$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61fd8cc3-6b71-4ae0-98ae-cb108294cc84.roa File: 61fd8cc3-6b71-4ae0-98ae-cb108294cc84.roa (raw, json) Hash identifier: UCejHYqzAqHH/zOJnfdefQ9C1y9AKLa47/6SaziujjU= Subject key identifier: 93:8E:E9:92:FB:79:1E:E8:CD:9E:3B:15:A3:E8:0F:88:98:0E:4A:F0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5B733C27876A0672E87CCEB54355E13B756E4ADB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61fd8cc3-6b71-4ae0-98ae-cb108294cc84.roa Signing time: Mon 21 Apr 2025 15:31:28 +0000 ROA not before: Mon 21 Apr 2025 15:31:28 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:a080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:73:3c:27:87:6a:06:72:e8:7c:ce:b5:43:55:e1:3b:75:6e:4a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:31:28 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=56df89946c4b2015dc33a10e3e993175ec683d4ab03c52ab8734ed3b24e7a54b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5c:2c:8c:e7:ed:43:84:40:4d:32:86:02:c1: f1:52:25:39:0b:a0:e6:b0:b1:e4:cd:9d:a1:0e:d9: 09:ed:99:01:ce:ba:64:df:bc:c7:29:b2:30:56:fc: 7c:34:43:7b:3e:44:26:60:2f:cf:6f:f6:16:b4:55: 12:bd:e9:72:fc:8c:90:01:d3:2d:c6:c4:5f:ca:81: b3:d7:b9:8d:88:3d:b8:a8:2e:a7:a2:00:2a:93:29: 34:8c:49:1e:60:b5:71:cd:38:e5:98:a9:49:3f:c5: 0a:2b:e7:7b:43:0a:d4:10:1f:e6:ff:35:cf:46:1d: a6:c8:32:50:a4:a6:25:6d:be:de:cc:d1:1f:b0:b3: 09:bb:ed:41:2f:89:88:d2:6e:c7:31:dd:b6:e6:6c: 31:0d:b8:52:80:01:9e:1b:27:6d:22:6b:08:46:e3: 75:dc:80:a0:dd:ff:12:b9:06:7a:58:da:94:6b:0b: 4f:5a:f6:cd:bb:9f:de:3a:83:92:17:d5:99:a3:76: a7:31:6c:a0:bf:d9:c0:bd:88:2d:5e:1b:92:b8:d4: e8:d6:11:d8:7c:a9:57:e7:05:2f:cc:9a:34:7a:2c: e6:d0:1c:a0:14:f0:7c:4b:c9:f7:04:26:9e:4a:7f: 60:1f:2a:81:7b:c6:a0:e0:d7:72:7d:28:cf:d9:6d: 43:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8E:E9:92:FB:79:1E:E8:CD:9E:3B:15:A3:E8:0F:88:98:0E:4A:F0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61fd8cc3-6b71-4ae0-98ae-cb108294cc84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:a080::/46 Signature Algorithm: sha256WithRSAEncryption 45:bd:e4:80:9f:85:33:64:77:28:27:ba:3e:e2:91:87:cc:bb: 1b:02:34:ba:05:ee:fb:ac:4d:9b:93:1f:9f:c3:a8:82:63:a8: 99:93:73:25:81:2e:53:e9:a1:3b:bf:00:22:10:ac:dd:c1:d7: 35:3b:c6:98:0c:62:d7:e8:02:64:46:f4:f8:c6:bf:13:69:71: 87:e0:15:4a:34:99:86:eb:ac:c4:df:94:29:6b:12:fd:a2:75: 67:31:45:5c:63:ea:f4:41:c2:c7:2a:fb:ca:fb:95:4b:4a:02: 82:2c:3a:66:c7:41:a4:0d:ed:bc:d7:df:a0:6d:8a:9a:4d:4a: ef:bf:c5:b8:fb:f5:aa:ea:bb:41:e8:f0:c9:18:c4:2e:88:a5: 32:c1:21:12:82:8e:3b:08:83:f1:e0:25:ea:d1:b1:95:9b:3c: a3:35:1f:f8:75:e8:9f:6a:c2:7d:6d:0f:95:29:15:42:4f:e2: 18:40:09:9d:f1:26:fe:6c:99:bd:dc:91:54:76:d9:1d:4c:88: 79:a9:e1:b4:87:80:eb:fb:dc:20:0b:59:97:4c:d5:41:3a:e1: 57:e0:c2:80:04:90:f6:37:c7:b0:0b:36:6b:96:17:db:94:b3: 35:6f:be:1d:6b:e7:a6:86:dd:60:d9:a3:80:6a:b3:0f:14:86: 30:c2:4b:68 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUW3M8J4dqBnLofM61Q1XhO3VuStswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MzEyOFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANTZkZjg5OTQ2YzRiMjAxNWRjMzNh MTBlM2U5OTMxNzVlYzY4M2Q0YWIwM2M1MmFiODczNGVkM2IyNGU3YTU0YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VwsjOftQ4RATTKGAsHxUiU5C6Dm sLHkzZ2hDtkJ7ZkBzrpk37zHKbIwVvx8NEN7PkQmYC/Pb/YWtFUSvely/IyQAdMt xsRfyoGz17mNiD24qC6nogAqkyk0jEkeYLVxzTjlmKlJP8UKK+d7QwrUEB/m/zXP Rh2myDJQpKYlbb7ezNEfsLMJu+1BL4mI0m7HMd225mwxDbhSgAGeGydtImsIRuN1 3ICg3f8SuQZ6WNqUawtPWvbNu5/eOoOSF9WZo3anMWygv9nAvYgtXhuSuNTo1hHY fKlX5wUvzJo0eizm0BygFPB8S8n3BCaeSn9gHyqBe8ag4NdyfSjP2W1D+wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJOO6ZL7eR7ozZ47FaPoD4iYDkrwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzYxZmQ4Y2MzLTZiNzEtNGFlMC05OGFlLWNiMTA4Mjk0Y2M4NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba96CAMA0GCSqGSIb3DQEBCwUAA4IBAQBFveSAn4UzZHcoJ7o+ 4pGHzLsbAjS6Be77rE2bkx+fw6iCY6iZk3MlgS5T6aE7vwAiEKzdwdc1O8aYDGLX 6AJkRvT4xr8TaXGH4BVKNJmG66zE35QpaxL9onVnMUVcY+r0QcLHKvvK+5VLSgKC LDpmx0GkDe2819+gbYqaTUrvv8W4+/Wq6rtB6PDJGMQuiKUywSESgo47CIPx4CXq 0bGVmzyjNR/4deifasJ9bQ+VKRVCT+IYQAmd8Sb+bJm93JFUdtkdTIh5qeG0h4Dr +9wgC1mXTNVBOuFX4MKABJD2N8ewCzZrlhfblLM1b74da+emht1g2aOAarMPFIYw wkto -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net