$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76270da3-951d-4ef2-a7fc-43fd6ab4e568.roa File: 76270da3-951d-4ef2-a7fc-43fd6ab4e568.roa (raw, json) Hash identifier: QBj5wYA323pnhde2CXADYOBP9uXXaDftSjZUvUn7JdQ= Subject key identifier: 07:7D:10:B6:B6:F6:BC:FF:25:D5:EB:4A:CA:62:0F:5B:24:9D:6F:FE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1A76FC61DEECC825FDD08010FAFFC174DF46E071 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76270da3-951d-4ef2-a7fc-43fd6ab4e568.roa Signing time: Mon 21 Apr 2025 16:00:50 +0000 ROA not before: Mon 21 Apr 2025 16:00:50 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:76:fc:61:de:ec:c8:25:fd:d0:80:10:fa:ff:c1:74:df:46:e0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:00:50 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=aa97cdce0963a73e4ff17ed910da6f9cb134bd8b9083da6e2ca13c4d10a67212, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:79:26:3a:2b:b1:57:d3:55:90:04:7e:f0: 91:4a:23:61:f7:5c:3f:65:14:3f:01:fb:91:4d:25: a3:85:bf:5e:0f:fa:84:f0:d3:32:c9:3f:6c:77:84: 3e:f6:60:50:78:51:8b:d8:73:d4:9d:5e:22:a4:f8: 9f:9c:f4:c1:73:5c:ee:44:80:19:76:c1:ea:90:0b: ac:88:86:96:30:62:f9:44:a1:00:3a:70:0c:63:9f: 98:56:21:00:20:f1:ab:91:61:cd:0a:27:d2:42:c0: 48:83:58:9c:9c:76:2c:49:2f:82:b9:92:50:37:b4: 1d:a4:e0:87:a1:2c:08:08:df:1f:e4:66:85:b4:5d: 95:7b:2a:3a:90:20:0a:f1:c0:aa:30:66:1e:83:7c: b7:1b:53:4f:a5:f4:5f:a6:fe:78:23:41:a1:fc:42: 85:f8:8f:e0:f6:6f:ec:61:e9:9d:05:ce:6d:a2:62: 16:de:90:0f:36:14:b9:ef:67:cc:39:2f:d9:d2:ba: e0:ab:e8:d7:7e:7f:b3:c9:b8:1f:d9:a1:ab:8a:56: 92:08:27:ec:84:07:0e:b8:c3:49:d9:1f:2e:fb:3a: 94:ad:71:5e:4e:09:13:91:4d:66:47:c8:01:3d:55: bc:6a:1f:b5:0c:b3:52:70:7c:35:bd:d2:fc:1d:a7: a0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7D:10:B6:B6:F6:BC:FF:25:D5:EB:4A:CA:62:0F:5B:24:9D:6F:FE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76270da3-951d-4ef2-a7fc-43fd6ab4e568.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8000::/40 Signature Algorithm: sha256WithRSAEncryption 1a:16:f7:86:d3:45:81:b2:91:56:52:b0:69:76:65:99:37:7e: a3:fb:bb:db:a1:27:b7:bd:c2:5a:02:cf:0b:43:3a:2b:cd:75: 18:0c:57:b0:66:55:fa:24:df:7b:de:39:9d:c1:ac:47:2a:75: 8a:4f:a4:24:3f:41:77:cd:e1:f0:b5:7e:f5:45:71:fb:89:ff: 16:f9:e6:c9:05:69:eb:cb:1b:e1:71:79:27:e6:fd:f2:8f:97: db:2b:10:58:6b:8d:35:5f:46:fb:ba:4c:e5:1b:6d:a7:c0:19: 68:a1:68:c0:66:67:17:bf:46:b8:5b:28:03:1b:f8:31:37:3c: 3e:7f:be:51:4a:bd:5d:2d:99:ba:de:77:c6:b0:ab:1a:90:77: 65:06:8b:fb:69:9d:4c:62:fb:70:0b:de:c7:15:ac:e7:48:e0: c4:a5:26:41:33:ec:07:89:6b:21:75:9f:44:39:b2:00:2a:56: 48:12:2a:57:6b:d8:4a:47:48:a8:c0:d8:ca:ba:8d:ab:3e:05: cf:b5:3c:08:1f:4b:94:0e:42:82:ef:64:a2:e1:16:28:ed:c2: ec:35:d7:e2:83:19:25:be:3f:f5:85:42:de:7c:f9:b1:8c:5b: c8:36:d3:be:9b:4f:a6:f1:17:6b:de:38:67:6e:18:8f:a5:cd: 0c:cb:19:ce -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGnb8Yd7syCX90IAQ+v/BdN9G4HEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MDA1MFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYWE5N2NkY2UwOTYzYTczZTRmZjE3 ZWQ5MTBkYTZmOWNiMTM0YmQ4YjkwODNkYTZlMmNhMTNjNGQxMGE2NzIxMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfp5JjorsVfTVZAEfvCRSiNh91w/ ZRQ/AfuRTSWjhb9eD/qE8NMyyT9sd4Q+9mBQeFGL2HPUnV4ipPifnPTBc1zuRIAZ dsHqkAusiIaWMGL5RKEAOnAMY5+YViEAIPGrkWHNCifSQsBIg1icnHYsSS+CuZJQ N7QdpOCHoSwICN8f5GaFtF2Veyo6kCAK8cCqMGYeg3y3G1NPpfRfpv54I0Gh/EKF +I/g9m/sYemdBc5tomIW3pAPNhS572fMOS/Z0rrgq+jXfn+zybgf2aGrilaSCCfs hAcOuMNJ2R8u+zqUrXFeTgkTkU1mR8gBPVW8ah+1DLNScHw1vdL8HaegawIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAd9ELa29rz/JdXrSspiD1sknW/+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc2MjcwZGEzLTk1MWQtNGVmMi1hN2ZjLTQzZmQ2YWI0ZTU2OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaYAwDQYJKoZIhvcNAQELBQADggEBABoW94bTRYGykVZSsGl2 ZZk3fqP7u9uhJ7e9wloCzwtDOivNdRgMV7BmVfok33veOZ3BrEcqdYpPpCQ/QXfN 4fC1fvVFcfuJ/xb55skFaevLG+FxeSfm/fKPl9srEFhrjTVfRvu6TOUbbafAGWih aMBmZxe/RrhbKAMb+DE3PD5/vlFKvV0tmbred8awqxqQd2UGi/tpnUxi+3AL3scV rOdI4MSlJkEz7AeJayF1n0Q5sgAqVkgSKldr2EpHSKjA2Mq6jas+Bc+1PAgfS5QO QoLvZKLhFijtwuw11+KDGSW+P/WFQt58+bGMW8g2076bT6bxF2veOGduGI+lzQzL Gc4= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:46 2025 by rpki-client on console.sobornost.net