$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23a3b2c0-0468-43b1-9672-31544291aafe.roa File: 23a3b2c0-0468-43b1-9672-31544291aafe.roa (raw, json) Hash identifier: heiCE3JA+yxR1yVMWi0dyOwZV8f8Skoh24g8kRMnDEA= Subject key identifier: 36:7D:4E:AF:78:C7:58:8C:C3:FD:5B:A7:07:CA:BB:3B:7F:E3:9D:C6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5EEED1AB0BF99A80D31E3DE67429D76498A12029 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23a3b2c0-0468-43b1-9672-31544291aafe.roa Signing time: Mon 21 Apr 2025 16:01:09 +0000 ROA not before: Mon 21 Apr 2025 16:01:09 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:28c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ee:d1:ab:0b:f9:9a:80:d3:1e:3d:e6:74:29:d7:64:98:a1:20:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:01:09 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=cd0e7b42dc660df88459fac6c44d5648d608699b825f9770909e1303442fcb0c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:6e:0c:d7:bf:58:99:17:1e:f7:1f:ab:6d: 9f:4d:5b:af:4b:99:e5:cd:48:e9:78:42:3c:75:6e: 61:89:aa:ca:75:75:56:3b:b3:77:15:0e:c5:72:13: 1b:db:a4:ab:56:a9:54:fe:a0:20:51:a2:6e:8d:3a: 9b:ce:d6:44:9b:1c:d0:c5:36:b9:92:76:7c:fa:af: b0:bc:dc:92:33:5a:e0:2d:45:da:f5:1d:af:07:3e: 70:96:57:9c:c2:3a:1d:aa:e8:6e:7f:ad:c9:37:0d: 89:0f:1d:b1:52:43:84:3a:39:18:09:f3:b0:7c:8b: 1c:b4:b6:c8:d6:d6:bf:16:8e:f4:b3:6a:ad:54:7f: 36:a9:fc:96:2a:01:44:89:f0:7d:ba:e6:ba:87:9e: 7e:46:b2:6b:82:e2:00:4d:96:d5:22:26:16:77:60: da:fc:ab:e0:9c:5d:48:51:55:76:07:79:07:4b:2e: fa:03:e4:15:c9:ff:36:f4:72:e1:d5:11:af:26:b3: 0d:6b:f3:53:89:a1:b0:93:ba:d6:72:63:80:c2:43: a9:06:ca:d0:a6:d2:41:7b:e2:5a:9d:2a:8c:7c:eb: 71:6f:e3:b5:dd:8b:33:18:9d:bb:f3:ac:d7:ff:30: fe:8d:f2:a9:8c:c4:ad:7e:b4:59:23:4e:92:e4:ed: 18:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7D:4E:AF:78:C7:58:8C:C3:FD:5B:A7:07:CA:BB:3B:7F:E3:9D:C6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23a3b2c0-0468-43b1-9672-31544291aafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:28c0::/46 Signature Algorithm: sha256WithRSAEncryption 16:9b:fc:49:e5:c1:c1:ed:3d:3f:86:ac:99:ea:25:44:bf:e3: b6:1f:fb:b1:40:c7:68:8e:80:59:17:cb:1e:92:60:a9:8b:87: 30:28:d2:bd:d8:55:cf:17:14:b6:1c:c2:fe:f2:66:00:72:6b: 30:9b:a8:86:ce:ca:92:d5:5f:cf:8e:9a:2d:ad:cc:b3:3e:4f: 34:58:3d:01:f3:89:7f:cb:9b:7c:a9:24:48:a0:30:76:4d:e5: 79:ac:78:b7:25:1a:e0:d7:ff:9e:b2:86:51:24:47:1d:65:80: 69:b8:a0:47:94:fd:0c:24:bc:b7:4e:02:ee:33:a8:85:70:ba: 55:df:c6:74:4e:4e:f7:48:38:3a:6b:92:b1:3a:fc:ac:6a:9a: a7:08:ad:ed:13:39:00:9a:dd:5b:81:a9:ba:07:d5:0c:68:c3: 41:e2:3e:72:b7:c0:e6:1b:11:fa:3a:a3:b7:92:90:0f:e0:5f: ce:23:61:0e:16:69:3c:a9:99:c9:fe:b4:98:83:9d:99:b6:03: 19:5c:c0:d7:73:7b:50:01:40:42:9f:5a:f2:ac:fe:ed:ea:e0: 91:4d:93:3e:69:aa:02:f9:3f:d3:11:11:80:2a:c0:1c:82:c3: b2:83:ab:57:24:22:a9:ac:40:d0:83:78:f9:44:d4:32:46:9f: 68:09:ae:31 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXu7Rqwv5moDTHj3mdCnXZJihICkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MDEwOVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAY2QwZTdiNDJkYzY2MGRmODg0NTlm YWM2YzQ0ZDU2NDhkNjA4Njk5YjgyNWY5NzcwOTA5ZTEzMDM0NDJmY2IwYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/BuDNe/WJkXHvcfq22fTVuvS5nl zUjpeEI8dW5hiarKdXVWO7N3FQ7FchMb26SrVqlU/qAgUaJujTqbztZEmxzQxTa5 knZ8+q+wvNySM1rgLUXa9R2vBz5wllecwjodquhuf63JNw2JDx2xUkOEOjkYCfOw fIsctLbI1ta/Fo70s2qtVH82qfyWKgFEifB9uua6h55+RrJrguIATZbVIiYWd2Da /KvgnF1IUVV2B3kHSy76A+QVyf829HLh1RGvJrMNa/NTiaGwk7rWcmOAwkOpBsrQ ptJBe+JanSqMfOtxb+O13YszGJ2786zX/zD+jfKpjMStfrRZI06S5O0YWQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDZ9Tq94x1iMw/1bpwfKuzt/453GMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIzYTNiMmMwLTA0NjgtNDNiMS05NjcyLTMxNTQ0MjkxYWFmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+yjAMA0GCSqGSIb3DQEBCwUAA4IBAQAWm/xJ5cHB7T0/hqyZ 6iVEv+O2H/uxQMdojoBZF8sekmCpi4cwKNK92FXPFxS2HML+8mYAcmswm6iGzsqS 1V/PjpotrcyzPk80WD0B84l/y5t8qSRIoDB2TeV5rHi3JRrg1/+esoZRJEcdZYBp uKBHlP0MJLy3TgLuM6iFcLpV38Z0Tk73SDg6a5KxOvysapqnCK3tEzkAmt1bgam6 B9UMaMNB4j5yt8DmGxH6OqO3kpAP4F/OI2EOFmk8qZnJ/rSYg52ZtgMZXMDXc3tQ AUBCn1ryrP7t6uCRTZM+aaoC+T/TERGAKsAcgsOyg6tXJCKprEDQg3j5RNQyRp9o Ca4x -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:42 2025 by rpki-client on console.sobornost.net