$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ef497a8-abd3-4d49-af13-215841ac320f.roa File: 1ef497a8-abd3-4d49-af13-215841ac320f.roa (raw, json) Hash identifier: v+6d9DrbL2DBfuhhXX+BPKheiN81Y8IVsYUVF9oeETA= Subject key identifier: C6:A5:49:D2:03:37:6E:B8:69:BF:17:1A:1D:60:23:72:F5:78:50:26 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4EF42E41E2116F2CF055B5A5FA34E21FC68E2032 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ef497a8-abd3-4d49-af13-215841ac320f.roa Signing time: Mon 31 Mar 2025 15:01:12 +0000 ROA not before: Mon 31 Mar 2025 15:01:12 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f4:2e:41:e2:11:6f:2c:f0:55:b5:a5:fa:34:e2:1f:c6:8e:20:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 31 15:01:12 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: serialNumber=f89b135d59d8106ae94d9a621139bd224ed2f9c429ebe2637900f897b3f7ad6d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:f0:d4:14:75:4c:6c:54:06:ba:30:94:e6: 81:51:30:f3:dd:fa:cc:32:e7:6f:5c:c2:51:bb:7a: c8:c2:a6:3b:13:33:48:e6:f5:78:89:66:d4:38:0e: d7:76:70:49:a4:92:d6:6a:39:83:b4:37:66:e9:77: 78:16:05:98:fc:e6:66:25:c0:80:45:0c:35:9e:e8: ee:01:67:52:54:92:e9:20:f3:0f:2d:d3:a2:f3:1b: b5:b3:4c:19:12:af:28:7a:e4:46:38:4b:aa:d4:19: 57:b2:f2:4f:07:ad:22:c2:ad:b3:24:f8:5b:e5:74: c9:a1:f5:ce:e6:f4:0d:ce:33:3d:6d:55:79:bc:69: 52:a4:35:90:ea:4e:dc:3c:82:b2:36:31:e7:77:f2: ae:66:65:74:ac:9b:27:03:01:8c:5f:12:13:0f:e8: 17:95:27:41:fb:42:31:7c:14:7c:f7:71:9e:24:3f: 4d:d4:91:73:e1:8d:94:53:cb:cf:18:f1:27:e2:ce: e2:58:d4:23:6c:7f:54:20:35:87:33:fb:7e:06:27: fc:a7:86:7c:20:39:fa:d6:79:78:52:69:a9:d5:ed: 87:20:f6:92:df:38:f4:0d:ef:fc:30:39:33:9c:24: d5:70:24:0f:4e:b7:a6:20:27:a6:c1:6c:1a:3c:75: 2b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A5:49:D2:03:37:6E:B8:69:BF:17:1A:1D:60:23:72:F5:78:50:26 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ef497a8-abd3-4d49-af13-215841ac320f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:4000::/40 Signature Algorithm: sha256WithRSAEncryption 4b:0c:7a:a3:a2:dd:f0:1b:63:61:15:9a:77:91:d5:44:c7:bb: 39:11:53:24:18:52:1c:6d:70:dc:79:38:e6:e6:f6:75:6d:30: e9:46:2f:22:d3:46:af:b1:ec:ef:18:97:3f:e2:17:ac:79:6e: 5c:12:34:c5:62:1c:e9:a5:02:2a:14:9d:09:78:fe:55:dc:e5: 11:bc:99:93:2c:c0:73:0b:9d:04:fe:b3:da:34:7a:f5:d5:a3: cb:19:01:02:d6:83:cb:4a:5e:21:07:3f:79:df:ec:74:c1:8b: 3a:92:3b:e2:0a:7d:ad:32:96:db:45:74:ed:32:e4:07:d4:b8: a4:4d:ac:b8:91:48:1e:5b:64:a2:1e:23:4d:c7:4e:9d:14:fa: fd:49:75:8b:6a:aa:da:5e:94:35:1d:88:50:bb:ee:f0:bc:88: 0d:66:47:8d:30:98:f5:58:f9:e9:f3:6e:09:dd:e3:75:e7:1e: 66:98:7f:2e:83:b3:e9:5f:48:64:d6:f2:15:fa:90:86:7e:80: 9e:68:b6:98:95:1c:47:cf:68:aa:60:a2:40:5f:7b:69:7d:ef: 4c:05:11:f3:95:21:99:91:a0:40:9f:18:77:46:cb:4e:31:93: b5:ed:d9:44:5a:a1:35:f4:00:90:c3:34:6b:f9:06:d4:33:d6: e3:f0:bc:8f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTvQuQeIRbyzwVbWl+jTiH8aOIDIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMzMTE1MDExMloX DTI1MDUwNTIzNTk1OVowejFJMEcGA1UEBRNAZjg5YjEzNWQ1OWQ4MTA2YWU5NGQ5 YTYyMTEzOWJkMjI0ZWQyZjljNDI5ZWJlMjYzNzkwMGY4OTdiM2Y3YWQ2ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8/w1BR1TGxUBrowlOaBUTDz3frM MudvXMJRu3rIwqY7EzNI5vV4iWbUOA7XdnBJpJLWajmDtDdm6Xd4FgWY/OZmJcCA RQw1nujuAWdSVJLpIPMPLdOi8xu1s0wZEq8oeuRGOEuq1BlXsvJPB60iwq2zJPhb 5XTJofXO5vQNzjM9bVV5vGlSpDWQ6k7cPIKyNjHnd/KuZmV0rJsnAwGMXxITD+gX lSdB+0IxfBR893GeJD9N1JFz4Y2UU8vPGPEn4s7iWNQjbH9UIDWHM/t+Bif8p4Z8 IDn61nl4Ummp1e2HIPaS3zj0De/8MDkznCTVcCQPTremICemwWwaPHUrCwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMalSdIDN264ab8XGh1gI3L1eFAmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFlZjQ5N2E4LWFiZDMtNGQ0OS1hZjEzLTIxNTg0MWFjMzIwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNkAwDQYJKoZIhvcNAQELBQADggEBAEsMeqOi3fAbY2EVmneR 1UTHuzkRUyQYUhxtcNx5OObm9nVtMOlGLyLTRq+x7O8Ylz/iF6x5blwSNMViHOml AioUnQl4/lXc5RG8mZMswHMLnQT+s9o0evXVo8sZAQLWg8tKXiEHP3nf7HTBizqS O+IKfa0ylttFdO0y5AfUuKRNrLiRSB5bZKIeI03HTp0U+v1JdYtqqtpelDUdiFC7 7vC8iA1mR40wmPVY+enzbgnd43XnHmaYfy6Ds+lfSGTW8hX6kIZ+gJ5otpiVHEfP aKpgokBfe2l970wFEfOVIZmRoECfGHdGy04xk7Xt2URaoTX0AJDDNGv5BtQz1uPw vI8= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net