$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2dcd175c-d836-48eb-86d0-63d1c2f1c6d3.roa File: 2dcd175c-d836-48eb-86d0-63d1c2f1c6d3.roa (raw, json) Hash identifier: aNGGh3Td55qwNkCj4g91D7ZljkZYTAOLwZYEKO7rZDM= Subject key identifier: 34:FB:AD:2D:12:96:C7:98:0D:E9:8F:FD:47:70:78:15:F6:43:DD:76 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1D7782D9A31775E1392FD09050A4F7C1C522BB30 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2dcd175c-d836-48eb-86d0-63d1c2f1c6d3.roa Signing time: Mon 21 Apr 2025 15:21:44 +0000 ROA not before: Mon 21 Apr 2025 15:21:44 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:48c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:77:82:d9:a3:17:75:e1:39:2f:d0:90:50:a4:f7:c1:c5:22:bb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:21:44 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=4fb87ca2167e049201c405b78ae98d7a697830bdc7e24186a832159d697032fe, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:78:96:a8:e4:a5:19:6c:2c:ce:43:3a:85: f7:b1:dd:e1:77:f7:27:41:58:42:57:fb:40:23:ed: b2:4d:d0:50:5f:70:e3:45:86:5f:ef:e5:aa:34:a2: 16:96:ca:b3:53:0b:d6:3b:cf:e2:65:52:a5:01:85: f3:5f:e2:4c:f0:d4:aa:10:75:79:fd:aa:cd:79:0f: 95:e0:5f:54:23:46:6a:38:a2:f9:0b:a2:a5:dc:da: ee:bd:be:6f:02:64:9b:ce:7d:e1:f9:61:78:f3:f6: 38:cd:ad:42:50:57:3d:48:8f:0f:5b:21:41:33:6c: ce:68:64:50:e4:97:c8:e8:fe:65:a4:6a:91:80:33: 57:61:57:63:64:9f:23:ee:40:26:ef:8c:bc:07:ac: fc:9f:df:be:dc:fc:00:a3:97:61:48:7c:3c:5d:33: b4:6a:b2:42:28:e9:5f:ce:d1:1f:7e:b0:53:37:e2: e3:36:95:9a:b6:6d:9c:91:fc:4c:81:8a:77:38:58: 1e:b3:b7:2d:cb:e3:ac:b2:7b:41:96:cf:b7:74:18: a2:e3:a6:f2:f6:70:d1:bd:27:80:a4:0b:a7:f9:4a: 9a:5c:6c:8c:3e:b7:44:95:4a:95:52:33:d6:25:86: 21:cb:99:01:82:65:2f:85:a7:5e:86:c6:11:b8:bb: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FB:AD:2D:12:96:C7:98:0D:E9:8F:FD:47:70:78:15:F6:43:DD:76 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2dcd175c-d836-48eb-86d0-63d1c2f1c6d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:48c0::/46 Signature Algorithm: sha256WithRSAEncryption 40:d5:8f:b9:16:26:10:ec:e4:43:ba:94:e0:e3:71:ad:91:11: f0:8a:f6:f9:09:f6:b2:e8:7e:f1:57:6a:df:32:9b:2f:91:d4: b4:58:7d:0c:f1:79:a2:cd:d7:e1:03:74:0b:20:57:f4:cc:ef: 83:b1:1f:88:82:34:0e:8d:4f:5e:fe:fa:39:0b:64:4c:34:92: e2:a9:46:f4:62:02:87:ed:7f:87:aa:31:be:0f:fb:65:33:6b: c1:2a:bb:4c:68:3a:18:21:26:3a:0f:fb:ed:13:31:bc:52:96: b0:2b:0d:5e:a2:47:ab:b1:57:a4:51:d9:8c:12:f9:db:23:51: 1b:d7:b0:8f:22:87:65:1e:24:a0:e8:1c:09:68:c5:25:cb:26: 63:13:f0:1f:c4:6e:8e:b3:90:c6:ec:01:30:4b:85:8a:4c:c6: ac:9c:05:17:e0:d1:c2:c5:c3:04:6a:1e:ef:2b:e9:80:3f:f1: 53:a2:28:c6:f9:62:4d:c9:31:8b:b3:60:5e:5d:60:6f:a8:2b: 73:ba:67:67:ee:70:4e:da:52:d8:bf:b0:7f:08:a9:07:99:f3: 28:6a:59:e4:0e:35:89:2e:82:49:38:69:d1:8e:46:78:c6:a5: f1:4d:8b:f8:94:f4:51:ff:b3:97:47:29:a2:a5:78:dc:a3:08: 6b:b9:27:fc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHXeC2aMXdeE5L9CQUKT3wcUiuzAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MjE0NFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANGZiODdjYTIxNjdlMDQ5MjAxYzQw NWI3OGFlOThkN2E2OTc4MzBiZGM3ZTI0MTg2YTgzMjE1OWQ2OTcwMzJmZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3p4lqjkpRlsLM5DOoX3sd3hd/cn QVhCV/tAI+2yTdBQX3DjRYZf7+WqNKIWlsqzUwvWO8/iZVKlAYXzX+JM8NSqEHV5 /arNeQ+V4F9UI0ZqOKL5C6Kl3Nruvb5vAmSbzn3h+WF48/Y4za1CUFc9SI8PWyFB M2zOaGRQ5JfI6P5lpGqRgDNXYVdjZJ8j7kAm74y8B6z8n9++3PwAo5dhSHw8XTO0 arJCKOlfztEffrBTN+LjNpWatm2ckfxMgYp3OFges7cty+OssntBls+3dBii46by 9nDRvSeApAun+UqaXGyMPrdElUqVUjPWJYYhy5kBgmUvhadehsYRuLu6kwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDT7rS0SlseYDemP/UdweBX2Q912MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJkY2QxNzVjLWQ4MzYtNDhlYi04NmQwLTYzZDFjMmYxYzZkMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+0jAMA0GCSqGSIb3DQEBCwUAA4IBAQBA1Y+5FiYQ7ORDupTg 43GtkRHwivb5Cfay6H7xV2rfMpsvkdS0WH0M8XmizdfhA3QLIFf0zO+DsR+IgjQO jU9e/vo5C2RMNJLiqUb0YgKH7X+HqjG+D/tlM2vBKrtMaDoYISY6D/vtEzG8Upaw Kw1eokersVekUdmMEvnbI1Eb17CPIodlHiSg6BwJaMUlyyZjE/AfxG6Os5DG7AEw S4WKTMasnAUX4NHCxcMEah7vK+mAP/FToijG+WJNyTGLs2BeXWBvqCtzumdn7nBO 2lLYv7B/CKkHmfMoalnkDjWJLoJJOGnRjkZ4xqXxTYv4lPRR/7OXRymipXjcowhr uSf8 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:42 2025 by rpki-client on console.sobornost.net