$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/481fbcde-76c6-49f7-8633-8b13537bb9b4.roa File: 481fbcde-76c6-49f7-8633-8b13537bb9b4.roa (raw, json) Hash identifier: URRiIuEOOOW11aUYJXIYNAB01RFxNY/5lN47SFv13Dg= Subject key identifier: AD:82:61:FD:44:44:19:1C:01:EC:AC:E9:42:25:17:03:A9:A4:A8:A6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6F3771CF3FA585C0982568DEEF96068609580604 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/481fbcde-76c6-49f7-8633-8b13537bb9b4.roa Signing time: Mon 21 Apr 2025 15:41:17 +0000 ROA not before: Mon 21 Apr 2025 15:41:17 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:4040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:37:71:cf:3f:a5:85:c0:98:25:68:de:ef:96:06:86:09:58:06:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:41:17 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=8ed6bb3a0a64002b92f8e0f1ca8324d5658b6baaa818b7890088f467029714fa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:c3:ff:d0:ea:bf:83:c6:2b:36:48:cb:1d: 46:07:0e:ed:6c:80:5a:00:61:90:fa:93:9a:26:26: 90:81:60:8e:50:5f:4d:72:a2:45:7b:91:22:b3:86: e4:56:54:1d:67:f4:f7:7e:a2:4e:33:d5:7b:6d:8a: 0f:bf:39:e9:69:7b:0a:f6:5f:08:b8:7d:0f:27:d5: 7d:34:4f:15:16:41:a6:58:26:22:2f:77:9e:3c:23: a2:f5:18:8a:ec:d1:9e:1b:e8:e5:4e:18:18:c5:fa: bd:ad:ae:b4:66:11:fc:9d:98:d4:35:79:1e:ee:56: ee:54:97:c3:35:da:6c:b3:b7:4d:f5:8a:8f:66:cf: 89:7e:88:dd:29:89:27:68:28:ad:71:8e:2c:05:c3: 71:f4:5c:45:c6:1d:25:8c:f6:47:4a:66:b3:47:4a: 8e:e6:63:62:c2:ae:56:da:9d:a7:03:79:44:2b:15: 8f:10:e4:ff:1a:84:e4:0b:c1:30:58:01:e2:45:bd: 7e:a0:c3:05:6a:62:79:c1:71:a1:50:e9:e2:d3:98: 61:e8:f9:c0:df:7c:cb:28:29:85:69:9d:95:44:bc: 9b:00:dd:af:61:91:82:c6:cb:34:07:92:c4:34:c4: 45:94:04:3b:3e:e9:81:16:ed:6e:34:a4:45:33:96: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:82:61:FD:44:44:19:1C:01:EC:AC:E9:42:25:17:03:A9:A4:A8:A6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/481fbcde-76c6-49f7-8633-8b13537bb9b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:4040::/46 Signature Algorithm: sha256WithRSAEncryption 97:f4:59:2c:d7:59:64:e8:ad:6f:66:91:b6:fb:61:e3:97:06: 12:e6:be:01:85:72:a0:e6:c1:2c:d3:48:c5:d2:12:cb:82:a3: ef:c5:7b:77:85:bb:36:64:14:a3:48:df:10:32:67:62:01:f3: 29:a7:d6:29:f6:3c:26:86:df:1a:3f:17:5b:5d:f6:5a:a3:a5: 01:dd:31:45:2b:33:02:be:dc:a1:0f:5d:a7:64:40:15:cf:63: 42:7a:9b:35:f1:0c:5a:3b:95:1d:ea:b9:ff:96:3c:c3:b8:40: 5c:46:84:01:04:27:a7:d6:47:7f:be:4d:6d:35:3d:52:9d:04: fb:02:b4:14:26:68:39:92:1c:a1:97:45:a5:2c:9f:4d:fa:5c: a1:a5:cf:0b:db:06:d4:e6:b1:f8:53:ce:03:91:0d:12:37:5d: 83:f7:5a:5b:3a:c1:6d:3c:c8:be:42:30:b5:b9:76:48:3c:b5: 7d:c9:f7:ce:c3:34:81:ba:bf:c3:9c:e8:67:90:a2:95:30:4e: 3f:49:e0:c0:40:8f:a1:44:e3:79:68:66:53:4b:32:5b:76:54: 90:82:39:06:b3:01:b1:a8:09:da:db:94:e8:a5:18:39:ae:ca: db:f5:80:36:f9:65:fb:05:7d:aa:cd:b6:85:e6:f7:e4:7f:40: 0a:5f:1a:9a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbzdxzz+lhcCYJWje75YGhglYBgQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NDExN1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAOGVkNmJiM2EwYTY0MDAyYjkyZjhl MGYxY2E4MzI0ZDU2NThiNmJhYWE4MThiNzg5MDA4OGY0NjcwMjk3MTRmYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCPD/9Dqv4PGKzZIyx1GBw7tbIBa AGGQ+pOaJiaQgWCOUF9NcqJFe5Eis4bkVlQdZ/T3fqJOM9V7bYoPvznpaXsK9l8I uH0PJ9V9NE8VFkGmWCYiL3eePCOi9RiK7NGeG+jlThgYxfq9ra60ZhH8nZjUNXke 7lbuVJfDNdpss7dN9YqPZs+JfojdKYknaCitcY4sBcNx9FxFxh0ljPZHSmazR0qO 5mNiwq5W2p2nA3lEKxWPEOT/GoTkC8EwWAHiRb1+oMMFamJ5wXGhUOni05hh6PnA 33zLKCmFaZ2VRLybAN2vYZGCxss0B5LENMRFlAQ7PumBFu1uNKRFM5aXbQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFK2CYf1ERBkcAeys6UIlFwOppKimMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ4MWZiY2RlLTc2YzYtNDlmNy04NjMzLThiMTM1MzdiYjliNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaUBAMA0GCSqGSIb3DQEBCwUAA4IBAQCX9Fks11lk6K1vZpG2 +2HjlwYS5r4BhXKg5sEs00jF0hLLgqPvxXt3hbs2ZBSjSN8QMmdiAfMpp9Yp9jwm ht8aPxdbXfZao6UB3TFFKzMCvtyhD12nZEAVz2NCeps18QxaO5Ud6rn/ljzDuEBc RoQBBCen1kd/vk1tNT1SnQT7ArQUJmg5khyhl0WlLJ9N+lyhpc8L2wbU5rH4U84D kQ0SN12D91pbOsFtPMi+QjC1uXZIPLV9yffOwzSBur/DnOhnkKKVME4/SeDAQI+h RON5aGZTSzJbdlSQgjkGswGxqAna25TopRg5rsrb9YA2+WX7BX2qzbaF5vfkf0AK Xxqa -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:44 2025 by rpki-client on console.sobornost.net