$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b02b598-7174-4eb3-b1d6-2be76b0ac220.roa File: 6b02b598-7174-4eb3-b1d6-2be76b0ac220.roa (raw, json) Hash identifier: gd1hR5QP4xsy+WTtBnyEzptWRCriCESxEJbz2opw/UY= Subject key identifier: C7:32:0A:AE:87:DC:38:03:D4:67:5B:D7:29:AD:B2:59:1B:59:73:12 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7E68DECBD5520EF95866DBEF8D0AB1AF1A19D0EE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b02b598-7174-4eb3-b1d6-2be76b0ac220.roa Signing time: Mon 21 Apr 2025 15:41:49 +0000 ROA not before: Mon 21 Apr 2025 15:41:49 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:2040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:68:de:cb:d5:52:0e:f9:58:66:db:ef:8d:0a:b1:af:1a:19:d0:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:41:49 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=5ca249af4bda4793d3419a71b9608d7fe54125cde054ed47d1364b578223846f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:06:d8:91:4f:86:49:0f:80:fa:e3:82:82:e6: f7:0a:62:21:ce:f8:63:28:a8:4f:c7:81:51:dd:b5: 01:ac:c6:18:57:85:7c:4c:84:7b:59:d2:ef:02:06: 89:a9:eb:39:3f:c1:3d:bd:16:82:20:bf:6f:c0:81: f4:67:51:63:a0:e4:ac:32:62:7e:76:4a:13:31:ed: 81:9f:d3:29:5e:b7:9e:f1:22:31:1e:95:be:c6:2d: d3:a5:07:21:5e:3b:79:73:ef:a7:01:95:8e:60:3a: 05:24:dc:a9:f1:82:e8:ea:09:40:8c:90:df:be:ce: 05:97:62:ba:56:d9:df:5a:b9:f2:19:3a:5b:4e:dc: c2:c6:29:c6:29:72:99:8d:b8:a8:1e:61:93:52:94: 48:7d:0a:02:6d:5f:a2:bd:85:29:b3:a0:32:58:95: 7e:19:89:39:34:ff:46:39:d3:04:cc:21:c0:10:e4: 01:95:c2:70:f2:d4:93:e9:78:a2:f3:15:d8:ec:ec: 81:24:64:4c:8a:b9:7e:1b:0b:4c:f1:65:2e:83:2f: f7:be:7b:72:13:1b:47:5c:d7:c1:37:8d:6f:cf:07: 04:62:ce:81:b1:01:60:20:74:1c:96:dc:67:c9:d1: e2:8f:ba:69:19:50:57:51:7a:56:2a:7c:bc:b0:e8: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:32:0A:AE:87:DC:38:03:D4:67:5B:D7:29:AD:B2:59:1B:59:73:12 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b02b598-7174-4eb3-b1d6-2be76b0ac220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:2040::/46 Signature Algorithm: sha256WithRSAEncryption 46:28:03:3d:81:aa:80:8e:fe:0b:87:6b:d7:64:2a:30:68:6a: f0:3f:49:3e:c5:fd:63:da:71:84:3f:22:a0:b9:60:45:8b:6d: c0:b8:11:02:4c:0a:13:2e:0a:0a:0e:3c:fb:ad:cb:e7:a8:83: 35:e5:1c:9f:51:18:16:64:3d:c6:8d:85:61:6c:95:60:25:ff: dc:f9:67:54:72:b1:06:dd:c3:ca:6e:99:85:58:8d:36:88:de: 12:d6:c3:dc:60:09:38:15:6b:0b:fa:60:e9:40:05:4e:78:08: 24:e2:f6:7c:4b:3d:70:ea:f4:03:ad:17:f4:42:12:c5:29:53: 2b:4c:29:69:fc:dc:4c:fa:b6:bd:3f:ff:b5:59:9d:71:25:65: ca:0b:b1:e7:d4:a4:a0:a3:2b:47:cf:a2:af:56:51:c0:8f:b8: 44:fb:f7:b2:20:40:7b:8d:5b:85:4f:05:11:3c:83:fc:46:8d: 32:42:09:37:fb:cc:79:77:57:53:98:dd:cd:ef:e2:79:90:81: 69:38:da:f4:65:63:7c:ad:36:6b:c3:4d:7d:30:48:50:27:45: aa:fb:f1:eb:ba:7a:bf:39:3f:5f:21:ef:c1:10:30:bb:11:7b: 76:bf:0a:6e:19:ca:c8:3a:ae:4a:6a:45:b1:0c:73:0f:9a:63: 4c:7f:f4:00 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfmjey9VSDvlYZtvvjQqxrxoZ0O4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NDE0OVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANWNhMjQ5YWY0YmRhNDc5M2QzNDE5 YTcxYjk2MDhkN2ZlNTQxMjVjZGUwNTRlZDQ3ZDEzNjRiNTc4MjIzODQ2ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgbYkU+GSQ+A+uOCgub3CmIhzvhj KKhPx4FR3bUBrMYYV4V8TIR7WdLvAgaJqes5P8E9vRaCIL9vwIH0Z1FjoOSsMmJ+ dkoTMe2Bn9MpXree8SIxHpW+xi3TpQchXjt5c++nAZWOYDoFJNyp8YLo6glAjJDf vs4Fl2K6VtnfWrnyGTpbTtzCxinGKXKZjbioHmGTUpRIfQoCbV+ivYUps6AyWJV+ GYk5NP9GOdMEzCHAEOQBlcJw8tST6Xii8xXY7OyBJGRMirl+GwtM8WUugy/3vnty ExtHXNfBN41vzwcEYs6BsQFgIHQcltxnydHij7ppGVBXUXpWKny8sOihuQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMcyCq6H3DgD1Gdb1ymtslkbWXMSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZiMDJiNTk4LTcxNzQtNGViMy1iMWQ2LTJiZTc2YjBhYzIyMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaSBAMA0GCSqGSIb3DQEBCwUAA4IBAQBGKAM9gaqAjv4Lh2vX ZCowaGrwP0k+xf1j2nGEPyKguWBFi23AuBECTAoTLgoKDjz7rcvnqIM15RyfURgW ZD3GjYVhbJVgJf/c+WdUcrEG3cPKbpmFWI02iN4S1sPcYAk4FWsL+mDpQAVOeAgk 4vZ8Sz1w6vQDrRf0QhLFKVMrTClp/NxM+ra9P/+1WZ1xJWXKC7Hn1KSgoytHz6Kv VlHAj7hE+/eyIEB7jVuFTwURPIP8Ro0yQgk3+8x5d1dTmN3N7+J5kIFpONr0ZWN8 rTZrw019MEhQJ0Wq+/Hrunq/OT9fIe/BEDC7EXt2vwpuGcrIOq5KakWxDHMPmmNM f/QA -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:45 2025 by rpki-client on console.sobornost.net