$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b5da987-69f3-4f12-aa3b-0d6f9ae4c06c.roa File: 1b5da987-69f3-4f12-aa3b-0d6f9ae4c06c.roa (raw, json) Hash identifier: 6qqz3ZW9bodR1SdsbGTfk3f2q7Lp5YUPAC4aKuqzkng= Subject key identifier: 7E:19:31:63:2D:91:1B:E7:75:75:7F:DC:F6:D7:BE:A5:B6:25:C5:A9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 30885BC2B1557B42152F0D880BDBECEBDA14258B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b5da987-69f3-4f12-aa3b-0d6f9ae4c06c.roa Signing time: Sat 19 Apr 2025 00:01:00 +0000 ROA not before: Sat 19 Apr 2025 00:01:00 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:88:5b:c2:b1:55:7b:42:15:2f:0d:88:0b:db:ec:eb:da:14:25:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:01:00 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=a4448d0356d54b3e2256c48393756b7aece1bf9ad4bf49124376347d3c53eafa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:26:74:fa:21:89:e3:c7:07:2c:86:b1:5a: b6:48:ab:f2:d7:77:06:e5:3d:19:5b:6f:bd:73:c4: 39:80:fe:a0:9c:af:82:c8:dd:b9:1d:7a:93:12:60: 27:4e:22:43:00:36:ef:ee:7a:f7:62:ce:1b:76:5c: 00:36:69:42:38:be:8d:d8:e6:59:51:94:3f:e8:59: 0d:8b:88:d8:38:9e:39:5c:28:25:00:c8:0c:33:cc: 9d:9a:22:fa:13:be:c9:a4:e2:07:a6:b7:bb:9c:e8: cf:35:04:74:2f:58:28:37:9a:2c:04:ac:92:cb:05: 3d:9c:58:45:b2:2e:3d:4b:39:84:1f:e4:99:81:78: c5:75:86:18:41:06:3d:00:0c:dd:4c:1e:a4:0f:5f: ca:4a:96:42:24:af:70:af:9c:bc:e9:24:8c:f5:ad: 0d:93:87:d3:b6:36:05:37:85:a2:42:fd:5e:d6:56: a4:ef:cb:b9:ef:7d:cc:18:3b:d5:3b:cb:99:d8:34: ce:26:2a:fe:b3:07:c7:e7:ef:87:ee:5c:c0:a1:98: 6e:75:94:2b:f9:c6:a6:2f:4b:3f:08:24:ef:93:fc: 1d:8c:0d:b6:d6:96:ac:ca:2c:bb:8c:6f:0c:9f:21: 01:0e:66:ab:d6:30:7a:fb:24:e6:69:e4:05:53:dd: de:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:19:31:63:2D:91:1B:E7:75:75:7F:DC:F6:D7:BE:A5:B6:25:C5:A9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b5da987-69f3-4f12-aa3b-0d6f9ae4c06c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:4020::/48 Signature Algorithm: sha256WithRSAEncryption 0b:1b:9a:81:8d:f0:3d:21:75:c1:6c:1b:06:33:01:d0:a7:bb: fb:d7:25:ad:71:f3:cb:0d:45:eb:47:6a:19:f5:c9:fc:d0:60: ab:9d:20:69:8c:1a:de:7a:17:ae:a4:6a:ef:0d:22:50:92:97: 29:df:15:a1:02:75:06:54:64:3b:6e:f2:52:ac:e7:6d:7e:6e: a7:16:86:15:ba:14:02:e4:30:0a:d9:e4:73:a5:94:28:44:3a: e1:80:5d:9b:4a:ba:c7:ba:f9:0b:48:51:b9:fb:58:f6:8a:08: 1f:44:14:ac:5b:58:9a:a2:10:4a:cb:49:f1:3d:f3:e8:c3:20: 5d:9a:0e:f4:27:bc:cf:61:7e:83:9b:8e:12:2d:d3:1c:b8:15: 09:92:d7:13:c9:11:8f:62:e0:7a:7d:ca:54:17:bc:5a:85:c0: e2:c7:d5:88:4c:7a:70:cb:27:a8:48:6d:67:04:6f:0d:7c:e0: 56:41:94:5b:d8:37:d3:e6:b4:68:98:e7:95:26:9f:14:11:4f: 44:18:e7:81:14:f4:ca:96:65:7d:ad:98:dc:00:ab:aa:36:fd: e5:d4:81:46:f3:df:c3:d7:cf:b9:38:7a:9b:c8:4d:02:60:4a: 41:b3:30:f9:0c:90:c8:95:4f:0e:63:8d:c8:fb:61:52:37:49: 85:0b:71:3c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMIhbwrFVe0IVLw2IC9vs69oUJYswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMDEwMFoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAYTQ0NDhkMDM1NmQ1NGIzZTIyNTZj NDgzOTM3NTZiN2FlY2UxYmY5YWQ0YmY0OTEyNDM3NjM0N2QzYzUzZWFmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwwmdPohiePHByyGsVq2SKvy13cG 5T0ZW2+9c8Q5gP6gnK+CyN25HXqTEmAnTiJDADbv7nr3Ys4bdlwANmlCOL6N2OZZ UZQ/6FkNi4jYOJ45XCglAMgMM8ydmiL6E77JpOIHpre7nOjPNQR0L1goN5osBKyS ywU9nFhFsi49SzmEH+SZgXjFdYYYQQY9AAzdTB6kD1/KSpZCJK9wr5y86SSM9a0N k4fTtjYFN4WiQv1e1lak78u5733MGDvVO8uZ2DTOJir+swfH5++H7lzAoZhudZQr +camL0s/CCTvk/wdjA221pasyiy7jG8MnyEBDmar1jB6+yTmaeQFU93e9QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH4ZMWMtkRvndXV/3PbXvqW2JcWpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiNWRhOTg3LTY5ZjMtNGYxMi1hYTNiLTBkNmY5YWU0YzA2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAEAgMA0GCSqGSIb3DQEBCwUAA4IBAQALG5qBjfA9IXXBbBsG MwHQp7v71yWtcfPLDUXrR2oZ9cn80GCrnSBpjBreeheupGrvDSJQkpcp3xWhAnUG VGQ7bvJSrOdtfm6nFoYVuhQC5DAK2eRzpZQoRDrhgF2bSrrHuvkLSFG5+1j2iggf RBSsW1iaohBKy0nxPfPowyBdmg70J7zPYX6Dm44SLdMcuBUJktcTyRGPYuB6fcpU F7xahcDix9WITHpwyyeoSG1nBG8NfOBWQZRb2DfT5rRomOeVJp8UEU9EGOeBFPTK lmV9rZjcAKuqNv3l1IFG89/D18+5OHqbyE0CYEpBszD5DJDIlU8OY43I+2FSN0mF C3E8 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net