$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a9ba274-8f81-4637-930d-3dd25af9cdea.roa File: 3a9ba274-8f81-4637-930d-3dd25af9cdea.roa (raw, json) Hash identifier: q2JG7TlgDhwRYFOhgwx7Qq+of9hnm2DT0a4lGXSRshs= Subject key identifier: E1:11:69:4E:42:30:4C:A5:B4:AC:66:14:87:B6:CE:94:F0:49:B1:1F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 788214C2B42F9B509876C0C336D6630CA1031F55 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a9ba274-8f81-4637-930d-3dd25af9cdea.roa Signing time: Sat 19 Apr 2025 00:51:56 +0000 ROA not before: Sat 19 Apr 2025 00:51:56 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:82:14:c2:b4:2f:9b:50:98:76:c0:c3:36:d6:63:0c:a1:03:1f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:51:56 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=5f3682b00539707b61c2d16514d9e11818cdc143629e07ea58c109b03e88215e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:23:7a:d8:97:95:bd:e7:95:18:ff:41:2e: 23:b8:d7:3a:df:8f:5c:1d:5e:92:a3:66:25:af:7e: aa:b8:c2:32:24:27:dc:62:e5:57:7d:4d:db:38:26: 9f:79:35:66:74:08:0d:70:ba:04:a1:ee:a0:bc:56: 65:55:9c:a0:0c:8e:bb:b8:ad:f0:71:a7:f3:ef:79: 8a:f0:de:e0:7e:71:e5:60:71:54:74:61:fd:06:f1: 9d:3b:42:80:3a:e1:fb:88:29:2c:11:47:96:6c:de: ab:79:26:9b:a3:5e:af:b2:fd:c6:19:4c:b2:eb:6f: 40:dc:da:06:a6:31:a8:3b:a0:6d:d2:7c:d6:63:fc: ab:d3:60:d0:bd:2b:a1:7c:d2:ce:94:23:ea:6c:f2: 2b:55:7e:32:36:39:36:d7:d2:a7:1b:3a:52:46:8e: d7:2f:1c:cf:80:a6:5b:72:6a:b1:5c:78:b9:3a:d8: b3:c6:c6:f8:65:44:11:4f:2d:f5:f7:b2:c4:3a:6c: a1:43:fe:f8:ba:bd:60:57:e3:04:0a:39:d2:1c:6e: 59:3d:67:95:70:ae:20:44:aa:15:d4:c1:1e:f5:b2: cc:d1:97:f9:e5:55:b6:56:f0:2f:f1:1e:77:a3:be: 67:a2:ee:8d:ce:71:56:61:45:84:ed:75:0d:46:42: 90:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:11:69:4E:42:30:4C:A5:B4:AC:66:14:87:B6:CE:94:F0:49:B1:1F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a9ba274-8f81-4637-930d-3dd25af9cdea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:2840::/48 Signature Algorithm: sha256WithRSAEncryption b8:b8:69:ae:ec:2f:9d:21:56:b2:dc:bc:4b:41:1a:a1:94:cd: 44:b6:ff:25:5b:dd:49:9e:56:13:3a:b4:4a:ee:33:ae:41:f7: 67:85:05:cc:93:39:24:6d:8d:79:0c:88:9a:76:6d:35:a9:42: 47:cc:a5:5f:5a:3f:8e:d9:d0:b0:f8:90:03:cd:bb:6e:ce:31: 47:42:72:bc:d3:d8:04:b4:2f:21:77:7d:f0:17:fa:9b:0c:47: 7e:fa:5d:de:ef:db:69:d7:1e:fb:a3:f5:09:db:18:f1:94:94: cc:aa:27:06:bc:18:79:3d:90:88:f1:0a:6a:e9:df:d1:b9:c9: 06:17:2f:d3:8a:b1:95:47:6b:9d:19:9d:de:05:cb:f1:ee:ca: 9e:17:82:b2:a3:ac:2d:9c:e0:57:98:b9:a0:e2:3f:dd:7e:55: 50:3c:ca:bd:fe:5a:9b:0e:d4:2c:b2:74:79:23:66:b6:95:a8: 6a:25:14:98:1b:94:d9:e8:0d:b7:d9:33:d5:c6:9c:5d:b9:71: 42:7d:0f:88:09:40:cc:d8:8a:c8:bd:ca:30:17:14:0d:66:c9: 5a:05:94:f3:b1:9e:aa:db:a0:e7:9a:51:1b:c1:cf:fc:ed:80: 91:36:be:3c:b6:2f:50:7a:98:53:c5:bf:b9:63:5a:b2:84:eb: e9:94:ec:73 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeIIUwrQvm1CYdsDDNtZjDKEDH1UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwNTE1NloX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNANWYzNjgyYjAwNTM5NzA3YjYxYzJk MTY1MTRkOWUxMTgxOGNkYzE0MzYyOWUwN2VhNThjMTA5YjAzZTg4MjE1ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIMjetiXlb3nlRj/QS4juNc6349c HV6So2Ylr36quMIyJCfcYuVXfU3bOCafeTVmdAgNcLoEoe6gvFZlVZygDI67uK3w cafz73mK8N7gfnHlYHFUdGH9BvGdO0KAOuH7iCksEUeWbN6reSabo16vsv3GGUyy 629A3NoGpjGoO6Bt0nzWY/yr02DQvSuhfNLOlCPqbPIrVX4yNjk219KnGzpSRo7X LxzPgKZbcmqxXHi5Otizxsb4ZUQRTy3197LEOmyhQ/74ur1gV+MECjnSHG5ZPWeV cK4gRKoV1MEe9bLM0Zf55VW2VvAv8R53o75nou6NznFWYUWE7XUNRkKQNwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOERaU5CMEyltKxmFIe2zpTwSbEfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhOWJhMjc0LThmODEtNDYzNy05MzBkLTNkZDI1YWY5Y2RlYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYShAMA0GCSqGSIb3DQEBCwUAA4IBAQC4uGmu7C+dIVay3LxL QRqhlM1Etv8lW91JnlYTOrRK7jOuQfdnhQXMkzkkbY15DIiadm01qUJHzKVfWj+O 2dCw+JADzbtuzjFHQnK809gEtC8hd33wF/qbDEd++l3e79tp1x77o/UJ2xjxlJTM qicGvBh5PZCI8Qpq6d/RuckGFy/TirGVR2udGZ3eBcvx7sqeF4Kyo6wtnOBXmLmg 4j/dflVQPMq9/lqbDtQssnR5I2a2lahqJRSYG5TZ6A232TPVxpxduXFCfQ+ICUDM 2IrIvcowFxQNZslaBZTzsZ6q26DnmlEbwc/87YCRNr48ti9QephTxb+5Y1qyhOvp lOxz -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:43 2025 by rpki-client on console.sobornost.net