$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/542149ac-13e8-419c-b3c9-46274c8943df.roa File: 542149ac-13e8-419c-b3c9-46274c8943df.roa (raw, json) Hash identifier: XsrM00sm5O+DYmXh4Rg6UvopWvibpS2EMP8xftAUde4= Subject key identifier: 02:74:28:69:0B:1B:63:CA:37:70:D4:04:1A:B1:74:99:CE:A0:13:9F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C1703AE1B3836367F583D65314171F3375F8423 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/542149ac-13e8-419c-b3c9-46274c8943df.roa Signing time: Mon 21 Apr 2025 16:00:38 +0000 ROA not before: Mon 21 Apr 2025 16:00:38 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:17:03:ae:1b:38:36:36:7f:58:3d:65:31:41:71:f3:37:5f:84:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:00:38 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=e4ac28460fb31e3d96350682cf7fb343b4f90df13f066b5b9b4ef46ffd61b21d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:34:84:38:08:bd:c4:4f:f3:dd:e3:84:e0: 72:69:5a:c2:f0:90:13:2f:c7:6e:03:fa:a7:c8:9c: 76:04:4c:9e:62:f6:a3:f9:ca:e0:fe:4e:d5:c6:e0: 48:ed:85:b8:dd:49:f0:7f:7f:8e:af:26:ac:af:1e: be:dc:f0:61:15:ec:e1:52:8a:58:44:07:5b:90:9b: f4:ff:dc:14:79:81:06:53:c3:21:a1:56:01:d1:a7: 5e:f2:b0:8b:11:55:99:79:21:57:5a:98:b5:49:b1: 45:bd:d0:46:2b:9a:2f:dd:0c:ad:3f:ce:f7:e9:1e: d7:a8:cf:10:ef:d5:ec:9f:09:98:77:ac:08:fb:36: 6a:93:12:9f:c1:a5:cf:a2:da:7f:5a:a8:8c:52:25: c1:e2:9d:e8:23:14:b5:e6:3d:07:13:73:80:c0:e8: 03:1a:89:84:35:22:c8:c4:f9:5b:d6:3c:45:16:df: a9:77:a4:b4:a7:b4:09:c4:a5:bf:22:74:1a:d7:54: a2:af:c8:6e:c5:7b:1d:b1:b6:d4:98:94:d0:a9:79: e8:8b:ad:2a:f0:26:2f:b9:22:50:59:f6:d8:de:be: de:8a:30:3f:cf:80:43:78:c4:13:7a:1f:ef:b9:61: 6d:3e:47:e6:e0:77:47:cc:c4:03:44:78:b8:0b:f9: 19:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:74:28:69:0B:1B:63:CA:37:70:D4:04:1A:B1:74:99:CE:A0:13:9F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/542149ac-13e8-419c-b3c9-46274c8943df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8c0::/46 Signature Algorithm: sha256WithRSAEncryption 27:2b:9a:36:00:c6:37:e9:7b:3e:8d:66:42:d7:cd:66:92:dc: f1:ae:d7:5b:5d:34:e4:64:c8:ac:8a:4c:ae:cc:2d:7a:a9:84: e1:15:db:2e:7c:c9:f2:b8:06:86:05:e1:56:06:53:d3:62:10: 3b:43:56:5b:8b:c0:63:21:74:d6:f4:8a:66:d9:3f:ea:b3:21: 84:c6:6f:30:74:33:fe:76:1d:ca:b4:fb:86:95:f3:72:77:25: 8e:c3:30:9b:76:bd:14:c3:75:ee:85:86:b5:e8:29:f4:8e:f3: 32:b2:50:c0:b1:d1:2e:fb:05:d7:c1:b6:29:55:5a:b5:6b:30: fc:2f:82:3a:9d:56:b0:b1:6e:b4:d1:12:56:d5:f0:b6:dd:7d: f5:c4:32:09:a0:74:df:23:91:34:cc:77:56:6a:96:d3:40:b3: 92:f0:fd:a0:aa:1c:8c:67:68:a4:0e:08:57:d5:08:e1:a8:4b: 5e:70:62:ec:2e:4c:42:ac:0b:d7:5b:b0:60:ae:e1:f7:ee:be: 17:5e:83:97:4f:f6:e0:8c:ce:77:4f:cc:9b:d6:e5:64:4d:68: f0:a5:12:42:46:32:e8:66:a8:4d:90:83:70:5e:8b:3c:a5:ea: 7b:fb:c1:6a:a1:88:d2:e2:55:ce:e1:d1:12:15:df:74:b9:4c: 26:dd:e6:a7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfBcDrhs4NjZ/WD1lMUFx8zdfhCMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MDAzOFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAZTRhYzI4NDYwZmIzMWUzZDk2MzUw NjgyY2Y3ZmIzNDNiNGY5MGRmMTNmMDY2YjViOWI0ZWY0NmZmZDYxYjIxZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzc0hDgIvcRP893jhOByaVrC8JAT L8duA/qnyJx2BEyeYvaj+crg/k7VxuBI7YW43Unwf3+Oryasrx6+3PBhFezhUopY RAdbkJv0/9wUeYEGU8MhoVYB0ade8rCLEVWZeSFXWpi1SbFFvdBGK5ov3QytP873 6R7XqM8Q79XsnwmYd6wI+zZqkxKfwaXPotp/WqiMUiXB4p3oIxS15j0HE3OAwOgD GomENSLIxPlb1jxFFt+pd6S0p7QJxKW/InQa11Sir8huxXsdsbbUmJTQqXnoi60q 8CYvuSJQWfbY3r7eijA/z4BDeMQTeh/vuWFtPkfm4HdHzMQDRHi4C/kZ9wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAJ0KGkLG2PKN3DUBBqxdJnOoBOfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0MjE0OWFjLTEzZTgtNDE5Yy1iM2M5LTQ2Mjc0Yzg5NDNkZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaQjAMA0GCSqGSIb3DQEBCwUAA4IBAQAnK5o2AMY36Xs+jWZC 181mktzxrtdbXTTkZMisikyuzC16qYThFdsufMnyuAaGBeFWBlPTYhA7Q1Zbi8Bj IXTW9Ipm2T/qsyGExm8wdDP+dh3KtPuGlfNydyWOwzCbdr0Uw3XuhYa16Cn0jvMy slDAsdEu+wXXwbYpVVq1azD8L4I6nVawsW600RJW1fC23X31xDIJoHTfI5E0zHdW apbTQLOS8P2gqhyMZ2ikDghX1QjhqEtecGLsLkxCrAvXW7BgruH37r4XXoOXT/bg jM53T8yb1uVkTWjwpRJCRjLoZqhNkINwXos8pep7+8FqoYjS4lXO4dESFd90uUwm 3ean -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:44 2025 by rpki-client on console.sobornost.net