$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8061a4d0-99ec-4f38-b1a0-ed013b6bbc5f.roa File: 8061a4d0-99ec-4f38-b1a0-ed013b6bbc5f.roa (raw, json) Hash identifier: uT3fdfP7kWTiSvT8JI0DwNSGV7TiWbLVTHKIH4jXIFQ= Subject key identifier: C5:3B:8F:C5:9F:D1:4E:1A:F0:14:67:3F:00:1F:2A:B8:06:4A:DC:80 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C9C5E0B44D72A5994E35779204636EEB05492B7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8061a4d0-99ec-4f38-b1a0-ed013b6bbc5f.roa Signing time: Mon 21 Apr 2025 15:20:08 +0000 ROA not before: Mon 21 Apr 2025 15:20:08 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:60c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9c:5e:0b:44:d7:2a:59:94:e3:57:79:20:46:36:ee:b0:54:92:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:20:08 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=4f33211369930a8e983b545979b4ca76910ed7682b214d0d479943f3444f67ee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:b6:e6:71:28:6d:f4:37:a2:f1:4d:9e:ea: 41:c6:91:39:d4:93:bc:dd:f3:a6:a7:8e:ef:2f:4f: a7:78:3f:4c:12:41:d7:ed:57:5b:8d:69:36:de:87: bf:16:47:43:b2:83:03:58:d6:b6:fc:d2:37:24:d8: 0f:ce:00:58:e5:f0:b7:75:49:72:07:58:65:72:d1: 32:85:22:91:9c:37:50:60:13:fa:e3:a0:7a:fa:51: fa:93:71:ea:28:9c:ec:74:f9:f9:c9:aa:17:f4:65: f8:a8:b4:b8:7d:9a:e2:10:a6:16:66:2d:20:9a:4e: 2b:67:ce:7a:c4:1e:45:ee:ec:f4:50:1a:55:bb:d1: 6d:27:bb:ed:38:25:dd:12:72:dd:3e:df:53:25:82: 8d:9e:62:03:10:9c:01:35:58:08:2a:0d:d1:1e:58: cc:8e:dd:c2:2a:59:b5:1b:ca:23:b6:41:06:50:77: 18:60:8c:22:02:d6:06:6a:6b:1f:93:45:7f:e3:8c: dc:51:fc:65:29:88:f4:63:0f:41:53:bd:2b:08:10: e4:a2:b7:85:b5:f3:9c:94:6c:43:9f:37:f3:f4:49: a0:f9:b3:cd:93:15:97:51:5e:eb:b4:87:83:5e:ee: d3:ea:55:05:64:47:69:6c:cf:bc:c1:ee:9f:6b:a4: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3B:8F:C5:9F:D1:4E:1A:F0:14:67:3F:00:1F:2A:B8:06:4A:DC:80 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8061a4d0-99ec-4f38-b1a0-ed013b6bbc5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:60c0::/46 Signature Algorithm: sha256WithRSAEncryption 5e:c2:b2:b0:9d:cf:88:17:01:86:50:ad:7e:fa:e6:86:70:ab: eb:a9:04:b2:9e:16:a6:ae:7a:2a:0d:c4:c8:a0:90:81:78:db: fc:11:58:e3:51:9d:6a:b0:95:d6:97:67:0c:b5:bb:e7:f8:ee: 2d:1c:2c:b6:4f:78:23:c4:f4:e2:25:c9:84:d3:f6:f6:ea:f0: b8:ab:14:9e:0b:20:19:e9:ab:f4:1f:8f:dc:2e:3b:3c:99:cc: 0c:de:85:c1:5e:42:04:a2:ba:04:80:94:42:60:ae:59:2a:dc: 40:a3:1c:70:3d:21:6b:f7:d2:5f:e2:59:92:43:ed:05:cc:4d: 34:f4:02:50:27:f7:0a:27:54:01:17:68:87:07:71:70:59:e7: d9:04:d2:8a:bb:00:13:92:62:0b:58:f3:f6:e4:3a:6a:ca:b5: e9:15:c9:63:29:23:16:f4:3f:38:b3:9e:67:db:e2:57:d2:a2: c4:bd:41:8e:e9:9e:db:4c:b4:d8:84:c4:c9:ad:6d:ce:44:70: ef:be:41:c5:3e:f9:a2:bc:a0:a6:63:63:1d:93:53:cc:07:16: 25:a5:89:8f:ce:19:1c:e1:03:47:fd:89:2d:d6:62:f4:3c:4c: 93:e4:7b:1e:9d:cf:3a:bf:b1:4d:eb:a9:61:7b:c9:f3:2f:96: 05:6a:c6:b2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPJxeC0TXKlmU41d5IEY27rBUkrcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MjAwOFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANGYzMzIxMTM2OTkzMGE4ZTk4M2I1 NDU5NzliNGNhNzY5MTBlZDc2ODJiMjE0ZDBkNDc5OTQzZjM0NDRmNjdlZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsle25nEobfQ3ovFNnupBxpE51JO8 3fOmp47vL0+neD9MEkHX7VdbjWk23oe/FkdDsoMDWNa2/NI3JNgPzgBY5fC3dUly B1hlctEyhSKRnDdQYBP646B6+lH6k3HqKJzsdPn5yaoX9GX4qLS4fZriEKYWZi0g mk4rZ856xB5F7uz0UBpVu9FtJ7vtOCXdEnLdPt9TJYKNnmIDEJwBNVgIKg3RHljM jt3CKlm1G8ojtkEGUHcYYIwiAtYGamsfk0V/44zcUfxlKYj0Yw9BU70rCBDkoreF tfOclGxDnzfz9Emg+bPNkxWXUV7rtIeDXu7T6lUFZEdpbM+8we6fa6QwuQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMU7j8Wf0U4a8BRnPwAfKrgGStyAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwNjFhNGQwLTk5ZWMtNGYzOC1iMWEwLWVkMDEzYjZiYmM1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba92DAMA0GCSqGSIb3DQEBCwUAA4IBAQBewrKwnc+IFwGGUK1+ +uaGcKvrqQSynhamrnoqDcTIoJCBeNv8EVjjUZ1qsJXWl2cMtbvn+O4tHCy2T3gj xPTiJcmE0/b26vC4qxSeCyAZ6av0H4/cLjs8mcwM3oXBXkIEoroEgJRCYK5ZKtxA oxxwPSFr99Jf4lmSQ+0FzE009AJQJ/cKJ1QBF2iHB3FwWefZBNKKuwATkmILWPP2 5DpqyrXpFcljKSMW9D84s55n2+JX0qLEvUGO6Z7bTLTYhMTJrW3ORHDvvkHFPvmi vKCmY2Mdk1PMBxYlpYmPzhkc4QNH/Ykt1mL0PEyT5Hsenc86v7FN66lhe8nzL5YF asay -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net