$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d5e21f1-37c5-4013-8bc3-1b867c6fa0b6.roa File: 2d5e21f1-37c5-4013-8bc3-1b867c6fa0b6.roa (raw, json) Hash identifier: XLc9REiNtC7DEBLjBYRHGQDHf1dhEuNw3K5hBfCsig4= Subject key identifier: 86:F9:B0:C6:60:AC:4F:81:56:81:A9:58:5A:F1:2B:22:EE:11:AF:F3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 68CDBF539E76F80AC55B39B43A5688941473933B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d5e21f1-37c5-4013-8bc3-1b867c6fa0b6.roa Signing time: Mon 21 Apr 2025 16:20:22 +0000 ROA not before: Mon 21 Apr 2025 16:20:22 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:cd:bf:53:9e:76:f8:0a:c5:5b:39:b4:3a:56:88:94:14:73:93:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:20:22 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=bee30b33d288d25249d2bb28e2db488a32bb24343e50921582b94a779ca142e1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:3d:40:47:70:d3:17:14:a7:2f:07:7a:4b: cd:74:29:59:ea:16:eb:c9:eb:d9:8e:61:70:e0:5e: 1b:90:f9:d1:f0:37:16:c1:40:98:2d:0a:82:d9:50: 20:52:b0:f7:a1:13:73:a0:13:b5:d0:bb:72:24:e0: 01:7e:6b:1e:7e:81:dd:99:a4:c2:11:50:e8:f1:71: 3c:14:a8:ef:92:5e:e1:99:74:fa:fa:24:f6:71:4c: eb:87:3e:e2:9b:19:ec:c5:ab:be:41:82:ca:e3:1e: c3:e2:55:9d:1c:aa:b0:ef:3c:bc:0c:fd:87:b3:2b: 0c:1f:d9:a2:86:65:58:1b:c6:1d:42:a2:db:76:2c: 63:60:a2:c4:a2:41:d1:a1:7f:df:a6:25:9e:74:70: 03:5c:89:21:6f:09:e8:fe:2f:88:06:0f:29:a1:bc: 1e:7b:b2:e1:31:a4:a2:a1:53:0e:d9:cd:d0:ca:ef: 58:e0:cd:77:28:2d:ff:bb:85:9c:cd:38:cb:76:2b: 55:b8:6c:1e:36:ea:ed:6b:e8:56:95:3d:2f:77:bb: f0:1e:fd:36:7f:b6:e5:4e:90:24:09:1a:81:2f:aa: df:ab:c7:3d:79:b1:72:a7:df:14:62:8d:e0:df:aa: 54:c7:9e:91:46:f1:c2:2d:97:e2:58:69:2d:d3:a0: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F9:B0:C6:60:AC:4F:81:56:81:A9:58:5A:F1:2B:22:EE:11:AF:F3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d5e21f1-37c5-4013-8bc3-1b867c6fa0b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:2800::/40 Signature Algorithm: sha256WithRSAEncryption 93:2a:65:ed:05:6a:59:22:fe:4e:1a:f4:e4:ee:84:de:0b:34: f8:69:c9:13:b7:f4:9a:2a:29:7d:8b:c8:43:af:f7:eb:da:cf: 47:ad:b0:7f:18:0e:ca:43:dc:6f:f5:3d:7a:69:02:fc:8d:5b: 1e:bd:5b:d1:cf:4c:ac:9b:71:d4:8f:8f:13:75:b6:a4:42:aa: d5:36:cf:c2:98:3a:03:fe:cd:c3:82:e8:a3:35:51:14:c0:b0: f9:5c:ec:45:25:98:1f:68:83:2f:05:6b:98:91:e7:6d:58:f8: bc:f2:bc:f4:e0:2f:89:30:bf:29:ff:9c:ed:ec:12:21:10:c2: e8:8a:21:bf:6f:7c:94:96:5e:59:04:ca:ec:11:df:00:4a:1b: ec:62:e0:4f:8c:b7:b2:f9:c8:42:0f:ad:63:c4:66:d4:88:e7: e0:f2:a8:c3:84:a2:b4:8b:bb:c8:52:4b:7d:53:30:9c:c6:81: 02:d7:a0:1a:45:bb:fe:0d:a6:7f:b6:85:d7:a9:28:75:9f:24: 19:6d:65:8f:1e:93:50:60:ed:7b:dc:5c:91:09:94:92:e6:41: b1:b2:ed:0e:94:35:f1:29:b7:40:be:71:b6:85:e0:83:a5:e0: d3:d5:96:6a:b4:8e:ad:b3:ef:12:a8:01:07:5d:3b:e9:58:f1: af:a1:30:83 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUaM2/U552+ArFWzm0OlaIlBRzkzswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MjAyMloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYmVlMzBiMzNkMjg4ZDI1MjQ5ZDJi YjI4ZTJkYjQ4OGEzMmJiMjQzNDNlNTA5MjE1ODJiOTRhNzc5Y2ExNDJlMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL09QEdw0xcUpy8HekvNdClZ6hbr yevZjmFw4F4bkPnR8DcWwUCYLQqC2VAgUrD3oRNzoBO10LtyJOABfmsefoHdmaTC EVDo8XE8FKjvkl7hmXT6+iT2cUzrhz7imxnsxau+QYLK4x7D4lWdHKqw7zy8DP2H sysMH9mihmVYG8YdQqLbdixjYKLEokHRoX/fpiWedHADXIkhbwno/i+IBg8pobwe e7LhMaSioVMO2c3Qyu9Y4M13KC3/u4WczTjLditVuGweNurta+hWlT0vd7vwHv02 f7blTpAkCRqBL6rfq8c9ebFyp98UYo3g36pUx56RRvHCLZfiWGkt06DQZwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIb5sMZgrE+BVoGpWFrxKyLuEa/zMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJkNWUyMWYxLTM3YzUtNDAxMy04YmMzLTFiODY3YzZmYTBiNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMigwDQYJKoZIhvcNAQELBQADggEBAJMqZe0Falki/k4a9OTu hN4LNPhpyRO39JoqKX2LyEOv9+vaz0etsH8YDspD3G/1PXppAvyNWx69W9HPTKyb cdSPjxN1tqRCqtU2z8KYOgP+zcOC6KM1URTAsPlc7EUlmB9ogy8Fa5iR521Y+Lzy vPTgL4kwvyn/nO3sEiEQwuiKIb9vfJSWXlkEyuwR3wBKG+xi4E+Mt7L5yEIPrWPE ZtSI5+DyqMOEorSLu8hSS31TMJzGgQLXoBpFu/4Npn+2hdepKHWfJBltZY8ek1Bg 7XvcXJEJlJLmQbGy7Q6UNfEpt0C+cbaF4IOl4NPVlmq0jq2z7xKoAQddO+lY8a+h MIM= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:42 2025 by rpki-client on console.sobornost.net