$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60ccb5af-c796-4a3f-a0b1-d5091b4a2423.roa File: 60ccb5af-c796-4a3f-a0b1-d5091b4a2423.roa (raw, json) Hash identifier: vFYraAmHGiE1a4My10Hkm2lfkhMprLl84hPeoR4a4wY= Subject key identifier: A5:B9:0A:8A:D7:8B:E3:AC:60:BF:87:8D:69:D9:42:AB:F5:0B:D2:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5ACFFF9E0D3121AD6CEA87E92033C514CAF46EB9 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60ccb5af-c796-4a3f-a0b1-d5091b4a2423.roa Signing time: Mon 21 Apr 2025 16:40:09 +0000 ROA not before: Mon 21 Apr 2025 16:40:09 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da12:8000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cf:ff:9e:0d:31:21:ad:6c:ea:87:e9:20:33:c5:14:ca:f4:6e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:40:09 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=89d2b8777ed86a70952172067300755e495ab47d005ce0f605f40953bb258d3f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b5:4e:9e:27:28:db:65:33:6f:ec:d6:09:03: 69:ba:46:71:ca:92:c4:6b:e8:05:67:8c:a3:46:35: 3b:4f:3d:ca:5b:fa:9e:b7:bd:9e:3f:00:68:90:ed: 02:75:26:81:45:f7:e7:36:4b:c0:9f:d0:16:ab:25: ec:a9:46:d4:14:07:82:ba:48:29:86:78:78:cd:45: 03:1e:66:76:15:b8:47:82:dd:1c:68:43:38:7a:d5: eb:df:19:34:62:5e:7b:f8:27:43:83:85:ea:ae:9f: 3e:0e:95:c9:e9:df:cb:ee:53:11:c7:26:bd:9e:78: 99:b4:15:f1:c7:87:62:d8:81:93:54:17:09:c1:aa: e1:e5:95:bd:11:5a:0f:e4:5f:7f:89:d1:bb:03:62: 0c:aa:0b:f2:c1:d5:b8:47:0e:17:7d:d0:21:c9:77: da:32:01:16:00:65:f1:6c:9b:a3:c9:da:6b:d6:f3: 44:1e:1f:a8:06:60:bc:27:dc:8e:fe:f1:cc:16:d0: d7:45:0b:cc:8b:77:e8:50:7e:b0:b6:05:7d:05:8f: 8a:bb:f2:be:9e:04:5d:c2:96:79:35:46:51:cc:3e: 76:c6:75:b9:41:0a:46:0f:61:83:b1:1a:e0:a7:6a: 1b:78:46:ef:df:8d:25:6e:90:48:36:0e:95:77:09: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B9:0A:8A:D7:8B:E3:AC:60:BF:87:8D:69:D9:42:AB:F5:0B:D2:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60ccb5af-c796-4a3f-a0b1-d5091b4a2423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da12:8000::/38 Signature Algorithm: sha256WithRSAEncryption 65:21:08:8d:e8:26:05:52:33:bf:ba:ec:7b:3e:d1:52:e1:3d: 26:86:f9:3d:16:47:42:f0:97:7a:5b:be:cc:3f:cf:38:b0:36: 08:da:a8:48:b3:be:98:5a:93:8e:af:c4:d4:76:2e:cf:27:31: ca:52:18:95:e7:2b:b9:88:49:f6:8e:5c:c4:ff:03:bc:d2:e4: 17:86:9d:7a:2c:86:0a:ab:af:71:a4:48:7b:3e:b8:0c:fb:f7: 04:48:7b:6c:99:0a:83:40:60:01:24:41:e5:fe:47:29:40:6f: d1:3c:b3:f4:c4:4b:c3:6b:55:a3:9c:7c:84:c6:75:cc:0c:89: 79:97:c9:88:94:10:7f:53:3e:89:eb:f2:a1:8f:0a:52:98:80: d0:d7:4d:93:26:8c:a6:cc:80:7f:eb:7e:f3:3c:6a:48:c3:17: c5:c0:7a:f3:1c:ad:b9:e3:39:6a:5a:e2:5b:2c:4b:0b:62:e4: 92:eb:de:11:37:c9:23:a4:81:33:6c:03:5a:4c:a0:25:1a:52: fb:4f:ee:e1:a4:65:55:72:ae:0c:ea:85:39:88:5c:ff:ed:b6: 17:b8:ea:97:fc:82:be:73:1a:bf:5f:07:e7:63:3b:16:4d:b9: 47:c0:4b:be:34:29:e1:fd:c3:f0:6e:15:7e:22:07:dc:67:6c: ca:36:ba:26 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWs//ng0xIa1s6ofpIDPFFMr0brkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2NDAwOVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAODlkMmI4Nzc3ZWQ4NmE3MDk1MjE3 MjA2NzMwMDc1NWU0OTVhYjQ3ZDAwNWNlMGY2MDVmNDA5NTNiYjI1OGQzZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27VOnico22Uzb+zWCQNpukZxypLE a+gFZ4yjRjU7Tz3KW/qet72ePwBokO0CdSaBRffnNkvAn9AWqyXsqUbUFAeCukgp hnh4zUUDHmZ2FbhHgt0caEM4etXr3xk0Yl57+CdDg4Xqrp8+DpXJ6d/L7lMRxya9 nniZtBXxx4di2IGTVBcJwarh5ZW9EVoP5F9/idG7A2IMqgvywdW4Rw4XfdAhyXfa MgEWAGXxbJujydpr1vNEHh+oBmC8J9yO/vHMFtDXRQvMi3foUH6wtgV9BY+Ku/K+ ngRdwpZ5NUZRzD52xnW5QQpGD2GDsRrgp2obeEbv340lbpBINg6VdwlDQwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKW5CorXi+OsYL+HjWnZQqv1C9J7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYwY2NiNWFmLWM3OTYtNGEzZi1hMGIxLWQ1MDkxYjRhMjQyMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaEoAwDQYJKoZIhvcNAQELBQADggEBAGUhCI3oJgVSM7+67Hs+ 0VLhPSaG+T0WR0Lwl3pbvsw/zziwNgjaqEizvphak46vxNR2Ls8nMcpSGJXnK7mI SfaOXMT/A7zS5BeGnXoshgqrr3GkSHs+uAz79wRIe2yZCoNAYAEkQeX+RylAb9E8 s/TES8NrVaOcfITGdcwMiXmXyYiUEH9TPonr8qGPClKYgNDXTZMmjKbMgH/rfvM8 akjDF8XAevMcrbnjOWpa4lssSwti5JLr3hE3ySOkgTNsA1pMoCUaUvtP7uGkZVVy rgzqhTmIXP/tthe46pf8gr5zGr9fB+djOxZNuUfAS740KeH9w/BuFX4iB9xnbMo2 uiY= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net