$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6018436a-9c1a-42cb-8584-15032be971bb.roa File: 6018436a-9c1a-42cb-8584-15032be971bb.roa (raw, json) Hash identifier: dqbaKnjnK3uDAtfEFikiHZdYIzfmcZQq5AVZRa4XQkY= Subject key identifier: B3:06:71:AF:72:FC:DF:A7:5F:D5:8A:98:33:C2:31:FB:46:E7:07:81 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63C324DD1E85C0D7B1CF48E8C9018852B9D9A268 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6018436a-9c1a-42cb-8584-15032be971bb.roa Signing time: Sat 12 Apr 2025 00:01:14 +0000 ROA not before: Sat 12 Apr 2025 00:01:14 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da24::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c3:24:dd:1e:85:c0:d7:b1:cf:48:e8:c9:01:88:52:b9:d9:a2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 12 00:01:14 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=d4b28bc583c9ac068f4d9f501e9abc02e06a6c3caf73d27ab4757934d1027b50, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:60:71:19:27:38:56:18:b4:8c:90:06:5d:91: 66:ce:66:41:53:58:5e:f7:1f:b7:7e:50:25:97:56: e2:75:d6:13:7a:41:b4:f4:fc:64:16:73:5e:e5:46: c9:3f:57:bb:c2:b1:73:46:42:fe:f4:ad:78:f4:73: fb:bc:f7:3c:a2:cf:22:41:95:97:3b:63:e6:65:bf: 78:c0:82:e1:e0:e7:98:14:f6:45:0c:9a:fe:20:df: 42:61:a1:3a:33:f4:de:9c:45:1b:91:92:9b:58:75: 11:4f:5c:d7:97:73:f6:7e:fa:2f:bd:51:93:32:0f: ee:5b:7a:fd:cd:8a:cb:10:51:ab:98:27:00:2d:54: 06:30:bc:c5:17:85:a1:75:7e:27:b0:5f:a1:1d:d6: 3a:5e:eb:22:49:fb:79:a8:22:79:be:08:95:86:a5: 97:3c:cf:83:3a:de:e1:82:c5:ab:29:2b:31:4b:17: 1d:db:2b:ec:72:f2:a1:18:06:3d:7f:14:ed:42:e6: ed:b9:48:26:da:87:a2:d1:ee:ec:18:6a:7a:37:6e: 0d:94:21:63:ca:48:c0:b7:1e:69:44:d6:d3:e6:03: c7:d3:82:0d:48:0b:52:6a:05:70:14:d0:23:71:83: 29:a9:ab:48:3b:f6:90:34:2c:9e:4a:47:82:25:3a: 66:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:06:71:AF:72:FC:DF:A7:5F:D5:8A:98:33:C2:31:FB:46:E7:07:81 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6018436a-9c1a-42cb-8584-15032be971bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da24::/36 Signature Algorithm: sha256WithRSAEncryption 47:3a:a9:45:2c:b0:48:4d:5d:89:ca:42:9d:9b:cc:e6:da:fe: 1e:17:bd:53:ca:7b:cb:6c:36:8c:b1:de:c4:3a:e5:a3:dd:f1: 57:0f:eb:ea:14:64:db:d9:4b:48:e6:31:3c:27:58:e3:a3:04: 42:71:72:ca:10:97:44:ae:58:d2:c8:85:a4:6a:86:bf:12:e1: eb:5f:bb:6c:12:b2:cc:b3:fa:2c:36:49:2f:27:cf:35:f7:cd: 90:b4:25:8a:00:e9:06:21:f9:2c:81:b5:cf:a1:17:50:6a:dc: 35:4c:34:bc:ae:0a:ae:a2:c2:fe:4a:69:d6:9c:1b:15:83:6c: 4e:d6:34:83:ba:a0:94:b9:6e:55:b0:c1:17:a0:5e:e5:8d:5f: e5:5a:80:6d:9b:4e:fd:4a:b4:b2:8a:57:cc:0d:26:33:a4:be: 22:9b:ee:30:bd:cb:4d:09:bd:12:d4:40:20:0f:01:86:47:b0: 46:84:a0:44:ce:d2:d3:0f:f1:2a:df:92:12:85:4e:6a:5b:dc: 26:a5:2b:1a:b7:fd:ad:61:7f:2e:36:ab:e9:69:5a:0a:e3:49: 03:d4:e0:d3:c2:b7:20:99:d5:70:99:3d:e4:c6:4c:ad:e1:f0: ab:7c:65:7b:30:57:38:b9:b4:73:ef:7a:db:89:a7:e4:ee:92: 59:f2:d0:d0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY8Mk3R6FwNexz0joyQGIUrnZomgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxMjAwMDExNFoX DTI1MDUxNzIzNTk1OVowejFJMEcGA1UEBRNAZDRiMjhiYzU4M2M5YWMwNjhmNGQ5 ZjUwMWU5YWJjMDJlMDZhNmMzY2FmNzNkMjdhYjQ3NTc5MzRkMTAyN2I1MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2BxGSc4Vhi0jJAGXZFmzmZBU1he 9x+3flAll1biddYTekG09PxkFnNe5UbJP1e7wrFzRkL+9K149HP7vPc8os8iQZWX O2PmZb94wILh4OeYFPZFDJr+IN9CYaE6M/TenEUbkZKbWHURT1zXl3P2fvovvVGT Mg/uW3r9zYrLEFGrmCcALVQGMLzFF4WhdX4nsF+hHdY6XusiSft5qCJ5vgiVhqWX PM+DOt7hgsWrKSsxSxcd2yvscvKhGAY9fxTtQubtuUgm2oei0e7sGGp6N24NlCFj ykjAtx5pRNbT5gPH04INSAtSagVwFNAjcYMpqatIO/aQNCyeSkeCJTpmsQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLMGca9y/N+nX9WKmDPCMftG5weBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYwMTg0MzZhLTljMWEtNDJjYi04NTg0LTE1MDMyYmU5NzFiYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaJAAwDQYJKoZIhvcNAQELBQADggEBAEc6qUUssEhNXYnKQp2b zOba/h4XvVPKe8tsNoyx3sQ65aPd8VcP6+oUZNvZS0jmMTwnWOOjBEJxcsoQl0Su WNLIhaRqhr8S4etfu2wSssyz+iw2SS8nzzX3zZC0JYoA6QYh+SyBtc+hF1Bq3DVM NLyuCq6iwv5KadacGxWDbE7WNIO6oJS5blWwwRegXuWNX+VagG2bTv1KtLKKV8wN JjOkviKb7jC9y00JvRLUQCAPAYZHsEaEoETO0tMP8SrfkhKFTmpb3CalKxq3/a1h fy42q+lpWgrjSQPU4NPCtyCZ1XCZPeTGTK3h8Kt8ZXswVzi5tHPvetuJp+Tuklny 0NA= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net