$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/69a3a15e-217b-47dc-aafb-8e9dde29170d.roa File: 69a3a15e-217b-47dc-aafb-8e9dde29170d.roa (raw, json) Hash identifier: AEvabPa+q2YguYfHGGveLvNeObYS+dOhAnHOfdwzI8M= Subject key identifier: 7C:8B:0E:7A:C4:32:C0:2B:CE:55:FC:0A:78:D1:50:33:9E:DD:5D:F3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2B3C2F6558AF146D8C45B74D275482603DCB8940 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/69a3a15e-217b-47dc-aafb-8e9dde29170d.roa Signing time: Sat 12 Apr 2025 00:01:09 +0000 ROA not before: Sat 12 Apr 2025 00:01:09 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3c:2f:65:58:af:14:6d:8c:45:b7:4d:27:54:82:60:3d:cb:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 12 00:01:09 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=baa3991fb7344a5b7a628172c9b0b78d32e29a3c37a2105d06bebf73140c077f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d4:2c:e2:b2:da:67:3a:56:e1:73:00:31:5d: 3d:7d:18:cf:2d:72:fa:db:9d:6f:4b:ed:8f:b7:18: 49:79:2a:78:f6:49:89:7c:83:38:23:41:96:ea:4c: 60:76:7f:31:43:31:b0:dc:d2:99:8d:7e:ce:62:53: 22:4d:8d:3d:5e:96:f9:fd:f4:91:e6:f1:5b:0b:64: b7:56:fe:12:f5:54:16:98:10:73:2b:40:ab:6c:fa: 60:a9:31:24:8e:f3:76:ed:9a:ca:7f:fb:93:28:40: 29:fc:3e:04:75:4e:48:cf:06:72:80:cc:60:f9:aa: d4:de:1a:dd:f4:c7:e1:0c:4a:e5:9c:c8:e1:84:3a: 46:80:95:70:72:54:01:31:a3:0c:4d:f6:5c:e1:ab: 56:1f:7f:31:78:80:34:0b:2f:ab:5b:aa:31:13:77: 45:28:9e:7f:dc:09:76:3b:1c:72:ca:3e:bb:1f:b3: 43:7f:d4:3e:d2:f1:81:a1:17:8e:71:9e:1a:20:d4: 7f:be:67:64:67:51:73:30:92:5a:ff:ca:f9:e4:7d: 05:fe:9d:59:a9:32:96:6c:8e:22:d6:10:58:ec:89: ab:1a:7e:92:9d:74:da:48:8e:65:01:44:db:76:9c: 06:86:49:60:15:88:08:a2:45:6e:77:fc:0c:6e:b8: 04:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8B:0E:7A:C4:32:C0:2B:CE:55:FC:0A:78:D1:50:33:9E:DD:5D:F3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/69a3a15e-217b-47dc-aafb-8e9dde29170d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:8000::/40 Signature Algorithm: sha256WithRSAEncryption a1:7d:de:e0:36:2b:1d:9e:aa:ad:07:05:96:d5:32:99:33:3e: 93:40:0c:63:27:24:b0:ad:00:cd:1f:de:6d:4d:56:13:9b:f5: 27:ce:0e:c8:3e:1e:95:0d:32:c2:15:eb:f0:0b:21:1c:88:bc: 07:b4:54:61:fa:cb:1d:5a:7f:7f:cb:fc:30:c5:42:c1:b9:27: d8:29:de:24:11:4d:ec:7b:0b:dc:56:48:0d:8c:6e:9d:9c:2f: 85:8b:c5:f0:2e:d8:5c:ea:fa:2e:c3:92:ff:9e:a7:58:a2:d8: c5:7e:02:f0:69:72:97:10:53:8c:33:f8:0b:1c:ef:ee:56:79: ce:62:20:c1:d1:3f:85:fb:6f:7e:27:81:f8:2f:95:1a:0b:7f: 92:22:a6:90:1f:f7:98:74:30:7e:23:2b:54:8a:66:51:4f:3e: 01:09:af:a2:81:a5:6e:b8:71:06:33:1e:5d:99:02:c4:53:f0: a7:14:ff:ab:8a:18:8a:76:bb:5a:f7:fc:92:c0:95:44:8e:fb: a7:d1:f7:1f:e6:78:46:34:14:3a:f9:ae:15:97:e5:74:d1:84: c1:96:9b:7a:2a:cd:04:f5:02:3f:e5:f2:c1:08:34:58:1c:c0: 5d:62:e6:88:b7:d4:73:e6:8d:90:4c:ea:e4:48:47:1e:dc:85: 26:42:cb:68 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKzwvZVivFG2MRbdNJ1SCYD3LiUAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxMjAwMDEwOVoX DTI1MDUxNzIzNTk1OVowejFJMEcGA1UEBRNAYmFhMzk5MWZiNzM0NGE1YjdhNjI4 MTcyYzliMGI3OGQzMmUyOWEzYzM3YTIxMDVkMDZiZWJmNzMxNDBjMDc3ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tQs4rLaZzpW4XMAMV09fRjPLXL6 251vS+2PtxhJeSp49kmJfIM4I0GW6kxgdn8xQzGw3NKZjX7OYlMiTY09Xpb5/fSR 5vFbC2S3Vv4S9VQWmBBzK0CrbPpgqTEkjvN27ZrKf/uTKEAp/D4EdU5IzwZygMxg +arU3hrd9MfhDErlnMjhhDpGgJVwclQBMaMMTfZc4atWH38xeIA0Cy+rW6oxE3dF KJ5/3Al2Oxxyyj67H7NDf9Q+0vGBoReOcZ4aINR/vmdkZ1FzMJJa/8r55H0F/p1Z qTKWbI4i1hBY7ImrGn6SnXTaSI5lAUTbdpwGhklgFYgIokVud/wMbrgERwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHyLDnrEMsArzlX8CnjRUDOe3V3zMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY5YTNhMTVlLTIxN2ItNDdkYy1hYWZiLThlOWRkZTI5MTcwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9YAwDQYJKoZIhvcNAQELBQADggEBAKF93uA2Kx2eqq0HBZbV MpkzPpNADGMnJLCtAM0f3m1NVhOb9SfODsg+HpUNMsIV6/ALIRyIvAe0VGH6yx1a f3/L/DDFQsG5J9gp3iQRTex7C9xWSA2Mbp2cL4WLxfAu2Fzq+i7Dkv+ep1ii2MV+ AvBpcpcQU4wz+Asc7+5Wec5iIMHRP4X7b34ngfgvlRoLf5IippAf95h0MH4jK1SK ZlFPPgEJr6KBpW64cQYzHl2ZAsRT8KcU/6uKGIp2u1r3/JLAlUSO+6fR9x/meEY0 FDr5rhWX5XTRhMGWm3oqzQT1Aj/l8sEINFgcwF1i5oi31HPmjZBM6uRIRx7chSZC y2g= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net