$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24e2e024-4bd3-4f6b-874c-0ef7a4cbebc1.roa File: 24e2e024-4bd3-4f6b-874c-0ef7a4cbebc1.roa (raw, json) Hash identifier: 9ccKjg/jwKb4PBr9Pvwl13wCGJ0IwLOwXm3BIPbugII= Subject key identifier: A7:F4:00:E9:D9:C2:0A:82:EA:4F:2B:AC:2F:03:19:8F:32:0D:23:35 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4ED042F931ABD6AB818A08C4AD66C0A2CFE780D4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24e2e024-4bd3-4f6b-874c-0ef7a4cbebc1.roa Signing time: Wed 16 Apr 2025 00:00:52 +0000 ROA not before: Wed 16 Apr 2025 00:00:52 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d0:42:f9:31:ab:d6:ab:81:8a:08:c4:ad:66:c0:a2:cf:e7:80:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 16 00:00:52 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=232857b182dcae2024ec121664c073b8c0622e113d56ad9778683636516dded1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:21:18:35:76:42:64:54:ef:8d:f7:30:24: 9a:73:5d:ef:95:c0:be:ca:56:62:53:0c:dd:6b:4e: 10:39:29:25:e6:5c:1c:05:a2:af:6e:e6:23:2a:bd: 22:ae:79:d4:2a:5a:05:6c:b7:54:d8:58:00:8b:8b: c0:5f:2f:1f:bc:fd:52:6e:73:ea:05:c4:b9:af:8d: 31:84:b0:23:9b:b3:0e:4a:c5:a5:b4:45:f2:43:5c: ee:66:56:eb:7c:49:b0:92:29:39:62:10:9f:f0:53: 4f:62:d4:bd:fd:f2:a7:50:9b:3d:82:e1:3e:53:11: 3f:ee:c4:7a:d9:89:c6:77:ea:84:1c:07:ae:4a:1d: 05:03:6d:bf:05:79:e4:9d:32:67:b1:f9:35:ec:0d: 3e:03:59:bd:0e:3c:02:a7:d2:fc:90:e2:53:54:84: aa:bd:ed:3b:81:7b:83:7f:d8:e7:eb:e6:2d:55:66: 03:30:d7:52:e4:2e:66:a4:a1:25:37:47:1a:97:7b: bd:0a:5c:36:d3:97:82:65:12:89:89:45:57:ac:67: e0:8b:38:aa:b1:b8:c1:43:81:36:58:6c:fd:12:5d: b9:19:18:36:a4:28:11:7c:fc:a6:fb:5f:f4:50:0e: 0a:b4:64:a4:a3:e7:d2:1d:52:47:77:bd:26:82:f7: 4f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F4:00:E9:D9:C2:0A:82:EA:4F:2B:AC:2F:03:19:8F:32:0D:23:35 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24e2e024-4bd3-4f6b-874c-0ef7a4cbebc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:e000::/48 Signature Algorithm: sha256WithRSAEncryption ca:83:48:4a:5f:f5:4c:46:32:43:c3:6f:71:12:b6:31:17:9e: 20:e1:7b:94:d8:cc:4e:dd:e8:ca:f3:a6:e4:c4:8a:fd:19:56: ff:66:e5:74:99:b9:ba:cb:c9:24:bd:29:86:9f:c7:75:1b:ef: c5:ef:1c:d0:66:01:62:b2:c3:1c:ae:b0:ab:dd:c9:b3:df:05: 9a:9a:49:bd:3e:1c:74:7d:1f:5e:15:b0:5b:b8:c5:90:55:78: 24:eb:73:cc:04:f2:46:dc:7e:ef:8d:5c:ef:c9:cb:08:40:f5: 45:6d:fd:85:99:8f:04:b7:ba:7b:6d:fc:af:11:40:f6:d9:65: 5d:31:01:ad:8d:30:f1:b2:b8:af:71:e4:e3:b5:1b:e7:11:f5: 41:ad:3b:31:55:2e:09:e8:5c:52:fd:f1:d4:5e:3e:18:b9:72: a1:91:b2:3b:88:a3:bc:c3:19:16:a9:64:7a:45:55:0a:e6:a1: e7:25:97:7c:98:90:ff:75:bf:a4:be:ba:47:22:0c:93:af:de: 18:40:2b:23:de:a5:55:4c:ff:f7:52:f9:ec:47:6a:40:08:f8: a8:b3:9b:09:b9:fe:1f:f5:f7:c4:18:11:96:6d:a3:cf:ea:d9: 12:7e:f2:c9:8e:00:76:80:a1:dd:19:97:99:76:3e:1a:00:05: 9f:fb:bd:ea -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTtBC+TGr1quBigjErWbAos/ngNQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNjAwMDA1MloX DTI1MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAMjMyODU3YjE4MmRjYWUyMDI0ZWMx MjE2NjRjMDczYjhjMDYyMmUxMTNkNTZhZDk3Nzg2ODM2MzY1MTZkZGVkMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswkhGDV2QmRU7433MCSac13vlcC+ ylZiUwzda04QOSkl5lwcBaKvbuYjKr0irnnUKloFbLdU2FgAi4vAXy8fvP1SbnPq BcS5r40xhLAjm7MOSsWltEXyQ1zuZlbrfEmwkik5YhCf8FNPYtS9/fKnUJs9guE+ UxE/7sR62YnGd+qEHAeuSh0FA22/BXnknTJnsfk17A0+A1m9DjwCp9L8kOJTVISq ve07gXuDf9jn6+YtVWYDMNdS5C5mpKElN0cal3u9Clw205eCZRKJiUVXrGfgiziq sbjBQ4E2WGz9El25GRg2pCgRfPym+1/0UA4KtGSko+fSHVJHd70mgvdPTwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKf0AOnZwgqC6k8rrC8DGY8yDSM1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0ZTJlMDI0LTRiZDMtNGY2Yi04NzRjLTBlZjdhNGNiZWJjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9uAAMA0GCSqGSIb3DQEBCwUAA4IBAQDKg0hKX/VMRjJDw29x ErYxF54g4XuU2MxO3ejK86bkxIr9GVb/ZuV0mbm6y8kkvSmGn8d1G+/F7xzQZgFi ssMcrrCr3cmz3wWamkm9Phx0fR9eFbBbuMWQVXgk63PMBPJG3H7vjVzvycsIQPVF bf2FmY8Et7p7bfyvEUD22WVdMQGtjTDxsrivceTjtRvnEfVBrTsxVS4J6FxS/fHU Xj4YuXKhkbI7iKO8wxkWqWR6RVUK5qHnJZd8mJD/db+kvrpHIgyTr94YQCsj3qVV TP/3UvnsR2pACPios5sJuf4f9ffEGBGWbaPP6tkSfvLJjgB2gKHdGZeZdj4aAAWf +73q -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:42 2025 by rpki-client on console.sobornost.net