$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa File: 25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa (raw, json) Hash identifier: skzpkCTHd8hdu9t9GLFBBMOPR7TEEh2kYNrTL/Q5ryg= Subject key identifier: 0E:91:03:9D:D3:91:E5:1E:1D:08:6B:BF:1D:23:EC:1D:B1:F3:7A:70 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6947D1DE485DEAD86236BA58F1519E39BEDE87AD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa Signing time: Wed 16 Apr 2025 00:00:46 +0000 ROA not before: Wed 16 Apr 2025 00:00:46 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:47:d1:de:48:5d:ea:d8:62:36:ba:58:f1:51:9e:39:be:de:87:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 16 00:00:46 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=deed458b5217b95b158f230efcad66d9f5c7c56d4f26e1afb7ad89ffd434783b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:35:ad:02:1a:74:03:4b:a5:4e:73:b3:c7: 76:98:b9:2d:79:09:0e:02:69:ad:b7:28:90:98:45: 23:5b:b3:44:f1:d6:57:82:88:b8:cc:39:69:5b:96: 5e:65:74:da:f2:9f:b9:65:35:70:b8:3c:b9:d8:ff: ba:7a:53:47:79:cb:4d:a9:0a:5f:a2:c4:f3:db:a8: 28:4a:ab:4c:12:99:f4:35:fd:1e:b9:d9:83:03:2e: 8c:0e:e3:81:14:26:43:35:67:1f:ad:79:11:91:ec: e1:1c:1b:c3:2d:90:24:f6:e2:8b:dd:da:01:c5:a6: a7:9d:8b:b5:8a:6d:0d:42:c8:d9:f3:cb:8a:20:e3: 6c:f9:a4:22:99:1f:40:75:7c:6c:0c:f8:2b:ff:96: 1e:50:d3:bc:59:97:f1:f9:c8:51:32:30:4c:20:2d: 27:0a:0b:ca:5f:70:41:e4:67:93:a2:9a:f5:42:23: ad:b5:24:f8:37:73:76:a3:9b:88:13:01:d0:40:97: 34:91:20:61:52:99:e1:24:b6:83:8f:1e:1b:33:ea: 92:ad:72:fe:e5:92:a7:9f:1e:5f:36:d0:8d:e6:55: ec:0b:70:56:7b:6e:43:a9:39:48:e4:50:a8:ae:b1: 38:5d:73:33:b6:6c:be:90:ff:ae:f3:7f:eb:33:8e: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:91:03:9D:D3:91:E5:1E:1D:08:6B:BF:1D:23:EC:1D:B1:F3:7A:70 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/25d5ad7e-f25c-47c6-9a9e-4ec1d482476f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:800::/48 Signature Algorithm: sha256WithRSAEncryption 06:54:0a:80:51:20:dc:ef:73:ae:14:1c:44:22:ee:9d:aa:9c: 8f:1d:0d:99:09:12:f2:10:23:99:df:96:be:48:17:fe:a1:3f: aa:1b:28:db:0f:5b:54:54:a7:73:6a:0c:6b:7e:b2:02:6d:c2: 38:2e:bc:e2:fc:66:ae:95:99:63:f0:e0:cb:2f:4d:a3:fe:49: 07:e0:ee:8e:73:5f:28:60:16:37:fd:96:78:76:95:2e:6d:02: b7:c3:99:c7:87:2e:a1:e3:71:1a:09:00:c7:3e:20:47:18:eb: 9e:c3:48:db:42:aa:2a:7b:9e:0d:24:28:d5:04:32:28:3c:c3: f0:1f:fb:31:26:62:ac:bd:d5:3d:30:36:53:70:4b:0b:de:73: 1f:f2:2e:2c:1c:a4:ff:ac:72:0c:f5:a0:f0:5e:99:7c:8d:1b: 7b:2e:d8:b2:78:46:51:1a:25:59:c0:59:e8:90:b5:42:db:e8: 94:e5:5c:bc:d0:6d:88:63:5f:a0:cd:67:97:bd:bb:c6:a8:42: d4:94:e1:01:2b:86:36:fc:77:db:33:54:f7:c0:5e:4e:d1:8f: 00:57:ff:2f:43:6a:a9:fc:2c:46:dd:6b:90:2a:aa:64:40:30: 40:e6:41:7c:3e:60:6f:e7:28:44:c1:a4:a5:17:00:a7:5d:80: d3:79:f5:f2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaUfR3khd6thiNrpY8VGeOb7eh60wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNjAwMDA0NloX DTI1MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAZGVlZDQ1OGI1MjE3Yjk1YjE1OGYy MzBlZmNhZDY2ZDlmNWM3YzU2ZDRmMjZlMWFmYjdhZDg5ZmZkNDM0NzgzYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY41rQIadANLpU5zs8d2mLkteQkO AmmttyiQmEUjW7NE8dZXgoi4zDlpW5ZeZXTa8p+5ZTVwuDy52P+6elNHectNqQpf osTz26goSqtMEpn0Nf0eudmDAy6MDuOBFCZDNWcfrXkRkezhHBvDLZAk9uKL3doB xaannYu1im0NQsjZ88uKIONs+aQimR9AdXxsDPgr/5YeUNO8WZfx+chRMjBMIC0n CgvKX3BB5GeTopr1QiOttST4N3N2o5uIEwHQQJc0kSBhUpnhJLaDjx4bM+qSrXL+ 5ZKnnx5fNtCN5lXsC3BWe25DqTlI5FCorrE4XXMztmy+kP+u83/rM46JHQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFA6RA53TkeUeHQhrvx0j7B2x83pwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI1ZDVhZDdlLWYyNWMtNDdjNi05YTllLTRlYzFkNDgyNDc2Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9ggAMA0GCSqGSIb3DQEBCwUAA4IBAQAGVAqAUSDc73OuFBxE Iu6dqpyPHQ2ZCRLyECOZ35a+SBf+oT+qGyjbD1tUVKdzagxrfrICbcI4Lrzi/Gau lZlj8ODLL02j/kkH4O6Oc18oYBY3/ZZ4dpUubQK3w5nHhy6h43EaCQDHPiBHGOue w0jbQqoqe54NJCjVBDIoPMPwH/sxJmKsvdU9MDZTcEsL3nMf8i4sHKT/rHIM9aDw Xpl8jRt7LtiyeEZRGiVZwFnokLVC2+iU5Vy80G2IY1+gzWeXvbvGqELUlOEBK4Y2 /HfbM1T3wF5O0Y8AV/8vQ2qp/CxG3WuQKqpkQDBA5kF8PmBv5yhEwaSlFwCnXYDT efXy -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:42 2025 by rpki-client on console.sobornost.net