$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55de4d3c-c262-44e2-9b4b-4db6bedc8c6b.roa File: 55de4d3c-c262-44e2-9b4b-4db6bedc8c6b.roa (raw, json) Hash identifier: XwXsvdKtyx7r/Xsf2xOCGAXp3dxIRfI4C0YR6uLThHw= Subject key identifier: 1F:AF:23:10:E3:13:C0:95:E1:93:F2:8C:14:57:69:F4:63:50:AF:34 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1FF60CDF82C7F163CAA6D939339200ED5A4487E3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55de4d3c-c262-44e2-9b4b-4db6bedc8c6b.roa Signing time: Tue 22 Apr 2025 00:00:03 +0000 ROA not before: Tue 22 Apr 2025 00:00:03 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f6:0c:df:82:c7:f1:63:ca:a6:d9:39:33:92:00:ed:5a:44:87:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 22 00:00:03 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=32791a7d3d33a9852ae426c3a49cdf66f25c37c857a09534d52cc7b5d956f21d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:9b:24:bd:7c:d8:16:87:0f:1d:3f:f8:1e: ab:0c:fa:3e:05:34:9f:3b:d2:33:4a:fc:8b:1d:5a: d7:7e:ee:7f:58:b4:c7:19:fa:ed:fd:e5:61:85:a3: f5:f8:e7:d1:ce:0b:cd:2f:d6:6a:44:b9:28:bb:58: ab:74:04:df:9d:a3:2d:45:10:16:61:4f:ba:4e:58: 13:39:2e:d7:61:95:07:19:8a:a1:cf:14:53:8f:dd: 7a:d7:b6:7e:8e:81:0d:1b:0a:1b:9d:c2:55:c1:c6: 5c:fc:40:aa:c9:5a:6a:84:46:c9:04:b4:89:c6:4f: 38:84:00:b0:d1:40:5d:79:24:de:67:f5:eb:02:d2: 85:56:99:a7:5b:2c:35:54:f6:e4:8c:5e:17:54:c8: fb:72:cf:74:cc:fe:34:01:1b:88:fc:ef:54:cb:8c: 20:78:1b:d7:ad:e1:62:54:cc:5e:88:5e:12:f6:b4: 6c:6f:ed:8d:83:3f:75:75:b8:62:fa:5e:89:13:73: 1d:50:0e:e0:f0:53:c3:9e:9c:d5:0e:75:95:b8:26: 60:75:61:f4:0b:27:ed:64:cd:0b:14:e2:2b:a8:36: b3:b8:d7:06:52:80:cc:29:fe:e4:bf:40:07:51:68: a4:ce:0a:69:51:41:19:9b:ff:39:5b:12:6e:58:2c: af:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AF:23:10:E3:13:C0:95:E1:93:F2:8C:14:57:69:F4:63:50:AF:34 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55de4d3c-c262-44e2-9b4b-4db6bedc8c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:800::/40 Signature Algorithm: sha256WithRSAEncryption 10:f0:1f:3c:30:4b:03:e1:97:04:73:ed:ea:eb:4c:71:0e:1b: 74:86:66:70:f0:4c:c3:5f:53:2b:a5:22:de:3a:2c:dc:d5:58: 60:50:d0:07:b5:b1:f7:b3:4a:27:36:c2:94:23:8f:40:c1:2d: 29:df:ed:5f:a5:5d:12:af:93:e2:11:9a:39:1b:d1:8a:e4:d7: 5b:6d:32:99:1a:05:86:7c:97:d2:32:ab:31:1f:37:04:8e:d7: 22:45:aa:aa:45:8e:5f:c7:40:b8:a4:70:c9:69:a9:c4:6c:7e: e9:ab:08:b0:e3:1a:5a:73:76:ce:11:3e:75:17:54:9b:af:56: 19:7c:29:df:44:fe:8e:5e:ee:65:a7:6c:9b:9e:32:76:df:63: 90:5b:ed:7e:74:44:4e:01:7c:39:3a:c0:5b:27:3b:27:5c:21: 8d:f0:d9:4e:d3:b6:b8:0b:09:77:9a:77:d1:4d:41:4d:c0:f4: 2a:c2:bc:22:2c:ab:fe:ff:4a:99:4f:86:2e:d5:57:85:e9:10: 95:0c:72:c9:97:62:15:9c:ff:00:5f:34:95:9b:fe:cc:40:84: 47:40:b9:54:f1:78:13:06:fe:1c:2d:35:79:15:7d:21:ea:92: 4d:5b:ca:d4:7c:97:80:21:f4:67:72:6e:c7:e3:60:88:f6:3e: e7:0f:d1:c5 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUH/YM34LH8WPKptk5M5IA7VpEh+MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMjAwMDAwM1oX DTI1MDUyNzIzNTk1OVowejFJMEcGA1UEBRNAMzI3OTFhN2QzZDMzYTk4NTJhZTQy NmMzYTQ5Y2RmNjZmMjVjMzdjODU3YTA5NTM0ZDUyY2M3YjVkOTU2ZjIxZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRKbJL182BaHDx0/+B6rDPo+BTSf O9IzSvyLHVrXfu5/WLTHGfrt/eVhhaP1+OfRzgvNL9ZqRLkou1irdATfnaMtRRAW YU+6TlgTOS7XYZUHGYqhzxRTj91617Z+joENGwobncJVwcZc/ECqyVpqhEbJBLSJ xk84hACw0UBdeSTeZ/XrAtKFVpmnWyw1VPbkjF4XVMj7cs90zP40ARuI/O9Uy4wg eBvXreFiVMxeiF4S9rRsb+2Ngz91dbhi+l6JE3MdUA7g8FPDnpzVDnWVuCZgdWH0 CyftZM0LFOIrqDazuNcGUoDMKf7kv0AHUWikzgppUUEZm/85WxJuWCyvnwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFB+vIxDjE8CV4ZPyjBRXafRjUK80MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1ZGU0ZDNjLWMyNjItNDRlMi05YjRiLTRkYjZiZWRjOGM2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaAgwDQYJKoZIhvcNAQELBQADggEBABDwHzwwSwPhlwRz7err THEOG3SGZnDwTMNfUyulIt46LNzVWGBQ0Ae1sfezSic2wpQjj0DBLSnf7V+lXRKv k+IRmjkb0Yrk11ttMpkaBYZ8l9IyqzEfNwSO1yJFqqpFjl/HQLikcMlpqcRsfumr CLDjGlpzds4RPnUXVJuvVhl8Kd9E/o5e7mWnbJueMnbfY5Bb7X50RE4BfDk6wFsn OydcIY3w2U7TtrgLCXead9FNQU3A9CrCvCIsq/7/SplPhi7VV4XpEJUMcsmXYhWc /wBfNJWb/sxAhEdAuVTxeBMG/hwtNXkVfSHqkk1bytR8l4Ah9GdybsfjYIj2PucP 0cU= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:44 2025 by rpki-client on console.sobornost.net