$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67b122dd-c584-4c2f-ac76-fb1a660b79da.roa File: 67b122dd-c584-4c2f-ac76-fb1a660b79da.roa (raw, json) Hash identifier: ChvojsmLk3xlpwH4yYEUn4xOs5AGQFLWgjWWIFsjSvk= Subject key identifier: 03:5F:81:06:4E:E1:A9:28:83:9B:90:8B:26:6D:61:18:F9:9E:E4:C8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 51FAC083A0CAF892F129970809DD8D505A301075 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67b122dd-c584-4c2f-ac76-fb1a660b79da.roa Signing time: Sat 12 Apr 2025 00:00:08 +0000 ROA not before: Sat 12 Apr 2025 00:00:08 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da28::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:fa:c0:83:a0:ca:f8:92:f1:29:97:08:09:dd:8d:50:5a:30:10:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 12 00:00:08 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=4048757b18a422f36fe0e10e9ef3bd6fc228cfa10248d1ba7fb04fed5ccc018b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bb:34:bf:d3:5d:5b:4e:6e:8a:eb:a4:87:88: a1:c2:45:96:b2:aa:3d:ea:71:a5:3e:8d:be:bd:0d: f2:ad:64:7d:dc:16:fb:96:44:12:88:ad:8f:74:29: 66:39:75:66:11:b7:32:34:e3:48:62:9b:a6:ff:65: bc:e5:c0:24:12:60:d5:be:33:c4:0e:79:4f:d6:62: ad:a0:73:a1:24:ec:51:16:1b:54:a9:65:c6:67:2c: 6b:27:94:f0:45:56:9d:0f:35:27:fd:d2:93:10:a7: 91:c4:96:9d:13:d9:7d:b5:08:b7:46:ef:f7:0c:b6: 7e:cc:39:08:1a:26:20:6d:53:77:60:7f:35:50:59: fd:b5:38:1d:86:e7:df:d9:8c:b3:eb:a0:84:be:9a: 61:e3:b2:ed:4f:2e:7d:0e:54:25:19:96:b7:8e:fb: 65:eb:aa:22:8b:c3:53:de:0f:90:42:df:60:53:ea: 76:82:be:4c:97:4a:90:19:62:17:9b:80:53:44:3e: d9:2a:60:db:e5:e6:67:2e:0a:4e:b3:e8:b3:ab:16: 7a:74:6f:88:ce:47:3d:2a:a7:15:c0:73:cf:88:49: 47:9c:32:39:2d:e2:a3:48:9b:61:e0:a0:e1:9f:ab: 69:95:df:9f:68:b7:18:c0:44:bc:26:b1:27:21:a5: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5F:81:06:4E:E1:A9:28:83:9B:90:8B:26:6D:61:18:F9:9E:E4:C8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67b122dd-c584-4c2f-ac76-fb1a660b79da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da28::/36 Signature Algorithm: sha256WithRSAEncryption 28:a4:0a:35:db:0b:a3:ac:e4:a1:00:07:f4:af:1a:c9:fe:8a: 54:ca:a3:39:e3:0b:4f:22:a0:78:ba:0e:d2:24:3c:fb:f1:2a: 96:f1:13:df:a5:c4:da:8c:34:e5:3a:93:0d:47:d2:40:79:dc: 8e:a8:eb:3c:93:91:eb:3e:39:03:f7:c0:c2:ea:59:ae:8e:9d: 5b:36:6e:52:64:ed:b5:5c:c1:91:c8:4f:94:28:dc:42:89:f1: ac:51:99:7e:d7:95:51:90:77:47:a1:b1:f3:a2:eb:20:ff:5a: fd:da:6f:13:2c:0e:97:b9:b5:56:b4:fe:47:82:44:f1:19:3d: 1d:cf:ea:a5:31:25:95:5e:4f:8f:68:ee:20:2c:2a:10:d2:4f: df:76:31:b3:23:3f:94:da:28:e3:1f:26:23:c3:de:31:f0:11: 8b:b6:84:2b:93:42:59:c8:21:23:3b:71:d8:e6:98:64:d7:18: e0:63:c6:35:81:f8:ec:f5:25:90:dd:83:cf:8b:1a:78:00:c2: ab:45:55:37:bb:e4:ed:1d:37:ce:22:02:19:ce:57:01:f6:09: 89:46:e1:61:e8:71:37:11:11:d7:43:d8:1f:92:c7:53:c9:37: ce:a5:7b:06:e7:12:22:ed:05:20:2c:04:7b:f3:fe:91:47:d3: 95:82:c9:92 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUfrAg6DK+JLxKZcICd2NUFowEHUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxMjAwMDAwOFoX DTI1MDUxNzIzNTk1OVowejFJMEcGA1UEBRNANDA0ODc1N2IxOGE0MjJmMzZmZTBl MTBlOWVmM2JkNmZjMjI4Y2ZhMTAyNDhkMWJhN2ZiMDRmZWQ1Y2NjMDE4YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bs0v9NdW05uiuukh4ihwkWWsqo9 6nGlPo2+vQ3yrWR93Bb7lkQSiK2PdClmOXVmEbcyNONIYpum/2W85cAkEmDVvjPE DnlP1mKtoHOhJOxRFhtUqWXGZyxrJ5TwRVadDzUn/dKTEKeRxJadE9l9tQi3Ru/3 DLZ+zDkIGiYgbVN3YH81UFn9tTgdhuff2Yyz66CEvpph47LtTy59DlQlGZa3jvtl 66oii8NT3g+QQt9gU+p2gr5Ml0qQGWIXm4BTRD7ZKmDb5eZnLgpOs+izqxZ6dG+I zkc9KqcVwHPPiElHnDI5LeKjSJth4KDhn6tpld+faLcYwES8JrEnIaUjiwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFANfgQZO4akog5uQiyZtYRj5nuTIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY3YjEyMmRkLWM1ODQtNGMyZi1hYzc2LWZiMWE2NjBiNzlkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaKAAwDQYJKoZIhvcNAQELBQADggEBACikCjXbC6Os5KEAB/Sv Gsn+ilTKoznjC08ioHi6DtIkPPvxKpbxE9+lxNqMNOU6kw1H0kB53I6o6zyTkes+ OQP3wMLqWa6OnVs2blJk7bVcwZHIT5Qo3EKJ8axRmX7XlVGQd0ehsfOi6yD/Wv3a bxMsDpe5tVa0/keCRPEZPR3P6qUxJZVeT49o7iAsKhDST992MbMjP5TaKOMfJiPD 3jHwEYu2hCuTQlnIISM7cdjmmGTXGOBjxjWB+Oz1JZDdg8+LGngAwqtFVTe75O0d N84iAhnOVwH2CYlG4WHocTcREddD2B+Sx1PJN86lewbnEiLtBSAsBHvz/pFH05WC yZI= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net