$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/773ed14d-a8af-457b-85bc-6c864c66407b.roa File: 773ed14d-a8af-457b-85bc-6c864c66407b.roa (raw, json) Hash identifier: qtscHk5GYrEGsOydSarB9HO4U84d1ogLb9dZR1sc59s= Subject key identifier: 5A:52:79:11:9D:7D:18:3B:FF:2E:BC:84:9C:FA:84:2E:C8:02:04:A2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 65D92F407A9D89101A7594F1880ACD4E51CEF051 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/773ed14d-a8af-457b-85bc-6c864c66407b.roa Signing time: Mon 21 Apr 2025 16:31:34 +0000 ROA not before: Mon 21 Apr 2025 16:31:34 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d9:2f:40:7a:9d:89:10:1a:75:94:f1:88:0a:cd:4e:51:ce:f0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:31:34 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=64cc26fcd658a4f27ec65ae1bed0165dd1f581cf96581da738d0667bcec038df, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:db:ed:94:db:8b:2d:d1:7d:04:5c:9e:36:07: 2f:4f:66:63:20:71:6a:a4:d1:74:84:31:59:99:41: d0:cc:76:87:4a:28:fb:9a:c1:e2:07:7b:8b:64:6b: e4:8a:03:12:01:dd:dc:fc:b0:90:03:cc:17:cc:e4: 73:88:08:ae:c7:c5:51:2b:65:a7:31:5d:bb:e6:36: c0:2b:9d:34:1d:f2:0b:88:19:ea:fb:b0:57:32:5b: 54:3e:53:65:53:4d:ec:d9:45:f4:bb:14:c2:67:1d: 01:cf:1e:05:36:6c:49:ea:04:51:44:ec:a1:17:e8: 7e:1e:13:3b:ac:a3:66:32:3a:2f:09:c6:19:33:f4: dc:f0:b2:2c:61:90:3f:d9:5a:03:f0:03:6c:04:8f: 5c:dd:6e:bb:66:75:20:cd:f3:ce:91:9a:eb:09:74: cf:42:37:b9:5e:88:08:da:bb:5a:73:13:79:75:42: 2e:6f:19:04:5b:14:97:60:e3:49:bf:5c:69:99:d8: 51:50:ac:c5:63:b4:2f:42:55:be:a3:6a:be:94:4f: 60:d7:3b:9f:55:4f:cb:08:b8:5b:bf:b4:c3:72:f6: 48:00:f3:54:cb:36:a8:d8:d5:ac:f9:8f:14:fa:38: 3d:b0:76:9c:4f:c9:ba:14:f6:5e:28:83:83:70:fc: a2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:52:79:11:9D:7D:18:3B:FF:2E:BC:84:9C:FA:84:2E:C8:02:04:A2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/773ed14d-a8af-457b-85bc-6c864c66407b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:a000::/40 Signature Algorithm: sha256WithRSAEncryption 91:ce:01:a5:e9:1e:36:a3:78:ce:68:99:b8:55:4e:1f:a0:06: 69:6d:5e:7b:6d:5b:30:ee:cb:2e:17:f1:3c:0d:40:3e:e0:61: 20:12:37:4d:fc:cb:00:7e:57:0e:67:d8:30:6d:3e:a4:26:3e: a0:de:31:d2:61:41:02:c1:3a:80:f0:44:78:e4:c4:48:5b:51: 45:14:c7:6e:a2:20:e1:1c:49:ed:e3:40:8a:40:cc:90:31:c4: 61:21:ce:c9:53:23:39:6a:4b:30:87:5f:1a:a6:67:6d:18:39: cf:94:5b:e4:53:46:65:55:c1:4b:17:e6:36:55:0f:a6:68:31: f0:e8:ec:e1:21:6b:83:2d:50:0d:04:10:17:04:21:0a:94:77: ef:17:fe:d7:28:64:78:38:e0:8b:e6:f5:15:c3:7c:fb:31:99: d8:99:7c:f0:bb:08:fe:a9:9d:2d:22:7d:fb:03:76:af:23:44: d7:b4:aa:5a:2c:49:24:0e:42:ae:2e:d6:fc:e1:77:89:c2:43: 99:55:56:a6:08:ad:5a:46:e8:3e:e3:42:c1:77:98:24:a4:bc: cb:3f:4c:0e:04:66:ae:b9:fc:b3:f6:c2:00:7d:d9:13:7b:c6: 09:7e:d8:65:74:a4:5a:b2:09:3f:af:e5:66:93:b2:b5:2f:34: 2e:e4:f5:15 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZdkvQHqdiRAadZTxiArNTlHO8FEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MzEzNFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANjRjYzI2ZmNkNjU4YTRmMjdlYzY1 YWUxYmVkMDE2NWRkMWY1ODFjZjk2NTgxZGE3MzhkMDY2N2JjZWMwMzhkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNvtlNuLLdF9BFyeNgcvT2ZjIHFq pNF0hDFZmUHQzHaHSij7msHiB3uLZGvkigMSAd3c/LCQA8wXzORziAiux8VRK2Wn MV275jbAK500HfILiBnq+7BXMltUPlNlU03s2UX0uxTCZx0Bzx4FNmxJ6gRRROyh F+h+HhM7rKNmMjovCcYZM/Tc8LIsYZA/2VoD8ANsBI9c3W67ZnUgzfPOkZrrCXTP Qje5XogI2rtacxN5dUIubxkEWxSXYONJv1xpmdhRUKzFY7QvQlW+o2q+lE9g1zuf VU/LCLhbv7TDcvZIAPNUyzao2NWs+Y8U+jg9sHacT8m6FPZeKIODcPyiRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFpSeRGdfRg7/y68hJz6hC7IAgSiMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3M2VkMTRkLWE4YWYtNDU3Yi04NWJjLTZjODY0YzY2NDA3Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauaAwDQYJKoZIhvcNAQELBQADggEBAJHOAaXpHjajeM5ombhV Th+gBmltXnttWzDuyy4X8TwNQD7gYSASN038ywB+Vw5n2DBtPqQmPqDeMdJhQQLB OoDwRHjkxEhbUUUUx26iIOEcSe3jQIpAzJAxxGEhzslTIzlqSzCHXxqmZ20YOc+U W+RTRmVVwUsX5jZVD6ZoMfDo7OEha4MtUA0EEBcEIQqUd+8X/tcoZHg44Ivm9RXD fPsxmdiZfPC7CP6pnS0iffsDdq8jRNe0qlosSSQOQq4u1vzhd4nCQ5lVVqYIrVpG 6D7jQsF3mCSkvMs/TA4EZq65/LP2wgB92RN7xgl+2GV0pFqyCT+v5WaTsrUvNC7k 9RU= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:46 2025 by rpki-client on console.sobornost.net