$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b5ea3b5-d1e1-4482-9795-44899d6c1b41.roa File: 5b5ea3b5-d1e1-4482-9795-44899d6c1b41.roa (raw, json) Hash identifier: JjOatUA7Fbppi3x9Qdx8AuPbalFl65FLgc7A3KDPPhs= Subject key identifier: F4:64:E3:F4:05:21:7E:42:00:A6:DD:17:03:F6:AF:FA:EB:90:ED:14 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 163E56AA52BA1E43AC015344EE428690F4839F28 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b5ea3b5-d1e1-4482-9795-44899d6c1b41.roa Signing time: Sat 19 Apr 2025 00:31:22 +0000 ROA not before: Sat 19 Apr 2025 00:31:22 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3e:56:aa:52:ba:1e:43:ac:01:53:44:ee:42:86:90:f4:83:9f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:31:22 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=46c7dd83311ea09cc5ad077874fc87ab902558b23afc1dd60531a5a496e2c4ea, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:10:ad:8a:03:86:44:41:30:51:07:56:1e: f7:a7:3d:af:6b:5b:70:27:9d:ba:b2:09:2b:b6:6e: 27:e5:6c:55:f8:d5:e5:31:4e:3a:3d:f8:99:44:b1: 26:5d:15:75:76:ce:27:68:c4:77:19:d3:04:01:90: 36:08:cd:b1:75:e4:c9:88:13:77:54:84:9d:a4:70: ec:39:a0:01:11:0d:9e:91:a6:8f:17:11:87:23:58: 13:88:3e:25:af:56:90:73:f5:8a:83:47:aa:0d:bf: cb:39:ed:79:0c:0a:88:36:9e:06:21:cb:2f:e9:7c: 3c:5e:b3:a0:6b:3f:c4:f7:12:d3:6d:ed:04:1a:79: 9f:56:86:d1:02:16:9a:48:54:24:a0:96:96:cc:7e: d7:bb:dc:0e:de:83:98:39:3b:0e:f1:ed:d3:f2:9a: c1:54:c3:ea:f2:e9:e2:f2:ff:a8:4e:9b:a8:c7:b1: cf:58:fa:c2:74:89:f6:22:e6:0b:79:6b:80:5d:55: 19:bf:02:61:05:ff:8c:c3:52:5a:fa:29:b4:f6:2c: 7e:d5:18:f8:2c:3c:0a:75:c4:0e:f7:46:82:19:1b: fa:d9:8f:95:3e:ab:32:e9:13:5f:2b:f1:79:da:91: 4d:2d:79:76:90:c4:cf:84:08:40:17:9f:b7:05:8d: 0d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:64:E3:F4:05:21:7E:42:00:A6:DD:17:03:F6:AF:FA:EB:90:ED:14 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b5ea3b5-d1e1-4482-9795-44899d6c1b41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:7000::/40 Signature Algorithm: sha256WithRSAEncryption 7e:f9:21:28:ef:b1:87:bf:af:71:c9:84:5e:bf:c7:06:96:2f: 9b:51:79:4d:3a:d2:be:4b:90:c7:77:f9:b3:2b:bb:71:e3:1c: 3c:85:9b:ee:da:4a:37:82:e2:1a:96:a4:28:1e:0f:0c:4b:4a: 31:24:1a:8b:91:23:e1:82:1f:f8:13:da:7b:6a:fd:db:d7:55: 48:09:ab:64:c8:7d:09:eb:13:44:10:5a:db:39:34:82:6c:6a: be:3f:7d:22:51:ea:9d:12:47:16:a1:cd:f8:40:4a:f6:b1:c3: 7e:64:b5:b6:b4:a5:88:ab:e0:0e:d3:81:26:41:f6:91:a2:c4: 30:4b:0f:b2:16:f0:df:f9:3e:7b:5c:d9:ab:47:14:63:c5:c2: a2:52:94:1d:e2:2c:f6:51:0a:f8:49:2f:d0:4f:a2:1a:f4:00: b1:a4:15:14:69:ab:06:25:0b:83:90:25:f0:7c:b3:cb:e2:fe: 80:7d:15:87:42:a5:f0:88:7f:63:7c:d2:e2:86:b2:9e:3e:8e: 86:0c:76:43:fa:4b:cf:66:86:3f:8d:61:e0:86:81:57:83:db: ab:7f:0d:72:a5:c6:15:c5:68:30:b7:3b:d5:b3:65:20:b9:9c: 8d:73:76:7c:1f:e6:69:5c:e5:a2:49:cf:6d:ee:67:ea:c4:79: ff:eb:ee:24 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFj5WqlK6HkOsAVNE7kKGkPSDnygwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMzEyMloX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNANDZjN2RkODMzMTFlYTA5Y2M1YWQw Nzc4NzRmYzg3YWI5MDI1NThiMjNhZmMxZGQ2MDUzMWE1YTQ5NmUyYzRlYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwIQrYoDhkRBMFEHVh73pz2va1tw J526sgkrtm4n5WxV+NXlMU46PfiZRLEmXRV1ds4naMR3GdMEAZA2CM2xdeTJiBN3 VISdpHDsOaABEQ2ekaaPFxGHI1gTiD4lr1aQc/WKg0eqDb/LOe15DAqINp4GIcsv 6Xw8XrOgaz/E9xLTbe0EGnmfVobRAhaaSFQkoJaWzH7Xu9wO3oOYOTsO8e3T8prB VMPq8uni8v+oTpuox7HPWPrCdIn2IuYLeWuAXVUZvwJhBf+Mw1Ja+im09ix+1Rj4 LDwKdcQO90aCGRv62Y+VPqsy6RNfK/F52pFNLXl2kMTPhAhAF5+3BY0NRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPRk4/QFIX5CAKbdFwP2r/rrkO0UMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzViNWVhM2I1LWQxZTEtNDQ4Mi05Nzk1LTQ0ODk5ZDZjMWI0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYXAwDQYJKoZIhvcNAQELBQADggEBAH75ISjvsYe/r3HJhF6/ xwaWL5tReU060r5LkMd3+bMru3HjHDyFm+7aSjeC4hqWpCgeDwxLSjEkGouRI+GC H/gT2ntq/dvXVUgJq2TIfQnrE0QQWts5NIJsar4/fSJR6p0SRxahzfhASvaxw35k tba0pYir4A7TgSZB9pGixDBLD7IW8N/5Pntc2atHFGPFwqJSlB3iLPZRCvhJL9BP ohr0ALGkFRRpqwYlC4OQJfB8s8vi/oB9FYdCpfCIf2N80uKGsp4+joYMdkP6S89m hj+NYeCGgVeD26t/DXKlxhXFaDC3O9WzZSC5nI1zdnwf5mlc5aJJz23uZ+rEef/r 7iQ= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net