$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51a41624-b980-452b-a6a9-1f823c83f82a.roa File: 51a41624-b980-452b-a6a9-1f823c83f82a.roa (raw, json) Hash identifier: QO6zVJNKCb1c2cme/egc/zH3duE1aQ9tjI3z2CmdmcU= Subject key identifier: 14:4B:BC:D9:4F:80:22:89:C0:41:8A:FD:13:6C:5D:1D:1B:A3:0E:2C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 19EB62CC10AD18EF5770DEA4E3403F82C3ED5D2D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51a41624-b980-452b-a6a9-1f823c83f82a.roa Signing time: Mon 21 Apr 2025 15:01:15 +0000 ROA not before: Mon 21 Apr 2025 15:01:15 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:eb:62:cc:10:ad:18:ef:57:70:de:a4:e3:40:3f:82:c3:ed:5d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:01:15 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=cc1738ad3280e45a99cc909345e43537c110574aa4dc08bae03ea36634e650b4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:90:12:78:5a:2f:03:55:10:91:ea:04:f7:21: 4f:c1:4c:b9:80:df:52:b8:ba:3b:3b:05:76:8e:33: e3:9c:a9:e0:42:75:02:a7:98:85:84:ae:29:27:b0: c7:79:d3:1b:df:ee:47:31:d2:f3:01:3a:10:d7:30: bb:5b:b3:11:84:9f:d0:e6:2d:1a:07:38:ea:dd:65: d4:5d:4c:db:18:92:5a:9a:ac:e8:45:d2:25:51:97: 3c:9e:67:2f:8d:03:3d:ef:43:8c:d1:d0:88:ac:52: 29:bd:6b:70:05:ad:2f:51:db:47:b0:79:49:53:0e: 3b:fb:8b:69:dd:87:2b:e2:d0:bf:57:03:9f:c1:94: ef:b6:21:c5:fd:5e:2e:05:2b:c8:cb:1b:d2:71:ca: d4:09:2b:0b:e6:9d:25:63:29:94:8f:4b:80:0a:a3: ae:1a:c7:14:9d:62:7d:ac:97:32:fb:51:4c:44:f5: 94:ee:5f:63:c0:f4:b5:2b:45:b4:7b:49:6d:00:37: 20:c7:cb:ae:5b:c0:d3:8e:17:e0:a7:09:b1:6b:82: 78:1c:2c:61:f5:d9:d7:c8:79:6c:48:f3:c1:bf:e4: 77:bb:58:5f:86:50:58:b5:36:ce:d5:f9:ab:b3:6c: b4:56:9d:a7:dc:45:4d:4b:5e:61:b2:bb:00:f5:8d: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4B:BC:D9:4F:80:22:89:C0:41:8A:FD:13:6C:5D:1D:1B:A3:0E:2C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/51a41624-b980-452b-a6a9-1f823c83f82a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:4800::/40 Signature Algorithm: sha256WithRSAEncryption 69:cc:84:d0:81:14:b4:16:ea:f4:bb:a6:dc:85:f9:aa:68:ed: a5:4c:3b:be:81:1c:7d:25:ad:0d:6d:04:dd:4f:81:8d:70:8a: 2f:61:58:62:da:a9:b9:ea:e3:f1:86:62:f8:15:9f:76:b1:14: 83:60:95:2b:70:cb:a7:3c:f3:2c:0b:87:d1:1a:ab:11:fc:96: e5:02:e3:b1:10:87:54:18:a0:15:b2:df:4b:fc:0e:26:10:8f: 95:55:8a:92:ce:bd:49:d8:cd:83:d0:69:27:ee:20:ba:f0:95: b1:cd:e8:4f:b4:a6:3d:13:90:17:5d:2a:49:c5:95:63:65:cb: 24:81:a0:82:0e:b9:cd:8c:8e:2d:fa:95:19:f0:ef:28:f0:71: b4:f5:2e:fd:02:cd:db:15:27:c0:d6:23:2d:53:f4:09:81:b2: d9:03:f6:2a:90:c9:12:10:8a:12:dd:db:d4:70:2f:ca:b9:d9: e1:15:f5:36:7d:cb:43:25:f0:44:04:7d:28:fd:ca:23:cd:1b: 22:d9:16:49:b6:03:aa:7f:d8:ec:24:8b:d5:02:de:56:1f:36: dc:31:63:b2:c2:75:66:e3:0f:e1:58:29:07:1c:b1:c8:0e:05: 88:52:4a:5b:fa:4d:83:db:6e:f2:37:ae:5d:bd:6f:01:96:f7: 67:f5:de:0f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGetizBCtGO9XcN6k40A/gsPtXS0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MDExNVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAY2MxNzM4YWQzMjgwZTQ1YTk5Y2M5 MDkzNDVlNDM1MzdjMTEwNTc0YWE0ZGMwOGJhZTAzZWEzNjYzNGU2NTBiNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZASeFovA1UQkeoE9yFPwUy5gN9S uLo7OwV2jjPjnKngQnUCp5iFhK4pJ7DHedMb3+5HMdLzAToQ1zC7W7MRhJ/Q5i0a Bzjq3WXUXUzbGJJamqzoRdIlUZc8nmcvjQM970OM0dCIrFIpvWtwBa0vUdtHsHlJ Uw47+4tp3Ycr4tC/VwOfwZTvtiHF/V4uBSvIyxvSccrUCSsL5p0lYymUj0uACqOu GscUnWJ9rJcy+1FMRPWU7l9jwPS1K0W0e0ltADcgx8uuW8DTjhfgpwmxa4J4HCxh 9dnXyHlsSPPBv+R3u1hfhlBYtTbO1fmrs2y0Vp2n3EVNS15hsrsA9Y2XLwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBRLvNlPgCKJwEGK/RNsXR0bow4sMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUxYTQxNjI0LWI5ODAtNDUyYi1hNmE5LTFmODIzYzgzZjgyYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9EgwDQYJKoZIhvcNAQELBQADggEBAGnMhNCBFLQW6vS7ptyF +apo7aVMO76BHH0lrQ1tBN1PgY1wii9hWGLaqbnq4/GGYvgVn3axFINglStwy6c8 8ywLh9EaqxH8luUC47EQh1QYoBWy30v8DiYQj5VVipLOvUnYzYPQaSfuILrwlbHN 6E+0pj0TkBddKknFlWNlyySBoIIOuc2Mji36lRnw7yjwcbT1Lv0CzdsVJ8DWIy1T 9AmBstkD9iqQyRIQihLd29RwL8q52eEV9TZ9y0Ml8EQEfSj9yiPNGyLZFkm2A6p/ 2Owki9UC3lYfNtwxY7LCdWbjD+FYKQccscgOBYhSSlv6TYPbbvI3rl29bwGW92f1 3g8= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:44 2025 by rpki-client on console.sobornost.net