$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa File: 2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa (raw, json) Hash identifier: L8TbAi/kYP4J/yC/q4Gos+wdu9fNit3uCkxs+LaLJxw= Subject key identifier: 8E:5D:EB:50:03:B6:FA:D9:7D:F5:18:45:A7:06:27:5E:E5:74:F2:06 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0C7FFF56A806D19DEE92E589EF3D60132EFB0A06 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa Signing time: Mon 21 Apr 2025 16:50:23 +0000 ROA not before: Mon 21 Apr 2025 16:50:23 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da11:800::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:7f:ff:56:a8:06:d1:9d:ee:92:e5:89:ef:3d:60:13:2e:fb:0a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:50:23 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=2993ffeaa7f722f04e2a7cc01dbf89ebe2a0a3659a94b821bca419cbcd773ce7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:a2:3a:88:87:98:1a:cb:96:9f:d8:aa:95: 64:35:19:86:33:49:cd:ef:2a:41:a9:36:5f:aa:81: eb:e5:e7:2b:60:4e:11:f4:a7:8a:9f:84:59:14:09: a0:7b:cf:7a:ad:65:f5:97:21:60:7a:18:72:00:e6: 0d:a3:84:aa:bb:00:e5:dd:bd:54:6d:a8:90:90:fc: fb:c4:ed:64:c3:94:20:f0:30:61:3d:63:15:43:12: 37:5e:21:61:d1:62:49:cd:89:eb:5b:ea:75:9b:f2: 1d:aa:cd:23:b7:95:d2:c8:56:03:eb:0a:63:9c:82: 78:f0:52:6b:8e:3f:1a:b4:50:70:f3:c3:be:f2:7a: c5:74:0b:4e:0a:33:b8:80:13:ec:12:9f:cd:e6:c0: 45:9b:a2:d5:ee:2d:95:a1:10:26:b1:11:ae:fa:28: 97:31:fe:bc:5c:7e:14:2f:11:09:96:69:e2:71:9b: eb:b8:53:68:cc:40:51:f8:38:cf:54:51:90:8e:c3: a9:ee:07:33:95:fb:3e:42:df:c0:f2:67:94:14:c1: 68:95:fd:de:67:f2:93:f3:40:9e:3a:9f:06:94:99: 37:a4:ad:c6:24:a6:b6:4a:4a:af:8f:f5:bc:20:3b: 78:9a:cc:89:a4:63:8f:59:af:d2:7b:c4:72:3a:c2: 82:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5D:EB:50:03:B6:FA:D9:7D:F5:18:45:A7:06:27:5E:E5:74:F2:06 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da11:800::/38 Signature Algorithm: sha256WithRSAEncryption 23:4e:2e:61:72:bd:0e:cc:28:15:aa:d9:aa:97:91:42:08:c6: d9:2d:bc:f0:d3:55:b4:b7:2c:37:1b:70:38:d6:76:29:22:20: ba:fc:a6:39:96:47:ea:b5:52:46:0c:60:48:42:e7:19:d6:b1: c3:a8:1b:83:21:3b:3d:06:1a:95:08:cd:54:11:8a:15:18:d1: df:da:36:9e:bc:b5:1c:06:0a:fc:30:5c:ec:48:6a:6e:c9:19: 31:a1:df:5a:93:47:a3:bd:e6:81:68:81:d4:dc:27:57:cc:32: 3e:7a:7e:1c:6b:68:ae:c7:64:91:38:42:95:df:a6:a5:b4:cd: 24:f8:ae:d8:c4:d6:7f:2f:b3:07:9d:4e:2d:c1:d9:89:7d:c5: 87:00:f4:c1:ea:52:b3:4d:1b:a6:f2:2a:94:27:1a:49:76:4c: 16:76:15:87:f7:73:55:b2:03:d4:a5:cf:07:bf:14:42:c4:86: e6:9d:53:2d:f1:4c:fc:3a:dd:7e:21:ef:07:d4:d9:e9:09:0c: 56:ce:e4:b8:f9:0a:f2:6c:4f:48:5b:fb:b7:9c:26:f9:6d:b2: ab:f2:fe:09:7f:27:fd:01:2b:2a:6f:ef:13:36:8e:3b:b5:f6: cd:7e:4a:89:a7:ac:dd:05:44:58:2f:b8:db:15:8c:e4:e4:09: a0:8d:a5:03 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDH//VqgG0Z3ukuWJ7z1gEy77CgYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2NTAyM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMjk5M2ZmZWFhN2Y3MjJmMDRlMmE3 Y2MwMWRiZjg5ZWJlMmEwYTM2NTlhOTRiODIxYmNhNDE5Y2JjZDc3M2NlNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKKiOoiHmBrLlp/YqpVkNRmGM0nN 7ypBqTZfqoHr5ecrYE4R9KeKn4RZFAmge896rWX1lyFgehhyAOYNo4SquwDl3b1U baiQkPz7xO1kw5Qg8DBhPWMVQxI3XiFh0WJJzYnrW+p1m/Idqs0jt5XSyFYD6wpj nIJ48FJrjj8atFBw88O+8nrFdAtOCjO4gBPsEp/N5sBFm6LV7i2VoRAmsRGu+iiX Mf68XH4ULxEJlmnicZvruFNozEBR+DjPVFGQjsOp7gczlfs+Qt/A8meUFMFolf3e Z/KT80CeOp8GlJk3pK3GJKa2Skqvj/W8IDt4msyJpGOPWa/Se8RyOsKCxQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI5d61ADtvrZffUYRacGJ17ldPIGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIyMTg2NDRmLWJjMTEtNDkyZC1iOWE5LThkMThkNWJlYmQ2Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEQgwDQYJKoZIhvcNAQELBQADggEBACNOLmFyvQ7MKBWq2aqX kUIIxtktvPDTVbS3LDcbcDjWdikiILr8pjmWR+q1UkYMYEhC5xnWscOoG4MhOz0G GpUIzVQRihUY0d/aNp68tRwGCvwwXOxIam7JGTGh31qTR6O95oFogdTcJ1fMMj56 fhxraK7HZJE4QpXfpqW0zST4rtjE1n8vswedTi3B2Yl9xYcA9MHqUrNNG6byKpQn Gkl2TBZ2FYf3c1WyA9Slzwe/FELEhuadUy3xTPw63X4h7wfU2ekJDFbO5Lj5CvJs T0hb+7ecJvltsqvy/gl/J/0BKypv7xM2jju19s1+SomnrN0FRFgvuNsVjOTkCaCN pQM= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:41 2025 by rpki-client on console.sobornost.net