$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a4b406c-5546-415b-a581-7d4fac440f72.roa File: 2a4b406c-5546-415b-a581-7d4fac440f72.roa (raw, json) Hash identifier: TJ+gk5la3lZdfQVne7LINcQfBMZ/MMyHIBYBqcrFYWg= Subject key identifier: 13:0F:04:6B:FA:A5:C1:BD:97:DD:54:5B:61:D1:57:A8:F2:CE:58:DB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3E673E1167F984F807B6637689B799276687CF98 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a4b406c-5546-415b-a581-7d4fac440f72.roa Signing time: Sat 19 Apr 2025 00:00:09 +0000 ROA not before: Sat 19 Apr 2025 00:00:09 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:67:3e:11:67:f9:84:f8:07:b6:63:76:89:b7:99:27:66:87:cf:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:00:09 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=d0fb45f086d3fbda5f2392058e2c00451a30bc42bf0e24bb1dea05978faace38, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:6b:1c:85:c1:1f:7b:80:59:8a:4f:c5:fb: 74:45:d9:d8:8e:66:30:b5:57:45:ef:bc:da:05:3c: 0a:7a:37:81:00:6a:be:67:a5:34:73:42:16:c4:9a: 42:70:99:01:36:ef:e0:15:c1:f4:6a:2a:92:dd:90: 2c:39:23:11:4b:3c:5c:13:09:c9:42:1d:82:81:0b: 0a:fb:37:de:e2:23:a3:2a:0e:4b:11:dc:5c:4d:78: e6:bf:c1:f0:cb:05:ae:e2:ab:42:85:a5:4a:b0:ac: 1d:af:80:8c:bf:e8:40:ee:94:e9:38:de:5f:db:55: 3d:ad:cf:ea:dc:21:ad:5f:90:48:20:9c:f3:47:d1: 33:a6:7b:8a:87:d9:d2:e1:d6:a6:48:53:88:4e:47: 1d:0b:5e:6b:27:45:6d:28:56:7b:47:3e:fa:75:5b: c4:ea:94:fe:44:43:b9:eb:16:07:9b:69:c9:9d:6f: 37:ee:c9:a9:95:27:46:a7:6f:5a:d1:a4:bf:c8:c9: d5:0d:60:95:78:40:11:12:60:59:1a:f8:72:7f:ec: 5f:0a:64:9a:4b:c8:fb:ad:9c:16:f9:75:88:8a:83: 68:88:ba:c8:1a:4c:b5:0a:16:ae:aa:61:c5:53:3c: 93:bd:b4:ea:a2:2c:30:65:e8:b2:3b:57:b9:bb:26: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0F:04:6B:FA:A5:C1:BD:97:DD:54:5B:61:D1:57:A8:F2:CE:58:DB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a4b406c-5546-415b-a581-7d4fac440f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:b080::/48 Signature Algorithm: sha256WithRSAEncryption 82:47:95:43:81:16:86:59:4e:77:0f:64:c8:57:52:e8:42:ae: 0a:f2:e2:d7:83:3f:4d:0d:00:98:67:7d:07:9c:0d:66:59:38: 1d:98:d9:f5:54:a1:33:30:ff:34:51:21:66:15:3f:6b:39:0e: 80:57:1b:ad:ad:e7:96:a4:43:15:bf:c1:e4:8c:43:f6:7f:b7: d7:ee:99:76:5c:9a:15:51:29:45:49:66:4e:0a:e8:e0:bb:f7: 17:66:77:54:4e:c6:29:46:1e:31:3d:10:39:3c:13:92:c2:b0: 53:ed:50:7a:52:b9:3a:6b:38:9c:ec:5b:e6:4c:43:c5:2f:cb: 24:a1:dc:e5:51:72:c5:7a:4a:13:cb:3d:ae:71:90:bc:98:41: 3e:8e:47:80:73:a0:4b:64:68:d9:51:8c:8d:b5:0a:a7:42:41: ae:14:cc:25:62:87:26:d3:fc:62:21:53:74:1c:4d:a6:a7:e1: 5d:7b:83:7b:41:89:ee:26:24:04:2e:49:c2:d4:6b:40:78:79: 01:12:2a:29:4b:3f:8a:1d:19:d5:64:40:f0:cb:be:82:6a:58: ed:7d:af:86:7a:28:e7:9f:a6:37:17:ba:2e:1c:41:8d:1f:af: 60:0c:53:af:7a:99:a8:00:e0:d6:d0:db:c5:27:f5:38:38:e4: 30:04:55:f3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPmc+EWf5hPgHtmN2ibeZJ2aHz5gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMDAwOVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAZDBmYjQ1ZjA4NmQzZmJkYTVmMjM5 MjA1OGUyYzAwNDUxYTMwYmM0MmJmMGUyNGJiMWRlYTA1OTc4ZmFhY2UzODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqlrHIXBH3uAWYpPxft0RdnYjmYw tVdF77zaBTwKejeBAGq+Z6U0c0IWxJpCcJkBNu/gFcH0aiqS3ZAsOSMRSzxcEwnJ Qh2CgQsK+zfe4iOjKg5LEdxcTXjmv8HwywWu4qtChaVKsKwdr4CMv+hA7pTpON5f 21U9rc/q3CGtX5BIIJzzR9EzpnuKh9nS4damSFOITkcdC15rJ0VtKFZ7Rz76dVvE 6pT+REO56xYHm2nJnW837smplSdGp29a0aS/yMnVDWCVeEAREmBZGvhyf+xfCmSa S8j7rZwW+XWIioNoiLrIGky1ChauqmHFUzyTvbTqoiwwZeiyO1e5uyZTuQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBMPBGv6pcG9l91UW2HRV6jyzljbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJhNGI0MDZjLTU1NDYtNDE1Yi1hNTgxLTdkNGZhYzQ0MGY3Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/7CAMA0GCSqGSIb3DQEBCwUAA4IBAQCCR5VDgRaGWU53D2TI V1LoQq4K8uLXgz9NDQCYZ30HnA1mWTgdmNn1VKEzMP80USFmFT9rOQ6AVxutreeW pEMVv8HkjEP2f7fX7pl2XJoVUSlFSWZOCujgu/cXZndUTsYpRh4xPRA5PBOSwrBT 7VB6Urk6azic7FvmTEPFL8skodzlUXLFekoTyz2ucZC8mEE+jkeAc6BLZGjZUYyN tQqnQkGuFMwlYocm0/xiIVN0HE2mp+Fde4N7QYnuJiQELknC1GtAeHkBEiopSz+K HRnVZEDwy76Caljtfa+Geijnn6Y3F7ouHEGNH69gDFOvepmoAODW0NvFJ/U4OOQw BFXz -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:42 2025 by rpki-client on console.sobornost.net