$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a6b3ecd-f7ff-4379-a780-1f1e7ee8e62b.roa File: 3a6b3ecd-f7ff-4379-a780-1f1e7ee8e62b.roa (raw, json) Hash identifier: Oz/J7DT3RsiSDwEyBwsYlEwFJUjNO6FM3nYMYgVwShg= Subject key identifier: 8B:3E:8F:FC:83:E3:F9:3E:2E:9D:4B:B6:3B:CC:68:5C:D4:F8:88:7F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DD0B8D2D5C34C38B8711D91A4D91CB10436A6CB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a6b3ecd-f7ff-4379-a780-1f1e7ee8e62b.roa Signing time: Mon 21 Apr 2025 15:40:14 +0000 ROA not before: Mon 21 Apr 2025 15:40:14 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:20c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d0:b8:d2:d5:c3:4c:38:b8:71:1d:91:a4:d9:1c:b1:04:36:a6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:40:14 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=1d119f6dcb13778869c5f8fcd7e6bcad9ccbd70f8f0717e32e851d5dc4038ece, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:4d:b3:68:02:9f:03:b7:86:49:70:a6:b3: 02:19:97:3e:40:17:9c:2b:2c:82:dd:ba:c1:cc:f6: 7f:ff:f8:45:fa:48:cf:84:e2:aa:60:64:12:36:22: 33:83:59:a1:8d:b5:8e:4b:50:6e:dd:9c:e4:37:4e: 91:ee:00:71:b8:ee:72:4b:59:c5:7f:fc:1d:82:48: f4:8b:91:4a:c2:ae:24:a9:2d:8e:31:09:18:83:ee: 4d:0c:c2:bd:93:85:96:b0:b0:13:46:dd:8c:60:ec: 5f:dd:f0:a1:87:07:4b:a4:ec:72:b6:44:30:c1:88: 74:bf:66:fa:f6:eb:69:62:5a:b0:e1:cb:52:6e:73: 59:92:3b:26:c4:f3:5d:b2:64:03:7d:bb:55:96:de: c7:b9:26:40:4a:05:ca:a3:0c:45:00:89:d0:59:bf: 36:28:4b:07:bf:bd:cc:de:43:2a:ad:57:40:6f:1b: 2e:92:79:1a:c2:c5:c0:ce:bd:6a:3c:7f:47:32:49: 6d:a6:73:7e:dd:15:b0:bf:8c:f2:79:70:ff:59:31: af:fc:04:5d:8b:f4:11:bd:35:40:95:65:07:df:42: a8:f2:ac:76:eb:bf:4f:2e:92:a4:9b:15:f2:dc:6a: f3:4b:a0:be:ee:2b:c3:c1:99:f1:fd:03:bb:9c:db: 27:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3E:8F:FC:83:E3:F9:3E:2E:9D:4B:B6:3B:CC:68:5C:D4:F8:88:7F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a6b3ecd-f7ff-4379-a780-1f1e7ee8e62b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:20c0::/46 Signature Algorithm: sha256WithRSAEncryption 32:23:7c:68:cd:4f:d6:22:54:0f:25:e0:7a:0f:ea:8b:0b:82: 6b:93:2e:ea:78:02:8c:19:83:0d:fc:87:47:bb:8b:a1:a2:60: b9:a7:37:8b:8a:fa:e6:a6:ea:60:97:5b:f9:e9:15:a9:67:02: 65:eb:0c:c5:22:c6:22:81:2c:66:3f:95:9a:85:a9:66:b4:20: 51:3d:9e:9a:11:e3:0b:42:98:cc:98:b6:ea:cb:60:02:9b:a9: 33:39:53:1b:d9:ef:f6:ca:d1:ff:80:21:44:84:bc:99:d4:e6: 57:0c:dc:8a:80:4a:4e:69:ce:f0:a7:82:c0:63:c6:0c:74:d3: 07:22:85:97:61:8e:33:1a:be:9a:48:1b:00:69:29:19:b0:de: 68:05:5a:6b:a0:fc:4c:41:ca:be:7f:61:c2:46:e0:02:9a:82: c2:34:2a:c2:93:17:a0:8c:a8:33:5c:18:2c:e9:dc:84:47:a8: 1e:e8:16:a0:51:7d:b2:c4:35:62:de:81:27:5f:83:d2:35:a6: df:46:6d:0d:5b:ff:82:db:4f:52:25:eb:d9:3c:aa:78:14:4e: f1:af:cc:1b:92:d6:f2:1a:d6:98:ee:99:41:47:83:dc:30:5d: 8c:47:50:59:c1:b3:5e:98:85:bb:9b:d3:69:e3:3d:7e:de:7e: bb:2f:7a:6c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHdC40tXDTDi4cR2RpNkcsQQ2psswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NDAxNFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMWQxMTlmNmRjYjEzNzc4ODY5YzVm OGZjZDdlNmJjYWQ5Y2NiZDcwZjhmMDcxN2UzMmU4NTFkNWRjNDAzOGVjZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcBNs2gCnwO3hklwprMCGZc+QBec KyyC3brBzPZ///hF+kjPhOKqYGQSNiIzg1mhjbWOS1Bu3ZzkN06R7gBxuO5yS1nF f/wdgkj0i5FKwq4kqS2OMQkYg+5NDMK9k4WWsLATRt2MYOxf3fChhwdLpOxytkQw wYh0v2b69utpYlqw4ctSbnNZkjsmxPNdsmQDfbtVlt7HuSZASgXKowxFAInQWb82 KEsHv73M3kMqrVdAbxsuknkawsXAzr1qPH9HMkltpnN+3RWwv4zyeXD/WTGv/ARd i/QRvTVAlWUH30Ko8qx2679PLpKkmxXy3GrzS6C+7ivDwZnx/QO7nNsnxwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFIs+j/yD4/k+Lp1LtjvMaFzU+Ih/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhNmIzZWNkLWY3ZmYtNDM3OS1hNzgwLTFmMWU3ZWU4ZTYyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+yDAMA0GCSqGSIb3DQEBCwUAA4IBAQAyI3xozU/WIlQPJeB6 D+qLC4Jrky7qeAKMGYMN/IdHu4uhomC5pzeLivrmpupgl1v56RWpZwJl6wzFIsYi gSxmP5WahalmtCBRPZ6aEeMLQpjMmLbqy2ACm6kzOVMb2e/2ytH/gCFEhLyZ1OZX DNyKgEpOac7wp4LAY8YMdNMHIoWXYY4zGr6aSBsAaSkZsN5oBVproPxMQcq+f2HC RuACmoLCNCrCkxegjKgzXBgs6dyER6ge6BagUX2yxDVi3oEnX4PSNabfRm0NW/+C 209SJevZPKp4FE7xr8wbktbyGtaY7plBR4PcMF2MR1BZwbNemIW7m9Np4z1+3n67 L3ps -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:43 2025 by rpki-client on console.sobornost.net