$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa File: 6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa (raw, json) Hash identifier: C8k0DQYCPbxFt4Zs3zRCE7YVXWjeQjEV2ZeHgIE+vVE= Subject key identifier: BA:80:E0:CA:ED:4B:F2:C7:67:69:BE:13:A1:24:80:52:DC:98:85:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0BE9AD641291C0F54BB8EF20051120BD815B91CB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa Signing time: Sat 19 Apr 2025 00:31:25 +0000 ROA not before: Sat 19 Apr 2025 00:31:25 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e9:ad:64:12:91:c0:f5:4b:b8:ef:20:05:11:20:bd:81:5b:91:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:31:25 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=0685f9e89fea9c7f7c52047f9ff23db6b7462a309bc7607af37f3a6e62fdfc79, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:52:cf:5d:30:3d:39:e6:f2:09:a3:77:87: c1:3a:70:ab:e8:c8:78:80:80:fb:86:cd:62:9c:c6: 22:d8:18:bc:4f:0f:7c:ed:33:4f:e6:cd:bc:93:6c: f3:11:ac:2f:d1:ca:1e:3c:7a:ae:1b:11:92:7c:f7: f9:6b:fc:b3:32:26:bc:64:61:83:34:52:6f:91:29: e4:f9:5d:4b:f7:12:cf:12:b5:f1:8d:b4:00:66:01: 1c:0a:a1:fa:8f:12:04:d5:b6:db:25:09:ae:51:f4: 67:94:07:d5:f9:b4:6b:af:df:38:02:17:1c:2e:25: 55:dd:f5:2c:c2:4d:d3:f7:2e:88:fb:3d:b1:df:c9: 08:a5:f4:f9:1e:68:51:d4:00:f7:dd:a0:eb:0c:e0: ed:39:b1:8e:6f:59:8f:2c:d5:8d:0a:6b:39:9c:43: b2:c9:02:20:14:3f:68:69:e3:36:c0:18:dd:e2:1d: 17:4b:c3:00:ed:a9:bc:fc:39:19:39:4a:73:0a:30: 1b:10:7a:e7:a0:db:63:0c:df:3f:72:90:7a:16:6a: a5:53:db:02:93:d0:eb:23:5e:e7:3a:67:d1:f9:1d: 63:71:3d:93:f9:fa:c1:a0:79:b8:7c:e9:70:44:e1: a3:e8:33:f1:23:62:b3:0a:ac:76:d1:21:a2:1d:c7: dc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:80:E0:CA:ED:4B:F2:C7:67:69:BE:13:A1:24:80:52:DC:98:85:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c880::/48 Signature Algorithm: sha256WithRSAEncryption 08:e8:86:f4:3a:22:7b:6e:3a:f0:69:bb:68:a2:43:12:2e:6d: 27:59:ac:ed:7d:cd:99:28:40:01:4f:cd:8c:f7:3c:85:68:0a: 99:d1:eb:e8:97:b4:76:fa:d7:09:f3:ad:ad:78:f3:4c:f5:71: 80:42:db:75:14:e3:83:95:b8:08:7d:37:e8:7a:4c:83:76:7e: 8a:1c:6f:4e:c5:15:dc:66:54:cf:9c:e5:c6:cc:4d:89:f8:1f: 42:6f:80:4d:af:cb:78:75:5a:0e:38:e2:a1:de:b0:14:d8:d7: 3a:09:39:6c:6c:1f:18:41:0d:03:c9:a7:d8:d7:37:85:b0:f5: 3e:a7:b5:58:1c:11:c2:5a:84:38:2d:72:c2:66:09:69:34:ba: b3:ec:f7:f0:66:28:0e:d3:2c:dc:df:06:c6:04:5c:ab:38:cf: 58:39:51:94:d8:c1:79:f8:da:3e:82:7b:72:17:19:a2:ec:47: 4c:11:46:57:4a:c9:69:ad:48:14:88:b2:78:ef:b0:04:e8:55: 6f:da:2d:a8:23:f6:1e:ba:cb:9c:f9:1a:eb:5c:dc:da:f6:ea: 2a:99:2e:39:ae:48:52:ad:aa:6a:5c:97:86:c1:9a:2e:31:a7: eb:92:f0:12:ee:db:19:6d:21:5d:91:2c:0a:7b:ea:c7:b0:5f: 93:3a:6b:87 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUC+mtZBKRwPVLuO8gBREgvYFbkcswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMzEyNVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAMDY4NWY5ZTg5ZmVhOWM3ZjdjNTIw NDdmOWZmMjNkYjZiNzQ2MmEzMDliYzc2MDdhZjM3ZjNhNmU2MmZkZmM3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVJSz10wPTnm8gmjd4fBOnCr6Mh4 gID7hs1inMYi2Bi8Tw987TNP5s28k2zzEawv0coePHquGxGSfPf5a/yzMia8ZGGD NFJvkSnk+V1L9xLPErXxjbQAZgEcCqH6jxIE1bbbJQmuUfRnlAfV+bRrr984Ahcc LiVV3fUswk3T9y6I+z2x38kIpfT5HmhR1AD33aDrDODtObGOb1mPLNWNCms5nEOy yQIgFD9oaeM2wBjd4h0XS8MA7am8/DkZOUpzCjAbEHrnoNtjDN8/cpB6FmqlU9sC k9DrI17nOmfR+R1jcT2T+frBoHm4fOlwROGj6DPxI2KzCqx20SGiHcfcSwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLqA4MrtS/LHZ2m+E6EkgFLcmIXiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzZmNmI1YTNjLWIzZjUtNDU3Ny1hMjI4LTJjZTFiNzMyN2MwNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8iAMA0GCSqGSIb3DQEBCwUAA4IBAQAI6Ib0OiJ7bjrwabto okMSLm0nWaztfc2ZKEABT82M9zyFaAqZ0evol7R2+tcJ862tePNM9XGAQtt1FOOD lbgIfTfoekyDdn6KHG9OxRXcZlTPnOXGzE2J+B9Cb4BNr8t4dVoOOOKh3rAU2Nc6 CTlsbB8YQQ0DyafY1zeFsPU+p7VYHBHCWoQ4LXLCZglpNLqz7PfwZigO0yzc3wbG BFyrOM9YOVGU2MF5+No+gntyFxmi7EdMEUZXSslprUgUiLJ477AE6FVv2i2oI/Ye usuc+RrrXNza9uoqmS45rkhSrapqXJeGwZouMafrkvAS7tsZbSFdkSwKe+rHsF+T OmuH -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:46 2025 by rpki-client on console.sobornost.net