$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f2a4d99-6aa4-4f2b-8a7a-ee89f569501d.roa File: 2f2a4d99-6aa4-4f2b-8a7a-ee89f569501d.roa (raw, json) Hash identifier: WsA0gQbMycHBrItkzwW3QIrkp0QF/w2+9hXn9xGB/2o= Subject key identifier: 85:F1:FF:64:FD:A9:E2:AC:91:81:0D:AE:90:87:01:79:78:04:4C:80 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 52D9F8AF20C38CCBE862D45161E08EE8CD447FFB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f2a4d99-6aa4-4f2b-8a7a-ee89f569501d.roa Signing time: Sat 19 Apr 2025 00:00:15 +0000 ROA not before: Sat 19 Apr 2025 00:00:15 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d9:f8:af:20:c3:8c:cb:e8:62:d4:51:61:e0:8e:e8:cd:44:7f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:00:15 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=bb60b49fce0cb55d09f6c29ca7e8490371fb993f2755dd930d298b2a4944f510, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:46:d0:92:83:eb:f2:3b:12:8f:95:c2:94: a8:df:bd:7f:0c:86:82:e3:d4:70:dc:62:3b:d3:5e: c7:9e:d7:52:a9:6f:93:84:93:9e:03:b2:9a:58:09: 71:34:47:f0:b6:d1:60:85:66:d1:15:bb:fe:43:f7: 10:a0:5f:c1:c5:b4:88:b9:de:2b:e4:40:ae:24:50: cb:2d:d2:78:4f:05:42:ff:66:71:c1:d7:f2:56:6a: 17:11:8e:d9:0a:d0:03:7f:13:fd:b9:1c:f4:12:41: b4:61:88:00:71:69:24:13:6e:14:64:36:23:36:c8: 47:e2:99:cb:6c:41:62:28:65:15:0c:96:e3:28:bd: 55:58:db:af:32:51:cd:ef:bb:2a:25:ca:b0:b0:2e: f7:39:a3:e5:a6:07:97:5b:4e:e6:7f:14:ed:61:25: 19:e4:94:4a:d3:36:d6:60:83:f7:50:52:44:24:d5: 40:ad:4a:01:4c:9e:59:05:47:a2:ec:4e:4c:1c:9e: 2d:df:8b:47:2d:1b:f3:fd:04:e9:0b:9e:d8:d7:7a: a2:63:a6:05:a1:d5:a8:69:19:7e:50:87:b0:f1:9e: 45:e0:0b:7e:c7:b4:26:2f:cb:df:c4:1e:f2:25:28: f0:99:97:ce:11:01:ec:94:5b:29:1a:69:ee:87:57: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F1:FF:64:FD:A9:E2:AC:91:81:0D:AE:90:87:01:79:78:04:4C:80 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f2a4d99-6aa4-4f2b-8a7a-ee89f569501d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:9040::/48 Signature Algorithm: sha256WithRSAEncryption 54:5c:85:09:b1:05:f5:1f:1c:00:80:4b:34:f7:75:fd:64:b8: b8:91:5a:f6:7b:05:75:5d:0c:b4:6b:88:39:66:02:a6:0a:57: 3e:74:90:54:00:91:36:0d:21:c3:86:c1:a8:c6:33:b3:aa:32: ff:7a:fe:31:34:08:6c:b3:00:0a:a1:5e:bd:5b:e9:53:fc:5b: aa:77:58:b9:c1:41:24:85:f6:e6:38:35:1a:6b:bc:f8:15:0b: 29:8b:13:df:44:78:12:2a:0a:41:ed:f5:ef:78:8f:85:b4:b7: 92:0d:60:f1:70:75:bc:37:9f:6b:af:fa:e9:2a:da:ae:50:01: e7:c6:71:c7:d6:fd:20:7d:b5:ae:3f:31:29:d7:23:64:83:80: 89:3c:db:c4:be:31:71:cc:e2:df:ea:2e:9d:25:c0:53:58:28: 4b:7b:32:5c:3c:c8:5e:6a:ac:3e:d4:3e:9e:e9:cc:c7:30:9e: 45:91:1a:0f:db:31:b0:1e:e1:09:d2:b0:4d:13:b4:9e:10:69: e2:8c:77:4d:d5:76:d7:da:68:d7:69:aa:ae:de:22:2f:f4:c3: 37:0c:ee:68:09:4c:0e:ff:67:46:aa:e5:2e:2d:37:8c:22:78: 47:c5:d0:5a:a6:8b:14:83:e1:c2:7a:ef:b2:49:81:6e:ee:ea: 9e:62:b6:24 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUtn4ryDDjMvoYtRRYeCO6M1Ef/swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMDAxNVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAYmI2MGI0OWZjZTBjYjU1ZDA5ZjZj MjljYTdlODQ5MDM3MWZiOTkzZjI3NTVkZDkzMGQyOThiMmE0OTQ0ZjUxMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2dG0JKD6/I7Eo+VwpSo371/DIaC 49Rw3GI7017HntdSqW+ThJOeA7KaWAlxNEfwttFghWbRFbv+Q/cQoF/BxbSIud4r 5ECuJFDLLdJ4TwVC/2ZxwdfyVmoXEY7ZCtADfxP9uRz0EkG0YYgAcWkkE24UZDYj NshH4pnLbEFiKGUVDJbjKL1VWNuvMlHN77sqJcqwsC73OaPlpgeXW07mfxTtYSUZ 5JRK0zbWYIP3UFJEJNVArUoBTJ5ZBUei7E5MHJ4t34tHLRvz/QTpC57Y13qiY6YF odWoaRl+UIew8Z5F4At+x7QmL8vfxB7yJSjwmZfOEQHslFspGmnuh1ftzwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIXx/2T9qeKskYENrpCHAXl4BEyAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzJmMmE0ZDk5LTZhYTQtNGYyYi04YTdhLWVlODlmNTY5NTAxZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9JBAMA0GCSqGSIb3DQEBCwUAA4IBAQBUXIUJsQX1HxwAgEs0 93X9ZLi4kVr2ewV1XQy0a4g5ZgKmClc+dJBUAJE2DSHDhsGoxjOzqjL/ev4xNAhs swAKoV69W+lT/Fuqd1i5wUEkhfbmODUaa7z4FQspixPfRHgSKgpB7fXveI+FtLeS DWDxcHW8N59rr/rpKtquUAHnxnHH1v0gfbWuPzEp1yNkg4CJPNvEvjFxzOLf6i6d JcBTWChLezJcPMheaqw+1D6e6czHMJ5FkRoP2zGwHuEJ0rBNE7SeEGnijHdN1XbX 2mjXaaqu3iIv9MM3DO5oCUwO/2dGquUuLTeMInhHxdBaposUg+HCeu+ySYFu7uqe YrYk -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:42 2025 by rpki-client on console.sobornost.net