$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d360aed-98af-4b86-84d2-f1b86117b0a2.roa File: 7d360aed-98af-4b86-84d2-f1b86117b0a2.roa (raw, json) Hash identifier: l4Vi4DgT4YHEOtL4El1pmLSmFLHuUgQ3vLsScaP8jb8= Subject key identifier: FE:05:BE:9A:76:B8:E7:C6:2C:75:EE:15:60:8A:E9:12:5C:AC:08:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 15EA1F593BB3CA83B6BA502FC1D6FE6B3C1F48FF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d360aed-98af-4b86-84d2-f1b86117b0a2.roa Signing time: Sat 19 Apr 2025 00:50:59 +0000 ROA not before: Sat 19 Apr 2025 00:50:59 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:b0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ea:1f:59:3b:b3:ca:83:b6:ba:50:2f:c1:d6:fe:6b:3c:1f:48:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:50:59 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=41fc26e9977189850a84c0b61adbfd693304295342eccd963608f7c77851df38, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:c0:52:0e:ec:f3:5c:89:30:6a:27:e6:1a: 81:e0:3a:dc:d7:c0:4f:f3:95:86:f0:fa:dc:9a:b8: 7c:12:4c:56:f6:69:f5:bc:39:e1:c7:86:5f:1b:f6: 7e:c3:89:df:8e:20:87:70:2a:ed:fa:0c:a8:f1:94: e9:ea:0b:45:b0:00:1d:0c:dd:b3:58:5e:97:ca:72: ad:bd:d1:5d:2a:ed:90:5d:cb:46:40:a6:20:d8:3c: 86:63:dd:07:a4:f1:79:0f:d7:59:19:9a:de:18:7f: 87:34:14:95:91:48:5c:92:12:ac:cf:6e:10:48:a9: c6:55:87:98:46:9a:e4:86:93:e6:8f:8d:72:17:d8: da:ed:68:83:fb:96:97:c0:df:10:12:84:b4:77:e7: bf:66:4f:29:2f:16:93:6c:16:d8:2b:c3:d9:12:34: fe:bb:26:6d:27:bb:71:8e:fa:6d:82:30:b8:71:f7: 22:44:f0:c8:33:58:44:e8:9d:9a:b1:95:ef:4b:3a: ef:46:92:aa:94:e4:a2:2b:c2:06:26:dd:75:e6:83: 56:23:bf:3e:1f:be:aa:1d:45:49:d6:28:3b:6a:6f: 7e:ac:27:e4:0a:2f:f2:3b:08:07:db:aa:15:16:ff: 7e:dc:dd:8b:c3:85:e7:3c:f6:76:8a:30:c5:34:e0: d4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:05:BE:9A:76:B8:E7:C6:2C:75:EE:15:60:8A:E9:12:5C:AC:08:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d360aed-98af-4b86-84d2-f1b86117b0a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:b0c0::/46 Signature Algorithm: sha256WithRSAEncryption 75:d8:a6:39:e0:e1:9b:15:55:07:af:d4:07:cd:3f:67:dd:f6: 3f:dd:14:40:37:5b:bf:ae:41:88:c8:d8:cb:8c:04:c0:77:e8: 07:ce:0b:e0:6d:30:6a:45:3a:f9:3f:b2:67:85:77:6f:eb:2a: a4:ac:19:28:8a:95:3e:c4:82:bd:1f:ac:8d:13:2e:9d:b5:01: 4c:c0:38:66:ba:c0:89:e9:9d:50:59:59:dd:fa:f7:e6:a5:94: 9e:17:a3:15:44:15:df:46:61:be:3a:35:7a:1f:fa:16:5e:12: 96:29:ca:da:15:17:c8:a8:f9:78:50:54:5e:79:c2:37:ad:e9: f7:6f:8a:78:1d:68:12:fd:7b:48:a6:ae:bb:4d:97:85:3e:40: 90:b1:cd:aa:e7:e9:2b:42:5c:1b:70:ef:11:50:9c:ed:58:24: 22:f7:d1:77:b9:23:ab:a1:bb:99:f2:c9:dc:4f:0e:15:e8:54: ea:9b:d4:0a:72:ed:19:90:78:bb:22:c6:f2:69:35:b8:67:c6: 91:72:66:6b:67:a3:6f:3e:87:0b:46:cc:e7:40:fb:d9:0a:96: 4c:47:cd:40:09:5f:f3:e3:24:77:17:3b:f2:c0:3d:f5:10:d0: 63:4e:62:00:e1:eb:ad:e8:f2:5e:f2:c1:37:d0:2b:a3:2b:61: 39:b1:cb:d0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUFeofWTuzyoO2ulAvwdb+azwfSP8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwNTA1OVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNANDFmYzI2ZTk5NzcxODk4NTBhODRj MGI2MWFkYmZkNjkzMzA0Mjk1MzQyZWNjZDk2MzYwOGY3Yzc3ODUxZGYzODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwybAUg7s81yJMGon5hqB4Drc18BP 85WG8Prcmrh8EkxW9mn1vDnhx4ZfG/Z+w4nfjiCHcCrt+gyo8ZTp6gtFsAAdDN2z WF6XynKtvdFdKu2QXctGQKYg2DyGY90HpPF5D9dZGZreGH+HNBSVkUhckhKsz24Q SKnGVYeYRprkhpPmj41yF9ja7WiD+5aXwN8QEoS0d+e/Zk8pLxaTbBbYK8PZEjT+ uyZtJ7txjvptgjC4cfciRPDIM1hE6J2asZXvSzrvRpKqlOSiK8IGJt115oNWI78+ H76qHUVJ1ig7am9+rCfkCi/yOwgH26oVFv9+3N2Lw4XnPPZ2ijDFNODUJQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP4Fvpp2uOfGLHXuFWCK6RJcrAh7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdkMzYwYWVkLTk4YWYtNGI4Ni04NGQyLWYxYjg2MTE3YjBhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaabDAMA0GCSqGSIb3DQEBCwUAA4IBAQB12KY54OGbFVUHr9QH zT9n3fY/3RRAN1u/rkGIyNjLjATAd+gHzgvgbTBqRTr5P7JnhXdv6yqkrBkoipU+ xIK9H6yNEy6dtQFMwDhmusCJ6Z1QWVnd+vfmpZSeF6MVRBXfRmG+OjV6H/oWXhKW KcraFRfIqPl4UFReecI3ren3b4p4HWgS/XtIpq67TZeFPkCQsc2q5+krQlwbcO8R UJztWCQi99F3uSOrobuZ8sncTw4V6FTqm9QKcu0ZkHi7IsbyaTW4Z8aRcmZrZ6Nv PocLRsznQPvZCpZMR81ACV/z4yR3FzvywD31ENBjTmIA4eut6PJe8sE30CujK2E5 scvQ -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:46 2025 by rpki-client on console.sobornost.net