$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d5afbd6-8d8c-49a9-bea6-8e8f6b808827.roa File: 5d5afbd6-8d8c-49a9-bea6-8e8f6b808827.roa (raw, json) Hash identifier: g7ZAfTnPhKUN4CY4NFVfHGm7Dj63UdmbNnt4OPr45x4= Subject key identifier: DD:FC:7D:13:D6:85:94:D6:0E:6E:AE:54:58:E5:52:76:9F:96:3F:9A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 562E987D590E3AEE2514AAB4B59D7242CD6EA25A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d5afbd6-8d8c-49a9-bea6-8e8f6b808827.roa Signing time: Mon 21 Apr 2025 16:00:47 +0000 ROA not before: Mon 21 Apr 2025 16:00:47 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2e:98:7d:59:0e:3a:ee:25:14:aa:b4:b5:9d:72:42:cd:6e:a2:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:00:47 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=7392f562cada489e41d1c642caddc8a82ab159bf72b34711359aecc5cc180513, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:32:7a:74:4d:e2:ad:0d:31:66:6b:13:47:6b: 2c:6f:1c:96:c1:ff:36:55:bb:77:f6:0c:63:2d:48: 31:20:43:ac:3f:b3:58:e7:c2:db:8f:e5:f2:22:ae: 7b:11:c9:f8:26:ab:ff:f8:23:ef:6a:98:27:ff:be: 93:94:8f:9d:e2:a3:13:aa:6e:8b:bf:a6:9b:8b:d8: e8:c9:2b:69:c4:e5:34:2f:2c:03:1a:d8:be:5d:ef: c5:b5:0f:bc:61:3c:c5:8d:eb:fb:f1:1a:15:a0:fd: b7:0c:5c:92:67:2a:11:fa:98:9f:76:c6:5b:74:ae: 07:c6:30:ab:ad:a0:22:70:d9:f8:22:0a:44:e3:4e: 42:22:8a:b1:12:a9:af:7e:e4:58:2a:6f:e1:65:31: cc:56:7f:ef:42:49:ab:f8:d7:b3:18:5c:cf:fb:60: 3e:db:72:9f:99:86:64:ba:fb:73:bb:a3:28:14:38: bd:a0:0d:fe:17:74:7f:52:df:e0:10:23:d9:ef:60: 91:37:5e:a1:8d:34:ff:75:74:d1:e1:a6:86:04:03: d9:b9:47:7f:da:dd:7e:ac:af:38:0d:71:00:cc:80: 99:3c:36:9f:15:77:da:b3:20:df:81:10:4d:31:92: e1:8d:5b:b7:4f:60:30:6b:4e:c6:6f:ca:40:99:75: e0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:7D:13:D6:85:94:D6:0E:6E:AE:54:58:E5:52:76:9F:96:3F:9A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5d5afbd6-8d8c-49a9-bea6-8e8f6b808827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:840::/46 Signature Algorithm: sha256WithRSAEncryption 7c:70:bc:86:b9:18:5e:f0:c0:61:45:bd:6a:04:05:4f:26:43: 49:30:34:fe:09:e2:3a:b2:c9:60:d0:5e:71:c2:45:54:3c:9b: 39:ac:dd:3b:b5:32:3c:10:5b:41:0e:f6:46:f9:f4:68:2a:05: 73:ab:de:b3:88:5d:ab:9c:f8:db:3c:1c:7b:78:62:18:1d:dc: c4:26:99:ed:29:2d:94:3e:fb:59:07:c3:4b:16:de:ca:40:39: 80:66:b3:42:4f:ab:1f:01:5f:49:a0:34:fe:50:d9:ed:ba:d1: 4b:41:41:c1:e1:fe:ae:72:8c:ad:47:63:d7:7f:6a:62:8f:da: 46:e7:c1:40:e9:6b:f6:33:1f:55:7f:21:a2:45:3d:79:83:3b: 9c:7c:5a:3a:55:f1:9c:2a:62:c5:38:d0:aa:f9:4d:3b:1d:7f: 49:fd:6a:49:1d:d2:7d:1a:29:58:5d:96:78:b3:65:d0:6e:9b: c9:15:b6:ba:61:f9:27:e8:99:ab:60:79:b4:63:00:49:3e:de: 58:c5:7c:fb:75:98:20:41:2f:82:bd:97:ec:bb:11:e9:d3:6b: 25:d6:e1:1b:66:fb:ba:64:f2:dc:5c:8f:58:58:1c:6f:60:94: c3:9d:20:4a:45:c1:89:c4:80:24:72:3f:f3:d7:07:f0:b7:df: e4:41:97:b0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVi6YfVkOOu4lFKq0tZ1yQs1uolowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MDA0N1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANzM5MmY1NjJjYWRhNDg5ZTQxZDFj NjQyY2FkZGM4YTgyYWIxNTliZjcyYjM0NzExMzU5YWVjYzVjYzE4MDUxMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTJ6dE3irQ0xZmsTR2ssbxyWwf82 Vbt39gxjLUgxIEOsP7NY58Lbj+XyIq57Ecn4Jqv/+CPvapgn/76TlI+d4qMTqm6L v6abi9joyStpxOU0LywDGti+Xe/FtQ+8YTzFjev78RoVoP23DFySZyoR+pifdsZb dK4HxjCrraAicNn4IgpE405CIoqxEqmvfuRYKm/hZTHMVn/vQkmr+NezGFzP+2A+ 23KfmYZkuvtzu6MoFDi9oA3+F3R/Ut/gECPZ72CRN16hjTT/dXTR4aaGBAPZuUd/ 2t1+rK84DXEAzICZPDafFXfasyDfgRBNMZLhjVu3T2Awa07Gb8pAmXXgwQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFN38fRPWhZTWDm6uVFjlUnaflj+aMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVkNWFmYmQ2LThkOGMtNDlhOS1iZWE2LThlOGY2YjgwODgyNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+whAMA0GCSqGSIb3DQEBCwUAA4IBAQB8cLyGuRhe8MBhRb1q BAVPJkNJMDT+CeI6sslg0F5xwkVUPJs5rN07tTI8EFtBDvZG+fRoKgVzq96ziF2r nPjbPBx7eGIYHdzEJpntKS2UPvtZB8NLFt7KQDmAZrNCT6sfAV9JoDT+UNntutFL QUHB4f6ucoytR2PXf2pij9pG58FA6Wv2Mx9VfyGiRT15gzucfFo6VfGcKmLFONCq +U07HX9J/WpJHdJ9GilYXZZ4s2XQbpvJFba6Yfkn6JmrYHm0YwBJPt5YxXz7dZgg QS+CvZfsuxHp02sl1uEbZvu6ZPLcXI9YWBxvYJTDnSBKRcGJxIAkcj/z1wfwt9/k QZew -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net