$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1e2eabb6-7cb9-478c-b61e-54b97e17d490.roa File: 1e2eabb6-7cb9-478c-b61e-54b97e17d490.roa (raw, json) Hash identifier: MPpGt+0l2LoR+aw92ed6zPfdpLchT9xUAqfdg189sDA= Subject key identifier: D7:36:10:B3:7C:2E:86:A5:59:57:39:14:A5:6B:2B:E5:26:82:AB:99 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6D69FCC4D0D96393B542E34C6B0E5CC110763472 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1e2eabb6-7cb9-478c-b61e-54b97e17d490.roa Signing time: Wed 16 Apr 2025 00:00:53 +0000 ROA not before: Wed 16 Apr 2025 00:00:53 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:69:fc:c4:d0:d9:63:93:b5:42:e3:4c:6b:0e:5c:c1:10:76:34:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 16 00:00:53 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=67658f2e7eab35a713f97202471ace046f340e9c14f791610d5dbc9680e5ebdc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b6:f6:10:dc:29:1c:d5:96:38:59:50:4d:54: 3f:a1:f1:66:76:dc:90:99:c0:17:db:45:d6:28:21: 75:a9:c9:db:7a:f0:09:df:7d:f3:40:41:00:82:df: a7:c3:7e:6b:03:a7:c7:37:ed:0d:b5:b6:c6:b8:e7: 84:3e:da:ea:a6:80:68:aa:41:4a:10:69:c6:df:6c: 1c:79:e0:60:25:7a:a7:3a:0f:75:99:4f:33:8d:db: 57:db:c0:34:b6:e5:9e:25:39:d4:73:16:23:05:fb: 66:73:76:36:6a:70:6e:e4:55:32:9b:75:fb:aa:b0: 18:9c:95:ef:ba:08:7f:6a:ce:5c:4e:0b:98:fa:24: 10:d0:10:b4:4e:f6:4f:c1:1b:21:d4:20:c9:cd:fe: 5b:cc:a2:39:da:4e:ca:e2:d7:03:4d:08:2e:20:85: 30:07:d2:a5:75:a9:6a:8b:e5:8b:3c:e4:a9:a0:19: 66:52:d9:75:2b:8d:c5:09:98:c9:4f:3c:a1:67:c5: cd:da:03:69:9c:09:a7:63:9a:2d:d8:71:be:b5:47: d3:cd:99:45:8d:49:d1:39:fc:71:18:02:4e:8c:0e: 22:20:6e:48:32:23:e8:97:2c:25:77:28:01:d3:4d: 5c:cd:07:3e:ca:53:4b:9c:f6:96:31:48:42:32:13: c4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:36:10:B3:7C:2E:86:A5:59:57:39:14:A5:6B:2B:E5:26:82:AB:99 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1e2eabb6-7cb9-478c-b61e-54b97e17d490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:e000::/40 Signature Algorithm: sha256WithRSAEncryption 17:50:48:00:3d:be:b7:2c:07:a2:08:64:da:53:8e:08:74:13: 23:59:55:d3:23:dd:8b:bb:e7:8c:15:59:81:07:c9:b7:8b:53: 6c:3e:62:d4:2a:3a:0d:66:86:d0:5e:50:61:c5:56:31:3a:3c: 49:f3:78:24:59:44:0f:b8:51:09:e8:dd:f1:9d:54:c5:6e:64: 26:55:8d:e7:89:7c:74:19:34:83:0c:75:7b:8a:bd:d0:d0:26: be:d8:9f:10:9f:e9:e7:d2:a4:82:17:bc:b0:21:22:6b:93:37: 5c:de:d4:ec:7b:6d:6f:b6:3c:68:03:77:a7:bb:3f:c3:4f:0a: 6b:7f:5e:eb:dd:c3:dc:be:85:74:6d:87:9c:04:5c:ab:b7:26: 47:38:36:c0:4d:56:57:b7:ac:9e:b0:2a:88:28:1b:22:7a:d0: a2:35:b2:bb:90:a3:68:b5:32:d0:0b:86:62:2f:5b:a6:e6:5f: f3:21:35:12:5c:a2:c3:31:fa:ce:20:3d:54:41:bc:b7:df:4a: 21:f6:5f:aa:d2:d7:6d:2b:a8:99:c6:80:04:36:f2:f0:24:84: ac:ff:1c:d4:47:7e:de:a2:a9:35:14:d0:76:02:2c:95:c8:db: 55:20:36:69:68:a4:23:e5:98:7a:be:5a:41:53:05:1f:f3:b2: 0f:e1:a6:78 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbWn8xNDZY5O1QuNMaw5cwRB2NHIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNjAwMDA1M1oX DTI1MDUyMTIzNTk1OVowejFJMEcGA1UEBRNANjc2NThmMmU3ZWFiMzVhNzEzZjk3 MjAyNDcxYWNlMDQ2ZjM0MGU5YzE0Zjc5MTYxMGQ1ZGJjOTY4MGU1ZWJkYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57b2ENwpHNWWOFlQTVQ/ofFmdtyQ mcAX20XWKCF1qcnbevAJ333zQEEAgt+nw35rA6fHN+0NtbbGuOeEPtrqpoBoqkFK EGnG32wceeBgJXqnOg91mU8zjdtX28A0tuWeJTnUcxYjBftmc3Y2anBu5FUym3X7 qrAYnJXvugh/as5cTguY+iQQ0BC0TvZPwRsh1CDJzf5bzKI52k7K4tcDTQguIIUw B9Kldalqi+WLPOSpoBlmUtl1K43FCZjJTzyhZ8XN2gNpnAmnY5ot2HG+tUfTzZlF jUnROfxxGAJOjA4iIG5IMiPolywldygB001czQc+ylNLnPaWMUhCMhPEawIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNc2ELN8LoalWVc5FKVrK+UmgquZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlMmVhYmI2LTdjYjktNDc4Yy1iNjFlLTU0Yjk3ZTE3ZDQ5MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9uAwDQYJKoZIhvcNAQELBQADggEBABdQSAA9vrcsB6IIZNpT jgh0EyNZVdMj3Yu754wVWYEHybeLU2w+YtQqOg1mhtBeUGHFVjE6PEnzeCRZRA+4 UQno3fGdVMVuZCZVjeeJfHQZNIMMdXuKvdDQJr7YnxCf6efSpIIXvLAhImuTN1ze 1Ox7bW+2PGgDd6e7P8NPCmt/Xuvdw9y+hXRth5wEXKu3Jkc4NsBNVle3rJ6wKogo GyJ60KI1sruQo2i1MtALhmIvW6bmX/MhNRJcosMx+s4gPVRBvLffSiH2X6rS120r qJnGgAQ28vAkhKz/HNRHft6iqTUU0HYCLJXI21UgNmlopCPlmHq+WkFTBR/zsg/h png= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net