$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f02c5e6-ffee-4777-b0fd-d0651418af2b.roa File: 5f02c5e6-ffee-4777-b0fd-d0651418af2b.roa (raw, json) Hash identifier: rRnMcF6+gT4bhTk+w2ikiN/Zwfz1suksfoiqc0QkTiw= Subject key identifier: 4D:69:CC:47:39:0E:BD:D3:47:68:E7:E3:66:F0:79:12:AA:B5:A6:8F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 201E18323D7A99BEA0C2CD4CEEE4DEBDF122DAB1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f02c5e6-ffee-4777-b0fd-d0651418af2b.roa Signing time: Mon 21 Apr 2025 16:00:33 +0000 ROA not before: Mon 21 Apr 2025 16:00:33 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:2020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1e:18:32:3d:7a:99:be:a0:c2:cd:4c:ee:e4:de:bd:f1:22:da:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:00:33 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=6b79c7dc01281c85804bc6fedb8d547c4e1005e31c19c8b7b157bd12e82aa795, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b9:b7:91:dd:88:94:cc:9e:c0:44:69:47:50: 8c:d5:ba:8b:d1:ed:a2:c5:a5:c9:46:2e:df:bb:a9: b2:ef:b3:8e:77:9c:f7:55:40:d6:e2:53:16:3e:e8: 4a:d9:bb:0e:11:0c:19:01:ec:08:29:4d:f4:f0:ea: 7e:93:6e:9d:27:20:b2:58:66:00:95:54:7a:c5:c4: ee:c1:20:9d:10:fe:a4:39:fd:ac:15:ac:9a:74:40: 46:e4:33:40:c0:7a:69:62:5d:b4:08:d5:7e:eb:2d: 8c:91:0d:9e:18:99:39:b3:d2:c9:09:ad:a1:f1:bd: b1:a8:50:a3:bf:fd:71:52:ef:86:5c:30:cd:e5:4f: e1:c1:b6:85:5b:85:60:ce:19:de:d0:ad:94:09:72: a6:7d:c8:8b:c0:50:7a:7c:05:c0:a0:26:b8:dd:bd: 82:19:63:76:26:66:a0:2f:3c:4c:ab:59:77:9a:4d: 0d:20:86:bc:d5:10:b2:b4:49:a6:4c:c9:99:bf:31: 13:e0:da:a8:b3:78:54:1d:de:3b:ea:d5:4d:42:90: 64:70:9a:aa:cd:56:d0:94:fd:f2:9c:dc:2e:9f:ff: 4e:0c:8c:fc:cb:81:40:82:2f:0c:14:73:61:1a:4e: b6:7d:d5:8b:61:37:4f:3b:6c:8c:27:c0:bd:13:13: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:69:CC:47:39:0E:BD:D3:47:68:E7:E3:66:F0:79:12:AA:B5:A6:8F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f02c5e6-ffee-4777-b0fd-d0651418af2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:2020::/46 Signature Algorithm: sha256WithRSAEncryption 51:c5:96:cd:2c:9c:ed:8a:45:a7:98:49:2c:3e:bf:bf:0d:c4: 94:41:04:82:86:86:65:7a:3c:c4:fb:5d:67:a1:5f:d3:bd:01: 9a:64:bf:e0:dc:e6:f0:16:9d:7a:8b:61:f5:7b:ba:44:9b:fa: 4c:b9:b8:b0:4f:0e:cb:9f:15:44:de:d0:7d:dd:9f:80:cf:e7: 58:a3:2f:75:fd:02:72:5e:ef:ab:37:7d:f4:e3:cc:d4:08:08: 41:84:e0:d8:75:e1:9b:b8:d6:86:eb:6c:ac:24:a3:71:07:e2: 5e:6a:98:5d:43:9c:cf:da:a6:7b:d7:1c:d2:80:44:4e:b5:4a: 39:fc:ce:f4:a1:22:ac:71:46:9f:ee:3a:6b:f6:49:a8:bf:2d: cd:a6:92:1e:05:5a:22:3a:82:94:84:1d:e4:15:d3:0f:cc:bc: 9b:4c:a8:87:8d:c6:2c:3c:a5:ce:be:ac:38:aa:63:41:64:f8: de:d1:8f:ab:a3:0c:6e:46:d4:a0:f4:9f:62:9e:1e:87:76:c7: 41:cb:19:80:50:71:bd:37:0f:b4:a4:b4:03:66:62:5d:e0:2a: 5f:35:98:d0:25:04:dc:92:4f:7d:07:de:8c:01:f1:5d:b5:6c: 59:be:11:1d:69:80:95:8c:b8:50:37:b5:42:2c:9c:26:4d:74: f3:4f:fd:21 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIB4YMj16mb6gws1M7uTevfEi2rEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MDAzM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANmI3OWM3ZGMwMTI4MWM4NTgwNGJj NmZlZGI4ZDU0N2M0ZTEwMDVlMzFjMTljOGI3YjE1N2JkMTJlODJhYTc5NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7m3kd2IlMyewERpR1CM1bqL0e2i xaXJRi7fu6my77OOd5z3VUDW4lMWPuhK2bsOEQwZAewIKU308Op+k26dJyCyWGYA lVR6xcTuwSCdEP6kOf2sFayadEBG5DNAwHppYl20CNV+6y2MkQ2eGJk5s9LJCa2h 8b2xqFCjv/1xUu+GXDDN5U/hwbaFW4Vgzhne0K2UCXKmfciLwFB6fAXAoCa43b2C GWN2JmagLzxMq1l3mk0NIIa81RCytEmmTMmZvzET4Nqos3hUHd476tVNQpBkcJqq zVbQlP3ynNwun/9ODIz8y4FAgi8MFHNhGk62fdWLYTdPO2yMJ8C9ExNzeQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE1pzEc5Dr3TR2jn42bweRKqtaaPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmMDJjNWU2LWZmZWUtNDc3Ny1iMGZkLWQwNjUxNDE4YWYyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+yAgMA0GCSqGSIb3DQEBCwUAA4IBAQBRxZbNLJztikWnmEks Pr+/DcSUQQSChoZlejzE+11noV/TvQGaZL/g3ObwFp16i2H1e7pEm/pMubiwTw7L nxVE3tB93Z+Az+dYoy91/QJyXu+rN33048zUCAhBhODYdeGbuNaG62ysJKNxB+Je aphdQ5zP2qZ71xzSgEROtUo5/M70oSKscUaf7jpr9kmovy3NppIeBVoiOoKUhB3k FdMPzLybTKiHjcYsPKXOvqw4qmNBZPje0Y+rowxuRtSg9J9inh6HdsdByxmAUHG9 Nw+0pLQDZmJd4CpfNZjQJQTckk99B96MAfFdtWxZvhEdaYCVjLhQN7VCLJwmTXTz T/0h -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net