$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa File: 612ca3c6-0251-4029-8118-ab1be2a61379.roa (raw, json) Hash identifier: 9dclWR7CF8oTnH7ZYKMsqMk4YM7QrbWCpUcc20PGsqM= Subject key identifier: AD:42:45:CF:32:E1:21:EA:90:E7:DC:63:8A:49:7A:E1:DB:15:70:FE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F04DCDAB25243317CB2668D710A4111BDAAA294 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa Signing time: Fri 18 Apr 2025 00:00:18 +0000 ROA not before: Fri 18 Apr 2025 00:00:18 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:04:dc:da:b2:52:43:31:7c:b2:66:8d:71:0a:41:11:bd:aa:a2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 18 00:00:18 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=a3f5c4fa3403c5b35cc89aeffcd22dd82c8a7d7a50667082a29766238cc47a3e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:6a:ee:a2:b8:e2:0f:ef:34:bb:7f:b3:bd: e6:61:51:8c:94:c0:38:25:7c:4c:7e:14:32:f3:17: 26:12:fb:62:54:1f:d3:80:b7:5f:89:b6:0f:92:f0: e4:78:f0:d5:ba:0b:c3:a0:91:99:88:e5:08:ef:5a: 0e:a3:ba:84:a8:69:5d:c2:b1:d0:86:f6:ea:44:11: 2b:9d:17:1e:05:19:fb:6d:9a:fd:4a:5e:8b:c9:52: bd:74:35:17:19:9a:82:30:90:7b:25:48:ae:42:06: ef:aa:4a:00:b0:03:a9:4a:96:fe:3f:f8:73:92:f6: 4c:7b:50:25:f0:9c:1a:a4:a3:73:a5:0c:0d:86:02: fe:05:94:89:d6:0d:8c:18:51:be:05:d7:0c:b5:22: 2c:84:6f:24:88:e4:37:49:b4:26:3a:10:15:8b:5a: 89:b1:e2:c7:51:42:c6:9b:26:84:99:b3:2a:e9:5c: 93:f0:35:07:e7:b2:46:84:8f:b1:2c:89:8a:e5:b8: 47:c9:4d:e4:69:71:aa:72:95:fb:42:cd:38:b4:88: 96:fb:ad:b3:c7:7f:78:7c:1d:31:db:12:25:0d:01: 1f:03:ba:02:e0:72:97:ef:e5:e9:02:cf:bb:c0:0c: 1d:88:39:11:52:81:04:25:7e:13:48:b2:c6:68:d3: a0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:42:45:CF:32:E1:21:EA:90:E7:DC:63:8A:49:7A:E1:DB:15:70:FE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/612ca3c6-0251-4029-8118-ab1be2a61379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:4040::/48 Signature Algorithm: sha256WithRSAEncryption 81:ce:c2:72:c3:0c:f5:13:f3:49:12:03:c4:64:9f:7f:71:32: 21:16:b0:c3:5f:b1:04:04:d4:a5:c0:0f:e3:a2:9e:45:9e:0e: e7:6e:2a:52:bb:2d:c3:d1:3c:1f:da:d3:17:84:6e:59:3f:b1: a8:5b:59:ad:79:85:17:0a:bc:77:3e:2e:54:d9:4c:d0:e0:db: 22:9e:10:9a:87:81:f7:7d:6e:61:8d:98:d0:1a:cc:54:cb:97: 3e:d7:90:80:e7:30:52:8a:14:17:0c:47:9c:5a:c9:65:68:ba: 43:cc:ca:ca:b2:9b:39:c6:22:7a:df:cf:93:a9:d8:13:20:f5: 69:f9:6e:46:ed:7a:84:e9:28:02:8c:a7:34:96:e9:a8:34:80: b1:6c:1a:50:48:c9:0c:4a:c3:25:20:21:b7:92:ab:f2:29:f5: 38:7e:e3:c3:7c:6b:e6:61:8e:3d:32:d4:95:25:62:ca:20:a2: 2d:84:8a:5a:06:80:59:96:7f:f4:2f:71:92:f1:d8:5e:49:fd: 44:54:44:e6:a7:2b:75:e6:dd:e7:7e:53:ff:9f:dc:10:b9:50: 0c:e0:23:b3:0d:9d:f4:be:71:e3:7f:53:7a:d4:b7:88:32:b8: 5d:6c:eb:4a:7c:42:0d:c0:67:85:45:b3:b7:08:85:aa:78:e8: 2f:59:68:85 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfwTc2rJSQzF8smaNcQpBEb2qopQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxODAwMDAxOFoX DTI1MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAYTNmNWM0ZmEzNDAzYzViMzVjYzg5 YWVmZmNkMjJkZDgyYzhhN2Q3YTUwNjY3MDgyYTI5NzY2MjM4Y2M0N2EzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT9q7qK44g/vNLt/s73mYVGMlMA4 JXxMfhQy8xcmEvtiVB/TgLdfibYPkvDkePDVugvDoJGZiOUI71oOo7qEqGldwrHQ hvbqRBErnRceBRn7bZr9Sl6LyVK9dDUXGZqCMJB7JUiuQgbvqkoAsAOpSpb+P/hz kvZMe1Al8JwapKNzpQwNhgL+BZSJ1g2MGFG+BdcMtSIshG8kiOQ3SbQmOhAVi1qJ seLHUULGmyaEmbMq6VyT8DUH57JGhI+xLImK5bhHyU3kaXGqcpX7Qs04tIiW+62z x394fB0x2xIlDQEfA7oC4HKX7+XpAs+7wAwdiDkRUoEEJX4TSLLGaNOgOwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFK1CRc8y4SHqkOfcY4pJeuHbFXD+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxMmNhM2M2LTAyNTEtNDAyOS04MTE4LWFiMWJlMmE2MTM3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/0BAMA0GCSqGSIb3DQEBCwUAA4IBAQCBzsJywwz1E/NJEgPE ZJ9/cTIhFrDDX7EEBNSlwA/jop5Fng7nbipSuy3D0Twf2tMXhG5ZP7GoW1mteYUX Crx3Pi5U2UzQ4NsinhCah4H3fW5hjZjQGsxUy5c+15CA5zBSihQXDEecWsllaLpD zMrKsps5xiJ638+TqdgTIPVp+W5G7XqE6SgCjKc0lumoNICxbBpQSMkMSsMlICG3 kqvyKfU4fuPDfGvmYY49MtSVJWLKIKIthIpaBoBZln/0L3GS8dheSf1EVETmpyt1 5t3nflP/n9wQuVAM4COzDZ30vnHjf1N61LeIMrhdbOtKfEINwGeFRbO3CIWqeOgv WWiF -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net