$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa File: 61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa (raw, json) Hash identifier: 8q3JikmWmbhjpjLtPiS54mgvaGRDun0vBnhxffUyMyg= Subject key identifier: 0A:3E:FF:6A:11:74:D6:2A:01:FF:7B:7D:FE:62:DE:9D:06:12:9A:82 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0CEB29C4FA0BDD9A8D0AEC071A13A3F18496AAFE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa Signing time: Mon 21 Apr 2025 16:20:56 +0000 ROA not before: Mon 21 Apr 2025 16:20:56 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:eb:29:c4:fa:0b:dd:9a:8d:0a:ec:07:1a:13:a3:f1:84:96:aa:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:20:56 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=bfad877160768f0df7306d66b8074f3a955948d45f56c3359d32ab39367c47cc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:26:45:b5:92:ff:47:fd:8f:9b:18:bd:82: c7:b9:66:90:40:8c:b3:a9:f5:61:0b:0d:0f:2e:aa: 42:99:52:93:42:e9:0f:6b:0c:57:d4:9f:5a:33:b2: d3:03:4c:ef:ab:9d:38:61:15:17:ac:49:08:14:05: 9d:de:ce:2a:45:ac:88:cf:e1:de:72:ea:a1:dc:f2: 65:f4:b5:89:8f:08:ff:d0:65:b2:f5:30:e6:a5:cf: 9f:a6:fc:57:55:60:dc:4b:3b:87:2e:9e:d5:eb:4f: d0:57:7d:3e:1f:95:f1:ce:f2:05:ca:de:7a:64:c4: 1e:b9:55:ed:1f:29:38:f0:57:57:2d:06:cb:3c:c8: 53:1c:3b:a3:4a:ae:8b:4a:4b:17:4f:1c:11:7d:5d: a0:80:bf:f7:5e:16:56:55:2b:16:35:38:51:26:1f: ca:64:1a:61:41:17:b2:0d:15:1d:c1:0a:4c:3d:e0: 2b:6c:8c:87:b9:dc:70:50:0f:d3:bd:63:b7:de:16: 79:fb:7d:8d:a1:a4:5c:5f:d1:52:63:e0:e9:76:d8: 75:c6:38:d4:b9:dc:0a:16:02:0b:05:ee:2e:4b:65: a9:c7:60:71:85:ed:f1:a5:e9:dd:a5:4c:75:90:1c: c8:40:00:ad:e1:80:df:85:02:0a:18:11:0b:e5:ad: e5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3E:FF:6A:11:74:D6:2A:01:FF:7B:7D:FE:62:DE:9D:06:12:9A:82 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:c000::/40 Signature Algorithm: sha256WithRSAEncryption 94:1e:31:57:b9:77:af:74:db:e8:da:91:b6:f5:c5:3c:13:34: 72:cc:d3:3a:ff:3c:64:cb:a1:2a:c4:6b:92:8d:ce:b0:33:57: d6:af:29:a0:32:cb:06:e3:9e:8d:6a:d3:bb:55:54:61:0f:55: 71:cf:eb:49:9c:01:06:2d:2b:30:31:72:99:4a:32:28:53:58: f2:dd:25:30:26:6c:c0:e2:86:e6:44:74:f7:a9:00:d4:94:c8: 0f:04:41:71:36:43:5f:55:6a:ed:55:de:6a:4e:de:66:cd:d2: 15:3a:b1:5d:9f:75:24:55:7f:8c:e1:b8:69:4f:40:7b:1e:44: bf:4f:14:e4:d3:6e:90:9f:6e:8c:1f:e3:dc:06:1f:f5:e7:51: d6:f0:e4:83:75:29:34:9a:81:a7:8c:45:11:8c:2d:c7:00:d6: 91:75:7a:d2:75:aa:16:8d:84:01:22:0e:eb:d8:2d:1b:db:02: 38:40:a6:d7:c3:f3:94:ef:f3:3f:77:3b:bf:24:c8:71:96:91: b5:9c:59:8e:f0:73:bf:bf:04:0b:e1:f2:12:6b:4f:bf:ec:a3: cf:dd:63:8e:91:74:14:ad:e6:be:b1:a8:26:2a:5a:64:dc:ca: 0e:b3:5a:e8:20:96:53:4d:80:0f:9d:18:8f:c5:f6:5d:6a:07: b4:3b:1a:93 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUDOspxPoL3ZqNCuwHGhOj8YSWqv4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MjA1NloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYmZhZDg3NzE2MDc2OGYwZGY3MzA2 ZDY2YjgwNzRmM2E5NTU5NDhkNDVmNTZjMzM1OWQzMmFiMzkzNjdjNDdjYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO8mRbWS/0f9j5sYvYLHuWaQQIyz qfVhCw0PLqpCmVKTQukPawxX1J9aM7LTA0zvq504YRUXrEkIFAWd3s4qRayIz+He cuqh3PJl9LWJjwj/0GWy9TDmpc+fpvxXVWDcSzuHLp7V60/QV30+H5XxzvIFyt56 ZMQeuVXtHyk48FdXLQbLPMhTHDujSq6LSksXTxwRfV2ggL/3XhZWVSsWNThRJh/K ZBphQReyDRUdwQpMPeArbIyHudxwUA/TvWO33hZ5+32NoaRcX9FSY+Dpdth1xjjU udwKFgILBe4uS2Wpx2Bxhe3xpendpUx1kBzIQACt4YDfhQIKGBEL5a3l5wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAo+/2oRdNYqAf97ff5i3p0GEpqCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxYjlmZGMwLTE4MzYtNGI2My05NDliLTRhMGUyYjk1NTE2Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoMAwDQYJKoZIhvcNAQELBQADggEBAJQeMVe5d6902+jakbb1 xTwTNHLM0zr/PGTLoSrEa5KNzrAzV9avKaAyywbjno1q07tVVGEPVXHP60mcAQYt KzAxcplKMihTWPLdJTAmbMDihuZEdPepANSUyA8EQXE2Q19Vau1V3mpO3mbN0hU6 sV2fdSRVf4zhuGlPQHseRL9PFOTTbpCfbowf49wGH/XnUdbw5IN1KTSagaeMRRGM LccA1pF1etJ1qhaNhAEiDuvYLRvbAjhAptfD85Tv8z93O78kyHGWkbWcWY7wc7+/ BAvh8hJrT7/so8/dY46RdBSt5r6xqCYqWmTcyg6zWuggllNNgA+dGI/F9l1qB7Q7 GpM= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net