$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c92d86f-d096-414c-bd9a-599ba8ca213f.roa File: 5c92d86f-d096-414c-bd9a-599ba8ca213f.roa (raw, json) Hash identifier: ea98D9kxEjI3WLkX2wsvzt3G/fDda0VubF7U/UCZLjI= Subject key identifier: 3E:DB:D1:F6:A4:1B:8D:D6:8F:5A:52:8D:DE:70:AA:88:46:10:00:22 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B92B44B0C831F1C10B1982E9A306C36C4D80291 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c92d86f-d096-414c-bd9a-599ba8ca213f.roa Signing time: Mon 21 Apr 2025 16:10:23 +0000 ROA not before: Mon 21 Apr 2025 16:10:23 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:92:b4:4b:0c:83:1f:1c:10:b1:98:2e:9a:30:6c:36:c4:d8:02:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:10:23 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=5153897a5cb6854bd9bb7d7758b9c07a4ea9a2387aa87e1eecc3cf539e1c6a40, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ca:a3:02:e4:47:93:6c:92:2d:38:b5:86:83: 50:81:f9:10:d8:7a:6b:fe:64:c7:d6:1a:50:4c:a5: a9:09:df:58:c5:6a:fd:0b:84:01:f3:bc:42:0b:12: c7:77:5b:93:1b:0b:87:5e:42:8c:15:e6:8e:a8:3a: 16:35:1e:fe:33:06:09:63:2c:8e:d4:98:97:30:27: 95:e6:af:28:bf:4b:23:5b:49:8d:04:05:5f:b3:95: ed:e8:36:7e:5d:1a:ad:bb:13:d4:83:67:8a:12:08: 4c:a3:0c:27:63:6e:43:1d:44:cf:c4:1a:2b:a4:b4: c2:52:3c:d3:6e:38:8c:1d:e2:f8:c7:d4:91:96:bc: 7e:b8:6a:50:f8:ec:6d:2a:72:40:9c:f9:7e:59:2b: 9e:88:dc:e3:27:49:86:5d:4d:ac:85:06:6f:8a:33: 25:f4:a2:a1:52:c8:2e:db:61:c7:39:af:b5:bc:06: 5f:a0:af:10:9e:e9:af:ce:2d:d8:42:6f:a5:ab:0f: 5c:25:10:9f:29:4e:ab:20:13:a7:7d:2e:4c:02:65: 52:a9:e2:3f:c7:ab:cd:55:35:01:9f:ac:3c:a5:06: 69:f7:cc:ae:7d:a5:0e:68:28:eb:4c:81:84:a2:e0: e3:62:8b:eb:6a:01:6c:9f:85:1d:9a:b1:b2:15:b5: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DB:D1:F6:A4:1B:8D:D6:8F:5A:52:8D:DE:70:AA:88:46:10:00:22 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5c92d86f-d096-414c-bd9a-599ba8ca213f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:2800::/40 Signature Algorithm: sha256WithRSAEncryption 2f:92:87:fe:ca:85:43:df:c1:c5:d5:c2:75:bc:21:e5:49:65: a5:ec:3f:dc:71:c0:26:91:54:b4:29:91:99:d5:0b:19:38:18: 8c:56:04:2e:13:e0:30:85:68:64:bb:8a:29:7e:63:da:6c:97: a2:d1:f7:bc:73:f6:93:20:ce:5c:6e:6a:2d:21:ea:38:f7:e0: f6:af:7a:d1:9c:e0:b0:4c:d5:11:1d:1f:6f:c3:85:5e:89:31: 4c:9a:3c:cc:af:b5:ae:b1:b1:78:3a:4b:8b:6f:f3:9f:e7:3d: 55:b6:ec:82:86:b5:56:cb:45:c1:1b:9e:fb:3b:60:c7:46:dc: 99:3a:ed:b0:71:b8:e3:48:af:d2:a9:81:78:e2:cd:86:aa:75: 08:e3:00:6e:e5:8e:09:7d:85:4b:bd:50:17:f7:b7:83:8a:4d: b0:a0:20:74:2f:d9:65:fa:90:cb:7d:2d:86:84:a6:b2:be:75: 2b:d3:2c:ce:b0:cd:f7:f0:9c:09:21:1c:ee:ba:a9:89:35:c3: ec:96:2a:11:63:05:de:6c:09:40:be:7c:ed:d9:64:58:56:c7: 45:8e:4a:ef:73:4e:e1:99:4b:1d:24:98:1a:b2:e8:28:d4:d6: f3:d5:0b:9e:d7:ad:43:75:eb:08:f1:cc:de:d5:e8:bd:f0:31: 31:54:73:c7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUa5K0SwyDHxwQsZgumjBsNsTYApEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MTAyM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANTE1Mzg5N2E1Y2I2ODU0YmQ5YmI3 ZDc3NThiOWMwN2E0ZWE5YTIzODdhYTg3ZTFlZWNjM2NmNTM5ZTFjNmE0MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cqjAuRHk2ySLTi1hoNQgfkQ2Hpr /mTH1hpQTKWpCd9YxWr9C4QB87xCCxLHd1uTGwuHXkKMFeaOqDoWNR7+MwYJYyyO 1JiXMCeV5q8ov0sjW0mNBAVfs5Xt6DZ+XRqtuxPUg2eKEghMowwnY25DHUTPxBor pLTCUjzTbjiMHeL4x9SRlrx+uGpQ+OxtKnJAnPl+WSueiNzjJ0mGXU2shQZvijMl 9KKhUsgu22HHOa+1vAZfoK8Qnumvzi3YQm+lqw9cJRCfKU6rIBOnfS5MAmVSqeI/ x6vNVTUBn6w8pQZp98yufaUOaCjrTIGEouDjYovragFsn4UdmrGyFbXWNQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFD7b0fakG43Wj1pSjd5wqohGEAAiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVjOTJkODZmLWQwOTYtNDE0Yy1iZDlhLTU5OWJhOGNhMjEzZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacCgwDQYJKoZIhvcNAQELBQADggEBAC+Sh/7KhUPfwcXVwnW8 IeVJZaXsP9xxwCaRVLQpkZnVCxk4GIxWBC4T4DCFaGS7iil+Y9psl6LR97xz9pMg zlxuai0h6jj34PavetGc4LBM1REdH2/DhV6JMUyaPMyvta6xsXg6S4tv85/nPVW2 7IKGtVbLRcEbnvs7YMdG3Jk67bBxuONIr9KpgXjizYaqdQjjAG7ljgl9hUu9UBf3 t4OKTbCgIHQv2WX6kMt9LYaEprK+dSvTLM6wzffwnAkhHO66qYk1w+yWKhFjBd5s CUC+fO3ZZFhWx0WOSu9zTuGZSx0kmBqy6CjU1vPVC57XrUN16wjxzN7V6L3wMTFU c8c= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net