$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fd6073f-de4a-40ca-a45c-593a1364a858.roa File: 0fd6073f-de4a-40ca-a45c-593a1364a858.roa (raw, json) Hash identifier: of1U9WYVq7h2rUG+TMaWthwIkfKiXLahKpVLxlgShTE= Subject key identifier: 46:EF:66:F6:DE:13:A9:C0:7B:8A:F3:C5:6B:71:D4:DC:C2:BB:A6:BE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6AEAF1E27FB4AC743D9930200D1E86F28C08A1C3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fd6073f-de4a-40ca-a45c-593a1364a858.roa Signing time: Mon 21 Apr 2025 16:10:25 +0000 ROA not before: Mon 21 Apr 2025 16:10:25 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ea:f1:e2:7f:b4:ac:74:3d:99:30:20:0d:1e:86:f2:8c:08:a1:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:10:25 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=56953fb075c3e3ac16af65e9c186427877aedd2f9f0dfb19eafdba53cda62b1a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:a7:31:6a:87:0e:b9:5c:f8:3c:78:fe:be: 46:5c:25:03:a5:7b:21:47:62:90:03:8d:f4:f7:96: 03:97:1f:e2:0d:90:2e:45:e6:2f:f8:00:7c:33:8f: 5c:12:94:de:ee:6e:75:b7:16:33:87:08:17:b1:5a: 3b:d0:cb:8e:58:f6:56:4e:0d:0e:fa:44:4d:39:10: 9c:5b:21:cc:9e:68:9a:88:c7:df:52:bf:cb:31:d4: 2b:f6:37:77:cc:64:17:0a:b4:1e:c0:3f:15:8a:91: 08:75:44:f0:d9:14:a0:44:f6:fa:bc:7e:f7:81:a7: a8:d9:23:4a:fc:47:19:d0:b3:54:8d:25:2a:3e:a1: d9:7a:cd:10:98:c2:46:42:fb:87:2f:5f:86:e6:44: d8:92:7e:8f:59:9b:b9:36:a2:f6:d7:11:00:7f:e6: 2c:06:12:ec:af:db:db:ed:15:a9:9f:9a:fc:9f:16: f3:6a:1c:f8:f3:f1:41:7c:2f:a0:bf:d5:09:08:8e: ec:d0:0b:a3:52:24:53:63:1a:24:ef:2c:12:59:0d: 7c:d8:26:e3:36:6c:27:a0:b1:48:ae:d4:e5:c8:45: fc:d8:51:61:c6:7a:75:e9:15:98:ac:ce:fd:fa:08: a1:90:7e:4e:1e:2d:7a:a0:cf:3e:e8:99:11:c4:e1: 48:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EF:66:F6:DE:13:A9:C0:7B:8A:F3:C5:6B:71:D4:DC:C2:BB:A6:BE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0fd6073f-de4a-40ca-a45c-593a1364a858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:2000::/40 Signature Algorithm: sha256WithRSAEncryption 87:91:4b:1a:c1:67:3c:3a:ba:9e:82:56:28:67:14:c5:51:b0: 92:e6:d3:fd:4f:81:4e:6a:f6:47:58:e6:75:04:6e:c1:e9:b6: 39:7d:8e:6c:4f:60:b5:09:72:bb:48:0b:8a:42:cf:37:6b:f4: 0e:43:51:82:5c:b5:39:1b:37:32:3e:ce:02:80:5f:56:9d:90: 31:58:91:5e:ec:31:8b:6b:7f:fa:28:05:22:8d:13:a8:de:27: a1:60:aa:e7:34:f1:34:e1:27:5d:53:53:6e:8e:b7:59:da:4e: 6d:4c:58:18:d7:be:df:db:c4:ff:e3:df:39:02:54:2d:ba:72: f7:3c:49:d4:d1:83:89:cb:f5:e0:fe:cc:63:35:62:67:88:15: 74:6d:67:38:59:94:f9:f2:48:15:dd:b8:63:88:7e:b4:21:6e: 0b:9e:12:73:0c:ed:ef:c3:c7:41:68:27:4d:9a:19:b9:f9:00: 2d:ce:7e:f6:79:d1:5a:7f:3b:e3:4b:98:61:a2:d9:a5:af:3a: a5:02:c6:cf:37:18:81:3a:2e:2f:6f:c4:d9:bc:25:e0:1c:c4: bb:ac:53:ce:40:bc:10:b6:59:1e:73:86:32:cd:f6:57:1a:22: 77:56:43:dc:03:1c:a8:cb:5b:c9:cc:40:94:55:02:db:e0:1b: fc:4e:b2:3c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaurx4n+0rHQ9mTAgDR6G8owIocMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MTAyNVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANTY5NTNmYjA3NWMzZTNhYzE2YWY2 NWU5YzE4NjQyNzg3N2FlZGQyZjlmMGRmYjE5ZWFmZGJhNTNjZGE2MmIxYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA6nMWqHDrlc+Dx4/r5GXCUDpXsh R2KQA43095YDlx/iDZAuReYv+AB8M49cEpTe7m51txYzhwgXsVo70MuOWPZWTg0O +kRNORCcWyHMnmiaiMffUr/LMdQr9jd3zGQXCrQewD8VipEIdUTw2RSgRPb6vH73 gaeo2SNK/EcZ0LNUjSUqPqHZes0QmMJGQvuHL1+G5kTYkn6PWZu5NqL21xEAf+Ys BhLsr9vb7RWpn5r8nxbzahz48/FBfC+gv9UJCI7s0AujUiRTYxok7ywSWQ182Cbj NmwnoLFIrtTlyEX82FFhxnp16RWYrM79+gihkH5OHi16oM8+6JkRxOFIewIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEbvZvbeE6nAe4rzxWtx1NzCu6a+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzBmZDYwNzNmLWRlNGEtNDBjYS1hNDVjLTU5M2ExMzY0YTg1OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNiAwDQYJKoZIhvcNAQELBQADggEBAIeRSxrBZzw6up6CVihn FMVRsJLm0/1PgU5q9kdY5nUEbsHptjl9jmxPYLUJcrtIC4pCzzdr9A5DUYJctTkb NzI+zgKAX1adkDFYkV7sMYtrf/ooBSKNE6jeJ6Fgquc08TThJ11TU26Ot1naTm1M WBjXvt/bxP/j3zkCVC26cvc8SdTRg4nL9eD+zGM1YmeIFXRtZzhZlPnySBXduGOI frQhbgueEnMM7e/Dx0FoJ02aGbn5AC3OfvZ50Vp/O+NLmGGi2aWvOqUCxs83GIE6 Li9vxNm8JeAcxLusU85AvBC2WR5zhjLN9lcaIndWQ9wDHKjLW8nMQJRVAtvgG/xO sjw= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net