$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/422b2cc7-8cfe-4120-83e9-971bd9b03f2b.roa File: 422b2cc7-8cfe-4120-83e9-971bd9b03f2b.roa (raw, json) Hash identifier: wCyO3VqflxlkwLsOaCSf0bbxJCUQBaZFwREqvg2GR6g= Subject key identifier: 00:0E:92:73:A1:F1:65:0C:CF:9C:61:A7:F2:5D:D6:14:FB:CF:B1:18 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 26F9BC1380AC3F8425CFF14410B56D84C9370D97 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/422b2cc7-8cfe-4120-83e9-971bd9b03f2b.roa Signing time: Mon 21 Apr 2025 15:10:28 +0000 ROA not before: Mon 21 Apr 2025 15:10:28 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f9:bc:13:80:ac:3f:84:25:cf:f1:44:10:b5:6d:84:c9:37:0d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:10:28 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=c90d29680b235fe3b15af596eb17d12096190e4c60714715cc8ea8601d0b3a2e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:c4:a1:da:ef:b0:ff:c7:38:32:b0:24:13: a5:0d:9d:17:aa:fb:37:c7:6e:bb:2d:aa:00:48:c7: 88:48:7c:60:e6:f6:d1:d0:84:dc:b6:71:77:90:ac: 5e:91:65:5f:87:0d:67:97:e0:df:f7:bf:aa:1d:e0: d9:db:f4:34:3b:1a:6a:5d:8e:dc:fd:4e:2c:79:96: c5:3b:a6:f4:ae:32:eb:40:44:71:b6:ce:92:6a:b0: 88:4f:b6:70:8e:0b:1e:35:3f:bc:a3:f1:72:d1:b0: 0a:c7:19:d2:16:e4:83:21:10:9f:f8:cf:30:59:e5: fb:a8:ff:12:20:67:ac:38:18:c2:5d:b2:19:4c:d4: f3:7e:dd:a0:6a:86:fc:c9:6e:2a:87:13:20:18:ee: bf:f4:97:c6:24:b6:71:22:1a:3e:ca:6b:3c:d0:18: 65:f6:f2:93:ea:42:10:29:c0:ef:73:68:ff:10:bd: ea:17:36:b0:82:e9:0c:8e:78:34:13:26:83:d7:be: c5:0f:cc:c3:07:93:87:9a:36:57:ed:76:0e:1b:cb: 15:ac:9b:4d:b0:6e:37:a0:43:f9:eb:19:05:35:10: 04:b5:f9:a7:20:a6:55:da:e0:8d:11:12:04:0f:d2: 70:e4:83:21:21:79:7e:27:84:76:a1:d9:a9:c5:c6: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0E:92:73:A1:F1:65:0C:CF:9C:61:A7:F2:5D:D6:14:FB:CF:B1:18 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/422b2cc7-8cfe-4120-83e9-971bd9b03f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 3f:f8:4d:e9:a8:63:9f:e7:82:5f:0d:00:7d:0e:7e:8c:cc:21: 3a:cd:ce:ac:ae:6b:48:db:85:91:ef:f5:59:f6:93:d5:03:00: 03:c5:8f:da:c6:23:25:b0:ff:10:78:f9:13:49:e4:6e:f9:a7: c6:fa:a2:f9:8d:b1:1e:ff:49:a1:76:71:b6:83:78:06:c8:36: 65:7b:9d:01:52:b0:9d:84:4c:0d:52:7f:62:bc:ca:2b:67:6f: 21:3f:44:ff:2b:1a:79:1c:87:0d:2b:61:5a:d0:35:89:89:9a: 4e:f4:8e:8c:43:e2:77:35:c7:2f:51:6c:da:e1:ed:2c:9e:93: 58:92:e7:25:11:06:c1:49:ae:e5:5d:49:98:c0:ff:43:f7:88: 3d:6a:5f:36:05:96:6e:64:07:3b:2a:8a:02:56:57:8a:7e:89: ff:a6:43:8e:48:f0:06:0d:5d:5f:fb:30:8e:6d:c2:a8:3c:5c: 42:dc:35:55:09:e4:96:78:1c:d2:2d:92:b5:ac:13:10:f7:02: 85:07:6c:b8:5c:0c:09:66:5d:6a:19:98:a2:3c:5a:d1:3d:9d: 74:7a:e7:09:60:50:32:4e:c2:12:66:38:94:60:08:59:58:ae: ed:d2:90:2d:74:6f:4f:5d:c5:89:0a:19:d9:24:b3:e3:cc:ac: 63:06:d0:f2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJvm8E4CsP4Qlz/FEELVthMk3DZcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MTAyOFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYzkwZDI5NjgwYjIzNWZlM2IxNWFm NTk2ZWIxN2QxMjA5NjE5MGU0YzYwNzE0NzE1Y2M4ZWE4NjAxZDBiM2EyZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgLEodrvsP/HODKwJBOlDZ0Xqvs3 x267LaoASMeISHxg5vbR0ITctnF3kKxekWVfhw1nl+Df97+qHeDZ2/Q0OxpqXY7c /U4seZbFO6b0rjLrQERxts6SarCIT7ZwjgseNT+8o/Fy0bAKxxnSFuSDIRCf+M8w WeX7qP8SIGesOBjCXbIZTNTzft2gaob8yW4qhxMgGO6/9JfGJLZxIho+yms80Bhl 9vKT6kIQKcDvc2j/EL3qFzawgukMjng0EyaD177FD8zDB5OHmjZX7XYOG8sVrJtN sG43oEP56xkFNRAEtfmnIKZV2uCNERIED9Jw5IMhIXl+J4R2odmpxcacEwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAAOknOh8WUMz5xhp/Jd1hT7z7EYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQyMmIyY2M3LThjZmUtNDEyMC04M2U5LTk3MWJkOWIwM2YyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEDAMA0GCSqGSIb3DQEBCwUAA4IBAQA/+E3pqGOf54JfDQB9 Dn6MzCE6zc6srmtI24WR7/VZ9pPVAwADxY/axiMlsP8QePkTSeRu+afG+qL5jbEe /0mhdnG2g3gGyDZle50BUrCdhEwNUn9ivMorZ28hP0T/Kxp5HIcNK2Fa0DWJiZpO 9I6MQ+J3NccvUWza4e0snpNYkuclEQbBSa7lXUmYwP9D94g9al82BZZuZAc7KooC VleKfon/pkOOSPAGDV1f+zCObcKoPFxC3DVVCeSWeBzSLZK1rBMQ9wKFB2y4XAwJ Zl1qGZiiPFrRPZ10eucJYFAyTsISZjiUYAhZWK7t0pAtdG9PXcWJChnZJLPjzKxj BtDy -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:43 2025 by rpki-client on console.sobornost.net