$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28ff52d2-0135-4def-a017-40424079b2a7.roa File: 28ff52d2-0135-4def-a017-40424079b2a7.roa (raw, json) Hash identifier: Bmh0I7eLlslmwVbW5o4o3dj5LFnOWOFgQ3qMbvcWM8k= Subject key identifier: 85:CB:41:75:9E:09:10:B0:C2:84:54:6F:C4:4B:12:0F:32:70:36:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 515B3B53995F98B984273CBC3173C7D216D88C1A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28ff52d2-0135-4def-a017-40424079b2a7.roa Signing time: Sat 19 Apr 2025 00:00:55 +0000 ROA not before: Sat 19 Apr 2025 00:00:55 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5b:3b:53:99:5f:98:b9:84:27:3c:bc:31:73:c7:d2:16:d8:8c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:00:55 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=3aa1e88c1bfc5d68552870973778af2eb131853e4fcfb12ed614e235e426a2be, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5a:cb:4e:8f:95:5e:40:d4:b1:c9:3b:94:f3: 52:7b:97:f6:34:79:1b:69:3e:2c:ec:f8:d1:71:48: 31:f7:ce:c5:48:8d:b7:37:03:0f:7a:3d:42:35:e8: 3e:ff:cb:d2:03:16:e6:5a:8b:8b:b7:02:e9:90:52: dd:cb:be:e3:44:a2:11:1f:27:f1:dd:84:cc:79:ec: 2f:b3:fd:8c:f0:7a:8c:b8:ac:e9:39:5a:53:81:71: d8:e6:df:99:2c:9b:9a:76:0a:0c:05:f2:0a:7b:bc: c6:e3:bf:66:a3:1f:91:31:70:b6:8d:66:3d:7e:9a: dc:12:cf:ba:58:43:74:c5:05:a3:0a:90:13:d9:6e: 08:13:16:4e:a3:9c:6c:02:44:89:f8:65:89:99:64: 81:c6:34:12:5c:29:0d:71:99:dd:c8:37:14:80:c7: 00:b6:cc:d1:31:f5:3c:3c:4b:23:fa:31:85:d4:88: 2e:70:1a:c0:9e:bf:88:21:32:e8:72:8f:31:03:a3: ed:9b:e4:70:52:7c:75:78:7b:51:57:cd:f5:88:b7: 79:a3:88:2b:1d:fc:4d:70:7a:db:40:a6:08:4f:56: 82:dc:28:c3:72:ee:47:76:b4:f0:d4:3d:67:e5:2b: 39:cd:a7:14:2f:fd:05:68:87:ca:e1:43:80:41:74: 48:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CB:41:75:9E:09:10:B0:C2:84:54:6F:C4:4B:12:0F:32:70:36:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/28ff52d2-0135-4def-a017-40424079b2a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:880::/48 Signature Algorithm: sha256WithRSAEncryption 20:42:ea:22:dd:c9:1d:82:24:86:5e:17:c8:6e:49:b8:3b:4c: 4a:06:48:4d:72:44:55:9a:2f:6a:68:30:9b:e1:9c:7c:81:60: f5:bf:e4:89:df:78:90:d5:7b:c3:d5:a4:1b:62:d5:b0:40:7b: d6:50:31:83:e1:2f:b1:4f:c0:cd:ab:98:81:41:ab:60:eb:51: f7:17:ab:ef:18:e4:72:a4:5c:ce:0c:bd:a6:bc:dd:b4:50:9a: bc:6a:b8:61:e6:b4:0a:a8:e3:df:23:85:50:e6:72:e9:3d:0d: aa:3a:ad:a8:e2:c9:0a:97:e7:da:87:da:a9:0f:37:5c:40:00: 43:f0:2b:1d:76:d7:f9:47:52:c4:43:b7:0f:1f:52:28:51:0b: 84:74:0b:ce:28:22:26:b3:57:3e:5a:a8:62:ae:49:d9:cd:2d: 99:62:49:00:4b:61:85:31:ac:8b:91:08:9b:79:52:b4:c8:9a: b3:84:03:38:de:cf:d5:e6:32:dd:fa:54:0e:09:e2:d1:9e:78: 19:40:f5:b2:61:9f:0f:ec:38:21:a2:b3:77:48:d3:0c:58:20: c9:4b:fc:b5:7c:cd:5d:40:48:58:9f:34:52:34:5c:e7:f4:e5: 37:fa:06:6b:89:fd:b9:b9:f8:42:0c:e6:c6:5d:e9:8e:32:4b: a9:f9:45:38 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUVs7U5lfmLmEJzy8MXPH0hbYjBowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMDA1NVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAM2FhMWU4OGMxYmZjNWQ2ODU1Mjg3 MDk3Mzc3OGFmMmViMTMxODUzZTRmY2ZiMTJlZDYxNGUyMzVlNDI2YTJiZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11rLTo+VXkDUsck7lPNSe5f2NHkb aT4s7PjRcUgx987FSI23NwMPej1CNeg+/8vSAxbmWouLtwLpkFLdy77jRKIRHyfx 3YTMeewvs/2M8HqMuKzpOVpTgXHY5t+ZLJuadgoMBfIKe7zG479mox+RMXC2jWY9 fprcEs+6WEN0xQWjCpAT2W4IExZOo5xsAkSJ+GWJmWSBxjQSXCkNcZndyDcUgMcA tszRMfU8PEsj+jGF1IgucBrAnr+IITLoco8xA6Ptm+RwUnx1eHtRV831iLd5o4gr HfxNcHrbQKYIT1aC3CjDcu5HdrTw1D1n5Ss5zacUL/0FaIfK4UOAQXRIZwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIXLQXWeCRCwwoRUb8RLEg8ycDYWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI4ZmY1MmQyLTAxMzUtNGRlZi1hMDE3LTQwNDI0MDc5YjJhNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/wiAMA0GCSqGSIb3DQEBCwUAA4IBAQAgQuoi3ckdgiSGXhfI bkm4O0xKBkhNckRVmi9qaDCb4Zx8gWD1v+SJ33iQ1XvD1aQbYtWwQHvWUDGD4S+x T8DNq5iBQatg61H3F6vvGORypFzODL2mvN20UJq8arhh5rQKqOPfI4VQ5nLpPQ2q Oq2o4skKl+fah9qpDzdcQABD8Csddtf5R1LEQ7cPH1IoUQuEdAvOKCIms1c+Wqhi rknZzS2ZYkkAS2GFMayLkQibeVK0yJqzhAM43s/V5jLd+lQOCeLRnngZQPWyYZ8P 7DghorN3SNMMWCDJS/y1fM1dQEhYnzRSNFzn9OU3+gZrif25ufhCDObGXemOMkup +UU4 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:42 2025 by rpki-client on console.sobornost.net