$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b0ffd4d-438a-4e2c-b031-fc3262c616f2.roa File: 5b0ffd4d-438a-4e2c-b031-fc3262c616f2.roa (raw, json) Hash identifier: 8IGb5aUkkaAE2oThfky7g09VGmE/IVyyCRxdtWfMrZ0= Subject key identifier: 12:BA:2A:2F:65:E6:B9:1C:D1:36:70:C7:8A:A9:A9:2D:10:D0:37:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C1D029AF25C83E9C8A79CE8C8487F3ED9332D84 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b0ffd4d-438a-4e2c-b031-fc3262c616f2.roa Signing time: Mon 21 Apr 2025 17:00:13 +0000 ROA not before: Mon 21 Apr 2025 17:00:13 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da18:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1d:02:9a:f2:5c:83:e9:c8:a7:9c:e8:c8:48:7f:3e:d9:33:2d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 17:00:13 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=f183080511c1fac5486bff1731b410347b33662e522787862a6cad2c4bd13663, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e9:a8:12:b0:eb:e7:0b:a0:e0:d4:c9:83:54: 8f:86:dd:da:02:cb:a7:b1:ef:2c:2b:b7:c0:6e:98: 6f:a0:46:92:31:51:98:d4:d4:1b:47:13:2b:76:cd: dd:71:1d:77:db:7c:51:16:25:ae:3c:11:a6:39:7f: 8d:f6:c8:1d:ea:57:86:3b:4e:d9:b7:56:19:04:db: 47:2c:07:b0:40:34:0c:db:d9:f0:c4:fb:92:a7:54: f1:dc:44:a5:3b:4b:60:d2:9e:92:e1:07:71:21:dc: 89:2c:9b:94:67:2c:ee:b8:66:e1:d2:ec:ff:fc:19: 6b:6d:34:cb:24:69:9c:58:40:c5:8b:06:ec:4d:39: 72:f1:3e:23:0a:01:83:ae:4b:bf:7b:8e:1e:43:e0: 1d:19:57:e1:e0:cf:8b:3e:26:87:b8:29:a4:6d:db: d6:29:da:82:57:d4:1f:3b:78:20:ed:76:8e:ac:66: 27:3c:53:3c:6d:af:cd:dd:c9:a8:dd:1f:fb:f1:bf: 04:80:7b:95:53:e0:8f:d9:00:f3:b3:54:af:64:44: 95:4b:fc:e2:55:60:a2:6d:f7:f5:80:43:d4:b4:3e: 11:45:de:d1:a7:5e:ad:c9:a5:30:1e:34:00:9f:ee: 81:f4:af:41:8c:78:a5:4f:ea:37:00:07:2e:82:f8: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BA:2A:2F:65:E6:B9:1C:D1:36:70:C7:8A:A9:A9:2D:10:D0:37:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b0ffd4d-438a-4e2c-b031-fc3262c616f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da18:8000::/36 Signature Algorithm: sha256WithRSAEncryption 04:38:6e:85:f3:14:0a:db:53:e2:92:15:b4:80:bf:c2:84:3d: d3:1f:34:18:63:2b:19:32:09:3e:82:5c:bf:cc:46:27:a6:f3: fc:fc:c0:23:62:a9:1d:d5:5c:9b:e7:a9:d1:8e:d0:ce:34:70: 10:28:00:99:ed:9d:2a:d9:3a:25:3c:6e:38:6e:bf:12:2c:c8: f9:79:f6:24:23:c0:32:00:73:b5:14:3b:32:a9:d2:e6:51:d8: f2:14:52:95:c7:5d:54:ba:ab:33:30:5d:6d:eb:1c:f0:9b:a3: 00:64:5b:ba:cb:48:08:78:cf:e0:e0:55:34:2f:b4:67:d9:bb: f8:55:6e:e1:a3:78:ba:d7:1f:cc:7e:9b:3b:d1:d0:c9:34:f5: 32:a8:61:c2:67:b9:d3:b5:e2:b2:d6:2c:f1:b5:9e:86:1b:7a: ec:3c:29:f9:18:4a:ff:38:11:e3:96:d8:7d:43:41:73:19:80: 9f:b4:3d:61:78:fa:e6:9f:6d:0b:03:db:6f:56:ab:7d:2c:6c: 3f:f8:98:fd:81:21:37:82:58:60:c0:00:ef:d6:61:83:a3:39: d1:3b:b9:a5:bc:ee:39:c0:cf:a9:0b:03:8c:72:eb:fd:08:a4: f4:f9:50:89:e4:4c:a2:7f:36:8c:37:c6:e0:40:07:0d:c9:18: b5:f8:72:71 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXB0CmvJcg+nIp5zoyEh/PtkzLYQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE3MDAxM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAZjE4MzA4MDUxMWMxZmFjNTQ4NmJm ZjE3MzFiNDEwMzQ3YjMzNjYyZTUyMjc4Nzg2MmE2Y2FkMmM0YmQxMzY2MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3umoErDr5wug4NTJg1SPht3aAsun se8sK7fAbphvoEaSMVGY1NQbRxMrds3dcR1323xRFiWuPBGmOX+N9sgd6leGO07Z t1YZBNtHLAewQDQM29nwxPuSp1Tx3ESlO0tg0p6S4QdxIdyJLJuUZyzuuGbh0uz/ /BlrbTTLJGmcWEDFiwbsTTly8T4jCgGDrku/e44eQ+AdGVfh4M+LPiaHuCmkbdvW KdqCV9QfO3gg7XaOrGYnPFM8ba/N3cmo3R/78b8EgHuVU+CP2QDzs1SvZESVS/zi VWCibff1gEPUtD4RRd7Rp16tyaUwHjQAn+6B9K9BjHilT+o3AAcugvhfswIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBK6Ki9l5rkc0TZwx4qpqS0Q0DdbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzViMGZmZDRkLTQzOGEtNGUyYy1iMDMxLWZjMzI2MmM2MTZmMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaGIAwDQYJKoZIhvcNAQELBQADggEBAAQ4boXzFArbU+KSFbSA v8KEPdMfNBhjKxkyCT6CXL/MRiem8/z8wCNiqR3VXJvnqdGO0M40cBAoAJntnSrZ OiU8bjhuvxIsyPl59iQjwDIAc7UUOzKp0uZR2PIUUpXHXVS6qzMwXW3rHPCbowBk W7rLSAh4z+DgVTQvtGfZu/hVbuGjeLrXH8x+mzvR0Mk09TKoYcJnudO14rLWLPG1 noYbeuw8KfkYSv84EeOW2H1DQXMZgJ+0PWF4+uafbQsD229Wq30sbD/4mP2BITeC WGDAAO/WYYOjOdE7uaW87jnAz6kLA4xy6/0IpPT5UInkTKJ/Now3xuBABw3JGLX4 cnE= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net