$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48008c21-51fe-4426-86e9-7a9a136e90da.roa File: 48008c21-51fe-4426-86e9-7a9a136e90da.roa (raw, json) Hash identifier: WNjOMHY/NuuvxgKNCd3hj1TfkBdcokyEWE1RBgyzy6c= Subject key identifier: 1A:1F:C8:20:80:15:03:DD:14:E8:95:2D:77:37:83:84:AC:DB:29:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0F057F730ED4395F6C89BA862CF12761D6C76241 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48008c21-51fe-4426-86e9-7a9a136e90da.roa Signing time: Fri 18 Apr 2025 00:00:42 +0000 ROA not before: Fri 18 Apr 2025 00:00:42 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:6060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:05:7f:73:0e:d4:39:5f:6c:89:ba:86:2c:f1:27:61:d6:c7:62:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 18 00:00:42 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=68adcfd182cdae691eb33a28def4b5057e89823d3a9b8682c170054fadd4f3d7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:22:8b:3c:2a:c2:3b:5d:ce:c2:40:de:9f:40: c1:b9:19:5b:7d:40:f3:37:d6:9f:b8:9c:a7:f4:3d: c8:09:c9:1d:94:b9:d3:cc:be:bc:57:ba:ef:c2:fc: 3e:c7:e0:9c:ab:ad:0e:11:1b:b1:29:6d:f5:db:91: 30:d1:67:5c:b2:49:32:87:8b:07:3a:29:59:4c:91: be:fe:3e:37:80:29:90:57:15:44:57:89:33:99:71: 59:d5:24:88:3d:ab:1c:e1:4f:3d:47:75:ef:40:a1: 09:9d:1a:e5:fd:f2:9a:7c:e8:fd:94:80:1b:86:10: 65:52:82:8a:b5:00:d7:6c:fb:34:cc:a3:dd:bd:1c: b1:6e:f6:81:d5:7f:ff:3a:2b:1f:71:c0:53:df:b5: e5:fd:8c:6a:2b:68:66:6f:5a:34:51:3b:59:9e:6d: 29:a7:1d:2f:85:a5:71:55:b5:ec:c1:61:24:e4:7e: 2e:2f:61:09:93:3f:a9:99:06:2f:38:55:cb:fd:37: a3:a8:be:bb:7e:d6:37:b7:8a:c5:c7:8f:c0:ed:66: 0e:f4:10:66:8a:5f:f4:d2:e0:52:7f:b7:35:a5:3a: d6:58:54:d2:74:36:8e:6f:59:c6:f8:0a:8f:65:ed: c4:7a:59:b6:53:ff:84:cc:bb:67:2f:51:25:70:6f: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1F:C8:20:80:15:03:DD:14:E8:95:2D:77:37:83:84:AC:DB:29:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48008c21-51fe-4426-86e9-7a9a136e90da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:6060::/48 Signature Algorithm: sha256WithRSAEncryption 00:e0:ee:f6:36:d3:60:69:44:e6:90:11:9c:7d:0d:ae:a5:8b: 25:32:e3:7f:db:14:75:19:63:da:af:9f:c5:28:13:a9:dd:95: 38:7e:59:35:14:df:b1:e5:5b:6f:1e:25:0c:fe:ad:28:e7:57: f6:43:9b:5d:09:ef:3d:6a:46:d1:64:0f:48:7f:11:f9:45:4c: 9f:37:39:f6:32:1d:1e:1e:69:a0:22:60:a8:c1:b9:8d:a4:5c: 29:79:60:85:db:ce:1f:99:66:ca:8a:c9:6e:14:fa:99:c6:52: 53:cc:85:91:a6:29:fd:f7:67:da:1d:92:c9:86:6f:12:b4:86: 03:8e:28:1d:52:c2:1d:94:1d:98:1c:bd:e6:a0:ed:be:10:91: c6:42:21:f5:ed:f3:4f:9c:79:97:96:f5:8c:96:35:22:70:cb: 83:19:89:97:db:11:32:b2:40:5b:23:4b:39:e5:fc:8a:cf:7e: 02:be:74:d2:3a:57:f2:de:a7:ea:4e:f5:20:4d:eb:bf:2e:8e: d2:78:84:62:05:dd:3b:96:88:0c:09:f0:87:ac:83:ba:46:33: cc:98:d1:f6:35:d8:f2:ed:66:87:96:6b:78:31:86:d7:b5:46: 23:36:80:d7:f5:ed:6c:fe:bd:a0:b1:d9:f9:7f:4f:8a:3c:bd: 76:62:3a:c9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDwV/cw7UOV9sibqGLPEnYdbHYkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxODAwMDA0MloX DTI1MDUyMzIzNTk1OVowejFJMEcGA1UEBRNANjhhZGNmZDE4MmNkYWU2OTFlYjMz YTI4ZGVmNGI1MDU3ZTg5ODIzZDNhOWI4NjgyYzE3MDA1NGZhZGQ0ZjNkNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSKLPCrCO13OwkDen0DBuRlbfUDz N9afuJyn9D3ICckdlLnTzL68V7rvwvw+x+Ccq60OERuxKW3125Ew0Wdcskkyh4sH OilZTJG+/j43gCmQVxVEV4kzmXFZ1SSIPasc4U89R3XvQKEJnRrl/fKafOj9lIAb hhBlUoKKtQDXbPs0zKPdvRyxbvaB1X//OisfccBT37Xl/YxqK2hmb1o0UTtZnm0p px0vhaVxVbXswWEk5H4uL2EJkz+pmQYvOFXL/TejqL67ftY3t4rFx4/A7WYO9BBm il/00uBSf7c1pTrWWFTSdDaOb1nG+AqPZe3Eelm2U/+EzLtnL1ElcG9BDQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBofyCCAFQPdFOiVLXc3g4Ss2ynlMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ4MDA4YzIxLTUxZmUtNDQyNi04NmU5LTdhOWExMzZlOTBkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/2BgMA0GCSqGSIb3DQEBCwUAA4IBAQAA4O72NtNgaUTmkBGc fQ2upYslMuN/2xR1GWPar5/FKBOp3ZU4flk1FN+x5VtvHiUM/q0o51f2Q5tdCe89 akbRZA9IfxH5RUyfNzn2Mh0eHmmgImCowbmNpFwpeWCF284fmWbKisluFPqZxlJT zIWRpin992faHZLJhm8StIYDjigdUsIdlB2YHL3moO2+EJHGQiH17fNPnHmXlvWM ljUicMuDGYmX2xEyskBbI0s55fyKz34CvnTSOlfy3qfqTvUgTeu/Lo7SeIRiBd07 logMCfCHrIO6RjPMmNH2Ndjy7WaHlmt4MYbXtUYjNoDX9e1s/r2gsdn5f0+KPL12 YjrJ -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:44 2025 by rpki-client on console.sobornost.net