$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61c2f1a8-a964-48ab-9d69-9428cf98d4fb.roa File: 61c2f1a8-a964-48ab-9d69-9428cf98d4fb.roa (raw, json) Hash identifier: CXtuoN7tSD97VzIDpiQGpD6416UzQxLI5u3ATVg7GAE= Subject key identifier: 1C:0C:BF:D4:BA:52:83:10:6F:EA:48:E7:CA:A1:A0:0E:8F:CD:9D:DB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 39ADFE737B7100A3FF713EC4E42F072DAF3D8992 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61c2f1a8-a964-48ab-9d69-9428cf98d4fb.roa Signing time: Sat 19 Apr 2025 00:00:58 +0000 ROA not before: Sat 19 Apr 2025 00:00:58 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ad:fe:73:7b:71:00:a3:ff:71:3e:c4:e4:2f:07:2d:af:3d:89:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:00:58 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=6bf9634ae831d5df3e6bce87f7c5fdeda1391639579ec0e41c32f2cccbbb6e26, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4f:89:59:6e:17:93:4b:59:f9:89:a0:38:8c: dd:08:ab:d9:fa:c4:84:d7:53:7e:15:18:40:cd:7c: 69:c2:23:5c:08:50:65:d4:5d:ec:8e:ba:69:cf:59: 57:65:70:90:25:2e:71:a8:15:9c:13:73:9c:2e:7e: 8b:ae:f4:df:56:63:9c:71:30:f3:b0:4f:eb:5b:01: 4f:b6:55:8d:d7:b7:3d:32:29:b0:12:88:88:7c:15: 1b:fb:9c:b1:c3:d2:f7:78:f3:84:be:b3:a9:40:44: aa:06:e8:4f:24:d7:f0:49:50:92:63:71:db:ba:c3: 0e:a0:db:52:bc:4d:8c:5c:46:93:d7:a0:f0:9c:f0: 67:16:45:cc:e9:5f:9f:2f:76:c2:7a:bc:fc:61:c5: bf:04:01:89:bf:f6:fc:23:d6:b3:74:9c:4c:b6:45: ec:f5:81:e1:d3:95:b7:10:1b:55:02:42:f1:81:5e: b4:9d:62:7c:b1:ce:e4:0c:3b:52:be:a5:c6:73:27: 60:63:af:26:cf:5c:ea:c8:6e:db:22:84:49:7f:aa: a1:f0:10:9f:0d:83:9d:ba:fa:ba:1f:1f:65:4a:25: 6b:e8:a2:6e:bd:17:65:81:a6:bf:ed:b5:cc:36:de: a7:0b:9b:4f:1b:b8:c9:f6:ee:e6:c5:38:e1:3d:f7: 5b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0C:BF:D4:BA:52:83:10:6F:EA:48:E7:CA:A1:A0:0E:8F:CD:9D:DB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61c2f1a8-a964-48ab-9d69-9428cf98d4fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:2020::/48 Signature Algorithm: sha256WithRSAEncryption b4:6e:28:14:e9:df:21:5f:1f:87:ef:ff:bc:c8:98:06:c0:41: 65:e8:e9:57:62:dd:39:58:67:d3:19:e0:37:0a:56:4a:46:20: 80:d9:c7:86:76:89:a0:03:41:50:ef:80:7a:f9:50:2c:ef:1a: 77:f0:a6:71:fc:c8:50:8e:2f:3e:5e:23:f7:ff:b0:24:0e:b4: 30:60:4e:cc:74:f9:dc:c1:d9:44:d8:90:80:d5:36:7c:10:cf: 0b:af:2a:e1:61:2e:08:e2:05:10:f5:6b:d7:23:fa:36:f6:ce: a1:35:70:ed:f6:66:a2:94:14:7f:8a:e9:e0:bc:83:2d:2c:44: 9e:ca:6c:08:e9:d5:15:f0:9e:57:b4:1f:09:3c:d0:5a:36:82: 4c:43:de:1b:22:97:a5:15:e6:b7:bb:c4:89:32:fa:85:cc:33: a0:6f:df:c2:ce:21:34:3d:89:ff:2a:bd:7c:18:b9:3a:a5:8f: 4b:6b:39:df:87:db:b0:db:db:e1:1d:85:c7:cd:e2:d6:4e:0f: ea:1c:9f:ca:34:30:dd:2b:78:f8:ce:aa:58:6b:9e:30:5b:f2: 4d:0d:b5:01:7a:55:5f:e6:62:4b:47:6e:2c:8d:72:43:1c:6c: c0:20:09:1c:0b:9f:4b:2d:dc:e9:e3:22:b6:84:84:23:fd:a2: dd:f3:e6:74 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOa3+c3txAKP/cT7E5C8HLa89iZIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMDA1OFoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNANmJmOTYzNGFlODMxZDVkZjNlNmJj ZTg3ZjdjNWZkZWRhMTM5MTYzOTU3OWVjMGU0MWMzMmYyY2NjYmJiNmUyNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6U+JWW4Xk0tZ+YmgOIzdCKvZ+sSE 11N+FRhAzXxpwiNcCFBl1F3sjrppz1lXZXCQJS5xqBWcE3OcLn6LrvTfVmOccTDz sE/rWwFPtlWN17c9MimwEoiIfBUb+5yxw9L3ePOEvrOpQESqBuhPJNfwSVCSY3Hb usMOoNtSvE2MXEaT16DwnPBnFkXM6V+fL3bCerz8YcW/BAGJv/b8I9azdJxMtkXs 9YHh05W3EBtVAkLxgV60nWJ8sc7kDDtSvqXGcydgY68mz1zqyG7bIoRJf6qh8BCf DYOduvq6Hx9lSiVr6KJuvRdlgaa/7bXMNt6nC5tPG7jJ9u7mxTjhPfdbLQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBwMv9S6UoMQb+pI58qhoA6PzZ3bMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxYzJmMWE4LWE5NjQtNDhhYi05ZDY5LTk0MjhjZjk4ZDRmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8iAgMA0GCSqGSIb3DQEBCwUAA4IBAQC0bigU6d8hXx+H7/+8 yJgGwEFl6OlXYt05WGfTGeA3ClZKRiCA2ceGdomgA0FQ74B6+VAs7xp38KZx/MhQ ji8+XiP3/7AkDrQwYE7MdPncwdlE2JCA1TZ8EM8LryrhYS4I4gUQ9WvXI/o29s6h NXDt9mailBR/iungvIMtLESeymwI6dUV8J5XtB8JPNBaNoJMQ94bIpelFea3u8SJ MvqFzDOgb9/CziE0PYn/Kr18GLk6pY9Laznfh9uw29vhHYXHzeLWTg/qHJ/KNDDd K3j4zqpYa54wW/JNDbUBelVf5mJLR24sjXJDHGzAIAkcC59LLdzp4yK2hIQj/aLd 8+Z0 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net