$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524c65cc-d022-4b07-863e-495ad7b730c6.roa File: 524c65cc-d022-4b07-863e-495ad7b730c6.roa (raw, json) Hash identifier: N9jKWwOLsmwB8bW1u/FTls5W+euZmmxrBropDHpcKDM= Subject key identifier: B6:8D:73:47:99:D9:A8:5F:EE:AB:13:9E:FD:7A:6D:E0:30:62:F1:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0D97FB68058ECC43D6647C9AE8B881925C18C298 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524c65cc-d022-4b07-863e-495ad7b730c6.roa Signing time: Mon 21 Apr 2025 16:20:54 +0000 ROA not before: Mon 21 Apr 2025 16:20:54 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:97:fb:68:05:8e:cc:43:d6:64:7c:9a:e8:b8:81:92:5c:18:c2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:20:54 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=6e400c2dc31485fa67c43d50f0404253c64d6e5ebd2b5bf30c01db0496d422cf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6d:a7:cd:b9:f3:9c:f7:5c:f0:e2:93:78:3c: 07:cb:44:7d:e4:c5:3d:59:c5:ca:ae:a0:72:bb:01: fa:42:43:f2:61:09:22:c5:f6:b2:a9:e5:ef:59:9b: 54:f8:f6:47:26:2c:b0:aa:00:f7:67:fe:30:df:82: ee:82:e5:29:d5:fc:1c:5a:67:8a:fa:3e:ef:be:52: 51:5b:97:f5:dc:12:f7:7f:d7:14:68:d7:ec:38:65: 5b:1b:c8:46:9c:e6:53:64:57:b4:f1:ea:83:b8:9a: 70:23:e1:95:28:9d:08:51:33:4d:75:23:69:20:9b: cc:a5:08:cd:19:dd:29:ae:9e:03:30:f5:5c:20:3b: 6e:9d:1e:24:5f:9d:84:58:09:bc:cf:e2:74:05:4d: bf:29:f9:bd:83:75:c7:03:0e:e2:46:82:cb:1e:bd: 08:61:2f:94:34:66:d8:7d:18:38:24:27:83:e6:49: ae:2d:80:35:11:98:28:68:9f:92:92:ab:a9:70:51: 36:8d:f3:ad:ec:29:19:66:bc:95:66:99:8c:fe:74: f0:8c:6e:2b:5a:3c:09:db:94:8c:85:96:1b:93:a5: 27:fc:93:e0:7e:cd:fc:82:f6:27:12:97:87:6d:22: 7a:e3:43:de:f9:1a:4c:ec:80:5a:02:43:f0:f8:aa: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8D:73:47:99:D9:A8:5F:EE:AB:13:9E:FD:7A:6D:E0:30:62:F1:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/524c65cc-d022-4b07-863e-495ad7b730c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:2800::/40 Signature Algorithm: sha256WithRSAEncryption 02:36:7e:37:b6:44:e3:6f:c3:20:7f:06:39:a9:36:4c:1a:e2: 38:82:b4:0c:e9:4b:3d:80:10:a8:ac:f5:46:ac:45:4c:49:de: f0:4e:ab:91:ff:6c:f8:6c:95:fc:99:3d:09:cd:19:89:8b:f8: b9:f3:bf:f9:83:bf:68:f2:c1:6f:26:12:07:ea:a7:22:fc:bd: 31:82:d9:4d:25:b2:fd:e3:01:d4:38:eb:24:ff:1a:16:23:c3: 88:05:7b:59:8e:ff:85:92:c1:7c:91:f8:49:ea:b5:cb:34:f1: 59:f7:e6:64:70:a1:9b:f0:b0:db:45:f4:8a:09:00:74:44:d1: cd:da:02:0e:ba:5b:1e:fe:c3:e1:a3:d5:5f:2c:88:9c:3c:8b: 21:5b:10:e3:0e:f6:17:18:8b:47:eb:ec:a3:2b:e4:46:e9:43: db:7e:40:43:5f:fe:70:c4:9f:c1:b5:63:17:5a:2c:ad:13:42: c8:08:94:b3:09:19:67:e0:44:fe:36:0f:90:9a:d1:3c:f5:71: 10:c7:86:83:7b:97:5f:d5:e9:a5:a1:fb:35:26:9f:fb:06:cd: 55:f3:cd:aa:ff:79:c5:98:a8:f8:07:84:b8:66:9d:9e:04:c9: ba:9c:c8:66:2d:38:cd:53:28:ea:cc:66:14:8d:da:90:5d:0e: 94:83:4a:4d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDZf7aAWOzEPWZHya6LiBklwYwpgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MjA1NFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANmU0MDBjMmRjMzE0ODVmYTY3YzQz ZDUwZjA0MDQyNTNjNjRkNmU1ZWJkMmI1YmYzMGMwMWRiMDQ5NmQ0MjJjZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp22nzbnznPdc8OKTeDwHy0R95MU9 WcXKrqByuwH6QkPyYQkixfayqeXvWZtU+PZHJiywqgD3Z/4w34LuguUp1fwcWmeK +j7vvlJRW5f13BL3f9cUaNfsOGVbG8hGnOZTZFe08eqDuJpwI+GVKJ0IUTNNdSNp IJvMpQjNGd0prp4DMPVcIDtunR4kX52EWAm8z+J0BU2/Kfm9g3XHAw7iRoLLHr0I YS+UNGbYfRg4JCeD5kmuLYA1EZgoaJ+SkqupcFE2jfOt7CkZZryVZpmM/nTwjG4r WjwJ25SMhZYbk6Un/JPgfs38gvYnEpeHbSJ640Pe+RpM7IBaAkPw+KoAKwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLaNc0eZ2ahf7qsTnv16beAwYvHKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyNGM2NWNjLWQwMjItNGIwNy04NjNlLTQ5NWFkN2I3MzBjNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaCgwDQYJKoZIhvcNAQELBQADggEBAAI2fje2RONvwyB/Bjmp Nkwa4jiCtAzpSz2AEKis9UasRUxJ3vBOq5H/bPhslfyZPQnNGYmL+Lnzv/mDv2jy wW8mEgfqpyL8vTGC2U0lsv3jAdQ46yT/GhYjw4gFe1mO/4WSwXyR+Enqtcs08Vn3 5mRwoZvwsNtF9IoJAHRE0c3aAg66Wx7+w+Gj1V8siJw8iyFbEOMO9hcYi0fr7KMr 5EbpQ9t+QENf/nDEn8G1YxdaLK0TQsgIlLMJGWfgRP42D5Ca0Tz1cRDHhoN7l1/V 6aWh+zUmn/sGzVXzzar/ecWYqPgHhLhmnZ4EybqcyGYtOM1TKOrMZhSN2pBdDpSD Sk0= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:44 2025 by rpki-client on console.sobornost.net