$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ee9fbda-9a9a-4e0b-9057-c318014d6ede.roa File: 1ee9fbda-9a9a-4e0b-9057-c318014d6ede.roa (raw, json) Hash identifier: 6zlKfJVw+JyvzbdBswG62wa5To6nJESQE9TC5ek/WI0= Subject key identifier: B5:ED:CE:13:02:AF:62:76:AB:B3:58:67:A1:5E:A4:E1:6A:89:73:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4B45ECA8DFC81BF3166064B45AA7AD9F21304409 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ee9fbda-9a9a-4e0b-9057-c318014d6ede.roa Signing time: Mon 21 Apr 2025 16:40:13 +0000 ROA not before: Mon 21 Apr 2025 16:40:13 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da18:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:45:ec:a8:df:c8:1b:f3:16:60:64:b4:5a:a7:ad:9f:21:30:44:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:40:13 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=f83184cb842dbea2674293f976bc0518cb62c1df87f434535c0743029fae8aa0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:d5:10:d2:d1:44:a1:e2:a7:1a:6b:dd:2f: ab:81:f6:20:47:4f:53:19:16:48:8a:04:2f:21:e4: f4:5d:ef:bc:83:9b:f9:90:9f:00:60:a4:45:e7:39: 77:f3:de:09:19:92:02:5e:a9:75:a3:3e:88:c2:d7: 64:a9:bf:6f:f0:db:97:11:fa:da:63:90:c4:c1:b7: 3a:ff:3e:c0:0f:42:bf:8b:42:8b:ae:21:7e:99:6f: d2:28:5a:54:b8:33:71:d5:86:a9:8b:b6:1d:0e:f3: 75:fe:1e:31:fe:70:a1:5a:64:e1:7d:d9:10:d7:48: b4:85:30:64:32:bc:17:69:32:80:2c:fe:d4:56:ab: 7f:ef:bc:04:94:72:80:3e:d7:58:37:f0:ce:a5:c7: f6:d8:b4:1c:04:1e:46:19:92:51:98:a8:4b:08:e5: 04:38:b8:a7:43:8a:66:e2:1f:ba:7b:00:82:54:c3: 99:b2:11:a5:1d:18:1d:e7:c7:ca:e2:9b:1a:0c:77: 28:96:ed:24:f4:f9:28:14:44:0e:8e:95:c0:8f:64: 7c:14:e2:fc:fc:a6:43:30:39:95:cf:20:08:e9:0b: 1d:5e:51:15:dc:82:57:78:d3:ea:e5:ae:b2:43:01: 4f:9b:e5:63:1f:04:41:eb:0c:33:ee:f7:f1:bd:9a: 76:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:ED:CE:13:02:AF:62:76:AB:B3:58:67:A1:5E:A4:E1:6A:89:73:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ee9fbda-9a9a-4e0b-9057-c318014d6ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da18:c00::/38 Signature Algorithm: sha256WithRSAEncryption 40:2e:d5:1b:3e:59:7d:9d:a6:9e:da:b6:29:ce:1c:ab:f6:fc: bb:61:06:03:b3:ea:bd:ab:4f:84:eb:4f:a1:f6:dc:32:fd:ba: 97:af:e5:18:82:bf:81:50:89:14:4b:9c:b8:a9:14:a7:ff:a0: a1:5f:bf:6d:07:56:3b:13:b1:f1:60:11:df:63:48:0d:6e:67: ff:33:49:bd:a3:cd:80:fc:f7:ae:63:eb:0d:11:14:79:8c:65: c9:91:de:a2:b0:d1:90:db:75:dd:b2:97:f4:fc:d7:f0:ce:f3: 56:47:45:4c:3f:d6:46:1b:8d:3b:3e:6b:1d:f7:0a:05:35:d7: ab:f4:0a:ab:0c:7a:69:72:fb:cf:33:6d:f0:b6:ed:22:9c:c7: b0:73:ee:67:2f:cc:f1:52:a8:3e:d6:b9:5d:3f:88:61:51:b0: 15:ed:3b:19:cc:3c:d7:b5:4c:41:1f:85:72:3f:a8:5a:af:61: db:2d:7e:fb:ae:f8:4b:2d:ca:3a:70:95:34:ad:c5:ac:23:85: 36:51:29:aa:23:98:ca:e8:d1:2a:5b:40:af:53:96:1b:af:cd: 85:56:22:cb:18:42:0e:5e:bb:11:7b:6a:16:1d:ed:3c:ac:34: 29:38:02:60:c9:90:bb:f8:16:89:9b:b6:5b:d2:88:e3:09:ce: a0:e2:63:58 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUS0XsqN/IG/MWYGS0WqetnyEwRAkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2NDAxM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAZjgzMTg0Y2I4NDJkYmVhMjY3NDI5 M2Y5NzZiYzA1MThjYjYyYzFkZjg3ZjQzNDUzNWMwNzQzMDI5ZmFlOGFhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPPVENLRRKHipxpr3S+rgfYgR09T GRZIigQvIeT0Xe+8g5v5kJ8AYKRF5zl3894JGZICXql1oz6Iwtdkqb9v8NuXEfra Y5DEwbc6/z7AD0K/i0KLriF+mW/SKFpUuDNx1Yapi7YdDvN1/h4x/nChWmThfdkQ 10i0hTBkMrwXaTKALP7UVqt/77wElHKAPtdYN/DOpcf22LQcBB5GGZJRmKhLCOUE OLinQ4pm4h+6ewCCVMOZshGlHRgd58fK4psaDHcolu0k9PkoFEQOjpXAj2R8FOL8 /KZDMDmVzyAI6QsdXlEV3IJXeNPq5a6yQwFPm+VjHwRB6wwz7vfxvZp2oQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLXtzhMCr2J2q7NYZ6FepOFqiXMgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlZTlmYmRhLTlhOWEtNGUwYi05MDU3LWMzMTgwMTRkNmVkZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaGAwwDQYJKoZIhvcNAQELBQADggEBAEAu1Rs+WX2dpp7atinO HKv2/LthBgOz6r2rT4TrT6H23DL9upev5RiCv4FQiRRLnLipFKf/oKFfv20HVjsT sfFgEd9jSA1uZ/8zSb2jzYD8965j6w0RFHmMZcmR3qKw0ZDbdd2yl/T81/DO81ZH RUw/1kYbjTs+ax33CgU116v0CqsMemly+88zbfC27SKcx7Bz7mcvzPFSqD7WuV0/ iGFRsBXtOxnMPNe1TEEfhXI/qFqvYdstfvuu+EstyjpwlTStxawjhTZRKaojmMro 0SpbQK9TlhuvzYVWIssYQg5euxF7ahYd7TysNCk4AmDJkLv4FombtlvSiOMJzqDi Y1g= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net