$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5418b4d0-7480-41be-a568-008f76efc155.roa File: 5418b4d0-7480-41be-a568-008f76efc155.roa (raw, json) Hash identifier: eVt/K1bL4xX534X6qunrSpJRU6T272OpvJ7f0SPqZQw= Subject key identifier: 4B:38:FA:3D:28:A5:D4:1E:9B:D4:2A:FC:D3:5F:55:65:DD:B6:0E:B2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 306500AEB20171F131D9D861D0FFFD8B7564944D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5418b4d0-7480-41be-a568-008f76efc155.roa Signing time: Mon 21 Apr 2025 15:12:07 +0000 ROA not before: Mon 21 Apr 2025 15:12:07 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:65:00:ae:b2:01:71:f1:31:d9:d8:61:d0:ff:fd:8b:75:64:94:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:12:07 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=47d103cd786beda0fb8d5caa32990d493432ad1c3602e52220ef35511856ea0f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:77:71:69:c8:5d:2f:87:24:72:5a:cc:6c:64: 4d:66:1d:6d:55:ac:20:fd:16:87:77:0d:07:d0:e1: 68:68:28:b7:3e:7f:57:48:31:f7:bc:37:c1:0e:d7: 11:c9:48:26:53:a2:bd:a5:ff:a0:57:e9:00:d6:9b: 4b:ae:7e:6f:76:66:c3:98:1c:e9:e4:a3:3e:a4:d3: d1:08:bc:65:be:a8:cb:33:98:6e:06:df:8e:69:38: 8c:db:44:29:13:f6:cc:c5:9b:cf:b0:29:d2:40:8c: ba:83:73:76:de:6a:a6:12:4a:5f:3b:f6:e6:28:9f: 8c:64:b3:27:d7:f7:d1:06:00:73:ff:bd:9c:85:b0: cb:61:bd:32:52:88:9c:9c:07:08:fd:31:e5:1a:7d: 50:5a:53:f5:62:d9:56:b6:fd:50:e4:64:b2:7b:0f: 34:4c:76:10:d7:b6:74:46:90:7f:d4:1d:ca:88:91: a9:74:a7:fe:1f:d3:ba:41:08:f8:a8:da:ca:59:55: 81:18:a1:a3:9d:a5:20:69:bf:50:d7:11:9e:7e:59: 14:1b:60:ed:b2:68:c4:5a:ac:3e:33:20:ee:97:62: 4b:96:90:9e:a4:4d:33:fc:62:dd:95:18:98:9f:bb: 5a:f6:44:b9:64:ad:3d:e2:cf:6b:88:7b:ff:ea:fe: 1c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:38:FA:3D:28:A5:D4:1E:9B:D4:2A:FC:D3:5F:55:65:DD:B6:0E:B2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5418b4d0-7480-41be-a568-008f76efc155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:e040::/48 Signature Algorithm: sha256WithRSAEncryption 40:48:8a:f3:62:f2:1c:88:21:ee:a2:a4:66:9a:e6:da:a5:d3: 06:62:85:01:ec:2b:ac:3e:f6:63:63:6b:3b:19:59:a2:d6:a4: 1e:33:10:b5:82:f5:45:19:d1:16:53:86:eb:5b:fb:2e:10:38: 2c:6b:d8:49:6a:0f:36:b7:13:0f:f7:2c:8f:79:77:57:75:c8: dc:1d:95:89:f9:98:99:6e:b1:b1:66:57:5a:14:27:3d:f4:96: 36:c5:ba:af:c8:6a:ef:81:20:97:dd:d2:73:93:af:2b:03:4c: d9:30:ae:58:18:35:25:d1:93:2c:ca:3e:60:06:d2:db:28:6b: 27:e5:c7:2d:1a:79:ef:9d:4e:30:ab:e6:9b:0b:ad:a3:e3:a3: 9e:1f:2d:43:57:e3:49:07:a9:57:01:59:7e:ba:4d:39:94:53: 91:da:96:3d:59:be:3a:18:58:fb:cc:79:98:18:02:77:2f:7d: d6:c1:03:57:45:b3:be:02:1c:ff:64:d6:0c:c7:88:50:0c:29: cb:74:49:dd:dd:11:3f:49:72:72:71:09:73:a1:2d:6c:1e:bb: f7:1a:39:66:3b:fc:ae:af:d8:71:bd:9b:3d:9e:d7:a5:6d:6d: 9a:22:85:c4:4f:46:ca:d9:bf:3b:4a:38:64:33:57:31:58:10: 53:56:19:8c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMGUArrIBcfEx2dhh0P/9i3VklE0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MTIwN1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANDdkMTAzY2Q3ODZiZWRhMGZiOGQ1 Y2FhMzI5OTBkNDkzNDMyYWQxYzM2MDJlNTIyMjBlZjM1NTExODU2ZWEwZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHdxachdL4ckclrMbGRNZh1tVawg /RaHdw0H0OFoaCi3Pn9XSDH3vDfBDtcRyUgmU6K9pf+gV+kA1ptLrn5vdmbDmBzp 5KM+pNPRCLxlvqjLM5huBt+OaTiM20QpE/bMxZvPsCnSQIy6g3N23mqmEkpfO/bm KJ+MZLMn1/fRBgBz/72chbDLYb0yUoicnAcI/THlGn1QWlP1YtlWtv1Q5GSyew80 THYQ17Z0RpB/1B3KiJGpdKf+H9O6QQj4qNrKWVWBGKGjnaUgab9Q1xGeflkUG2Dt smjEWqw+MyDul2JLlpCepE0z/GLdlRiYn7ta9kS5ZK094s9riHv/6v4cxwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEs4+j0opdQem9Qq/NNfVWXdtg6yMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0MThiNGQwLTc0ODAtNDFiZS1hNTY4LTAwOGY3NmVmYzE1NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAOBAMA0GCSqGSIb3DQEBCwUAA4IBAQBASIrzYvIciCHuoqRm mubapdMGYoUB7CusPvZjY2s7GVmi1qQeMxC1gvVFGdEWU4brW/suEDgsa9hJag82 txMP9yyPeXdXdcjcHZWJ+ZiZbrGxZldaFCc99JY2xbqvyGrvgSCX3dJzk68rA0zZ MK5YGDUl0ZMsyj5gBtLbKGsn5cctGnnvnU4wq+abC62j46OeHy1DV+NJB6lXAVl+ uk05lFOR2pY9Wb46GFj7zHmYGAJ3L33WwQNXRbO+Ahz/ZNYMx4hQDCnLdEnd3RE/ SXJycQlzoS1sHrv3GjlmO/yur9hxvZs9ntelbW2aIoXET0bK2b87SjhkM1cxWBBT VhmM -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:44 2025 by rpki-client on console.sobornost.net