$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7b377b-906b-49a0-87a2-73168e0d8254.roa File: 5a7b377b-906b-49a0-87a2-73168e0d8254.roa (raw, json) Hash identifier: sZ9lbk8bJH4cX/tUYhb1Qoe3vAZ2ytnY5XddV1amrIs= Subject key identifier: 57:A9:AA:CF:B4:66:E2:DB:47:2A:1E:37:1D:8B:B1:07:55:17:19:FE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5A0B9C195712DDF00719300AD72075927B43375A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7b377b-906b-49a0-87a2-73168e0d8254.roa Signing time: Sat 19 Apr 2025 00:50:07 +0000 ROA not before: Sat 19 Apr 2025 00:50:07 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0b:9c:19:57:12:dd:f0:07:19:30:0a:d7:20:75:92:7b:43:37:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:50:07 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=467d51d6db714cc59eb89c530d9e51be482c1ab76ca49c521356a0229d9edf61, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2a:db:22:70:79:23:55:46:ab:bc:80:20:4e: df:d9:fb:25:60:88:0e:90:7f:cc:7a:c8:fe:5c:22: fd:28:29:87:c8:fc:62:b8:3d:81:d2:da:48:31:7e: 96:33:c5:b9:35:3f:a4:26:18:48:b9:4b:b4:d9:e4: 22:df:a7:8f:f6:f5:13:d5:26:bb:77:07:75:75:2e: 5f:3a:30:46:ba:79:d3:8d:7d:9b:80:18:11:51:e6: 4e:36:d3:47:f2:22:89:3f:9e:73:5a:eb:1d:55:31: 3e:a7:94:18:66:5d:fc:76:9a:e6:59:a8:46:5c:33: 49:89:da:42:05:c4:80:29:fb:cc:f9:2f:bc:c5:68: 48:09:92:5e:e9:26:2a:83:35:7c:f9:5f:44:80:51: 75:97:37:4c:f4:89:5d:d9:6c:e0:97:3a:25:bf:e6: 89:8a:91:d0:dd:da:a4:33:d6:f0:7b:17:dd:54:3f: 93:49:16:55:e7:64:a6:d1:86:79:8e:67:24:af:66: bc:3b:31:2b:33:60:ec:55:53:5b:a1:13:42:8d:7d: 10:cf:1b:64:69:04:c0:f3:2b:fb:0a:37:75:a0:58: b5:5e:fe:2b:8e:06:04:c2:9d:1d:fc:5a:c0:e8:05: f9:e8:a7:b2:af:09:4c:45:78:f9:c6:fe:c6:7a:8d: 39:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A9:AA:CF:B4:66:E2:DB:47:2A:1E:37:1D:8B:B1:07:55:17:19:FE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a7b377b-906b-49a0-87a2-73168e0d8254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:c840::/48 Signature Algorithm: sha256WithRSAEncryption 8c:b3:ba:23:d9:e4:e8:34:32:63:a2:c7:8a:cd:4f:ad:ee:67: a1:01:0b:df:ba:56:db:e0:69:ac:36:13:b7:3b:e8:e0:8f:de: eb:37:42:1e:93:4d:25:f8:41:83:6c:3c:5f:9a:b2:0c:34:83: 31:2e:09:d7:14:0d:08:cf:70:8b:c9:1e:d3:ee:23:89:be:cb: a4:f6:66:b4:03:f8:f0:1a:cc:a1:ba:60:33:3c:06:5f:2d:70: ea:b6:1e:75:5a:f3:5a:e2:89:7d:12:ff:11:f5:f0:5e:14:c8: a6:11:bb:5a:77:74:1f:56:da:9d:70:f8:14:fb:6d:c9:07:84: c3:80:f9:87:9a:22:39:62:88:e3:45:20:85:6a:38:ad:c9:be: 7f:6a:c5:b1:d3:ef:cd:c3:65:c5:57:c3:e0:86:6b:66:c8:f0: c5:ff:e4:e4:33:24:b2:9b:56:7a:29:22:60:4c:29:d1:92:44: 86:50:62:9a:32:44:65:14:be:06:51:12:a6:1c:84:d5:91:5d: 10:80:36:4a:e8:94:7f:ad:1f:dc:84:ac:3b:3b:d1:32:95:47: c0:c4:71:a7:6c:ac:b7:bb:81:10:d6:79:33:e6:32:8a:c3:c8: 15:72:ce:8d:30:0c:f1:e6:88:ae:d0:17:47:5b:0d:21:80:97: c0:27:ba:77 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWgucGVcS3fAHGTAK1yB1kntDN1owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwNTAwN1oX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNANDY3ZDUxZDZkYjcxNGNjNTllYjg5 YzUzMGQ5ZTUxYmU0ODJjMWFiNzZjYTQ5YzUyMTM1NmEwMjI5ZDllZGY2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArirbInB5I1VGq7yAIE7f2fslYIgO kH/Mesj+XCL9KCmHyPxiuD2B0tpIMX6WM8W5NT+kJhhIuUu02eQi36eP9vUT1Sa7 dwd1dS5fOjBGunnTjX2bgBgRUeZONtNH8iKJP55zWusdVTE+p5QYZl38dprmWahG XDNJidpCBcSAKfvM+S+8xWhICZJe6SYqgzV8+V9EgFF1lzdM9Ild2Wzglzolv+aJ ipHQ3dqkM9bwexfdVD+TSRZV52Sm0YZ5jmckr2a8OzErM2DsVVNboRNCjX0Qzxtk aQTA8yv7Cjd1oFi1Xv4rjgYEwp0d/FrA6AX56KeyrwlMRXj5xv7Geo05NQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFepqs+0ZuLbRyoeNx2LsQdVFxn+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVhN2IzNzdiLTkwNmItNDlhMC04N2EyLTczMTY4ZTBkODI1NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9MhAMA0GCSqGSIb3DQEBCwUAA4IBAQCMs7oj2eToNDJjoseK zU+t7mehAQvfulbb4GmsNhO3O+jgj97rN0Iek00l+EGDbDxfmrIMNIMxLgnXFA0I z3CLyR7T7iOJvsuk9ma0A/jwGsyhumAzPAZfLXDqth51WvNa4ol9Ev8R9fBeFMim Ebtad3QfVtqdcPgU+23JB4TDgPmHmiI5YojjRSCFajityb5/asWx0+/Nw2XFV8Pg hmtmyPDF/+TkMySym1Z6KSJgTCnRkkSGUGKaMkRlFL4GURKmHITVkV0QgDZK6JR/ rR/chKw7O9EylUfAxHGnbKy3u4EQ1nkz5jKKw8gVcs6NMAzx5oiu0BdHWw0hgJfA J7p3 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net