$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c45a5ec-fccb-48b2-b7d2-891164aa8a70.roa File: 2c45a5ec-fccb-48b2-b7d2-891164aa8a70.roa (raw, json) Hash identifier: HcAZu1HNh2MGdSq7RbnSLVi43F8UNrxw1GFGvFT1Ark= Subject key identifier: AB:95:A9:41:13:8E:66:99:46:B4:0A:1A:27:81:D8:C7:4F:FF:99:5E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 112F7BEC3BF4C6BEEA5CE39D143EE628EC6D620E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c45a5ec-fccb-48b2-b7d2-891164aa8a70.roa Signing time: Mon 21 Apr 2025 15:01:56 +0000 ROA not before: Mon 21 Apr 2025 15:01:56 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:2040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2f:7b:ec:3b:f4:c6:be:ea:5c:e3:9d:14:3e:e6:28:ec:6d:62:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:01:56 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=99256e8b76ae5ca208f68c99f7e15a08a748aadb413878601ceef487c91e871f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:ea:ec:b8:17:4d:42:50:ec:d6:11:9a:d2: ca:58:f5:2a:70:f4:9c:c9:cf:16:55:46:4b:28:89: 33:e0:49:e8:a2:fb:b0:c0:db:08:6e:c1:49:bd:0d: c8:e1:56:ef:ff:ee:3f:b0:31:75:93:71:2b:60:30: 56:81:a0:80:ba:ec:19:b2:8b:84:9e:f0:de:cd:5d: a8:90:5e:e1:d8:1e:ff:75:eb:a3:75:da:ec:f3:19: c8:f3:7e:8c:bb:5c:42:6f:d6:b8:9c:14:d2:dc:6d: 53:0a:63:49:3b:4f:22:4b:6a:d8:dd:2f:ee:04:35: 3b:34:cf:b1:2a:ea:fd:19:15:11:8f:e6:d1:36:ba: 8a:55:f5:a2:82:e3:0c:03:ff:ec:c9:b0:5a:18:d2: b1:04:f5:c6:7f:01:54:36:99:76:d5:ed:e6:7f:a2: bd:c1:47:a6:34:32:27:1f:94:1c:59:2f:f7:d2:cd: 4f:04:dd:59:21:a8:73:ba:31:e2:9d:17:25:fa:e9: cd:d7:92:5f:45:4d:92:ff:b0:f5:21:81:54:e5:18: 3d:67:07:d5:92:1c:f0:92:f1:4f:76:1b:ed:b3:bd: 41:7f:81:fd:93:27:38:ce:06:e7:39:e7:91:4a:9d: d3:9f:9b:b8:df:32:d9:d5:89:9e:02:0a:20:bd:04: a7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:95:A9:41:13:8E:66:99:46:B4:0A:1A:27:81:D8:C7:4F:FF:99:5E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c45a5ec-fccb-48b2-b7d2-891164aa8a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:2040::/46 Signature Algorithm: sha256WithRSAEncryption 8a:20:02:02:1a:1b:91:d2:47:7c:2f:c7:d2:65:57:c0:d9:27: b8:41:fc:e0:b3:e4:1c:eb:f9:ef:9c:74:76:95:d1:71:7a:63: 4f:00:a3:8f:aa:fc:c7:63:01:b9:14:85:3f:67:a0:dd:0b:be: 27:94:8a:7c:9f:7f:ea:9e:09:53:86:47:d3:e8:48:c6:98:b2: ec:81:ef:71:9a:2f:74:9e:bc:9c:38:cd:19:b2:a4:75:73:2b: d5:69:40:24:b0:2c:67:bd:50:04:db:d4:99:6f:85:d6:5a:31: 60:1a:50:f9:49:32:dd:e6:7e:09:49:93:9a:de:46:0b:b9:86: cf:9d:14:10:4f:4d:aa:1e:6b:a2:dd:0e:02:94:95:dc:51:08: 90:51:cc:b6:68:1d:f7:33:15:c0:a3:87:1f:7b:29:cc:54:3e: 1f:4c:4c:c8:5b:e4:a0:b7:18:77:65:71:c2:4f:b0:e2:d4:64: 9d:0a:1d:07:d6:bb:c7:4e:10:ef:89:b7:86:dc:ef:99:48:bb: 82:a8:1f:32:ed:f2:bb:83:a4:6f:6c:89:56:8c:c5:63:c7:01: 20:fe:b2:03:c3:4d:b6:6e:81:90:75:e2:8d:3f:bc:54:6e:3c: 57:4c:e1:25:3b:f2:52:4e:cb:18:2c:53:02:c1:e9:b4:5f:27: b0:09:8d:bb -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUES977Dv0xr7qXOOdFD7mKOxtYg4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MDE1NloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAOTkyNTZlOGI3NmFlNWNhMjA4ZjY4 Yzk5ZjdlMTVhMDhhNzQ4YWFkYjQxMzg3ODYwMWNlZWY0ODdjOTFlODcxZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYnq7LgXTUJQ7NYRmtLKWPUqcPSc yc8WVUZLKIkz4EnoovuwwNsIbsFJvQ3I4Vbv/+4/sDF1k3ErYDBWgaCAuuwZsouE nvDezV2okF7h2B7/deujddrs8xnI836Mu1xCb9a4nBTS3G1TCmNJO08iS2rY3S/u BDU7NM+xKur9GRURj+bRNrqKVfWiguMMA//sybBaGNKxBPXGfwFUNpl21e3mf6K9 wUemNDInH5QcWS/30s1PBN1ZIahzujHinRcl+unN15JfRU2S/7D1IYFU5Rg9ZwfV khzwkvFPdhvts71Bf4H9kyc4zgbnOeeRSp3Tn5u43zLZ1YmeAgogvQSn8QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKuVqUETjmaZRrQKGieB2MdP/5leMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJjNDVhNWVjLWZjY2ItNDhiMi1iN2QyLTg5MTE2NGFhOGE3MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9yBAMA0GCSqGSIb3DQEBCwUAA4IBAQCKIAICGhuR0kd8L8fS ZVfA2Se4Qfzgs+Qc6/nvnHR2ldFxemNPAKOPqvzHYwG5FIU/Z6DdC74nlIp8n3/q nglThkfT6EjGmLLsge9xmi90nrycOM0ZsqR1cyvVaUAksCxnvVAE29SZb4XWWjFg GlD5STLd5n4JSZOa3kYLuYbPnRQQT02qHmui3Q4ClJXcUQiQUcy2aB33MxXAo4cf eynMVD4fTEzIW+Sgtxh3ZXHCT7Di1GSdCh0H1rvHThDvibeG3O+ZSLuCqB8y7fK7 g6RvbIlWjMVjxwEg/rIDw022boGQdeKNP7xUbjxXTOElO/JSTssYLFMCwem0Xyew CY27 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:42 2025 by rpki-client on console.sobornost.net