$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76d32851-28e5-441b-b5ac-b7e6f5cd8767.roa File: 76d32851-28e5-441b-b5ac-b7e6f5cd8767.roa (raw, json) Hash identifier: 75Z7OS0arVgmCf7//DMPZTUJfH3wIxjSflnIovZbi3I= Subject key identifier: 60:38:AF:EA:7C:A8:C8:BC:0A:45:1A:79:2A:DC:91:29:D9:51:1F:48 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 63E7CF6B0E0857CCCF0152FCEE473DE2C98C4758 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76d32851-28e5-441b-b5ac-b7e6f5cd8767.roa Signing time: Thu 17 Apr 2025 20:22:15 +0000 ROA not before: Thu 17 Apr 2025 20:22:15 +0000 ROA not after: Thu 22 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daee:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e7:cf:6b:0e:08:57:cc:cf:01:52:fc:ee:47:3d:e2:c9:8c:47:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 17 20:22:15 2025 GMT Not After : May 22 23:59:59 2025 GMT Subject: serialNumber=c6e87740af334cdb53bd0a2235b1ccf23a21a9f8572a1da4ad507968354ba9c2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:76:fb:de:3c:7d:39:ea:ed:9d:c5:89:8f: ac:d9:ac:a2:96:59:48:5a:54:41:3e:b0:48:b6:0d: a9:78:1b:40:a8:83:01:81:c3:be:ba:38:fc:8a:c6: 4a:80:9f:cb:f3:b1:9c:3b:f3:ff:8e:76:59:56:90: c9:12:f5:bb:dd:39:d2:19:23:ce:a7:1e:2a:28:ec: cb:bf:ca:15:76:38:0b:a0:72:07:f5:94:c5:f7:b1: da:6e:8f:72:e5:ea:86:07:ac:00:12:40:7b:66:39: f4:66:60:d5:2e:98:6f:6c:06:1e:d9:88:a7:f2:bd: bb:9e:0b:15:40:fd:2f:77:5f:30:bc:17:18:b7:44: 6c:85:ec:ce:49:71:c7:07:4d:c9:1b:ff:f0:18:53: 13:ed:10:91:52:2b:67:5e:e3:0f:d0:a9:a1:b7:95: b8:eb:5c:97:09:07:41:12:bd:dd:9c:71:72:b4:9c: 27:01:9e:e0:28:63:dd:3b:a0:69:cb:2e:ee:3b:9d: d8:e0:91:c0:83:b9:3a:7f:9e:7e:27:ea:55:1e:4c: 01:a0:50:b8:a1:83:94:ff:69:b8:e7:6e:2b:4a:49: f1:6f:1b:75:92:0a:8e:cd:3e:3a:ef:75:fe:b2:12: a6:78:c4:e3:7b:b6:b8:b7:a2:1f:3b:82:ef:d4:75: 33:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:AF:EA:7C:A8:C8:BC:0A:45:1A:79:2A:DC:91:29:D9:51:1F:48 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/76d32851-28e5-441b-b5ac-b7e6f5cd8767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daee:e000::/40 Signature Algorithm: sha256WithRSAEncryption 90:bd:9e:3d:01:92:96:5c:c3:51:82:51:9b:1a:65:ac:6d:ea: 16:27:6d:29:e0:d4:03:b2:f6:ec:40:f4:59:34:3a:93:d0:63: 1d:11:b9:e5:93:92:7e:88:74:2a:39:01:e1:c5:02:73:82:8c: a3:a7:38:be:87:86:4f:2d:37:5d:fc:eb:25:f6:7b:5b:3f:69: c0:2f:b1:2d:88:c2:bf:99:9a:a3:bb:8c:48:69:75:9c:d3:d6: 8d:e4:03:2e:07:2e:1c:b7:89:9c:66:5d:58:fc:5c:12:45:26: cb:f6:96:e6:e7:5b:08:c8:3a:f0:82:39:f7:8d:4b:84:3e:56: 56:38:93:04:0e:1e:eb:20:ac:b4:97:24:07:7b:e0:90:65:53: 2e:2c:4c:97:b8:82:9c:77:54:82:79:d7:5a:c1:9d:d9:ba:2e: 71:14:c5:52:0e:70:7d:f4:84:d0:1b:75:c1:49:eb:de:31:30: c3:c6:ed:c4:41:61:cd:48:6e:76:95:0e:25:3a:e4:c3:63:20: ca:e5:17:e4:e5:3a:97:ba:4a:f6:cd:45:7e:d7:5c:5b:a1:19: 17:44:f6:62:87:f9:fc:1d:39:0e:1d:b9:89:bd:da:18:db:26: 00:99:96:c1:06:8e:ca:9f:80:28:41:bd:61:ba:12:4f:24:37: 49:a6:01:5b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUY+fPaw4IV8zPAVL87kc94smMR1gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNzIwMjIxNVoX DTI1MDUyMjIzNTk1OVowejFJMEcGA1UEBRNAYzZlODc3NDBhZjMzNGNkYjUzYmQw YTIyMzViMWNjZjIzYTIxYTlmODU3MmExZGE0YWQ1MDc5NjgzNTRiYTljMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKp2+948fTnq7Z3FiY+s2ayilllI WlRBPrBItg2peBtAqIMBgcO+ujj8isZKgJ/L87GcO/P/jnZZVpDJEvW73TnSGSPO px4qKOzLv8oVdjgLoHIH9ZTF97Habo9y5eqGB6wAEkB7Zjn0ZmDVLphvbAYe2Yin 8r27ngsVQP0vd18wvBcYt0RshezOSXHHB03JG//wGFMT7RCRUitnXuMP0Kmht5W4 61yXCQdBEr3dnHFytJwnAZ7gKGPdO6Bpyy7uO53Y4JHAg7k6f55+J+pVHkwBoFC4 oYOU/2m4524rSknxbxt1kgqOzT4673X+shKmeMTje7a4t6IfO4Lv1HUzfwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGA4r+p8qMi8CkUaeSrckSnZUR9IMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc2ZDMyODUxLTI4ZTUtNDQxYi1iNWFjLWI3ZTZmNWNkODc2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7uAwDQYJKoZIhvcNAQELBQADggEBAJC9nj0BkpZcw1GCUZsa Zaxt6hYnbSng1AOy9uxA9Fk0OpPQYx0RueWTkn6IdCo5AeHFAnOCjKOnOL6Hhk8t N1386yX2e1s/acAvsS2Iwr+ZmqO7jEhpdZzT1o3kAy4HLhy3iZxmXVj8XBJFJsv2 lubnWwjIOvCCOfeNS4Q+VlY4kwQOHusgrLSXJAd74JBlUy4sTJe4gpx3VIJ511rB ndm6LnEUxVIOcH30hNAbdcFJ694xMMPG7cRBYc1IbnaVDiU65MNjIMrlF+TlOpe6 SvbNRX7XXFuhGRdE9mKH+fwdOQ4duYm92hjbJgCZlsEGjsqfgChBvWG6Ek8kN0mm AVs= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:46 2025 by rpki-client on console.sobornost.net