$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bab15d0-0790-4926-9ad7-aeff0d400b50.roa File: 3bab15d0-0790-4926-9ad7-aeff0d400b50.roa (raw, json) Hash identifier: SQJ75tnkkmWl64UCA3yAD9Fpz2LLzfAkZjhsjTViibw= Subject key identifier: 76:DD:13:CC:88:AB:65:A1:AD:EE:8B:2F:C3:22:82:DB:A9:14:A7:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2ACC2621618935E2189E223230D8493ED0431DD8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bab15d0-0790-4926-9ad7-aeff0d400b50.roa Signing time: Mon 21 Apr 2025 15:51:28 +0000 ROA not before: Mon 21 Apr 2025 15:51:28 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:cc:26:21:61:89:35:e2:18:9e:22:32:30:d8:49:3e:d0:43:1d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:51:28 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=01c95d49a48915033b9bd38db066a3d805106a5e81c8d004cad29e5823eb3f6a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e3:ef:95:05:bd:0d:de:d3:b5:28:25:02:bf: 01:12:de:73:c8:64:9e:87:b3:78:9a:22:ea:52:28: 68:f2:e0:3b:a9:c2:c7:7d:21:73:70:58:28:0d:df: 95:fc:51:91:c2:1a:6d:a9:1a:94:7a:d4:83:c3:44: 92:be:ae:24:bf:0c:6f:33:67:49:68:67:08:3b:40: d5:99:8d:7c:86:0a:05:2b:41:47:f9:e9:0e:27:42: ef:c5:a1:6a:2e:94:42:3f:95:a7:65:1a:5e:7b:de: e3:5d:1f:c6:91:81:d2:c4:c9:54:ef:b0:b3:d2:f4: fb:35:f6:9f:0c:10:33:a6:4b:36:a9:ad:c4:ea:76: 7c:cc:9a:97:c3:23:ad:b4:95:27:b4:32:ae:ba:2e: f9:c6:e1:ad:b2:54:79:e2:15:4c:65:a2:bc:ae:61: 70:19:76:fe:76:95:91:33:2f:95:47:70:12:6c:39: b0:1d:15:14:4e:0c:bc:97:c9:61:8f:cd:36:5b:f7: 05:e7:09:ad:bb:c3:9c:fa:21:8a:7e:a8:e6:47:53: 9f:23:27:ef:3c:09:1c:60:ca:31:3d:bf:f5:a2:74: 49:c7:a2:7f:93:46:e8:72:dc:af:cc:7b:7b:27:b7: 22:3f:9f:35:5b:bd:ff:32:41:e4:1a:f1:e5:61:7b: d5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DD:13:CC:88:AB:65:A1:AD:EE:8B:2F:C3:22:82:DB:A9:14:A7:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3bab15d0-0790-4926-9ad7-aeff0d400b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:b000::/40 Signature Algorithm: sha256WithRSAEncryption b4:87:56:fb:1f:d4:d6:bc:31:13:3c:d4:fc:5e:d8:4d:36:82: 98:2d:74:ab:3b:3b:57:21:b6:aa:9c:27:ca:b6:4c:ac:2f:00: bc:00:d2:e2:e8:13:3e:a3:f9:09:a4:68:46:4a:4c:1f:8c:0f: 8b:91:a2:23:1e:d3:e8:e2:3b:0a:c3:b0:1e:26:b3:ee:2a:91: 4f:0f:01:7c:e1:1d:10:e6:a2:63:25:13:11:7d:9e:67:f0:3b: 5c:6b:a5:e2:7b:b2:20:c3:fd:8f:87:62:60:b0:11:96:d8:4b: a2:20:4d:e1:cb:17:ff:34:26:4d:27:e2:b8:14:34:4e:80:c0: e1:54:9d:95:62:fd:a3:fd:cd:92:3e:c6:a8:4f:63:23:d3:98: 81:57:ba:5a:76:b6:d5:11:f2:bd:93:af:28:cd:25:1a:8f:45: 7b:e5:f8:fb:c9:93:e8:de:95:87:0c:6e:ec:55:41:8e:e5:67: 27:d5:0d:29:14:83:e9:e8:b2:27:fd:70:13:92:2d:79:43:45: 66:b9:4a:25:3f:24:4b:2f:9b:6c:a2:bf:67:45:4f:d4:db:5a: dc:e7:88:ee:79:19:b4:45:a7:1c:8a:78:18:40:f7:09:9d:ca: d4:50:6f:28:01:32:19:42:f3:f4:92:7a:a4:55:c7:7b:b5:bc: 28:03:9b:dc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKswmIWGJNeIYniIyMNhJPtBDHdgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NTEyOFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMDFjOTVkNDlhNDg5MTUwMzNiOWJk MzhkYjA2NmEzZDgwNTEwNmE1ZTgxYzhkMDA0Y2FkMjllNTgyM2ViM2Y2YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OPvlQW9Dd7TtSglAr8BEt5zyGSe h7N4miLqUiho8uA7qcLHfSFzcFgoDd+V/FGRwhptqRqUetSDw0SSvq4kvwxvM2dJ aGcIO0DVmY18hgoFK0FH+ekOJ0LvxaFqLpRCP5WnZRpee97jXR/GkYHSxMlU77Cz 0vT7NfafDBAzpks2qa3E6nZ8zJqXwyOttJUntDKuui75xuGtslR54hVMZaK8rmFw GXb+dpWRMy+VR3ASbDmwHRUUTgy8l8lhj802W/cF5wmtu8Oc+iGKfqjmR1OfIyfv PAkcYMoxPb/1onRJx6J/k0boctyvzHt7J7ciP581W73/MkHkGvHlYXvVGwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHbdE8yIq2Whre6LL8MigtupFKdbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNiYWIxNWQwLTA3OTAtNDkyNi05YWQ3LWFlZmYwZDQwMGI1MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaabAwDQYJKoZIhvcNAQELBQADggEBALSHVvsf1Na8MRM81Pxe 2E02gpgtdKs7O1chtqqcJ8q2TKwvALwA0uLoEz6j+QmkaEZKTB+MD4uRoiMe0+ji OwrDsB4ms+4qkU8PAXzhHRDmomMlExF9nmfwO1xrpeJ7siDD/Y+HYmCwEZbYS6Ig TeHLF/80Jk0n4rgUNE6AwOFUnZVi/aP9zZI+xqhPYyPTmIFXulp2ttUR8r2TryjN JRqPRXvl+PvJk+jelYcMbuxVQY7lZyfVDSkUg+nosif9cBOSLXlDRWa5SiU/JEsv m2yiv2dFT9TbWtzniO55GbRFpxyKeBhA9wmdytRQbygBMhlC8/SSeqRVx3u1vCgD m9w= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:43 2025 by rpki-client on console.sobornost.net