$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/140a2854-efc4-48df-ac69-85d6d5a2e8cb.roa File: 140a2854-efc4-48df-ac69-85d6d5a2e8cb.roa (raw, json) Hash identifier: hL4+yXLaoWw55RfPPa57PYRHBj3kHK4IDKiPDLU6uS0= Subject key identifier: 94:DC:B2:8E:8C:67:38:6B:82:20:31:E1:43:58:87:42:E6:B0:F0:4C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 40CC52DC380B7CEE5E484EF5A9782E1B40F21AAE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/140a2854-efc4-48df-ac69-85d6d5a2e8cb.roa Signing time: Sat 19 Apr 2025 00:11:15 +0000 ROA not before: Sat 19 Apr 2025 00:11:15 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:cc:52:dc:38:0b:7c:ee:5e:48:4e:f5:a9:78:2e:1b:40:f2:1a:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:11:15 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=56cbaa0afba1b2626d0ba523b8d9131b9d94a96ab2e5d2668c107d50f1831ef0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c6:6a:21:da:f0:0a:45:52:c2:3b:c0:c1:42: e7:ab:eb:f4:ff:0a:96:a5:24:b7:76:82:54:d6:67: b7:fc:14:fa:a1:da:c4:d1:db:65:d8:39:6a:4f:f8: ce:83:e1:38:d4:13:8b:5c:aa:0f:ee:15:1a:09:e9: db:a4:a7:c1:9a:d7:01:01:06:40:d1:6e:4f:04:c8: 68:f5:ba:c4:10:c6:ef:43:a8:d1:79:bd:56:bf:9c: ae:67:59:db:d5:9f:66:69:7c:b7:ca:85:84:ae:5d: fc:3c:5f:41:49:92:9c:5f:ad:e1:ae:32:b6:52:53: 6c:10:b3:08:49:2e:6f:1d:ef:d6:f4:90:07:8a:07: 41:08:45:0a:67:51:0a:0f:8a:fc:ff:2d:53:08:75: 21:7e:a9:a5:9a:1c:8b:0f:93:1e:7f:db:c2:a2:76: 2d:ce:b1:84:f9:15:cb:6d:d8:cc:a8:cf:d8:4c:39: 44:b0:a2:99:31:df:4a:cb:37:52:ca:8e:89:09:91: 87:17:7b:87:3d:d7:ef:62:0d:f3:92:09:f4:a4:a5: be:dd:93:96:41:b8:6f:bd:9d:bb:34:67:08:8f:6b: c4:db:73:c7:90:e4:e4:ba:02:57:2f:6f:3a:9c:68: 9e:27:94:6b:0e:6d:4f:40:5f:f8:3e:fe:c5:ac:2b: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DC:B2:8E:8C:67:38:6B:82:20:31:E1:43:58:87:42:E6:B0:F0:4C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/140a2854-efc4-48df-ac69-85d6d5a2e8cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:4880::/48 Signature Algorithm: sha256WithRSAEncryption 07:ef:d1:6e:43:50:3e:20:a8:8b:b6:40:94:be:b6:f8:68:ca: 7e:de:3a:7b:8e:f6:80:36:41:53:9b:a8:1b:bd:ae:fd:e0:3d: 57:00:eb:a1:4b:8d:79:8a:45:ee:61:7a:ee:83:8f:07:1f:64: 23:a6:8c:09:e6:3d:b7:04:d5:69:53:b4:b3:ab:6a:5a:43:ae: de:1a:c0:8e:92:cd:1c:7f:9c:ac:bc:84:c9:d2:15:7c:34:28: 16:f6:fa:10:09:b4:d8:80:31:8b:ff:2f:ad:3d:94:f4:53:fd: 2b:45:0c:4a:73:07:d0:85:87:38:76:dc:14:44:94:c5:7f:a6: d7:74:be:0d:63:5b:a7:ff:dc:a6:4d:68:b4:e3:a6:95:7b:b7: 32:fd:ce:05:a0:f8:e8:c6:f2:85:f3:5b:f8:8b:4a:e7:fd:78: 5e:6c:5f:1d:6b:33:8c:22:6c:85:ba:bc:84:6e:9b:19:54:a8: 01:b8:74:a4:07:96:b3:52:5c:1f:a6:2d:bc:37:3e:17:16:94: be:70:11:0b:c3:f2:90:e8:8b:a0:5c:38:12:0d:81:6b:3d:7e: 12:ed:e5:d6:8d:75:24:6f:83:b1:37:0b:8e:66:e2:2a:d2:9c: 28:9e:19:89:51:7e:27:c9:e4:82:b6:72:1a:c0:71:0e:bf:14: 1d:89:69:52 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQMxS3DgLfO5eSE71qXguG0DyGq4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMTExNVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNANTZjYmFhMGFmYmExYjI2MjZkMGJh NTIzYjhkOTEzMWI5ZDk0YTk2YWIyZTVkMjY2OGMxMDdkNTBmMTgzMWVmMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08ZqIdrwCkVSwjvAwULnq+v0/wqW pSS3doJU1me3/BT6odrE0dtl2DlqT/jOg+E41BOLXKoP7hUaCenbpKfBmtcBAQZA 0W5PBMho9brEEMbvQ6jReb1Wv5yuZ1nb1Z9maXy3yoWErl38PF9BSZKcX63hrjK2 UlNsELMISS5vHe/W9JAHigdBCEUKZ1EKD4r8/y1TCHUhfqmlmhyLD5Mef9vConYt zrGE+RXLbdjMqM/YTDlEsKKZMd9KyzdSyo6JCZGHF3uHPdfvYg3zkgn0pKW+3ZOW QbhvvZ27NGcIj2vE23PHkOTkugJXL286nGieJ5RrDm1PQF/4Pv7FrCvq9wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJTcso6MZzhrgiAx4UNYh0LmsPBMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE0MGEyODU0LWVmYzQtNDhkZi1hYzY5LTg1ZDZkNWEyZThjYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEiAMA0GCSqGSIb3DQEBCwUAA4IBAQAH79FuQ1A+IKiLtkCU vrb4aMp+3jp7jvaANkFTm6gbva794D1XAOuhS415ikXuYXrug48HH2QjpowJ5j23 BNVpU7Szq2paQ67eGsCOks0cf5ysvITJ0hV8NCgW9voQCbTYgDGL/y+tPZT0U/0r RQxKcwfQhYc4dtwURJTFf6bXdL4NY1un/9ymTWi046aVe7cy/c4FoPjoxvKF81v4 i0rn/XhebF8dazOMImyFuryEbpsZVKgBuHSkB5azUlwfpi28Nz4XFpS+cBELw/KQ 6IugXDgSDYFrPX4S7eXWjXUkb4OxNwuOZuIq0pwonhmJUX4nyeSCtnIawHEOvxQd iWlS -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net