$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/442fee67-f3d9-4889-94d4-2a3b8bb5cfac.roa File: 442fee67-f3d9-4889-94d4-2a3b8bb5cfac.roa (raw, json) Hash identifier: CqfcMba/hHpv3cV8WzUXAPOQKqlk4pEbieN22Lz4HAo= Subject key identifier: AB:5F:A5:16:ED:83:3A:D9:66:46:82:58:25:07:6F:F5:DD:88:58:43 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1509E6AFF58BC49E45C698DF4D11B6AD098680C4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/442fee67-f3d9-4889-94d4-2a3b8bb5cfac.roa Signing time: Mon 21 Apr 2025 16:00:18 +0000 ROA not before: Mon 21 Apr 2025 16:00:18 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:09:e6:af:f5:8b:c4:9e:45:c6:98:df:4d:11:b6:ad:09:86:80:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:00:18 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=d19a8b038082451e4962799d948f17eb9fdd9c22f6c780894a8e118c4b167026, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:30:cf:cc:4d:62:a8:ca:97:3f:a7:56:23:d1: 98:62:45:94:53:2f:8b:7e:00:0c:ed:a9:ce:fa:3d: 06:b8:85:cb:d4:86:b4:83:f0:66:15:84:cf:d9:fd: 7d:a5:e8:18:84:d3:15:f8:19:96:c7:de:c5:99:3a: d0:08:7e:67:5e:c5:81:15:3a:42:76:f7:57:79:30: 52:47:49:fe:17:29:8d:ad:e0:27:6f:ab:bc:74:b2: 64:06:02:68:16:5f:26:0b:e8:22:2f:de:34:31:a4: ea:16:9f:1b:1e:58:e6:ee:76:36:7a:59:10:65:fe: fc:4f:fe:d9:55:8d:19:12:fc:0f:e9:64:58:94:56: de:8c:c1:5b:09:f8:40:4a:71:57:36:0f:5e:73:2b: 68:6c:d9:05:ee:e6:38:e3:79:6b:a8:dd:bd:45:43: e2:dd:df:8e:74:33:b6:cc:c4:13:a5:f8:0c:c5:21: aa:ee:5b:dd:fa:b3:bc:63:98:36:a4:86:fd:60:77: f7:98:c6:c5:66:6c:a6:eb:58:bc:1e:b9:ff:27:84: 98:be:50:f4:02:3e:7c:27:45:df:7f:02:45:99:03: b8:0a:4f:07:2b:ce:63:80:21:8e:1d:b2:59:9b:41: 5f:eb:fb:1d:c2:82:ee:12:e9:58:43:32:ae:a9:9c: 02:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5F:A5:16:ED:83:3A:D9:66:46:82:58:25:07:6F:F5:DD:88:58:43 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/442fee67-f3d9-4889-94d4-2a3b8bb5cfac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:8800::/40 Signature Algorithm: sha256WithRSAEncryption 64:f6:07:01:83:96:7d:43:94:e7:eb:10:6d:44:bd:f7:bf:54: c9:6c:1f:5e:02:f3:24:76:ea:96:35:12:d4:81:c6:cb:c8:51: fa:6e:5a:a4:88:17:ed:8c:bb:1e:51:c9:62:b8:c4:df:dd:af: 38:d7:a3:4f:20:f3:1d:04:f3:7b:64:45:79:88:f0:2a:2b:91: 75:85:b4:4a:cc:49:d5:b5:5a:93:d4:51:ea:79:4b:9e:16:3e: 85:18:b7:1f:45:c1:db:23:de:87:b1:24:b2:af:5f:e3:94:1f: 14:03:20:92:be:7c:64:a5:4b:78:91:72:b4:55:ff:be:e3:a2: 93:5d:1c:f8:43:27:59:11:c8:28:0b:bc:aa:9c:8b:c0:5d:d9: 52:2a:00:7f:72:e5:6a:f5:43:58:cf:22:83:6f:60:cc:10:9c: 8b:54:c0:c1:06:98:f8:75:af:c7:4c:d3:98:d0:75:4a:28:c6: 64:a2:ed:b1:e2:93:e1:8c:1f:b8:78:43:a0:d5:b0:cc:69:0c: 63:a3:bd:49:61:2f:7b:26:df:33:4d:78:b4:59:e0:47:10:86: e7:b1:42:1d:30:27:ce:0b:26:f3:95:c2:2c:c3:c5:56:18:fb: 29:3a:89:87:13:4c:2b:0a:ad:bf:67:b0:5f:21:6c:b4:3a:07: cf:1b:b3:70 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFQnmr/WLxJ5FxpjfTRG2rQmGgMQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MDAxOFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAZDE5YThiMDM4MDgyNDUxZTQ5NjI3 OTlkOTQ4ZjE3ZWI5ZmRkOWMyMmY2Yzc4MDg5NGE4ZTExOGM0YjE2NzAyNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDDPzE1iqMqXP6dWI9GYYkWUUy+L fgAM7anO+j0GuIXL1Ia0g/BmFYTP2f19pegYhNMV+BmWx97FmTrQCH5nXsWBFTpC dvdXeTBSR0n+FymNreAnb6u8dLJkBgJoFl8mC+giL940MaTqFp8bHljm7nY2elkQ Zf78T/7ZVY0ZEvwP6WRYlFbejMFbCfhASnFXNg9ecytobNkF7uY443lrqN29RUPi 3d+OdDO2zMQTpfgMxSGq7lvd+rO8Y5g2pIb9YHf3mMbFZmym61i8Hrn/J4SYvlD0 Aj58J0XffwJFmQO4Ck8HK85jgCGOHbJZm0Ff6/sdwoLuEulYQzKuqZwCsQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKtfpRbtgzrZZkaCWCUHb/XdiFhDMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0MmZlZTY3LWYzZDktNDg4OS05NGQ0LTJhM2I4YmI1Y2ZhYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8YgwDQYJKoZIhvcNAQELBQADggEBAGT2BwGDln1DlOfrEG1E vfe/VMlsH14C8yR26pY1EtSBxsvIUfpuWqSIF+2Mux5RyWK4xN/drzjXo08g8x0E 83tkRXmI8CorkXWFtErMSdW1WpPUUep5S54WPoUYtx9Fwdsj3oexJLKvX+OUHxQD IJK+fGSlS3iRcrRV/77jopNdHPhDJ1kRyCgLvKqci8Bd2VIqAH9y5Wr1Q1jPIoNv YMwQnItUwMEGmPh1r8dM05jQdUooxmSi7bHik+GMH7h4Q6DVsMxpDGOjvUlhL3sm 3zNNeLRZ4EcQhuexQh0wJ84LJvOVwizDxVYY+yk6iYcTTCsKrb9nsF8hbLQ6B88b s3A= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:43 2025 by rpki-client on console.sobornost.net