$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44659a2f-b700-46f9-96cd-a4f62edfbf44.roa File: 44659a2f-b700-46f9-96cd-a4f62edfbf44.roa (raw, json) Hash identifier: e3jWwIaqqQk3lrop/jcTKi/qnaUztq2ClFXlqAlQhas= Subject key identifier: 77:8F:DF:D2:A6:30:23:6F:90:04:D7:7D:E1:64:3B:E3:F8:D8:61:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5B79AD76CA625BE9BA77736694A9D39F826B3B56 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44659a2f-b700-46f9-96cd-a4f62edfbf44.roa Signing time: Mon 21 Apr 2025 15:12:06 +0000 ROA not before: Mon 21 Apr 2025 15:12:06 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:79:ad:76:ca:62:5b:e9:ba:77:73:66:94:a9:d3:9f:82:6b:3b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:12:06 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=ae0fff9daa0aa0c1cd84eeb6999ee219db2ee0237628063b5f3b25ef8c3bab73, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:8a:cb:9f:09:1a:9d:60:e3:65:25:59:50: 7b:37:70:56:5c:f5:9b:7d:4d:5d:35:50:7c:22:79: 12:7e:25:3d:88:6f:04:18:c5:5f:f8:b2:4d:df:c6: 24:81:4d:6b:dc:02:1e:a1:17:a6:48:41:1f:4e:8f: 09:94:37:ec:ce:10:82:d2:83:7e:16:79:8b:b1:dc: 87:90:d4:06:65:05:98:a4:5f:1b:47:d4:30:b3:46: 76:18:76:15:34:58:a4:6c:72:23:d7:a5:89:d6:55: a5:f5:d3:32:c6:16:07:c3:7c:14:19:6f:3b:c2:57: a9:13:17:a5:4c:de:7c:0b:14:84:7d:22:22:08:f3: 91:99:f9:01:97:19:13:76:66:ac:b5:eb:c6:f7:93: be:33:1b:61:24:63:4c:5f:9b:a9:89:ac:0d:10:01: a9:34:10:89:81:ca:1a:83:6a:eb:a4:e7:c2:0e:25: ac:bd:c4:47:1c:c1:ec:5f:8b:d0:81:b0:e7:a2:8f: af:cc:12:3c:47:06:5f:98:c0:27:64:6c:86:ca:1a: 3f:56:71:bb:43:5d:2c:b7:45:65:68:d3:73:ee:44: 3b:ca:17:94:7f:44:30:8e:e7:45:67:a1:f5:b5:90: 5a:c2:5c:1b:7a:ff:f5:6a:b6:ec:fa:bf:55:8b:3b: d7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8F:DF:D2:A6:30:23:6F:90:04:D7:7D:E1:64:3B:E3:F8:D8:61:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44659a2f-b700-46f9-96cd-a4f62edfbf44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4000::/40 Signature Algorithm: sha256WithRSAEncryption c2:96:27:99:eb:c1:90:b0:b4:db:1d:f9:71:cb:73:05:4e:27: 6d:a8:07:16:a2:1c:77:7f:a3:4f:56:d2:c4:f3:94:af:61:58: a6:0f:b4:dd:80:e8:05:79:6a:27:49:b4:a3:82:2f:22:f7:b1: bd:52:14:62:f7:a7:95:20:25:49:44:8c:36:d0:79:d5:81:3e: f8:df:4d:a7:34:fa:42:9d:48:15:2c:e1:b1:b0:ef:6f:e5:31: 8b:2f:7b:01:47:67:0a:f8:ee:f7:e3:72:f9:ed:3f:91:91:3c: 94:9b:0f:9c:0a:14:42:bf:5c:3d:2f:e7:ff:95:ed:29:dd:4f: 5d:9b:82:88:7c:47:cf:14:1b:ed:e3:62:79:2f:6f:0f:3e:89: 99:f4:d6:9e:76:fc:71:71:b4:3a:ba:54:23:e8:ba:bc:e7:9a: bd:62:4f:e9:37:d7:27:63:86:c4:0c:90:ea:18:85:d8:c8:12: a3:b3:14:6c:59:3c:fb:e3:c0:a0:d4:01:46:4d:f6:b8:9d:20: ce:89:53:40:e7:56:f4:62:80:55:6a:3d:70:86:d4:70:a0:21: ee:5b:2c:7a:a9:5a:c3:a0:5a:b6:dc:d5:94:2a:78:72:9a:c1: 5b:df:66:0c:2e:28:21:41:72:57:b0:0b:49:f1:6c:a0:6f:de: c6:d6:73:bb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUW3mtdspiW+m6d3NmlKnTn4JrO1YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MTIwNloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYWUwZmZmOWRhYTBhYTBjMWNkODRl ZWI2OTk5ZWUyMTlkYjJlZTAyMzc2MjgwNjNiNWYzYjI1ZWY4YzNiYWI3MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI2Ky58JGp1g42UlWVB7N3BWXPWb fU1dNVB8InkSfiU9iG8EGMVf+LJN38YkgU1r3AIeoRemSEEfTo8JlDfszhCC0oN+ FnmLsdyHkNQGZQWYpF8bR9Qws0Z2GHYVNFikbHIj16WJ1lWl9dMyxhYHw3wUGW87 wlepExelTN58CxSEfSIiCPORmfkBlxkTdmastevG95O+MxthJGNMX5upiawNEAGp NBCJgcoag2rrpOfCDiWsvcRHHMHsX4vQgbDnoo+vzBI8RwZfmMAnZGyGyho/VnG7 Q10st0VlaNNz7kQ7yheUf0QwjudFZ6H1tZBawlwbev/1arbs+r9VizvXjwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHeP39KmMCNvkATXfeFkO+P42GEBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0NjU5YTJmLWI3MDAtNDZmOS05NmNkLWE0ZjYyZWRmYmY0NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/0AwDQYJKoZIhvcNAQELBQADggEBAMKWJ5nrwZCwtNsd+XHL cwVOJ22oBxaiHHd/o09W0sTzlK9hWKYPtN2A6AV5aidJtKOCLyL3sb1SFGL3p5Ug JUlEjDbQedWBPvjfTac0+kKdSBUs4bGw72/lMYsvewFHZwr47vfjcvntP5GRPJSb D5wKFEK/XD0v5/+V7SndT12bgoh8R88UG+3jYnkvbw8+iZn01p52/HFxtDq6VCPo urznmr1iT+k31ydjhsQMkOoYhdjIEqOzFGxZPPvjwKDUAUZN9ridIM6JU0DnVvRi gFVqPXCG1HCgIe5bLHqpWsOgWrbc1ZQqeHKawVvfZgwuKCFBclewC0nxbKBv3sbW c7s= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:43 2025 by rpki-client on console.sobornost.net