$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa File: 13126cec-b0b1-4417-bf14-3d918163685c.roa (raw, json) Hash identifier: 0bmo+pc5HqUaQBgB82yiIpWgB5e11TOehrDsplt/gY8= Subject key identifier: 07:47:DA:59:8B:92:67:79:FA:CB:AB:72:8D:C1:68:FE:31:5C:6B:26 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 22A56553E7FFBA30F57136A936E93280B22999B3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa Signing time: Fri 18 Apr 2025 00:20:43 +0000 ROA not before: Fri 18 Apr 2025 00:20:43 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a5:65:53:e7:ff:ba:30:f5:71:36:a9:36:e9:32:80:b2:29:99:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 18 00:20:43 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=10c19fe6269edccf2234a88ad6f6f3d21ce669b813b0d3d50fe5e84c7fb24417, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:33:5c:72:18:a8:8f:16:d8:41:7f:d8:77: 2e:7e:41:1a:5a:86:a7:b8:29:c3:3c:45:9e:49:27: e1:78:b3:47:40:e6:dd:37:bd:97:8b:9d:54:55:13: fc:6c:e9:41:04:03:27:e0:7d:5e:fa:cf:8d:33:a3: 4a:17:2e:55:f8:06:ed:69:29:db:b5:14:5c:59:43: 8e:ab:59:30:d8:58:6b:87:c2:07:f7:93:c6:23:91: 1f:37:55:44:89:30:4d:2e:20:f6:d7:d4:bb:34:08: f6:77:55:dc:6a:bf:b8:a5:f4:9e:fa:66:d8:ad:b4: 15:0d:cf:2f:25:e8:4e:1f:36:0e:0c:2c:fb:1d:e3: 95:c7:e5:32:e1:b6:19:53:93:3a:57:21:15:06:80: a9:98:7f:7e:d0:29:d1:31:48:98:3c:65:72:20:db: 88:4d:8f:c7:fc:22:3c:7c:6b:18:be:ea:96:e4:9b: e0:6f:41:ab:96:18:77:0e:54:1b:d9:d1:13:d5:21: 8c:99:a8:23:73:8f:a0:52:03:ca:9c:3f:60:3f:c3: 95:ab:8f:d3:23:2b:48:5c:ba:df:99:ca:6b:f8:6a: 5b:00:1d:00:78:09:7b:1b:ef:25:e5:d3:dd:f4:67: 3f:34:53:4d:91:3f:52:66:37:5e:12:d8:4c:ea:f5: 31:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:47:DA:59:8B:92:67:79:FA:CB:AB:72:8D:C1:68:FE:31:5C:6B:26 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13126cec-b0b1-4417-bf14-3d918163685c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:e040::/48 Signature Algorithm: sha256WithRSAEncryption 7c:b1:1b:f7:56:1e:e1:d1:96:4b:59:64:dd:a2:30:ce:1c:fd: 9b:d2:c7:63:a0:fb:75:0a:3f:4d:8e:69:e3:c6:9c:76:b1:78: b3:58:7a:68:b1:8c:f3:15:81:8f:21:0f:49:db:56:64:22:64: a7:73:ad:9d:da:32:9f:1f:b4:a0:95:d4:ba:70:60:5d:99:b7: 81:1c:a8:c6:8b:1f:7d:3e:15:4c:99:db:c8:0c:5f:c4:15:40: 27:15:9b:b8:56:a4:57:5d:69:3b:14:22:dc:13:67:87:08:5e: bd:47:e9:24:25:85:8a:8b:8a:2f:58:70:63:8b:b9:69:4e:89: 0c:1a:1a:b7:23:05:ef:d5:0e:e5:ed:03:08:58:d0:24:af:d3: d6:da:18:6f:6b:b5:93:1c:9e:1e:e0:b3:a7:f4:50:5b:f0:41: 88:fa:cf:a9:0e:b7:f8:8c:99:bd:dc:a7:2f:49:27:ab:1d:4a: 23:a5:5f:24:c8:75:6e:0c:83:b2:a9:ef:51:7b:7f:1a:f1:55: 5e:84:c3:e0:00:a9:07:91:24:0c:b5:42:d5:db:68:7d:eb:9e: 3f:28:f0:cf:10:0f:bd:47:95:16:6e:d4:20:5d:54:04:13:29: a6:f5:72:59:2c:7d:75:9d:46:60:1a:c7:3f:9e:03:2c:69:6e: 75:68:fd:62 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIqVlU+f/ujD1cTapNukygLIpmbMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxODAwMjA0M1oX DTI1MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAMTBjMTlmZTYyNjllZGNjZjIyMzRh ODhhZDZmNmYzZDIxY2U2NjliODEzYjBkM2Q1MGZlNWU4NGM3ZmIyNDQxNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszMzXHIYqI8W2EF/2HcufkEaWoan uCnDPEWeSSfheLNHQObdN72Xi51UVRP8bOlBBAMn4H1e+s+NM6NKFy5V+AbtaSnb tRRcWUOOq1kw2Fhrh8IH95PGI5EfN1VEiTBNLiD219S7NAj2d1Xcar+4pfSe+mbY rbQVDc8vJehOHzYODCz7HeOVx+Uy4bYZU5M6VyEVBoCpmH9+0CnRMUiYPGVyINuI TY/H/CI8fGsYvuqW5Jvgb0Grlhh3DlQb2dET1SGMmagjc4+gUgPKnD9gP8OVq4/T IytIXLrfmcpr+GpbAB0AeAl7G+8l5dPd9Gc/NFNNkT9SZjdeEthM6vUx5wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAdH2lmLkmd5+surco3BaP4xXGsmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEzMTI2Y2VjLWIwYjEtNDQxNy1iZjE0LTNkOTE4MTYzNjg1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8uBAMA0GCSqGSIb3DQEBCwUAA4IBAQB8sRv3Vh7h0ZZLWWTd ojDOHP2b0sdjoPt1Cj9Njmnjxpx2sXizWHposYzzFYGPIQ9J21ZkImSnc62d2jKf H7SgldS6cGBdmbeBHKjGix99PhVMmdvIDF/EFUAnFZu4VqRXXWk7FCLcE2eHCF69 R+kkJYWKi4ovWHBji7lpTokMGhq3IwXv1Q7l7QMIWNAkr9PW2hhva7WTHJ4e4LOn 9FBb8EGI+s+pDrf4jJm93KcvSSerHUojpV8kyHVuDIOyqe9Re38a8VVehMPgAKkH kSQMtULV22h9654/KPDPEA+9R5UWbtQgXVQEEymm9XJZLH11nUZgGsc/ngMsaW51 aP1i -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net