$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/726baa71-dd0a-43f5-88eb-b1cc1999500e.roa File: 726baa71-dd0a-43f5-88eb-b1cc1999500e.roa (raw, json) Hash identifier: /CdWH/T6HpbNBOWEXFn+s1UeS45qC7DkRp3NvHh2nWo= Subject key identifier: A2:27:1E:A0:B7:46:8E:54:C9:1B:45:2F:25:25:F2:41:5A:7E:C5:C2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4D56623BCBC4239CE7C29AF9EF4A7D870D0FC32C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/726baa71-dd0a-43f5-88eb-b1cc1999500e.roa Signing time: Mon 21 Apr 2025 15:20:20 +0000 ROA not before: Mon 21 Apr 2025 15:20:20 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:c8c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:56:62:3b:cb:c4:23:9c:e7:c2:9a:f9:ef:4a:7d:87:0d:0f:c3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:20:20 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=08eacd1d7459aa3773d193b1843878ec6780cd7f18f752d29826d0b84e20fdc9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b5:5c:ba:77:d1:94:f5:5f:af:ac:99:67:8a: 9e:43:d4:c2:17:80:ce:95:36:65:4c:6d:f1:39:df: 8b:84:75:f5:dd:b8:3d:fc:40:a7:25:17:13:e6:e9: 8b:dc:1d:8f:11:e2:5f:2f:6e:3a:9d:96:2a:e0:cc: 96:fa:72:34:a7:60:49:b2:73:bf:13:49:21:fb:1a: fa:d1:89:2d:e5:3b:e2:5d:6e:95:83:c0:0b:1f:61: 25:75:a5:1a:36:a4:c9:1e:02:68:db:58:f8:b7:52: 79:93:cb:3b:ef:3f:3a:3d:e5:c6:42:cd:3a:12:c1: 64:1e:b7:25:09:d1:b6:43:a6:6f:58:ac:01:6c:5a: 9e:db:67:9a:e8:40:ac:b1:ec:9b:27:9c:d2:48:1d: ee:c9:87:2e:92:da:97:24:51:64:b7:ca:1e:df:c8: df:fe:22:be:ac:52:34:c8:7d:6c:32:f2:ff:76:fb: e5:aa:58:34:60:76:d1:38:98:d6:3a:bf:98:40:71: 01:b6:fb:ce:ce:6a:59:ef:3d:a1:0b:82:78:9a:04: 64:0c:f7:76:cd:21:e9:17:03:a1:48:77:c0:53:dd: 65:3c:58:17:45:5c:cc:00:a6:57:3d:7b:e9:26:71: 86:cb:b4:02:f3:73:b7:05:14:9c:6e:07:a2:fd:26: 63:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:27:1E:A0:B7:46:8E:54:C9:1B:45:2F:25:25:F2:41:5A:7E:C5:C2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/726baa71-dd0a-43f5-88eb-b1cc1999500e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:c8c0::/46 Signature Algorithm: sha256WithRSAEncryption 26:fe:77:24:09:3d:68:b1:44:4b:24:2a:f0:e9:b8:e7:56:6d: 00:17:2f:70:6d:b3:23:6f:9f:d8:8f:ec:36:0b:64:4c:f7:dd: cb:48:12:5b:07:59:91:9e:d8:40:4b:15:bb:f3:ad:0b:31:b3: 75:a7:b3:46:7c:ab:c6:58:5e:f3:92:ed:8c:8a:23:28:a3:9d: 94:06:fe:68:f3:99:b8:9f:d1:f9:3f:90:37:c1:7b:72:73:f7: d5:a0:b7:72:9c:13:e7:98:f7:02:3f:60:ec:02:a7:08:5b:a5: 0c:9e:3c:47:e8:e2:28:ab:c1:22:40:2f:2a:6c:2c:35:8f:81: 56:dd:0f:d4:5f:58:b7:51:38:26:79:59:52:d5:03:92:f8:5b: e2:88:b7:ec:bb:21:d3:6c:7c:86:49:60:44:75:35:4e:bb:b5: d0:ac:dd:72:82:95:87:41:f7:50:20:a2:d7:b2:22:50:3e:aa: 63:78:a3:37:07:33:d7:56:73:a2:15:8b:d4:f2:51:7a:bb:80: c0:06:ef:fb:1c:bb:e7:23:72:ba:70:5a:35:69:91:93:ae:4d: 7a:5b:df:b3:25:82:32:ec:2c:12:12:aa:a2:c8:b9:92:6e:d0: f3:65:26:a3:16:50:61:bf:21:4c:07:07:de:2f:33:0d:39:a6: 27:fe:44:77 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTVZiO8vEI5znwpr570p9hw0PwywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MjAyMFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMDhlYWNkMWQ3NDU5YWEzNzczZDE5 M2IxODQzODc4ZWM2NzgwY2Q3ZjE4Zjc1MmQyOTgyNmQwYjg0ZTIwZmRjOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87VcunfRlPVfr6yZZ4qeQ9TCF4DO lTZlTG3xOd+LhHX13bg9/ECnJRcT5umL3B2PEeJfL246nZYq4MyW+nI0p2BJsnO/ E0kh+xr60Ykt5TviXW6Vg8ALH2EldaUaNqTJHgJo21j4t1J5k8s77z86PeXGQs06 EsFkHrclCdG2Q6ZvWKwBbFqe22ea6ECsseybJ5zSSB3uyYcuktqXJFFkt8oe38jf /iK+rFI0yH1sMvL/dvvlqlg0YHbROJjWOr+YQHEBtvvOzmpZ7z2hC4J4mgRkDPd2 zSHpFwOhSHfAU91lPFgXRVzMAKZXPXvpJnGGy7QC83O3BRScbgei/SZj0QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKInHqC3Ro5UyRtFLyUl8kFafsXCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcyNmJhYTcxLWRkMGEtNDNmNS04OGViLWIxY2MxOTk5NTAwZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+8jAMA0GCSqGSIb3DQEBCwUAA4IBAQAm/nckCT1osURLJCrw 6bjnVm0AFy9wbbMjb5/Yj+w2C2RM993LSBJbB1mRnthASxW7860LMbN1p7NGfKvG WF7zku2MiiMoo52UBv5o85m4n9H5P5A3wXtyc/fVoLdynBPnmPcCP2DsAqcIW6UM njxH6OIoq8EiQC8qbCw1j4FW3Q/UX1i3UTgmeVlS1QOS+FviiLfsuyHTbHyGSWBE dTVOu7XQrN1ygpWHQfdQIKLXsiJQPqpjeKM3BzPXVnOiFYvU8lF6u4DABu/7HLvn I3K6cFo1aZGTrk16W9+zJYIy7CwSEqqiyLmSbtDzZSajFlBhvyFMBwfeLzMNOaYn /kR3 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:46 2025 by rpki-client on console.sobornost.net