$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c0f8903-7305-4902-a6b4-6607ce10e298.roa File: 7c0f8903-7305-4902-a6b4-6607ce10e298.roa (raw, json) Hash identifier: ZyODYtOxqcq6PRXHfGPHY8HJiMY5eMliDdue0OYy+UU= Subject key identifier: 4F:86:83:3E:48:F7:0A:44:9B:A7:E7:66:6B:1B:B5:EC:FF:FE:7C:F6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5431A0097A077A793F80A6DF00E1E6453382E123 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c0f8903-7305-4902-a6b4-6607ce10e298.roa Signing time: Sat 19 Apr 2025 00:20:37 +0000 ROA not before: Sat 19 Apr 2025 00:20:37 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:31:a0:09:7a:07:7a:79:3f:80:a6:df:00:e1:e6:45:33:82:e1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:20:37 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=15f06d6cd12aeb0a4e65c4b6f5ebe614cae1d1d3c2ed04cb4756409416375024, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6d:27:ea:0c:5c:fe:45:4a:f0:87:9e:d8:53: c8:37:51:46:51:3a:4e:13:a2:c5:84:2f:ce:ff:e4: 38:f8:cb:ad:66:d9:75:71:c1:f1:72:72:dc:2b:75: 64:dd:f5:03:29:e1:7c:37:5c:12:89:69:1a:3c:1e: de:d3:e6:26:fc:cd:b7:f4:ef:a9:24:0a:f8:44:f6: 63:11:31:f6:be:5e:94:eb:81:b1:5c:0c:8e:39:b1: ac:24:7e:a9:6a:5e:42:00:57:22:7a:5b:47:21:68: 2a:ef:6d:20:c1:07:3e:12:28:02:eb:58:39:9e:52: a8:89:b3:92:58:12:b9:0a:2c:53:bc:2e:d1:1a:55: 8c:38:cd:7b:73:11:f8:f9:f8:c3:6b:53:73:93:09: 56:ed:1a:b3:f1:fc:38:02:63:d4:a5:90:2f:38:3e: c5:bb:29:ab:ee:7d:f3:b4:d9:64:ae:b9:54:97:27: f0:14:75:77:bc:6d:22:46:97:93:aa:c5:ae:0f:21: c7:ea:db:02:e8:37:ce:d4:32:3b:ef:02:32:9d:a5: 87:7d:d9:f7:9c:cf:73:66:ce:28:2f:dc:69:ef:93: bd:f5:9d:7a:a8:16:ea:3d:f3:eb:7f:6d:6c:dc:db: e8:2a:86:31:fa:8a:67:fb:0e:5c:67:41:1f:b7:c5: 68:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:86:83:3E:48:F7:0A:44:9B:A7:E7:66:6B:1B:B5:EC:FF:FE:7C:F6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c0f8903-7305-4902-a6b4-6607ce10e298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2020::/48 Signature Algorithm: sha256WithRSAEncryption 61:a2:c8:0f:ef:e3:68:92:fa:05:c9:5e:5f:e9:f4:fe:d1:f0: 3f:d7:3b:73:de:57:7e:83:8b:3a:64:bb:43:e0:c2:e6:6c:3e: d9:0d:18:b4:c0:8a:53:ae:22:80:26:38:67:f8:ef:b3:50:42: 53:1d:12:fe:e0:40:a4:2f:14:bf:be:4f:e2:14:4d:5d:60:6c: 2e:0e:2a:33:19:12:d9:6c:7c:6f:5c:32:23:31:38:dc:e5:02: 2e:90:42:27:66:ec:c5:c2:97:7e:4a:67:0f:68:3d:dc:e9:ff: b1:4b:d0:d9:18:a4:be:d6:5f:53:41:f0:04:df:42:95:89:7e: 48:c1:a4:25:28:de:f6:8e:c5:5d:98:8b:ca:28:ff:3f:34:51: 6c:0f:4a:de:f2:51:51:46:97:81:42:9d:08:00:51:c7:1e:f5: c3:f2:da:a1:4e:7e:f3:fd:de:88:70:b8:a0:21:bb:a2:9c:d7: 0c:ff:b1:41:20:d7:04:4e:ec:a6:22:ba:4b:5a:2e:fd:8a:09: 09:5c:5e:ef:49:3e:fe:1d:6e:67:d1:3b:b3:30:39:97:e5:be: c8:ab:07:98:17:7b:07:2c:57:9a:c0:1a:83:cc:17:a0:bc:02: bb:29:95:ac:a0:62:f5:1b:8d:ce:dc:7c:df:7d:2c:c9:f1:d2: ae:39:75:c9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVDGgCXoHenk/gKbfAOHmRTOC4SMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMjAzN1oX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAMTVmMDZkNmNkMTJhZWIwYTRlNjVj NGI2ZjVlYmU2MTRjYWUxZDFkM2MyZWQwNGNiNDc1NjQwOTQxNjM3NTAyNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G0n6gxc/kVK8Iee2FPIN1FGUTpO E6LFhC/O/+Q4+MutZtl1ccHxcnLcK3Vk3fUDKeF8N1wSiWkaPB7e0+Ym/M239O+p JAr4RPZjETH2vl6U64GxXAyOObGsJH6pal5CAFcieltHIWgq720gwQc+EigC61g5 nlKoibOSWBK5CixTvC7RGlWMOM17cxH4+fjDa1NzkwlW7Rqz8fw4AmPUpZAvOD7F uymr7n3ztNlkrrlUlyfwFHV3vG0iRpeTqsWuDyHH6tsC6DfO1DI77wIynaWHfdn3 nM9zZs4oL9xp75O99Z16qBbqPfPrf21s3NvoKoYx+opn+w5cZ0Eft8VoowIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE+Ggz5I9wpEm6fnZmsbtez//nz2MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdjMGY4OTAzLTczMDUtNDkwMi1hNmI0LTY2MDdjZTEwZTI5OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yAgMA0GCSqGSIb3DQEBCwUAA4IBAQBhosgP7+NokvoFyV5f 6fT+0fA/1ztz3ld+g4s6ZLtD4MLmbD7ZDRi0wIpTriKAJjhn+O+zUEJTHRL+4ECk LxS/vk/iFE1dYGwuDiozGRLZbHxvXDIjMTjc5QIukEInZuzFwpd+SmcPaD3c6f+x S9DZGKS+1l9TQfAE30KViX5IwaQlKN72jsVdmIvKKP8/NFFsD0re8lFRRpeBQp0I AFHHHvXD8tqhTn7z/d6IcLigIbuinNcM/7FBINcETuymIrpLWi79igkJXF7vST7+ HW5n0TuzMDmX5b7IqweYF3sHLFeawBqDzBegvAK7KZWsoGL1G43O3HzffSzJ8dKu OXXJ -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:46 2025 by rpki-client on console.sobornost.net