$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a37e2e0-7837-401c-a03e-a8f996e737fe.roa File: 6a37e2e0-7837-401c-a03e-a8f996e737fe.roa (raw, json) Hash identifier: SqV2eSX8r/rnyO2maK77aOJkuAfXtIkmMgcA2gPVCPk= Subject key identifier: F6:24:0E:88:65:0B:75:BF:6C:F1:18:4E:49:D4:5D:14:28:C7:BC:DD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 04E5E2DADF5EBE5E941C3051D111B4A8696249F2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a37e2e0-7837-401c-a03e-a8f996e737fe.roa Signing time: Mon 21 Apr 2025 15:50:50 +0000 ROA not before: Mon 21 Apr 2025 15:50:50 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:c0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e5:e2:da:df:5e:be:5e:94:1c:30:51:d1:11:b4:a8:69:62:49:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:50:50 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=595a2838e298aa0097a3c12feb95713554d927c07c174b26350a9f2bfa1397b4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:83:15:de:00:6e:45:c6:c9:65:dd:6a:14: ae:30:42:55:a0:71:a3:0b:0b:8d:15:ef:4e:80:e4: bf:33:8f:21:5b:2a:75:1e:bf:cf:e2:d9:15:d1:4b: 33:e7:34:2d:0f:dc:f4:5e:68:f7:6d:0d:4d:28:c8: 70:e7:5f:22:a9:c6:1c:4f:8b:4c:99:ca:c0:6a:95: e1:38:3a:e6:8b:c5:69:04:d6:38:23:c8:7b:04:09: 3b:d4:ef:19:38:89:15:37:7b:ba:8e:79:00:9f:9a: 60:03:9c:ee:f3:6e:74:9e:59:0b:ad:39:5a:97:04: f6:bf:de:be:73:32:81:6e:e6:43:12:54:90:56:ee: 83:6b:97:75:4d:fd:5a:8f:d3:1e:f2:69:68:e3:b5: 04:b0:06:a3:76:4c:80:48:01:a9:f4:c3:c4:b0:16: b5:b8:be:e1:24:92:12:80:7b:8a:72:66:09:a3:68: d8:26:5b:e2:91:36:3a:47:aa:12:6a:18:13:40:fa: 6c:40:55:6a:62:b3:71:e3:c6:8a:22:fd:dc:0c:89: 56:30:33:3b:a7:4d:34:95:0f:b5:c7:06:26:68:7a: fb:62:d9:bd:c0:a4:6c:4d:53:bd:0e:84:95:3b:e8: 34:2c:ce:a2:37:c5:12:bb:aa:8e:52:6c:79:45:da: 94:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:24:0E:88:65:0B:75:BF:6C:F1:18:4E:49:D4:5D:14:28:C7:BC:DD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a37e2e0-7837-401c-a03e-a8f996e737fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:c0c0::/46 Signature Algorithm: sha256WithRSAEncryption 0a:95:99:e2:e7:75:36:23:9c:e7:83:da:f7:cf:e4:ed:46:a8: 3c:cd:41:a8:bd:8d:a6:59:11:aa:e3:8c:7b:56:71:4e:16:f1: 3a:53:ba:2d:bb:ec:cf:4d:93:21:f6:62:16:62:6c:ac:25:de: b7:fc:20:6e:b8:fc:dd:09:87:34:78:a2:b0:c7:f9:51:a3:cb: ba:77:98:77:16:15:47:7b:97:0a:bf:e0:20:4b:92:29:cb:32: 36:8d:41:d4:bd:3f:eb:5a:86:27:2e:62:b7:53:6a:94:c8:7b: c0:b2:b6:88:b6:7b:45:01:d6:eb:b6:4c:85:81:32:c8:6e:6d: 76:8a:d0:f4:32:3d:e7:4d:50:8a:af:98:09:50:4b:11:bc:29: af:c2:36:48:6d:13:5e:76:7a:35:64:77:c7:17:fe:ec:56:5d: c4:fb:b8:9e:c9:5a:2d:82:69:31:b5:18:2d:0a:89:50:81:de: aa:ed:00:dd:7d:8f:1a:05:39:a5:bd:f9:ac:8b:6b:78:d7:fe: 3b:1e:99:c7:be:6e:18:82:46:08:60:94:fc:d0:87:d5:7b:00: b7:72:37:8e:a5:5b:d6:4e:34:96:a5:81:22:23:e8:40:d7:50: b6:d6:53:8b:3a:09:c3:18:3b:e0:b2:5f:a7:cf:af:60:ae:10: c6:af:c4:56 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBOXi2t9evl6UHDBR0RG0qGliSfIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NTA1MFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANTk1YTI4MzhlMjk4YWEwMDk3YTNj MTJmZWI5NTcxMzU1NGQ5MjdjMDdjMTc0YjI2MzUwYTlmMmJmYTEzOTdiNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKaDFd4AbkXGyWXdahSuMEJVoHGj CwuNFe9OgOS/M48hWyp1Hr/P4tkV0Usz5zQtD9z0Xmj3bQ1NKMhw518iqcYcT4tM mcrAapXhODrmi8VpBNY4I8h7BAk71O8ZOIkVN3u6jnkAn5pgA5zu8250nlkLrTla lwT2v96+czKBbuZDElSQVu6Da5d1Tf1aj9Me8mlo47UEsAajdkyASAGp9MPEsBa1 uL7hJJISgHuKcmYJo2jYJlvikTY6R6oSahgTQPpsQFVqYrNx48aKIv3cDIlWMDM7 p000lQ+1xwYmaHr7Ytm9wKRsTVO9DoSVO+g0LM6iN8USu6qOUmx5RdqUywIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPYkDohlC3W/bPEYTknUXRQox7zdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZhMzdlMmUwLTc4MzctNDAxYy1hMDNlLWE4Zjk5NmU3MzdmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba98DAMA0GCSqGSIb3DQEBCwUAA4IBAQAKlZni53U2I5zng9r3 z+TtRqg8zUGovY2mWRGq44x7VnFOFvE6U7otu+zPTZMh9mIWYmysJd63/CBuuPzd CYc0eKKwx/lRo8u6d5h3FhVHe5cKv+AgS5IpyzI2jUHUvT/rWoYnLmK3U2qUyHvA sraItntFAdbrtkyFgTLIbm12itD0Mj3nTVCKr5gJUEsRvCmvwjZIbRNedno1ZHfH F/7sVl3E+7ieyVotgmkxtRgtColQgd6q7QDdfY8aBTmlvfmsi2t41/47HpnHvm4Y gkYIYJT80IfVewC3cjeOpVvWTjSWpYEiI+hA11C21lOLOgnDGDvgsl+nz69grhDG r8RW -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net