$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa File: 4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa (raw, json) Hash identifier: HGKKLSKNkxdabtYa9CHjvHviwy1EsthDWp8ChCRTw9M= Subject key identifier: 69:69:8E:1A:DF:1F:C4:C2:8E:0B:C2:2F:C7:EC:81:BF:05:91:2D:BC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 108AF6B6A3A84C13CAAF243E7A3FF673E13ABC97 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa Signing time: Wed 23 Apr 2025 00:00:03 +0000 ROA not before: Wed 23 Apr 2025 00:00:03 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafa:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:8a:f6:b6:a3:a8:4c:13:ca:af:24:3e:7a:3f:f6:73:e1:3a:bc:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 23 00:00:03 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=5ff4006e79b7d3b382418c733954349d3399c1d32119b523d03ea327bb0c8e90, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:89:9d:71:aa:b3:f8:0a:5f:8b:ca:57:a8: b5:7d:9d:f5:03:f9:eb:6a:c2:6f:03:82:f4:66:22: ac:45:d1:37:78:0f:52:0e:10:66:b5:5c:3a:05:c4: 04:6a:96:9a:66:62:1f:71:e3:81:f2:6b:63:d2:5a: 33:f5:e4:24:5a:0b:95:33:00:4e:ce:b3:e8:40:45: 82:06:6b:bb:a7:d2:e2:06:24:1b:21:01:fe:a0:89: 4e:51:98:ad:5e:dc:3a:36:1f:c4:86:02:60:8a:b1: 94:b9:26:da:ca:29:38:31:3f:40:c3:35:03:62:c7: c4:00:1d:7e:fc:bd:04:11:77:75:d3:bc:b1:5b:b5: 21:34:1f:f6:58:43:47:d1:51:0f:6a:1b:fc:47:00: a5:b1:7c:a9:1a:6c:83:90:2b:8e:cb:44:86:ed:25: 4d:0e:7c:4f:8f:53:78:f1:d8:d8:3b:33:88:de:57: 80:34:33:62:e3:f6:8e:e1:82:c2:df:3c:34:cd:5e: 43:ed:e5:e5:8e:c8:60:01:86:d8:39:bb:59:f3:02: 69:02:a8:7f:6d:12:c6:e7:7c:69:60:e9:35:cb:00: 0a:b2:84:40:30:04:71:51:a9:46:85:43:78:95:ef: 80:89:d0:49:e3:98:12:47:dc:87:85:52:ac:d8:da: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:69:8E:1A:DF:1F:C4:C2:8E:0B:C2:2F:C7:EC:81:BF:05:91:2D:BC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafa:e000::/40 Signature Algorithm: sha256WithRSAEncryption 07:75:87:3b:c7:c1:18:66:21:af:40:bc:7a:fd:4c:4e:fc:fe: 96:ba:39:3e:10:06:0d:2a:3d:79:5c:f3:7d:02:e7:75:be:23: cc:33:e0:c5:c0:88:59:2c:69:39:b6:81:03:39:56:a6:e1:cf: c9:13:01:58:15:e7:52:de:65:e0:e7:06:8b:08:71:8d:b2:6a: 64:84:0a:3b:e4:d2:4e:7e:6f:6e:08:2e:b8:38:bc:fb:d7:e0: e1:b2:33:aa:9b:4c:92:2e:f5:9c:d4:72:50:fd:4c:1a:c2:3d: 46:5f:69:11:45:13:8f:ab:58:ba:e4:1f:ff:22:c2:4f:0a:ed: d8:52:6b:f7:ed:bc:eb:9f:44:e6:5d:fd:99:2f:6c:26:3c:61: c2:d3:b6:7e:ad:78:60:3b:1a:1f:9e:90:16:8e:9d:e6:96:34: a2:71:12:0d:14:e4:e8:94:65:83:cf:c3:ec:75:69:c0:0c:73: f1:d6:19:4a:c4:15:f5:69:79:fb:72:28:06:c8:0f:35:07:8e: 17:b4:df:4e:6f:3f:ed:68:c0:7c:54:df:19:13:b0:37:7b:97: 1b:e5:e4:8a:d2:03:39:03:12:f8:00:c2:69:29:c6:d9:b7:7f: c0:c7:dc:83:60:fb:14:48:cd:e7:f5:66:20:f2:b4:25:ea:55: 60:49:69:33 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEIr2tqOoTBPKryQ+ej/2c+E6vJcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMzAwMDAwM1oX DTI1MDUyODIzNTk1OVowejFJMEcGA1UEBRNANWZmNDAwNmU3OWI3ZDNiMzgyNDE4 YzczMzk1NDM0OWQzMzk5YzFkMzIxMTliNTIzZDAzZWEzMjdiYjBjOGU5MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAeJnXGqs/gKX4vKV6i1fZ31A/nr asJvA4L0ZiKsRdE3eA9SDhBmtVw6BcQEapaaZmIfceOB8mtj0loz9eQkWguVMwBO zrPoQEWCBmu7p9LiBiQbIQH+oIlOUZitXtw6Nh/EhgJgirGUuSbayik4MT9AwzUD YsfEAB1+/L0EEXd107yxW7UhNB/2WENH0VEPahv8RwClsXypGmyDkCuOy0SG7SVN DnxPj1N48djYOzOI3leANDNi4/aO4YLC3zw0zV5D7eXljshgAYbYObtZ8wJpAqh/ bRLG53xpYOk1ywAKsoRAMARxUalGhUN4le+AidBJ45gSR9yHhVKs2NqmQwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGlpjhrfH8TCjgvCL8fsgb8FkS28MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRiN2JlYzhiLTZkNmEtNGYwNS04MjYxLWUwNmQ5ZjNkMmRiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+uAwDQYJKoZIhvcNAQELBQADggEBAAd1hzvHwRhmIa9AvHr9 TE78/pa6OT4QBg0qPXlc830C53W+I8wz4MXAiFksaTm2gQM5Vqbhz8kTAVgV51Le ZeDnBosIcY2yamSECjvk0k5+b24ILrg4vPvX4OGyM6qbTJIu9ZzUclD9TBrCPUZf aRFFE4+rWLrkH/8iwk8K7dhSa/ftvOufROZd/ZkvbCY8YcLTtn6teGA7Gh+ekBaO neaWNKJxEg0U5OiUZYPPw+x1acAMc/HWGUrEFfVpeftyKAbIDzUHjhe0305vP+1o wHxU3xkTsDd7lxvl5IrSAzkDEvgAwmkpxtm3f8DH3INg+xRIzef1ZiDytCXqVWBJ aTM= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:44 2025 by rpki-client on console.sobornost.net