$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52ed4ede-452e-4252-99d4-ab87dca3e810.roa File: 52ed4ede-452e-4252-99d4-ab87dca3e810.roa (raw, json) Hash identifier: ELIUmybSY/OPzEeuwPaV5RWlV1GTO2Eo3u3jIKWg9O4= Subject key identifier: A2:40:3B:66:10:30:C6:2F:EC:F4:C7:31:D7:C9:18:58:B8:7D:42:0C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F8FEAEE207824F95F79C7C1E474FD57F500F7BC Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52ed4ede-452e-4252-99d4-ab87dca3e810.roa Signing time: Mon 21 Apr 2025 16:11:13 +0000 ROA not before: Mon 21 Apr 2025 16:11:13 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafe:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8f:ea:ee:20:78:24:f9:5f:79:c7:c1:e4:74:fd:57:f5:00:f7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:11:13 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=ce4f2ff15bcc680a37587ffd5338a9432456ae6f641ac66883eef0e2abf14ee9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:2d:3c:59:86:89:9f:71:f9:29:e4:68:30: 58:37:6c:7f:6f:61:16:ac:49:8b:29:4d:49:5f:f7: d8:71:6f:4c:0e:9d:b6:0e:ee:82:3f:2c:d9:e6:57: b9:2e:ce:04:b7:15:e1:4b:dc:8d:e9:1c:9f:b5:68: 4a:36:d5:05:46:ad:ec:b6:21:00:da:c5:7a:dc:8b: 3b:cd:1a:4a:9c:23:84:49:48:98:32:5b:c1:3d:1a: d7:32:04:3e:59:14:c5:9e:6b:17:8a:83:c5:7f:dc: 0a:27:09:f4:d0:c6:22:91:b5:41:98:68:0d:c7:ff: 56:b9:9a:95:9c:0c:41:41:ee:38:4f:69:62:6b:b6: a1:e7:30:4c:9e:f8:8d:b7:1c:a9:26:99:7f:7f:4c: 86:ad:8e:b1:bd:58:1f:d1:6d:c1:5d:83:4d:41:45: ed:ed:8c:a4:68:5f:54:ea:44:7e:53:cf:c6:7e:c2: c1:88:c5:5c:e9:ac:b1:59:75:be:72:89:7c:58:3c: 9d:30:61:7c:57:ee:14:d0:50:df:74:e4:d6:c8:b9: 7a:e0:47:12:e5:2c:21:62:ee:1f:a4:47:1a:c4:ab: 62:cb:45:32:e0:b4:54:2b:1a:5e:d2:2b:76:cc:6e: dd:09:99:60:68:70:bb:27:89:fb:fc:8e:16:74:78: cc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:40:3B:66:10:30:C6:2F:EC:F4:C7:31:D7:C9:18:58:B8:7D:42:0C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52ed4ede-452e-4252-99d4-ab87dca3e810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafe:a000::/40 Signature Algorithm: sha256WithRSAEncryption 8d:74:55:50:b9:40:35:77:23:ad:80:15:17:8e:76:f9:e2:1d: 9f:20:33:5d:ef:bb:99:d7:fe:af:c0:24:cf:59:74:47:a5:e4: 17:81:aa:16:fe:13:4e:46:d6:36:b3:4b:fd:07:2b:7f:63:1e: fe:f7:93:42:ff:d6:57:01:30:aa:3d:cd:0d:4f:b0:da:cd:65: 85:f1:16:bd:f6:63:a1:c6:b1:da:7e:77:8b:3e:5e:38:70:1a: 82:c7:41:2e:23:bd:bb:bf:65:6f:20:0b:e9:28:73:82:2e:35: 06:6d:63:bf:8f:12:5a:0e:43:8b:8c:d9:81:f3:76:7e:99:54: 7a:8a:19:1f:9b:b9:21:bb:6c:a8:c7:65:b0:43:19:74:ea:e3: 7d:82:e8:89:6b:6e:fe:7e:18:7d:fe:1f:a6:04:cf:af:cc:ed: a6:3e:d5:64:87:e5:a1:55:f5:13:62:3a:b9:b2:99:d1:60:93: c2:19:0a:79:bf:84:0f:cd:58:95:4f:66:fa:14:31:9d:a6:35: 29:be:5d:de:ea:61:cb:d8:1c:01:1f:8c:d5:df:76:81:f7:fa: 6c:9b:c8:ca:f6:e6:f4:f4:e8:25:af:d8:d7:aa:b5:82:86:01: 48:6e:ef:17:5f:fb:b2:9c:18:c8:68:3b:66:53:48:a0:d0:15: f8:fd:e7:cc -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUL4/q7iB4JPlfecfB5HT9V/UA97wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MTExM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAY2U0ZjJmZjE1YmNjNjgwYTM3NTg3 ZmZkNTMzOGE5NDMyNDU2YWU2ZjY0MWFjNjY4ODNlZWYwZTJhYmYxNGVlOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSktPFmGiZ9x+SnkaDBYN2x/b2EW rEmLKU1JX/fYcW9MDp22Du6CPyzZ5le5Ls4EtxXhS9yN6RyftWhKNtUFRq3stiEA 2sV63Is7zRpKnCOESUiYMlvBPRrXMgQ+WRTFnmsXioPFf9wKJwn00MYikbVBmGgN x/9WuZqVnAxBQe44T2lia7ah5zBMnviNtxypJpl/f0yGrY6xvVgf0W3BXYNNQUXt 7YykaF9U6kR+U8/GfsLBiMVc6ayxWXW+col8WDydMGF8V+4U0FDfdOTWyLl64EcS 5SwhYu4fpEcaxKtiy0Uy4LRUKxpe0it2zG7dCZlgaHC7J4n7/I4WdHjM3QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKJAO2YQMMYv7PTHMdfJGFi4fUIMMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzUyZWQ0ZWRlLTQ1MmUtNDI1Mi05OWQ0LWFiODdkY2EzZTgxMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/qAwDQYJKoZIhvcNAQELBQADggEBAI10VVC5QDV3I62AFReO dvniHZ8gM13vu5nX/q/AJM9ZdEel5BeBqhb+E05G1jazS/0HK39jHv73k0L/1lcB MKo9zQ1PsNrNZYXxFr32Y6HGsdp+d4s+XjhwGoLHQS4jvbu/ZW8gC+koc4IuNQZt Y7+PEloOQ4uM2YHzdn6ZVHqKGR+buSG7bKjHZbBDGXTq432C6Ilrbv5+GH3+H6YE z6/M7aY+1WSH5aFV9RNiOrmymdFgk8IZCnm/hA/NWJVPZvoUMZ2mNSm+Xd7qYcvY HAEfjNXfdoH3+mybyMr25vT06CWv2NeqtYKGAUhu7xdf+7KcGMhoO2ZTSKDQFfj9 58w= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:44 2025 by rpki-client on console.sobornost.net