$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/644bc1cc-9440-408d-886f-0058348b1e53.roa File: 644bc1cc-9440-408d-886f-0058348b1e53.roa (raw, json) Hash identifier: vAa/M+m82JDJLoPLjoei93kI+/wE3l1+0BNG9zuHY70= Subject key identifier: EE:F6:08:28:61:9E:1E:D1:BB:8E:C6:DB:20:80:54:0B:6A:81:B6:0E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 52F6215D5674E96FC1D6505EDD0639C794FDFB88 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/644bc1cc-9440-408d-886f-0058348b1e53.roa Signing time: Wed 16 Apr 2025 18:52:25 +0000 ROA not before: Wed 16 Apr 2025 18:52:25 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f6:21:5d:56:74:e9:6f:c1:d6:50:5e:dd:06:39:c7:94:fd:fb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 16 18:52:25 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=e0eda4e602ec788390f1075943b9b1aaa56c86a60383d1e4747d289ac812e7ad, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:7d:52:78:d3:07:ba:9e:09:16:0d:3d:18: 9b:75:3c:f0:7d:96:a2:34:e8:ca:c7:5d:41:d3:07: 5d:0d:48:32:7d:ca:61:fb:4d:cd:7c:57:7e:48:c1: a9:0b:fa:17:e7:f8:12:7b:91:ee:b6:ea:28:1c:db: 34:16:78:32:a5:f9:ae:2e:96:a2:8b:c9:28:cb:66: d5:64:e8:b1:83:bc:ae:eb:f8:38:b1:77:21:92:b8: 26:7a:87:4b:e5:bd:c9:9d:61:fd:4c:c0:a5:8e:42: b3:74:64:fa:4a:c8:82:f6:6b:05:9e:40:0a:89:b3: cc:4a:0f:b7:96:2f:bf:c9:d3:f6:ab:09:d8:fe:47: 1d:23:5b:47:6e:75:b2:58:f0:d1:e1:16:3f:eb:c0: 1b:fc:b7:94:d7:3f:7a:bf:5f:76:34:ec:c8:c2:2c: a8:f7:d0:74:42:57:a6:22:ae:85:b5:75:25:3f:e7: ce:59:31:87:68:ee:19:33:93:9f:ed:93:ce:2d:b5: 7e:40:a7:30:0f:b8:75:a8:cc:22:0c:81:4f:bd:78: c0:9b:0a:6c:6f:12:25:6d:36:e8:5d:93:06:d6:fb: d9:7b:93:33:5d:0a:08:70:59:fb:96:5c:3f:59:ff: 5f:94:b9:21:62:df:79:68:78:94:6a:97:55:5d:3e: 19:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F6:08:28:61:9E:1E:D1:BB:8E:C6:DB:20:80:54:0B:6A:81:B6:0E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/644bc1cc-9440-408d-886f-0058348b1e53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:e000::/40 Signature Algorithm: sha256WithRSAEncryption 66:c2:a7:45:bc:bd:62:70:c9:fc:36:99:97:11:2c:e0:87:58: 82:7c:0e:a8:8c:fd:cf:e0:4c:46:b1:85:4b:71:75:5c:04:5a: f8:12:8e:6f:9d:e4:82:3c:b7:bc:be:c3:40:08:2d:0e:a4:b9: 65:de:86:6d:03:4c:f9:75:a8:d5:44:14:35:83:e4:b7:cf:5e: d1:a4:f8:20:38:92:52:04:c3:3c:89:63:bd:cb:54:22:52:70: 4a:3e:de:fe:27:12:cf:01:f5:4b:fb:c2:6b:77:93:b4:f2:16: be:92:56:ae:19:00:6c:d9:9d:1f:70:f3:a6:e2:61:98:cb:d6: 14:89:3a:ac:bd:9e:c0:02:b9:ec:af:38:ca:d5:03:bf:2d:1b: 29:bb:50:d7:29:e4:8b:88:ab:9e:d0:9c:8e:3c:43:22:6e:e0: 31:f4:3b:a3:e3:ac:aa:5d:37:47:dc:41:4d:c7:75:1d:73:16: 3e:e6:24:e8:bd:14:43:34:97:36:96:db:bf:8c:c9:01:fb:b8: 72:47:50:cf:ed:09:4c:2d:02:2f:ed:a8:b1:49:47:9e:02:51: c0:31:f1:88:f2:bf:2b:dd:6b:1c:0c:71:b2:f2:0b:07:93:75: cf:ce:46:96:f9:81:1d:02:51:76:76:b1:7f:12:80:81:37:f4: 9d:f8:3c:be -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUvYhXVZ06W/B1lBe3QY5x5T9+4gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNjE4NTIyNVoX DTI1MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAZTBlZGE0ZTYwMmVjNzg4MzkwZjEw NzU5NDNiOWIxYWFhNTZjODZhNjAzODNkMWU0NzQ3ZDI4OWFjODEyZTdhZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNJ9UnjTB7qeCRYNPRibdTzwfZai NOjKx11B0wddDUgyfcph+03NfFd+SMGpC/oX5/gSe5HutuooHNs0FngypfmuLpai i8koy2bVZOixg7yu6/g4sXchkrgmeodL5b3JnWH9TMCljkKzdGT6SsiC9msFnkAK ibPMSg+3li+/ydP2qwnY/kcdI1tHbnWyWPDR4RY/68Ab/LeU1z96v192NOzIwiyo 99B0QlemIq6FtXUlP+fOWTGHaO4ZM5Of7ZPOLbV+QKcwD7h1qMwiDIFPvXjAmwps bxIlbTboXZMG1vvZe5MzXQoIcFn7llw/Wf9flLkhYt95aHiUapdVXT4Z7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO72CChhnh7Ru47G2yCAVAtqgbYOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY0NGJjMWNjLTk0NDAtNDA4ZC04ODZmLTAwNTgzNDhiMWU1My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9OAwDQYJKoZIhvcNAQELBQADggEBAGbCp0W8vWJwyfw2mZcR LOCHWIJ8DqiM/c/gTEaxhUtxdVwEWvgSjm+d5II8t7y+w0AILQ6kuWXehm0DTPl1 qNVEFDWD5LfPXtGk+CA4klIEwzyJY73LVCJScEo+3v4nEs8B9Uv7wmt3k7TyFr6S Vq4ZAGzZnR9w86biYZjL1hSJOqy9nsACueyvOMrVA78tGym7UNcp5IuIq57QnI48 QyJu4DH0O6PjrKpdN0fcQU3HdR1zFj7mJOi9FEM0lzaW27+MyQH7uHJHUM/tCUwt Ai/tqLFJR54CUcAx8YjyvyvdaxwMcbLyCweTdc/ORpb5gR0CUXZ2sX8SgIE39J34 PL4= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net