$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b4adb97-a33f-485c-865b-badaa1f9c897.roa File: 2b4adb97-a33f-485c-865b-badaa1f9c897.roa (raw, json) Hash identifier: qGd7sP0K3UF64/f341GcWbPCh3XTKpKUSkVmsYnDNtU= Subject key identifier: 49:D6:0D:4E:D1:01:D0:FC:15:FD:F5:D4:EB:32:DD:8F:5F:D8:1A:CE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 68CA04C48311EA9486CA18459EB32157D43A8577 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b4adb97-a33f-485c-865b-badaa1f9c897.roa Signing time: Mon 21 Apr 2025 15:11:55 +0000 ROA not before: Mon 21 Apr 2025 15:11:55 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ca:04:c4:83:11:ea:94:86:ca:18:45:9e:b3:21:57:d4:3a:85:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:11:55 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=7bef82639b3af3bd3e1a1e2d441616ead2e7c67a98b2173aba3cb44d59e85c28, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:45:8d:f5:eb:bc:c5:aa:78:ab:e3:df:c7: 63:1b:32:72:74:ae:c5:20:79:ce:1a:49:82:ff:18: 2d:71:a7:34:62:9b:d3:89:06:db:b3:2a:c5:21:a6: fd:4d:f5:cc:62:85:0a:f9:c0:45:0c:2f:df:59:9f: 77:0a:67:6e:69:86:eb:52:01:2e:4c:06:31:ad:3a: 83:cd:94:2e:d7:19:52:3b:19:a1:58:c2:e6:eb:01: 7b:0f:1a:80:0a:96:f8:54:f7:6a:eb:6f:ca:3b:64: f8:5f:6f:0b:18:0b:eb:4c:66:77:87:b2:85:c8:7f: e9:bf:c6:f1:5d:4d:c6:4f:87:c3:05:72:09:41:7b: cf:1d:20:a0:56:a3:fd:f1:5a:5f:66:87:21:e1:d2: bd:b8:a2:d7:65:86:eb:93:ab:85:12:f6:1d:06:a6: bd:b1:26:77:6b:8d:a0:f2:f4:bc:0f:6a:ce:eb:ae: 5e:62:34:a2:b9:ff:ab:6f:e6:d6:f7:f6:e9:db:5a: 56:01:76:53:55:65:6d:36:fd:e9:40:45:2c:a7:34: 60:8c:63:12:79:b7:89:70:27:75:ba:e2:b2:1c:c2: 0b:ae:07:68:ba:4f:c8:97:f3:ef:2b:54:42:b0:a9: e7:f9:52:13:e9:06:98:4d:0a:5a:0e:df:31:09:da: 8d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D6:0D:4E:D1:01:D0:FC:15:FD:F5:D4:EB:32:DD:8F:5F:D8:1A:CE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b4adb97-a33f-485c-865b-badaa1f9c897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:b000::/40 Signature Algorithm: sha256WithRSAEncryption 9a:4e:b7:26:40:40:4a:88:c9:f4:95:6e:39:30:66:b5:ad:3f: 1f:8a:e4:9d:31:8c:5f:bf:46:8f:e3:3d:ce:21:ef:1a:f2:45: 76:07:15:8a:c3:2f:3b:01:7e:3b:55:0a:58:f0:bb:ac:fa:11: ec:1b:8f:05:55:96:b8:fb:08:8f:0b:b1:da:79:d4:0e:72:27: 57:38:96:58:72:71:81:48:ac:13:35:73:6c:cc:50:15:17:7a: 5d:53:70:5e:05:fb:5a:95:f3:a4:d8:e1:bb:d9:dc:9a:2e:31: 39:e6:89:b6:e0:dd:5c:ba:e8:5b:73:4a:53:6e:d8:d6:b6:93: 75:43:4c:9a:88:7f:14:37:89:e3:fc:01:46:96:44:6e:ea:06: 8e:cf:58:bc:7b:e6:79:53:5d:8a:47:1b:83:02:01:6e:ee:4e: 89:fb:b2:48:01:bd:52:66:32:c4:87:1c:45:be:e4:e7:a6:ef: 31:8c:c2:96:c2:35:ce:19:75:d1:a9:43:fb:a6:09:af:42:42: a3:16:c7:98:4f:63:f5:80:03:d0:dd:5a:99:80:8f:1e:de:c1: d9:bd:f4:9a:8b:c6:3b:8e:8c:b3:14:47:a2:eb:cc:0a:b4:e0: 2f:f9:ee:af:82:3f:0f:34:3c:42:72:5f:46:0c:bd:3c:24:c9: ed:05:7b:80 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaMoExIMR6pSGyhhFnrMhV9Q6hXcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MTE1NVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAN2JlZjgyNjM5YjNhZjNiZDNlMWEx ZTJkNDQxNjE2ZWFkMmU3YzY3YTk4YjIxNzNhYmEzY2I0NGQ1OWU4NWMyODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHFFjfXrvMWqeKvj38djGzJydK7F IHnOGkmC/xgtcac0YpvTiQbbsyrFIab9TfXMYoUK+cBFDC/fWZ93CmduaYbrUgEu TAYxrTqDzZQu1xlSOxmhWMLm6wF7DxqACpb4VPdq62/KO2T4X28LGAvrTGZ3h7KF yH/pv8bxXU3GT4fDBXIJQXvPHSCgVqP98VpfZoch4dK9uKLXZYbrk6uFEvYdBqa9 sSZ3a42g8vS8D2rO665eYjSiuf+rb+bW9/bp21pWAXZTVWVtNv3pQEUspzRgjGMS ebeJcCd1uuKyHMILrgdouk/Il/PvK1RCsKnn+VIT6QaYTQpaDt8xCdqNrwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEnWDU7RAdD8Ff311Osy3Y9f2BrOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJiNGFkYjk3LWEzM2YtNDg1Yy04NjViLWJhZGFhMWY5Yzg5Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaALAwDQYJKoZIhvcNAQELBQADggEBAJpOtyZAQEqIyfSVbjkw ZrWtPx+K5J0xjF+/Ro/jPc4h7xryRXYHFYrDLzsBfjtVCljwu6z6EewbjwVVlrj7 CI8Lsdp51A5yJ1c4llhycYFIrBM1c2zMUBUXel1TcF4F+1qV86TY4bvZ3JouMTnm ibbg3Vy66FtzSlNu2Na2k3VDTJqIfxQ3ieP8AUaWRG7qBo7PWLx75nlTXYpHG4MC AW7uTon7skgBvVJmMsSHHEW+5Oem7zGMwpbCNc4ZddGpQ/umCa9CQqMWx5hPY/WA A9DdWpmAjx7ewdm99JqLxjuOjLMUR6LrzAq04C/57q+CPw80PEJyX0YMvTwkye0F e4A= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:42 2025 by rpki-client on console.sobornost.net