$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6655ee10-6c32-4ab3-9e1b-e767277d1e17.roa File: 6655ee10-6c32-4ab3-9e1b-e767277d1e17.roa (raw, json) Hash identifier: UbG13I/Txf2qQrD1Z6YspwekC64k/KFItwI3QwLZ0P8= Subject key identifier: B7:D1:6E:FE:78:62:63:66:2B:12:5A:B4:8C:BD:15:42:85:0B:50:85 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 225630F92ECFDA7E904255F413879DE2C40EC6A2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6655ee10-6c32-4ab3-9e1b-e767277d1e17.roa Signing time: Sat 19 Apr 2025 00:01:39 +0000 ROA not before: Sat 19 Apr 2025 00:01:39 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:56:30:f9:2e:cf:da:7e:90:42:55:f4:13:87:9d:e2:c4:0e:c6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:01:39 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=b3746280048608d5c480b6833f88ed69cedbcb236566a647184818c5c9bee321, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:82:27:8f:72:7f:06:1a:37:11:88:32:e0:8c: 95:f5:11:ba:94:c6:3c:8b:4a:5c:e4:e4:d9:34:d5: 28:76:87:35:3f:6d:fb:04:91:ea:3d:c7:14:b0:8f: 58:82:04:58:2c:4f:06:13:fe:d2:d4:32:83:8c:e9: 07:c1:cf:7f:3b:3c:11:6b:02:57:4a:42:a7:ae:08: 71:43:13:ba:06:64:de:7e:42:cd:85:e4:c7:03:03: 9b:96:a9:06:af:8b:13:5b:f0:fc:3c:a2:72:59:52: 90:3f:6c:bd:95:11:53:9c:26:8c:23:ce:5e:0e:7f: 90:17:31:23:08:c3:77:69:cf:96:ca:25:ed:f2:92: 63:c5:a5:e3:8d:8a:71:3e:39:6d:06:3b:f7:83:0f: 53:58:9a:31:4b:d6:2d:36:df:5e:bd:69:59:34:31: 74:46:11:2d:69:6e:27:96:70:87:de:f5:16:c6:f6: a9:01:15:71:c6:a9:51:bc:1a:d8:5b:9e:f8:60:e4: 28:a9:1d:12:85:a7:08:31:45:04:5d:b2:d2:6a:f5: 52:b6:0c:63:62:61:c3:55:3c:5a:dd:c2:d5:92:07: 3b:6c:dc:e6:4a:fa:f3:c2:aa:44:6c:e3:61:ad:1b: 37:82:e3:17:d1:8a:dd:c3:51:75:49:c3:3e:16:3c: e7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D1:6E:FE:78:62:63:66:2B:12:5A:B4:8C:BD:15:42:85:0B:50:85 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6655ee10-6c32-4ab3-9e1b-e767277d1e17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:840::/48 Signature Algorithm: sha256WithRSAEncryption 9f:ff:5b:8f:b9:6a:7d:03:c3:3b:a7:38:78:5a:ec:ed:1b:89: 1d:53:70:cc:bd:5f:10:37:40:56:b3:83:18:32:c1:ff:5e:fb: 94:1d:2a:2b:7d:e3:06:c5:bd:40:ea:32:8b:7e:54:8e:82:23: 56:ac:20:27:4e:7f:0b:7b:e9:34:18:51:67:87:6d:11:9f:a7: 9f:e8:62:26:9f:8e:e5:40:cb:dc:a1:ea:ba:ef:89:00:a8:c4: c7:45:4f:91:7a:06:a2:78:d2:8f:bf:21:1e:55:c3:41:26:5f: 9b:b9:4b:39:3b:25:1f:40:ed:d3:89:df:ba:8a:79:0f:ea:cb: f0:ba:e0:19:ac:c5:98:cd:47:0a:12:0c:a6:55:0b:b5:99:0a: 3e:bd:f2:c5:d7:04:66:62:ed:1c:f5:50:2d:a3:23:8a:27:d6: 28:a5:13:bb:7e:0d:cb:f1:79:da:a3:cd:f2:79:8f:71:c2:ec: 0c:dd:33:a7:6a:1e:a5:b4:84:ac:0b:38:10:4b:76:ef:f0:ce: 78:60:4e:cd:29:59:9b:c2:1a:a9:7e:64:07:26:a9:16:72:ed: aa:78:2b:20:78:d3:83:94:26:d9:bc:cb:b6:7b:1e:3c:dd:4b: 06:e6:9f:93:86:6a:47:a1:e6:d0:7d:c3:d3:2d:77:0c:37:a2: 73:69:70:dc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIlYw+S7P2n6QQlX0E4ed4sQOxqIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMDEzOVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAYjM3NDYyODAwNDg2MDhkNWM0ODBi NjgzM2Y4OGVkNjljZWRiY2IyMzY1NjZhNjQ3MTg0ODE4YzVjOWJlZTMyMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IInj3J/Bho3EYgy4IyV9RG6lMY8 i0pc5OTZNNUodoc1P237BJHqPccUsI9YggRYLE8GE/7S1DKDjOkHwc9/OzwRawJX SkKnrghxQxO6BmTefkLNheTHAwOblqkGr4sTW/D8PKJyWVKQP2y9lRFTnCaMI85e Dn+QFzEjCMN3ac+WyiXt8pJjxaXjjYpxPjltBjv3gw9TWJoxS9YtNt9evWlZNDF0 RhEtaW4nlnCH3vUWxvapARVxxqlRvBrYW574YOQoqR0ShacIMUUEXbLSavVStgxj YmHDVTxa3cLVkgc7bNzmSvrzwqpEbONhrRs3guMX0Yrdw1F1ScM+FjznywIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLfRbv54YmNmKxJatIy9FUKFC1CFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY2NTVlZTEwLTZjMzItNGFiMy05ZTFiLWU3NjcyNzdkMWUxNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8ghAMA0GCSqGSIb3DQEBCwUAA4IBAQCf/1uPuWp9A8M7pzh4 WuztG4kdU3DMvV8QN0BWs4MYMsH/XvuUHSorfeMGxb1A6jKLflSOgiNWrCAnTn8L e+k0GFFnh20Rn6ef6GImn47lQMvcoeq674kAqMTHRU+RegaieNKPvyEeVcNBJl+b uUs5OyUfQO3Tid+6inkP6svwuuAZrMWYzUcKEgymVQu1mQo+vfLF1wRmYu0c9VAt oyOKJ9YopRO7fg3L8Xnao83yeY9xwuwM3TOnah6ltISsCzgQS3bv8M54YE7NKVmb whqpfmQHJqkWcu2qeCsgeNODlCbZvMu2ex483UsG5p+ThmpHoebQfcPTLXcMN6Jz aXDc -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net