$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f566d19-ce73-40fd-941c-356b2337d320.roa File: 4f566d19-ce73-40fd-941c-356b2337d320.roa (raw, json) Hash identifier: +se5QFml0+4fdD2jQ8Lq/KimjFdDrmfkOxltyxQB2Kg= Subject key identifier: 2F:A9:21:1D:B9:D5:B7:C0:12:9A:B9:6C:CC:03:C8:44:61:D1:5E:E5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 388A83A014BAEF15E61622D4F35D90DDF08B6E2B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f566d19-ce73-40fd-941c-356b2337d320.roa Signing time: Sat 19 Apr 2025 00:01:42 +0000 ROA not before: Sat 19 Apr 2025 00:01:42 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8a:83:a0:14:ba:ef:15:e6:16:22:d4:f3:5d:90:dd:f0:8b:6e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:01:42 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=3d23d4ba9a06a509e7af89888ceb23dec7480f625e2dee83e04e089aac7e048d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8f:4e:0f:9e:a4:72:af:6e:f1:7c:f6:cb:1c: 73:f0:61:c4:6a:3e:c3:bc:59:d9:fe:4e:4f:28:bf: 36:3d:19:12:ba:1f:8d:19:95:10:4c:e8:51:75:08: 9a:4f:ac:d4:3e:05:dc:4d:6e:86:9b:84:52:a0:37: 39:45:d7:d2:81:c2:53:92:2f:df:e1:bf:0c:fe:82: ff:3f:fd:56:f9:d4:18:5e:d0:99:24:3c:d7:c6:e6: b5:ae:60:b9:ef:de:93:eb:74:26:f2:d3:98:68:9a: 4f:97:a0:c0:37:f4:7c:28:0f:88:58:fe:fb:ed:4b: d1:50:59:69:bb:2d:c3:24:a0:f0:ad:76:90:a5:80: 0b:50:69:0c:56:9e:24:9a:f2:06:b5:0e:98:a6:12: 0d:3c:13:68:4b:f0:c6:22:8a:37:1b:31:49:5d:7c: 8d:2d:a3:b0:b4:80:0f:5e:5b:15:9b:79:44:42:5d: 7c:de:f2:65:16:6f:dc:7e:c6:00:2e:d7:4e:bb:e5: d7:2d:6c:14:de:7d:f3:c6:79:b5:f8:5b:af:2a:5e: d8:91:2d:96:7e:ab:bd:28:7c:e6:36:d4:44:ca:34: d4:91:80:0d:21:f8:94:40:9e:4f:2b:ba:b9:54:5b: 4a:4f:ee:16:d4:3f:ca:65:57:01:26:0a:1d:4c:18: ce:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A9:21:1D:B9:D5:B7:C0:12:9A:B9:6C:CC:03:C8:44:61:D1:5E:E5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f566d19-ce73-40fd-941c-356b2337d320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:8840::/48 Signature Algorithm: sha256WithRSAEncryption 7f:ca:a5:d0:06:83:1e:3c:7b:6e:78:e4:4e:6d:37:cb:25:56: 3a:8d:c7:78:7b:41:41:36:a8:95:42:dc:4e:7d:2e:f2:9b:df: 90:eb:b1:58:30:ba:04:53:cd:9e:1f:5f:d8:10:6f:28:1f:0a: d3:f1:2a:fd:61:91:ad:56:d9:6f:ec:da:a8:a6:f8:01:d9:6c: 18:46:d0:b9:63:7a:e1:9c:3c:0d:49:55:b1:39:f8:77:84:9a: b5:d3:f6:2c:6f:69:2c:82:57:28:d8:1c:e2:cd:88:24:f5:43: 2b:c7:0f:d7:ca:70:3f:dd:69:f7:b5:a7:9d:08:96:ee:5d:66: 32:34:15:da:95:88:bb:b6:f2:83:cd:4c:b7:11:70:b3:a8:99: e1:34:80:72:79:4f:1a:b7:5b:c1:75:ca:6e:e6:fb:f1:42:e7: 50:5f:f5:f1:36:7c:ec:41:4d:c5:73:6b:29:aa:a6:1c:e3:93: 12:6a:55:3f:6a:03:3e:76:e1:6a:4e:13:71:07:d7:08:28:9c: cc:4c:4a:28:55:71:b4:0d:b1:1d:1e:ce:0a:0e:65:0c:a1:ac: 7d:9b:bb:b0:12:fe:7d:e1:ca:50:9a:d7:ad:11:ee:86:fa:e6: 48:d2:70:fe:6f:1f:cc:ca:69:af:b3:14:77:f1:73:8b:49:0d: 7b:c5:06:4f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOIqDoBS67xXmFiLU812Q3fCLbiswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMDE0MloX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAM2QyM2Q0YmE5YTA2YTUwOWU3YWY4 OTg4OGNlYjIzZGVjNzQ4MGY2MjVlMmRlZTgzZTA0ZTA4OWFhYzdlMDQ4ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk49OD56kcq9u8Xz2yxxz8GHEaj7D vFnZ/k5PKL82PRkSuh+NGZUQTOhRdQiaT6zUPgXcTW6Gm4RSoDc5RdfSgcJTki/f 4b8M/oL/P/1W+dQYXtCZJDzXxua1rmC5796T63Qm8tOYaJpPl6DAN/R8KA+IWP77 7UvRUFlpuy3DJKDwrXaQpYALUGkMVp4kmvIGtQ6YphINPBNoS/DGIoo3GzFJXXyN LaOwtIAPXlsVm3lEQl183vJlFm/cfsYALtdOu+XXLWwU3n3zxnm1+FuvKl7YkS2W fqu9KHzmNtREyjTUkYANIfiUQJ5PK7q5VFtKT+4W1D/KZVcBJgodTBjOyQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFC+pIR251bfAEpq5bMwDyERh0V7lMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmNTY2ZDE5LWNlNzMtNDBmZC05NDFjLTM1NmIyMzM3ZDMyMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9IhAMA0GCSqGSIb3DQEBCwUAA4IBAQB/yqXQBoMePHtueORO bTfLJVY6jcd4e0FBNqiVQtxOfS7ym9+Q67FYMLoEU82eH1/YEG8oHwrT8Sr9YZGt Vtlv7NqopvgB2WwYRtC5Y3rhnDwNSVWxOfh3hJq10/Ysb2ksglco2BzizYgk9UMr xw/XynA/3Wn3taedCJbuXWYyNBXalYi7tvKDzUy3EXCzqJnhNIByeU8at1vBdcpu 5vvxQudQX/XxNnzsQU3Fc2spqqYc45MSalU/agM+duFqThNxB9cIKJzMTEooVXG0 DbEdHs4KDmUMoax9m7uwEv594cpQmtetEe6G+uZI0nD+bx/MymmvsxR38XOLSQ17 xQZP -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:44 2025 by rpki-client on console.sobornost.net