$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19919798-da5e-4a9c-94fe-dbf4e51f2afd.roa File: 19919798-da5e-4a9c-94fe-dbf4e51f2afd.roa (raw, json) Hash identifier: VWRHFYijd4XLwjSVtPNTYiVHP6pXo27zcmny31j3tR8= Subject key identifier: 5F:2E:2A:72:A0:FD:07:75:4C:C2:F3:F9:70:45:D4:13:C6:CA:E5:D5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 441375500C7BF26999D9DA65A78AC15C97EE4486 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19919798-da5e-4a9c-94fe-dbf4e51f2afd.roa Signing time: Sat 19 Apr 2025 00:40:11 +0000 ROA not before: Sat 19 Apr 2025 00:40:11 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:13:75:50:0c:7b:f2:69:99:d9:da:65:a7:8a:c1:5c:97:ee:44:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:40:11 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=b319df0ec4553cbcda1ac5af7d4f4a6ee4e53733ca601c4c8daf22bb48e77542, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:fd:6b:8b:a4:05:21:ef:d2:cf:7d:3a:55: f4:31:76:67:89:6d:cb:3f:16:80:5e:3a:f4:a1:a2: 6b:20:49:04:c4:6c:4c:01:36:92:9e:2e:70:cc:83: 02:04:88:d6:68:1a:e8:5e:8c:d8:ba:c3:e1:f3:7f: 97:52:dc:1f:d1:30:81:13:54:6e:54:bd:50:54:64: 02:8f:3b:e9:31:03:12:c6:65:ff:38:05:50:0f:24: cc:71:8e:74:ff:2a:e6:7c:9f:aa:ce:11:0d:4c:5a: 53:1f:8e:df:74:f4:a4:07:db:a3:84:88:3c:48:e6: 97:bf:81:f9:8a:fb:01:33:3a:cf:27:08:af:fb:43: 91:53:82:61:fe:f4:73:4c:b2:6e:e4:88:49:e5:9f: 42:a8:52:ae:1e:b4:bd:4e:1e:d2:d0:08:6f:d2:3e: dd:9a:9b:68:06:43:91:70:97:0b:6a:df:00:47:0e: 3d:fd:88:b2:43:bb:cb:d3:11:cf:d9:b5:0c:05:15: 2b:2f:5f:96:ba:19:88:63:77:be:28:88:32:34:b0: 7b:1a:07:e3:7e:5d:5b:df:e0:09:0e:d7:d3:50:ce: 77:41:ac:53:da:04:22:ea:ac:17:fa:3c:fa:40:ae: 2d:ba:da:21:cb:78:2a:5e:59:85:8a:77:14:5b:43: 31:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2E:2A:72:A0:FD:07:75:4C:C2:F3:F9:70:45:D4:13:C6:CA:E5:D5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/19919798-da5e-4a9c-94fe-dbf4e51f2afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:8880::/48 Signature Algorithm: sha256WithRSAEncryption 2b:fb:d9:33:2f:3f:13:ea:cd:a0:2e:09:3a:e3:33:36:45:94: 55:69:3a:86:7f:f0:86:9b:d6:00:a2:91:85:42:2d:86:27:b2: bf:c5:55:ab:51:d8:c3:29:f6:06:61:88:4d:23:11:ca:69:2c: fb:8c:85:42:a6:e1:81:50:b5:70:33:81:c9:18:f3:0f:b5:0f: 05:52:17:c9:c9:cc:e4:56:4c:bb:9a:70:bb:b7:f5:4f:e8:15: fc:f3:75:26:dd:d6:89:d3:7a:56:fe:f9:96:68:20:bf:ac:8e: a1:4a:51:27:15:3a:f5:8c:91:bc:1f:87:91:6d:e0:db:cf:3d: 08:9b:f7:26:c7:be:fb:34:90:7c:62:72:6c:30:95:da:7e:cd: ce:31:44:79:3a:88:de:8a:58:87:c7:72:2e:82:74:c3:35:64: 9d:64:61:60:4f:f1:66:f3:d0:84:ec:4a:24:be:15:7e:e9:9a: af:52:bf:f5:94:59:c9:58:4c:fe:3c:67:63:f4:2c:af:e4:04: 99:5b:34:db:d0:94:89:8f:6b:c0:60:48:81:dd:5a:a4:c0:3e: 8c:a2:9a:01:5e:af:b4:79:8d:98:2f:e8:f8:18:57:bc:fb:19: 79:ed:57:4a:23:c3:1f:5e:5d:e9:c4:59:99:1b:64:ec:ca:0a: ad:ed:c7:b5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURBN1UAx78mmZ2dplp4rBXJfuRIYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwNDAxMVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAYjMxOWRmMGVjNDU1M2NiY2RhMWFj NWFmN2Q0ZjRhNmVlNGU1MzczM2NhNjAxYzRjOGRhZjIyYmI0OGU3NzU0MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGr9a4ukBSHv0s99OlX0MXZniW3L PxaAXjr0oaJrIEkExGxMATaSni5wzIMCBIjWaBroXozYusPh83+XUtwf0TCBE1Ru VL1QVGQCjzvpMQMSxmX/OAVQDyTMcY50/yrmfJ+qzhENTFpTH47fdPSkB9ujhIg8 SOaXv4H5ivsBMzrPJwiv+0ORU4Jh/vRzTLJu5IhJ5Z9CqFKuHrS9Th7S0Ahv0j7d mptoBkORcJcLat8ARw49/YiyQ7vL0xHP2bUMBRUrL1+WuhmIY3e+KIgyNLB7Ggfj fl1b3+AJDtfTUM53QaxT2gQi6qwX+jz6QK4tutohy3gqXlmFincUW0MxWQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFF8uKnKg/Qd1TMLz+XBF1BPGyuXVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE5OTE5Nzk4LWRhNWUtNGE5Yy05NGZlLWRiZjRlNTFmMmFmZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOIiAMA0GCSqGSIb3DQEBCwUAA4IBAQAr+9kzLz8T6s2gLgk6 4zM2RZRVaTqGf/CGm9YAopGFQi2GJ7K/xVWrUdjDKfYGYYhNIxHKaSz7jIVCpuGB ULVwM4HJGPMPtQ8FUhfJyczkVky7mnC7t/VP6BX883Um3daJ03pW/vmWaCC/rI6h SlEnFTr1jJG8H4eRbeDbzz0Im/cmx777NJB8YnJsMJXafs3OMUR5OojeiliHx3Iu gnTDNWSdZGFgT/Fm89CE7EokvhV+6ZqvUr/1lFnJWEz+PGdj9Cyv5ASZWzTb0JSJ j2vAYEiB3VqkwD6MopoBXq+0eY2YL+j4GFe8+xl57VdKI8MfXl3pxFmZG2Tsygqt 7ce1 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net