$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/349778ec-dd5c-4e52-8440-4155573588c4.roa File: 349778ec-dd5c-4e52-8440-4155573588c4.roa (raw, json) Hash identifier: iiJLDxaQPLZae/H1c4m65EY02rzCgWzgkfdP/iYBF7w= Subject key identifier: 4A:8D:8F:5D:EE:D6:2F:FD:BD:13:CB:8D:56:C9:1E:0C:39:44:92:AB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 32D5BFA8E8FE77B36793DC2BF871472A040110E1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/349778ec-dd5c-4e52-8440-4155573588c4.roa Signing time: Sat 19 Apr 2025 00:10:51 +0000 ROA not before: Sat 19 Apr 2025 00:10:51 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:e0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d5:bf:a8:e8:fe:77:b3:67:93:dc:2b:f8:71:47:2a:04:01:10:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:10:51 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=17fdbfe1a86d6434ed5646a8d5f81eb7bf5696fd4724a2b86f88f590d72c6d62, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ab:1f:5e:6c:ef:f6:27:9b:c9:4e:2b:59:39: cb:c9:0c:09:72:77:cb:b8:71:e1:3c:96:98:42:1e: 24:cd:73:3a:2f:d0:13:65:77:89:05:e7:31:e4:6c: a4:24:1c:39:eb:32:7a:6d:f2:cd:73:03:45:78:3a: 35:f0:60:26:82:c8:b6:69:6c:7d:38:30:24:aa:86: bf:32:02:dd:39:a5:ed:12:40:60:40:5a:0f:69:38: 03:72:9a:de:be:82:fb:0d:1b:7f:b2:8f:d9:42:aa: e3:e4:5a:8a:c0:ff:f2:d1:2a:6b:b2:c7:b6:8e:7a: 92:3e:38:9b:ad:6f:21:1b:87:e4:26:2c:fd:a2:3f: 36:8e:b9:23:2f:b8:1c:94:c0:45:5b:58:53:72:6c: 09:19:4e:ff:b8:17:ef:ab:6e:83:48:db:16:77:4f: f3:f2:27:87:84:f9:a9:d3:45:da:f9:04:b3:5c:91: e5:ee:bc:96:d7:7b:2a:17:f4:78:8b:94:7e:e9:41: 68:63:bc:f6:b6:95:0a:48:09:68:d8:98:c6:11:63: 7c:73:c6:20:53:2b:a3:0e:38:f6:25:7d:e2:e6:ab: 31:d1:26:b0:47:87:80:ac:60:26:3c:8d:79:57:2a: 08:96:19:5a:79:eb:d1:b9:fa:67:a2:47:57:c4:d1: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8D:8F:5D:EE:D6:2F:FD:BD:13:CB:8D:56:C9:1E:0C:39:44:92:AB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/349778ec-dd5c-4e52-8440-4155573588c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:e0c0::/48 Signature Algorithm: sha256WithRSAEncryption 87:5e:0b:83:22:82:b2:cf:22:4a:87:30:19:03:2b:a1:04:f3: ee:05:fc:8f:53:1b:69:8e:46:76:13:f3:91:3a:af:9d:f6:a8: e9:77:8a:43:ae:99:ff:49:7c:cb:1f:51:34:81:65:ac:56:1d: 45:61:60:68:4f:09:cb:8a:24:0f:a4:09:45:ba:7f:d8:00:34: 8c:81:bb:f9:30:c6:d1:47:a5:52:51:f8:25:62:8b:91:07:8a: 98:87:69:72:6b:f6:3f:ec:f7:45:3f:e8:48:f1:72:44:1e:39: 6b:36:b9:43:0e:f9:e1:54:c4:70:b4:58:bb:62:71:0e:1e:f0: 8b:06:49:ae:26:3a:87:a9:ad:92:f7:bb:47:c4:3a:e6:6a:cd: 5d:b3:72:f2:49:fb:69:0e:73:5b:98:23:5f:af:39:7d:42:09: 36:68:22:8c:1a:af:05:81:e1:ff:fc:df:ce:f7:55:ba:73:55: 1f:25:7b:4b:ce:3b:78:61:9a:e3:d3:d1:63:b8:08:41:18:1e: 25:dc:fb:88:f1:c3:83:3f:5d:66:e0:2c:7e:0a:25:ad:29:87: a3:11:4e:19:52:b5:c7:c3:57:aa:08:c7:2f:23:8b:7d:d7:49: 0f:a7:d0:4e:7a:e4:16:9e:ac:19:96:e8:7a:aa:db:93:55:ac: aa:f5:21:37 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMtW/qOj+d7Nnk9wr+HFHKgQBEOEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMTA1MVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAMTdmZGJmZTFhODZkNjQzNGVkNTY0 NmE4ZDVmODFlYjdiZjU2OTZmZDQ3MjRhMmI4NmY4OGY1OTBkNzJjNmQ2MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6sfXmzv9iebyU4rWTnLyQwJcnfL uHHhPJaYQh4kzXM6L9ATZXeJBecx5GykJBw56zJ6bfLNcwNFeDo18GAmgsi2aWx9 ODAkqoa/MgLdOaXtEkBgQFoPaTgDcprevoL7DRt/so/ZQqrj5FqKwP/y0Sprsse2 jnqSPjibrW8hG4fkJiz9oj82jrkjL7gclMBFW1hTcmwJGU7/uBfvq26DSNsWd0/z 8ieHhPmp00Xa+QSzXJHl7ryW13sqF/R4i5R+6UFoY7z2tpUKSAlo2JjGEWN8c8Yg UyujDjj2JX3i5qsx0SawR4eArGAmPI15VyoIlhlaeevRufpnokdXxNGVKwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEqNj13u1i/9vRPLjVbJHgw5RJKrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM0OTc3OGVjLWRkNWMtNGU1Mi04NDQwLTQxNTU1NzM1ODhjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/+DAMA0GCSqGSIb3DQEBCwUAA4IBAQCHXguDIoKyzyJKhzAZ AyuhBPPuBfyPUxtpjkZ2E/OROq+d9qjpd4pDrpn/SXzLH1E0gWWsVh1FYWBoTwnL iiQPpAlFun/YADSMgbv5MMbRR6VSUfglYouRB4qYh2lya/Y/7PdFP+hI8XJEHjlr NrlDDvnhVMRwtFi7YnEOHvCLBkmuJjqHqa2S97tHxDrmas1ds3LySftpDnNbmCNf rzl9Qgk2aCKMGq8FgeH//N/O91W6c1UfJXtLzjt4YZrj09FjuAhBGB4l3PuI8cOD P11m4Cx+CiWtKYejEU4ZUrXHw1eqCMcvI4t910kPp9BOeuQWnqwZluh6qtuTVayq 9SE3 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:43 2025 by rpki-client on console.sobornost.net