$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ae9fa93-06f6-4e3f-b9ac-3cfc9933e9ec.roa File: 2ae9fa93-06f6-4e3f-b9ac-3cfc9933e9ec.roa (raw, json) Hash identifier: BFQiYu2U9tTXf8NcDKW6LTZ16l3oNoSHxbzqyKOoWuM= Subject key identifier: CF:96:16:B5:0F:F8:82:D5:E2:35:FA:20:54:D6:BF:11:EF:51:69:C2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 67D200E10188642D922B37F2E0179197175BA5F2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ae9fa93-06f6-4e3f-b9ac-3cfc9933e9ec.roa Signing time: Mon 21 Apr 2025 15:41:05 +0000 ROA not before: Mon 21 Apr 2025 15:41:05 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:4020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d2:00:e1:01:88:64:2d:92:2b:37:f2:e0:17:91:97:17:5b:a5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:41:05 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=43ad72ada137bae657c295955c8783bfa743019f618be58837c45a4c015631d1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:21:01:19:aa:d4:9e:8a:9b:6e:80:4e:8c: b6:fa:4f:d7:20:6e:6b:e7:d1:6b:ed:ec:8f:71:5c: 70:bc:42:af:8a:f3:70:54:3d:10:a5:f1:b1:bb:e6: 3c:1c:7d:dd:f3:d5:12:d2:d0:4b:b6:e8:09:4e:e3: d5:8e:15:3d:75:23:75:83:d0:81:71:7b:ec:46:ba: 23:b2:b4:5b:bd:45:c3:82:06:d4:1a:8f:a0:b5:51: c5:8c:20:ba:0f:b7:32:d7:e5:8b:69:0a:a2:29:e4: ce:cb:bb:e2:6d:1b:41:fa:28:c6:e0:60:58:eb:66: f8:12:b3:b1:10:8f:5d:1a:ec:68:81:26:cc:fe:fb: 1f:05:00:8f:dc:fe:ae:0d:89:c4:f4:7d:79:43:df: 2f:bb:35:5d:dd:0b:a9:73:66:0c:04:71:7b:1a:35: 9f:ce:c6:56:56:70:6e:32:ed:5d:1b:76:00:c6:87: 0b:15:e3:f6:72:2c:ab:68:2b:f5:4a:65:8a:aa:ad: 00:f3:52:70:0e:52:58:9c:6a:a9:0e:e8:ce:23:2d: ed:65:14:ef:67:68:23:82:95:ae:02:7e:20:bc:55: e0:cf:21:2e:26:a8:f9:03:51:b5:af:7d:9e:0d:fb: a1:39:f5:28:a3:db:13:17:fb:6d:b6:de:cd:35:1b: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:96:16:B5:0F:F8:82:D5:E2:35:FA:20:54:D6:BF:11:EF:51:69:C2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ae9fa93-06f6-4e3f-b9ac-3cfc9933e9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:4020::/46 Signature Algorithm: sha256WithRSAEncryption c3:a7:d6:24:1e:d4:b1:d1:c5:b9:39:84:3f:af:07:fb:6f:26: a2:67:85:65:60:de:a1:ff:28:96:f4:f5:bc:b6:8c:a6:51:7b: 20:55:ad:f0:db:a9:cd:44:9b:4e:80:a0:fb:ee:3a:45:f3:72: a0:22:25:fb:6f:45:ba:5d:8a:b8:53:17:99:3d:d7:a1:29:e7: fd:b5:18:bd:cc:72:fa:7d:68:19:48:7d:2a:3d:c1:e8:bc:e4: d6:84:fb:1c:11:c0:da:28:4c:69:f5:9f:38:e2:b8:be:3a:e2: 38:c4:a4:12:71:75:3d:5c:96:dd:38:8c:ab:47:46:cf:e6:5d: 6f:14:c5:0e:de:de:b4:51:e6:af:97:bb:60:a1:f2:8e:18:05: 8b:9a:66:d7:ba:7b:a4:c0:9e:e7:9f:f2:51:02:1b:7c:75:05: 9e:bd:e7:47:35:6f:6d:bc:23:ba:02:e7:9c:3f:5d:e5:3e:d9: c4:88:f9:10:21:a0:56:97:d0:60:1e:aa:25:3a:ce:44:11:47: ee:32:4a:26:33:62:7b:09:cc:5b:e4:a9:01:9f:cb:e4:e2:b5: 75:3b:81:99:69:b5:ef:f9:67:8e:1f:e7:c9:a2:dc:49:a3:d5: d4:c1:58:10:f0:a0:02:c0:e7:b1:94:e8:a4:d8:fe:b1:57:2b: 58:b4:d3:b3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZ9IA4QGIZC2SKzfy4BeRlxdbpfIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NDEwNVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANDNhZDcyYWRhMTM3YmFlNjU3YzI5 NTk1NWM4NzgzYmZhNzQzMDE5ZjYxOGJlNTg4MzdjNDVhNGMwMTU2MzFkMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNghARmq1J6Km26AToy2+k/XIG5r 59Fr7eyPcVxwvEKvivNwVD0QpfGxu+Y8HH3d89US0tBLtugJTuPVjhU9dSN1g9CB cXvsRrojsrRbvUXDggbUGo+gtVHFjCC6D7cy1+WLaQqiKeTOy7vibRtB+ijG4GBY 62b4ErOxEI9dGuxogSbM/vsfBQCP3P6uDYnE9H15Q98vuzVd3Qupc2YMBHF7GjWf zsZWVnBuMu1dG3YAxocLFeP2ciyraCv1SmWKqq0A81JwDlJYnGqpDujOIy3tZRTv Z2gjgpWuAn4gvFXgzyEuJqj5A1G1r32eDfuhOfUoo9sTF/tttt7NNRu3LQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFM+WFrUP+ILV4jX6IFTWvxHvUWnCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJhZTlmYTkzLTA2ZjYtNGUzZi1iOWFjLTNjZmM5OTMzZTllYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+0AgMA0GCSqGSIb3DQEBCwUAA4IBAQDDp9YkHtSx0cW5OYQ/ rwf7byaiZ4VlYN6h/yiW9PW8toymUXsgVa3w26nNRJtOgKD77jpF83KgIiX7b0W6 XYq4UxeZPdehKef9tRi9zHL6fWgZSH0qPcHovOTWhPscEcDaKExp9Z844ri+OuI4 xKQScXU9XJbdOIyrR0bP5l1vFMUO3t60Ueavl7tgofKOGAWLmmbXunukwJ7nn/JR Aht8dQWevedHNW9tvCO6AuecP13lPtnEiPkQIaBWl9BgHqolOs5EEUfuMkomM2J7 Ccxb5KkBn8vk4rV1O4GZabXv+WeOH+fJotxJo9XUwVgQ8KACwOexlOik2P6xVytY tNOz -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:42 2025 by rpki-client on console.sobornost.net