$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa File: 77745ad7-44b5-44a8-9e13-4096720b7c90.roa (raw, json) Hash identifier: /254HLXBt6l9Jmvy9keiZn3+KADCVJBnsyCZt6rqm0I= Subject key identifier: 00:5B:9C:9F:34:37:DC:A2:EB:FF:0D:0C:C6:B7:CB:1E:A0:68:0A:51 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 55C54927F13E93E0533BB9B46EBFDF8DD671F3CE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa Signing time: Sat 19 Apr 2025 00:20:50 +0000 ROA not before: Sat 19 Apr 2025 00:20:50 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c5:49:27:f1:3e:93:e0:53:3b:b9:b4:6e:bf:df:8d:d6:71:f3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:20:50 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=1b0c25fe3349a02a83cf5170faa922916749c8504af4c1911d38c257f9ca5df5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:10:a7:a8:e7:74:e4:fe:4c:42:2c:5c:e6:3b: a6:c3:2e:4f:36:ce:fa:ea:b3:f1:a6:7e:66:ac:9f: 3a:e0:28:4b:98:a3:6f:ee:f3:87:42:07:5c:3e:f9: eb:63:43:bc:03:5b:49:5b:e9:3c:07:1e:27:1d:c7: 5a:5e:22:bd:b9:87:1d:95:d6:07:e4:60:7b:39:98: 02:80:22:e2:8c:00:c8:5d:cb:c0:f1:20:0d:0d:0a: df:e8:53:03:c4:9d:78:4a:d0:e0:92:0b:0b:c4:36: 08:a9:06:9c:80:f1:de:34:5d:f9:86:df:44:0c:4c: fc:09:38:84:71:17:5f:ca:99:93:d3:b1:ae:34:43: d6:67:55:ec:0f:c9:7a:96:20:18:92:18:24:06:0f: c7:65:43:ce:c5:7a:5f:ef:d8:9f:40:3c:d5:29:b8: f8:3b:f3:28:ed:fd:3b:32:dc:2a:26:90:39:d4:98: cb:de:d7:41:aa:5d:b7:74:96:5c:7d:70:f7:53:09: 34:98:63:33:ff:9e:fb:40:e1:7f:d1:ac:34:e7:99: 0c:f1:ba:6a:2c:39:41:bd:5d:6f:6e:b0:4e:37:94: 2b:89:40:55:8f:00:aa:40:f1:a8:3a:fd:0c:8b:3b: 28:9f:af:78:8b:f7:96:c2:95:78:aa:2e:56:a7:5b: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5B:9C:9F:34:37:DC:A2:EB:FF:0D:0C:C6:B7:CB:1E:A0:68:0A:51 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77745ad7-44b5-44a8-9e13-4096720b7c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:9080::/48 Signature Algorithm: sha256WithRSAEncryption 86:0f:f5:a0:44:b7:fb:f8:a5:64:20:e2:d5:99:13:14:37:2b: 1e:37:1d:e7:f0:6f:68:38:cc:f9:70:82:87:43:3c:fa:a8:c9: 91:70:87:82:b9:18:24:96:72:98:d2:de:c3:b6:65:a5:1f:a1: c7:47:c0:ab:c4:e9:7f:37:07:3b:ab:ab:96:24:5d:c9:1d:7e: 51:71:2c:5e:00:7a:44:a5:c4:fa:2c:f7:e1:9d:dc:85:26:af: 62:82:99:f5:3b:7e:b4:48:b3:18:52:2a:4b:ae:85:b4:1d:44: 24:83:a7:f7:d2:07:3d:ca:19:fb:bb:63:99:01:2c:ce:f3:0b: 81:fe:e4:43:37:f6:14:aa:c4:84:e2:5d:90:c9:33:8a:b9:ed: 9d:ba:f9:46:91:1b:ba:58:a9:d3:5e:93:7f:77:bb:34:8d:a5: 19:4e:89:fc:68:11:be:1c:b1:38:74:71:ca:a4:41:9c:8d:5b: 75:40:ae:79:67:28:71:39:55:cb:ab:5e:ad:31:20:6b:bb:4b: 8b:e1:93:08:b8:52:b8:5a:76:7c:2d:bc:38:1e:b2:08:3b:5f: 77:32:f0:91:98:ae:f4:04:05:48:03:2f:65:95:ce:ce:b1:29: f0:ea:9d:68:10:12:75:2a:20:da:a6:5e:47:8a:43:74:59:7f: 17:15:20:ea -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVcVJJ/E+k+BTO7m0br/fjdZx884wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMjA1MFoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAMWIwYzI1ZmUzMzQ5YTAyYTgzY2Y1 MTcwZmFhOTIyOTE2NzQ5Yzg1MDRhZjRjMTkxMWQzOGMyNTdmOWNhNWRmNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBCnqOd05P5MQixc5jumwy5PNs76 6rPxpn5mrJ864ChLmKNv7vOHQgdcPvnrY0O8A1tJW+k8Bx4nHcdaXiK9uYcdldYH 5GB7OZgCgCLijADIXcvA8SANDQrf6FMDxJ14StDgkgsLxDYIqQacgPHeNF35ht9E DEz8CTiEcRdfypmT07GuNEPWZ1XsD8l6liAYkhgkBg/HZUPOxXpf79ifQDzVKbj4 O/Mo7f07MtwqJpA51JjL3tdBql23dJZcfXD3Uwk0mGMz/577QOF/0aw055kM8bpq LDlBvV1vbrBON5QriUBVjwCqQPGoOv0Mizson694i/eWwpV4qi5Wp1v3rQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFABbnJ80N9yi6/8NDMa3yx6gaApRMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3NzQ1YWQ3LTQ0YjUtNDRhOC05ZTEzLTQwOTY3MjBiN2M5MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/5CAMA0GCSqGSIb3DQEBCwUAA4IBAQCGD/WgRLf7+KVkIOLV mRMUNyseNx3n8G9oOMz5cIKHQzz6qMmRcIeCuRgklnKY0t7DtmWlH6HHR8CrxOl/ Nwc7q6uWJF3JHX5RcSxeAHpEpcT6LPfhndyFJq9igpn1O360SLMYUipLroW0HUQk g6f30gc9yhn7u2OZASzO8wuB/uRDN/YUqsSE4l2QyTOKue2duvlGkRu6WKnTXpN/ d7s0jaUZTon8aBG+HLE4dHHKpEGcjVt1QK55ZyhxOVXLq16tMSBru0uL4ZMIuFK4 WnZ8Lbw4HrIIO193MvCRmK70BAVIAy9llc7OsSnw6p1oEBJ1KiDapl5HikN0WX8X FSDq -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:46 2025 by rpki-client on console.sobornost.net