$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5dbb8706-2b6a-4c27-971b-618ec8194218.roa File: 5dbb8706-2b6a-4c27-971b-618ec8194218.roa (raw, json) Hash identifier: Rc/IAoydAeIkhBNZz/FNZ55eLVI7u50tgcOTZymL3sk= Subject key identifier: B0:A4:4A:10:E9:1F:1F:F0:68:67:C8:E3:03:5A:AA:25:9C:83:E7:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 34ADFB6C42D9ABBBC7718BB64C3F66FC0B3EB1DD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5dbb8706-2b6a-4c27-971b-618ec8194218.roa Signing time: Mon 21 Apr 2025 15:50:53 +0000 ROA not before: Mon 21 Apr 2025 15:50:53 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:880::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ad:fb:6c:42:d9:ab:bb:c7:71:8b:b6:4c:3f:66:fc:0b:3e:b1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:50:53 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=a865438090d1736f4bdc1e9959b4786544f08e4565562539dbd41e679b7c09e8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6d:cc:e0:d0:67:7e:3e:5e:47:f8:34:14:e4: bb:52:04:12:6e:25:9c:0b:ce:74:7d:28:fb:c0:8b: cc:d3:58:b7:cc:ac:29:95:89:ca:26:02:e3:c6:53: 02:a9:21:19:f4:82:7b:0f:50:63:90:b0:74:d0:d6: 22:55:a9:e1:a6:b2:f2:3a:71:88:12:bf:6b:03:9c: 11:94:c5:4b:a0:b6:c4:ec:f8:87:cb:2a:2c:a8:05: 99:a7:cf:cb:dc:fe:d6:9f:41:7a:d5:db:45:10:66: dd:b6:bf:f5:97:71:fa:f5:4f:21:60:0b:e2:7c:4a: 8e:de:47:b2:8a:35:65:83:df:45:f8:e8:3b:77:5b: 19:d5:61:ae:ad:36:4a:16:98:02:72:73:d2:0f:ee: 82:ff:dd:43:9c:ea:ed:be:f6:2a:48:a7:0a:60:5e: 0e:b6:0b:58:2e:52:3d:79:c8:73:0d:bf:f9:ba:18: 7b:e9:e2:62:f2:12:d0:7b:54:72:34:42:b0:c9:c6: d5:d4:11:e3:5f:eb:6a:79:e5:46:17:58:d8:ba:20: eb:6d:af:e1:9d:44:59:80:4e:8d:0b:70:82:70:29: b5:c0:75:f7:d4:3f:96:d3:3f:cf:ec:45:9f:8e:93: 3f:dc:f6:39:84:5d:d3:54:b9:2f:7c:47:97:28:2c: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A4:4A:10:E9:1F:1F:F0:68:67:C8:E3:03:5A:AA:25:9C:83:E7:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5dbb8706-2b6a-4c27-971b-618ec8194218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:880::/46 Signature Algorithm: sha256WithRSAEncryption c8:c2:b9:df:d8:d6:d6:af:5a:2b:88:a1:7f:79:f7:1d:b8:ff: fa:51:3a:bb:46:0c:32:5d:36:7f:5c:40:c8:85:f0:2b:b8:4d: 25:74:c5:38:53:17:45:49:f0:86:77:ca:09:c5:cb:36:bb:4c: 1e:0d:0a:91:8c:5c:5c:71:f0:d7:26:5b:6e:86:bc:fd:04:98: 3f:82:89:83:de:e8:58:0e:30:62:0c:d3:7b:94:28:30:f6:c2: 2c:ff:e7:e1:53:90:a1:5c:a0:d5:8c:e8:8f:47:24:8f:8c:ca: c2:1f:c7:e6:97:be:2f:e4:4b:fc:86:db:11:27:52:57:23:d1: 5a:61:5c:d7:87:d4:a9:72:18:81:c8:a0:4c:a3:3b:8c:5f:19: 75:b3:2f:ba:b9:3b:e9:aa:b1:f5:46:6d:74:63:38:43:c6:f6: c1:6e:6c:65:b2:ce:12:eb:df:df:3f:c1:61:10:00:c6:60:f6: 37:6e:6e:d9:8f:36:60:b9:05:2d:65:3f:31:0d:ff:e6:5c:af: e0:e0:e5:05:17:d0:f0:6b:3f:a7:26:48:ca:6f:2e:b6:9a:a6: cd:e8:81:a1:81:55:34:9d:b7:38:47:a0:48:7e:36:44:5f:3f: a4:29:a7:79:da:d9:95:5a:d0:70:eb:8e:c3:e0:ba:b3:46:d0: 6d:ce:69:7c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNK37bELZq7vHcYu2TD9m/As+sd0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NTA1M1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYTg2NTQzODA5MGQxNzM2ZjRiZGMx ZTk5NTliNDc4NjU0NGYwOGU0NTY1NTYyNTM5ZGJkNDFlNjc5YjdjMDllODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m3M4NBnfj5eR/g0FOS7UgQSbiWc C850fSj7wIvM01i3zKwplYnKJgLjxlMCqSEZ9IJ7D1BjkLB00NYiVanhprLyOnGI Er9rA5wRlMVLoLbE7PiHyyosqAWZp8/L3P7Wn0F61dtFEGbdtr/1l3H69U8hYAvi fEqO3keyijVlg99F+Og7d1sZ1WGurTZKFpgCcnPSD+6C/91DnOrtvvYqSKcKYF4O tgtYLlI9echzDb/5uhh76eJi8hLQe1RyNEKwycbV1BHjX+tqeeVGF1jYuiDrba/h nURZgE6NC3CCcCm1wHX31D+W0z/P7EWfjpM/3PY5hF3TVLkvfEeXKCwrWwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLCkShDpHx/waGfI4wNaqiWcg+cNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVkYmI4NzA2LTJiNmEtNGMyNy05NzFiLTYxOGVjODE5NDIxOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaQiAMA0GCSqGSIb3DQEBCwUAA4IBAQDIwrnf2NbWr1oriKF/ efcduP/6UTq7RgwyXTZ/XEDIhfAruE0ldMU4UxdFSfCGd8oJxcs2u0weDQqRjFxc cfDXJltuhrz9BJg/gomD3uhYDjBiDNN7lCgw9sIs/+fhU5ChXKDVjOiPRySPjMrC H8fml74v5Ev8htsRJ1JXI9FaYVzXh9SpchiByKBMozuMXxl1sy+6uTvpqrH1Rm10 YzhDxvbBbmxlss4S69/fP8FhEADGYPY3bm7ZjzZguQUtZT8xDf/mXK/g4OUFF9Dw az+nJkjKby62mqbN6IGhgVU0nbc4R6BIfjZEXz+kKad52tmVWtBw647D4LqzRtBt zml8 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net