$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43f142a4-ac6c-46ed-a6c9-21998974ec83.roa File: 43f142a4-ac6c-46ed-a6c9-21998974ec83.roa (raw, json) Hash identifier: wxHLeh3wtmuAEV3+7DvKCS0HPadcNydPOmQBDuzqQDg= Subject key identifier: E3:FF:0F:8D:FF:1A:7A:B6:7F:11:BE:98:1B:17:17:6C:05:6F:28:A5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3D8C6F15C2D852C26EC428EA5C4B16F1910FACEF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43f142a4-ac6c-46ed-a6c9-21998974ec83.roa Signing time: Mon 21 Apr 2025 16:01:06 +0000 ROA not before: Mon 21 Apr 2025 16:01:06 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:c080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:8c:6f:15:c2:d8:52:c2:6e:c4:28:ea:5c:4b:16:f1:91:0f:ac:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:01:06 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=a33288727ab814d7a46107d5c2c3c340b1c30dc845a661be56c9d888fba0b040, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b1:1b:f0:7a:34:51:2c:f0:e5:17:b6:d2:92: 1c:6d:6a:ff:fc:c0:f2:f4:a3:5d:63:b6:5b:65:e3: 97:1c:6d:bc:df:46:70:74:fd:e5:c8:98:95:04:57: 4f:72:b7:fe:90:29:9a:98:5d:ba:fe:29:67:b7:43: c3:f2:7f:b9:0c:1a:f6:1a:d2:6c:6e:31:5b:0a:d1: 4e:e4:c6:c3:b9:1d:90:6e:e3:ef:b3:8e:7b:0c:81: 66:9e:40:c2:46:a1:8d:bc:06:64:b6:e8:21:9c:90: d4:6c:1c:fe:87:4d:cc:a3:d6:e4:c8:e0:16:67:23: a3:d9:02:f8:9d:74:2a:54:a7:46:b3:1a:05:1a:8d: 22:08:25:00:a1:18:d3:f7:cf:21:f7:3e:a9:ca:76: 7d:dc:31:dc:fd:ab:7e:b6:c7:87:47:51:c1:fb:69: 53:16:10:39:8c:24:db:47:75:24:59:eb:9d:41:a2: 19:44:00:0c:ec:8b:1f:3d:d7:5a:b7:bd:c2:82:15: c3:ec:05:dc:b4:ea:6d:36:fd:4d:aa:ef:1e:64:f0: 8e:a2:e9:86:c7:ce:e8:cc:23:39:f1:ec:4c:59:4a: f1:e2:90:e3:6f:c2:0b:63:b5:cb:8b:9f:20:ff:a9: 03:96:28:d3:2b:2f:80:6a:e4:5e:c5:98:84:d5:c3: c6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FF:0F:8D:FF:1A:7A:B6:7F:11:BE:98:1B:17:17:6C:05:6F:28:A5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43f142a4-ac6c-46ed-a6c9-21998974ec83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:c080::/46 Signature Algorithm: sha256WithRSAEncryption 4d:fa:f9:2b:90:ed:49:17:75:e0:28:68:da:09:0b:61:03:a7: 6f:a6:98:1f:35:b1:a8:72:af:e2:af:1a:5a:3d:90:d3:6e:63: 17:d1:72:53:17:cb:27:ad:9c:ab:f1:b8:53:3f:ff:7b:9c:77: 7e:b9:31:3f:f1:0f:58:db:17:dc:86:77:db:93:e1:ae:d3:05: 66:d4:2a:c0:b2:ee:aa:29:89:f6:e1:ea:30:1d:94:18:fd:ca: ef:ee:8f:28:2a:a1:9d:85:e1:91:78:ac:af:4b:47:b3:e3:ee: 8e:3c:e6:a9:f2:88:d3:c1:c8:3a:31:e1:91:0e:db:73:09:43: 7d:ff:08:2c:82:6c:63:f4:e8:02:b8:08:52:a5:ae:ef:25:e3: 8e:b6:f3:95:e6:8a:9b:2f:ba:94:a7:e2:2e:10:91:0e:c5:41: 3a:ba:16:46:63:c1:08:6f:14:1b:2c:20:5e:62:64:7a:0d:e3: 15:6e:84:7a:f8:ac:2b:08:79:83:fa:2d:2f:87:f7:e6:3c:a4: 20:ab:42:9f:a0:8c:a6:8e:3b:82:cb:3f:8c:ef:f7:47:74:29: 91:bb:55:ed:fb:77:4b:e3:67:2a:07:a7:06:59:de:35:2d:53: a5:63:ff:91:dd:25:b3:ab:4f:61:f3:cc:1e:33:e6:c3:ab:c8: d1:f3:28:1e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPYxvFcLYUsJuxCjqXEsW8ZEPrO8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MDEwNloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYTMzMjg4NzI3YWI4MTRkN2E0NjEw N2Q1YzJjM2MzNDBiMWMzMGRjODQ1YTY2MWJlNTZjOWQ4ODhmYmEwYjA0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bEb8Ho0USzw5Re20pIcbWr//MDy 9KNdY7ZbZeOXHG2830ZwdP3lyJiVBFdPcrf+kCmamF26/ilnt0PD8n+5DBr2GtJs bjFbCtFO5MbDuR2QbuPvs457DIFmnkDCRqGNvAZktughnJDUbBz+h03Mo9bkyOAW ZyOj2QL4nXQqVKdGsxoFGo0iCCUAoRjT988h9z6pynZ93DHc/at+tseHR1HB+2lT FhA5jCTbR3UkWeudQaIZRAAM7IsfPddat73CghXD7AXctOptNv1Nqu8eZPCOoumG x87ozCM58exMWUrx4pDjb8ILY7XLi58g/6kDlijTKy+AauRexZiE1cPG9wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOP/D43/Gnq2fxG+mBsXF2wFbyilMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzZjE0MmE0LWFjNmMtNDZlZC1hNmM5LTIxOTk4OTc0ZWM4My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaacCAMA0GCSqGSIb3DQEBCwUAA4IBAQBN+vkrkO1JF3XgKGja CQthA6dvppgfNbGocq/irxpaPZDTbmMX0XJTF8snrZyr8bhTP/97nHd+uTE/8Q9Y 2xfchnfbk+Gu0wVm1CrAsu6qKYn24eowHZQY/crv7o8oKqGdheGReKyvS0ez4+6O POap8ojTwcg6MeGRDttzCUN9/wgsgmxj9OgCuAhSpa7vJeOOtvOV5oqbL7qUp+Iu EJEOxUE6uhZGY8EIbxQbLCBeYmR6DeMVboR6+KwrCHmD+i0vh/fmPKQgq0KfoIym jjuCyz+M7/dHdCmRu1Xt+3dL42cqB6cGWd41LVOlY/+R3SWzq09h88weM+bDq8jR 8yge -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:43 2025 by rpki-client on console.sobornost.net