$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/803133e2-b46b-4dbc-9fc8-0014c2592315.roa File: 803133e2-b46b-4dbc-9fc8-0014c2592315.roa (raw, json) Hash identifier: 8A1kT+VdSJ9TX8RS2a4sGhlPRsWU7qqyqF6t5Qp76Cc= Subject key identifier: EA:EC:79:F8:C8:32:45:C6:C3:F1:D0:14:05:33:41:DF:29:9C:2A:95 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 593B0F57CA916B193783EFF867C44375A2FF7B38 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/803133e2-b46b-4dbc-9fc8-0014c2592315.roa Signing time: Fri 11 Apr 2025 00:00:24 +0000 ROA not before: Fri 11 Apr 2025 00:00:24 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3b:0f:57:ca:91:6b:19:37:83:ef:f8:67:c4:43:75:a2:ff:7b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 11 00:00:24 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=399dc0f3bc723cdc2095f5c56f6554c1d53ae421e8402414e5b2a6cf173231e7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:af:87:bd:f0:b7:4b:d0:62:67:e1:ff:0d: 9c:2a:de:10:1f:0b:a7:8c:05:53:b2:14:3e:73:cf: 99:65:5a:97:6e:59:e3:10:18:f8:ce:74:17:ec:68: a8:9b:cf:96:dd:e6:6c:5a:d4:31:9d:2c:b6:5f:34: 75:91:f5:19:59:a5:8d:87:3d:10:91:61:db:90:11: d0:96:8d:f0:65:e5:03:e1:5b:4c:dd:92:ef:78:3a: 44:f3:6b:d6:ef:82:92:05:5f:4b:e9:84:f1:bd:9a: 74:b7:8c:11:37:30:9d:3f:ac:41:f4:26:24:9b:01: ee:02:b7:81:eb:b6:40:8c:19:fc:d7:75:01:46:f0: 13:13:8c:9d:26:c3:c6:1d:b3:3d:b5:87:26:a9:c5: da:63:93:91:ec:06:74:49:a9:fb:d6:9e:b6:e4:6a: ae:72:30:52:d1:20:7e:f2:34:ff:8a:7c:c9:60:1a: 43:96:55:ed:55:3a:dd:de:76:3d:d7:a1:52:6c:34: 99:cb:ff:20:95:64:6a:5b:0e:88:c9:8c:a1:97:ce: db:fb:2e:f0:a0:7c:35:c1:85:0c:24:fd:7e:af:d4: 5a:aa:46:b2:6d:38:f7:7a:9a:3c:df:f8:e5:e0:69: ee:c1:c7:56:50:08:a0:d1:3b:77:a6:dd:e2:a2:00: 90:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EC:79:F8:C8:32:45:C6:C3:F1:D0:14:05:33:41:DF:29:9C:2A:95 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/803133e2-b46b-4dbc-9fc8-0014c2592315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:4000::/40 Signature Algorithm: sha256WithRSAEncryption 9f:2a:f0:e2:b7:86:e6:3c:03:71:b6:60:0f:29:ef:d6:a8:f8: 2b:c9:b6:7f:aa:c4:d7:16:00:ed:86:7f:09:72:4b:7e:c6:c1: d1:43:25:b9:a6:de:fa:ce:42:8d:23:b4:47:69:e7:e9:a8:aa: dd:00:a2:9f:44:92:58:09:d7:53:37:d3:79:02:3e:fa:53:74: 5a:06:11:27:a2:00:59:d9:b3:17:33:83:68:a4:2a:ad:fa:aa: 65:14:e7:5d:b7:af:a6:35:67:6c:c8:4f:dc:40:04:a0:2d:57: 44:a6:82:8d:c7:8e:c5:cc:cc:c0:95:7b:5f:67:fe:2f:7c:1a: fa:0f:52:60:bd:17:38:d8:13:ea:92:f7:20:2b:e7:26:97:7e: fc:8b:47:5d:a5:96:72:4a:f0:48:08:80:25:bf:ac:c8:bd:60: 2c:21:45:20:4c:92:b9:f0:c6:3f:52:99:38:40:30:c9:61:3a: d7:39:15:42:d3:64:c9:9a:65:f5:cc:a6:62:7d:7c:6d:77:15: 77:2c:eb:4c:9d:ed:b5:c7:25:c7:2f:2d:f2:d6:b1:5c:7a:8c: 5b:4a:0b:2a:a8:29:87:36:92:52:32:44:76:e0:29:e4:17:ea: 8a:4b:c2:45:40:9d:f6:63:56:59:fa:7f:c6:61:3c:d0:e5:da: 56:4e:6b:85 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWTsPV8qRaxk3g+/4Z8RDdaL/ezgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxMTAwMDAyNFoX DTI1MDUxNjIzNTk1OVowejFJMEcGA1UEBRNAMzk5ZGMwZjNiYzcyM2NkYzIwOTVm NWM1NmY2NTU0YzFkNTNhZTQyMWU4NDAyNDE0ZTViMmE2Y2YxNzMyMzFlNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XOvh73wt0vQYmfh/w2cKt4QHwun jAVTshQ+c8+ZZVqXblnjEBj4znQX7Giom8+W3eZsWtQxnSy2XzR1kfUZWaWNhz0Q kWHbkBHQlo3wZeUD4VtM3ZLveDpE82vW74KSBV9L6YTxvZp0t4wRNzCdP6xB9CYk mwHuAreB67ZAjBn813UBRvATE4ydJsPGHbM9tYcmqcXaY5OR7AZ0San71p625Gqu cjBS0SB+8jT/inzJYBpDllXtVTrd3nY916FSbDSZy/8glWRqWw6IyYyhl87b+y7w oHw1wYUMJP1+r9RaqkaybTj3epo83/jl4GnuwcdWUAig0Tt3pt3iogCQywIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOrsefjIMkXGw/HQFAUzQd8pnCqVMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwMzEzM2UyLWI0NmItNGRiYy05ZmM4LTAwMTRjMjU5MjMxNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9UAwDQYJKoZIhvcNAQELBQADggEBAJ8q8OK3huY8A3G2YA8p 79ao+CvJtn+qxNcWAO2GfwlyS37GwdFDJbmm3vrOQo0jtEdp5+moqt0Aop9EklgJ 11M303kCPvpTdFoGESeiAFnZsxczg2ikKq36qmUU5123r6Y1Z2zIT9xABKAtV0Sm go3HjsXMzMCVe19n/i98GvoPUmC9FzjYE+qS9yAr5yaXfvyLR12llnJK8EgIgCW/ rMi9YCwhRSBMkrnwxj9SmThAMMlhOtc5FULTZMmaZfXMpmJ9fG13FXcs60yd7bXH JccvLfLWsVx6jFtKCyqoKYc2klIyRHbgKeQX6opLwkVAnfZjVln6f8ZhPNDl2lZO a4U= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net