U8kShi5stgvqiJvECCdtJDFJguYPvWEp8W4asRLWVADUyY7 fibrlAnsIsKZI6PxibP7c4H8DuCEc2udOlL/it/yGObZlEzfmOzhZd2Hhcu7jKLf irvhisvFt/3ZJnoc4PEQdpQqT9mQRWlXyjX71+CCIDaAXilAHrcCWb3XzdZ7I6ow 3shPMCNfkLNywvsX9wivzZfglJ08F5c8zEgp9lcllL9Yk5XykF5VS1rEjhuaXoG+ GcO3 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net