$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13a746d5-ac02-412a-8a63-918cac6ecda2.roa File: 13a746d5-ac02-412a-8a63-918cac6ecda2.roa (raw, json) Hash identifier: QK8H7VfrB+kXoKzUa54lxIH/8iX1A6a7xEVyATqVTI4= Subject key identifier: 1C:AB:DD:71:F0:AE:E6:B4:5E:3E:E5:4F:94:81:43:D8:1A:56:CB:2B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0BC14CA1D4B143D097F4703C369F29102CF8C9D3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13a746d5-ac02-412a-8a63-918cac6ecda2.roa Signing time: Sat 19 Apr 2025 00:10:07 +0000 ROA not before: Sat 19 Apr 2025 00:10:07 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c1:4c:a1:d4:b1:43:d0:97:f4:70:3c:36:9f:29:10:2c:f8:c9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:10:07 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=959f21b4ecbec5158fb8c54e97afdc056397cc45ab6d68755b7e4cfab7067424, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:d6:89:23:19:5a:af:2b:ba:b4:a4:a1:b4: 98:87:d5:5e:95:aa:47:a1:e9:e9:a5:0a:cf:e3:77: 46:b5:37:40:ae:33:36:71:0e:90:07:21:de:de:90: 05:59:95:ab:98:0d:bd:69:a7:3f:aa:3b:9a:6c:a0: 7e:e0:2d:44:c5:7a:47:44:24:26:cc:84:43:4d:e0: e5:c4:62:e5:30:41:2e:8c:fd:5f:e4:77:cc:d8:fa: d8:a5:a6:14:63:05:75:76:4d:a1:70:b9:43:e1:de: b1:07:8f:97:84:f8:2d:04:7d:e2:1b:db:42:78:b5: 84:6f:25:3a:78:b3:9b:27:20:86:34:3f:fd:19:37: 5e:95:6e:62:a9:05:67:40:54:9e:d0:a6:11:cf:82: 63:29:bb:eb:b7:24:16:9e:cd:a4:16:3d:fd:da:3a: c9:0a:65:ca:7c:5f:37:7a:fd:cb:c1:ff:d8:e5:68: d4:2d:38:1c:f6:34:4b:6e:c1:13:49:8b:19:c1:90: 00:05:59:2b:bc:ee:9b:79:69:6e:37:fe:85:62:ea: 7c:ad:85:a6:df:78:5a:83:c7:4f:3d:2b:0b:19:aa: 71:f3:63:66:45:ac:1b:27:99:06:01:f4:0f:55:26: d0:c6:f5:a7:93:1b:7e:f1:57:6d:5a:dd:70:62:c2: 3a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AB:DD:71:F0:AE:E6:B4:5E:3E:E5:4F:94:81:43:D8:1A:56:CB:2B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13a746d5-ac02-412a-8a63-918cac6ecda2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:2800::/40 Signature Algorithm: sha256WithRSAEncryption bc:f4:ed:94:db:fc:9b:13:47:1f:39:21:c5:2a:bb:f2:9c:a3: 3d:07:10:61:68:15:1b:3b:9b:1b:f9:01:ce:3a:36:42:c7:c9: c8:1d:5d:3f:57:f0:ea:f0:87:26:83:08:46:fd:31:e7:72:7f: 3f:41:39:ba:56:4c:51:52:cd:38:e6:0c:d3:68:c0:61:b4:b3: 8a:51:a4:cf:a6:cf:00:df:34:8f:3e:28:c9:75:29:7d:26:89: 0d:e9:b1:1b:9e:b8:30:d4:0f:ab:47:4b:e4:6b:5a:16:9a:7a: 26:85:05:4f:de:a6:aa:38:77:8c:7b:0d:11:16:5d:0c:63:47: c3:af:17:16:7c:b3:9d:02:60:c8:4f:b7:39:dc:50:88:0c:e1: 10:16:ba:8f:5f:41:d6:84:2d:e3:f3:c7:10:90:88:f4:39:eb: 38:56:bd:99:09:c7:e0:64:59:35:e5:d7:6b:8b:f5:de:cd:79: 54:8a:7a:dd:81:81:2e:19:36:b7:cc:8f:64:14:e4:91:42:0e: 13:63:c8:27:dd:a7:6a:e9:86:14:af:f7:a5:a5:b7:ed:9e:a6: 3a:c6:56:de:f5:22:18:b4:79:ff:6a:45:3e:96:e8:c9:6e:e4: 82:63:3a:b6:8c:58:4e:98:1c:11:00:44:a0:04:5d:09:22:e8: 86:1e:bd:f3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUC8FModSxQ9CX9HA8Np8pECz4ydMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMTAwN1oX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAOTU5ZjIxYjRlY2JlYzUxNThmYjhj NTRlOTdhZmRjMDU2Mzk3Y2M0NWFiNmQ2ODc1NWI3ZTRjZmFiNzA2NzQyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bjWiSMZWq8rurSkobSYh9VelapH oenppQrP43dGtTdArjM2cQ6QByHe3pAFWZWrmA29aac/qjuabKB+4C1ExXpHRCQm zIRDTeDlxGLlMEEujP1f5HfM2PrYpaYUYwV1dk2hcLlD4d6xB4+XhPgtBH3iG9tC eLWEbyU6eLObJyCGND/9GTdelW5iqQVnQFSe0KYRz4JjKbvrtyQWns2kFj392jrJ CmXKfF83ev3Lwf/Y5WjULTgc9jRLbsETSYsZwZAABVkrvO6beWluN/6FYup8rYWm 33hag8dPPSsLGapx82NmRawbJ5kGAfQPVSbQxvWnkxt+8VdtWt1wYsI6+QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFByr3XHwrua0Xj7lT5SBQ9gaVssrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEzYTc0NmQ1LWFjMDItNDEyYS04YTYzLTkxOGNhYzZlY2RhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOCgwDQYJKoZIhvcNAQELBQADggEBALz07ZTb/JsTRx85IcUq u/Kcoz0HEGFoFRs7mxv5Ac46NkLHycgdXT9X8OrwhyaDCEb9Medyfz9BObpWTFFS zTjmDNNowGG0s4pRpM+mzwDfNI8+KMl1KX0miQ3psRueuDDUD6tHS+RrWhaaeiaF BU/epqo4d4x7DREWXQxjR8OvFxZ8s50CYMhPtzncUIgM4RAWuo9fQdaELePzxxCQ iPQ56zhWvZkJx+BkWTXl12uL9d7NeVSKet2BgS4ZNrfMj2QU5JFCDhNjyCfdp2rp hhSv96Wlt+2epjrGVt71Ihi0ef9qRT6W6Mlu5IJjOraMWE6YHBEARKAEXQki6IYe vfM= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net