$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0d508791-7f08-4c5c-94e2-b498cfd414e9.roa File: 0d508791-7f08-4c5c-94e2-b498cfd414e9.roa (raw, json) Hash identifier: uGq/vScfv7sG7/nRxi8Jd9MhMQCYj46Q2ceMgjlR4Ws= Subject key identifier: C9:9E:F2:A4:93:41:29:DE:B8:34:65:D7:CA:13:36:4E:01:DB:F8:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 344681EFB4DC4729BDB228A2AC3DB19B671834EF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0d508791-7f08-4c5c-94e2-b498cfd414e9.roa Signing time: Mon 21 Apr 2025 15:02:09 +0000 ROA not before: Mon 21 Apr 2025 15:02:09 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:4880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:46:81:ef:b4:dc:47:29:bd:b2:28:a2:ac:3d:b1:9b:67:18:34:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:02:09 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=18ed0acc8fa5f31a2f94f3997d8b2900a770d3f2e64495183e68814c9b44307c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:8d:6e:df:b2:0c:d7:1b:ea:d5:dc:0b:93: 15:9c:d7:c0:90:d8:66:66:4c:39:fb:b1:ea:e4:7d: 96:29:07:ae:ea:a2:34:62:a9:02:c2:c5:3a:8d:51: 9c:22:43:db:58:8f:82:fa:0e:c5:ea:06:ce:30:11: 36:97:d2:bb:81:3b:2d:06:eb:61:0a:8c:07:2a:bb: 00:5c:d1:db:61:c3:95:a4:b6:ae:6c:6f:00:24:06: 79:a7:1b:a8:32:d7:cb:f3:14:da:bb:69:62:84:82: c5:10:9e:2b:5b:6d:f2:75:17:39:d8:8b:bf:4f:1e: 73:29:28:34:eb:ab:02:39:85:ce:3d:c5:21:d1:93: 2b:90:6f:3d:73:f8:12:08:7e:73:12:85:5d:ce:bd: db:21:18:c8:69:24:5f:4b:b0:92:48:59:c3:aa:0d: bf:dc:69:6e:c7:eb:b1:54:f9:4f:1d:88:6a:5a:1b: 81:f3:9d:f2:c0:ce:72:a9:bc:42:81:37:26:6a:51: dc:0e:fd:74:fb:94:1c:db:6e:19:a5:a3:dc:50:c5: dd:a1:4e:b3:50:93:1f:f5:a3:42:41:f4:1c:57:de: cb:60:e5:fd:71:b6:57:dc:28:cf:fe:ea:12:a2:a8: 70:0a:0f:41:2c:40:bb:bb:d6:53:ce:70:9e:bf:59: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9E:F2:A4:93:41:29:DE:B8:34:65:D7:CA:13:36:4E:01:DB:F8:E7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0d508791-7f08-4c5c-94e2-b498cfd414e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:4880::/46 Signature Algorithm: sha256WithRSAEncryption a4:e7:67:57:a5:32:dd:81:50:6c:e6:fb:c0:52:1e:94:19:b1: a0:2c:98:6f:b8:1d:43:0c:0b:5d:a3:9b:0b:59:8f:3f:4c:a1: e0:1a:1e:90:28:2e:12:5d:b5:a7:06:1b:19:76:60:a8:18:a5: dc:45:fd:46:88:1f:1d:a6:0e:4c:3a:e5:a4:03:32:f4:f8:be: 51:78:3b:46:a4:a7:8f:cc:bc:7f:25:cc:6a:27:c3:c7:51:9a: 94:80:a7:9b:40:c1:a4:6e:af:57:25:fe:90:d3:30:8e:1d:41: bf:21:9a:58:af:56:cd:7c:66:5c:cc:e4:0b:c6:a5:c2:6b:73: 33:86:b1:82:6a:06:d7:5f:dc:3d:f1:40:7b:38:31:f6:b5:22: 21:e7:22:e0:ce:71:cf:2c:18:c8:46:22:bc:97:eb:3d:66:aa: e9:d8:69:f5:ac:be:e2:97:f9:6b:ec:5a:65:02:56:66:c0:ce: 6f:4b:4b:a0:80:24:5a:5d:cd:6c:ad:b8:2d:87:37:b2:6a:d2: 0f:64:94:7a:10:87:d2:bc:5e:57:09:6b:26:8a:99:f5:26:b4: 94:22:cf:3d:56:8f:d8:44:4d:68:84:d0:1e:a3:d4:09:29:e7: 5b:6b:93:df:63:75:5c:c2:3d:e5:54:64:cf:08:3e:62:5e:cb: 50:d7:22:b8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNEaB77TcRym9siiirD2xm2cYNO8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MDIwOVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMThlZDBhY2M4ZmE1ZjMxYTJmOTRm Mzk5N2Q4YjI5MDBhNzcwZDNmMmU2NDQ5NTE4M2U2ODgxNGM5YjQ0MzA3YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzGNbt+yDNcb6tXcC5MVnNfAkNhm Zkw5+7Hq5H2WKQeu6qI0YqkCwsU6jVGcIkPbWI+C+g7F6gbOMBE2l9K7gTstButh CowHKrsAXNHbYcOVpLaubG8AJAZ5pxuoMtfL8xTau2lihILFEJ4rW23ydRc52Iu/ Tx5zKSg066sCOYXOPcUh0ZMrkG89c/gSCH5zEoVdzr3bIRjIaSRfS7CSSFnDqg2/ 3Glux+uxVPlPHYhqWhuB853ywM5yqbxCgTcmalHcDv10+5Qc224ZpaPcUMXdoU6z UJMf9aNCQfQcV97LYOX9cbZX3CjP/uoSoqhwCg9BLEC7u9ZTznCev1lxNQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMme8qSTQSneuDRl18oTNk4B2/jnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBkNTA4NzkxLTdmMDgtNGM1Yy05NGUyLWI0OThjZmQ0MTRlOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaUiAMA0GCSqGSIb3DQEBCwUAA4IBAQCk52dXpTLdgVBs5vvA Uh6UGbGgLJhvuB1DDAtdo5sLWY8/TKHgGh6QKC4SXbWnBhsZdmCoGKXcRf1GiB8d pg5MOuWkAzL0+L5ReDtGpKePzLx/JcxqJ8PHUZqUgKebQMGkbq9XJf6Q0zCOHUG/ IZpYr1bNfGZczOQLxqXCa3MzhrGCagbXX9w98UB7ODH2tSIh5yLgznHPLBjIRiK8 l+s9Zqrp2Gn1rL7il/lr7FplAlZmwM5vS0uggCRaXc1srbgthzeyatIPZJR6EIfS vF5XCWsmipn1JrSUIs89Vo/YRE1ohNAeo9QJKedba5PfY3Vcwj3lVGTPCD5iXstQ 1yK4 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net