$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80672242-3fdf-44d8-88c6-841fcfbe1251.roa File: 80672242-3fdf-44d8-88c6-841fcfbe1251.roa (raw, json) Hash identifier: U0ghlh4MEnUmEta0IU8lxFPVBDwZRohySw++KzRbMzE= Subject key identifier: DD:C9:9E:27:85:B3:07:12:0A:EC:3E:9C:26:D7:CA:2C:DC:39:A0:89 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74C7E658E4BAEFEEBE3C2A4BB59E4F809FAFC3C1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80672242-3fdf-44d8-88c6-841fcfbe1251.roa Signing time: Mon 21 Apr 2025 15:30:21 +0000 ROA not before: Mon 21 Apr 2025 15:30:21 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c7:e6:58:e4:ba:ef:ee:be:3c:2a:4b:b5:9e:4f:80:9f:af:c3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:30:21 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=cb55fc283588b573a80c61f4a07ca2cc57004a84c1be92441076ef3a73056ba2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:20:1f:f0:9f:9f:c2:7b:29:4a:e1:3a:1b: 11:50:fe:1a:2f:ab:b8:05:63:60:87:17:e8:7c:df: 75:4e:3b:8d:ba:5e:6a:67:03:aa:7f:e0:b1:d5:d4: 62:c4:06:aa:72:1d:e5:0f:8b:aa:e6:7b:1f:db:db: a4:e0:39:95:f4:c6:04:ba:ec:93:e2:fd:e9:a6:3a: 86:73:ca:a7:dc:f4:79:b7:82:56:0a:d8:29:e3:f5: c5:91:6b:71:55:95:77:78:c1:d1:fd:ee:90:e2:d0: 47:50:09:93:3e:b0:99:f7:e3:db:99:ff:f1:b5:1d: fe:ac:15:53:e6:ba:b3:8a:03:79:97:e2:07:5c:23: 9b:6c:f4:bd:38:19:07:6e:11:dc:70:b4:08:60:17: ea:3f:9f:74:a3:a4:c5:e5:cb:70:66:6c:15:1d:e8: ad:45:4c:fd:8b:d8:51:e5:9c:a6:e5:06:fb:00:09: c0:96:1a:4f:87:3a:3d:37:ae:57:bd:c8:93:f3:d9: 4b:f1:c0:9f:4a:21:10:e7:28:f1:86:2d:0b:8c:f7: b0:bd:f4:85:ba:fc:b6:0e:16:ce:6a:a3:da:d4:6a: 96:8e:c2:c7:c7:d9:32:71:f7:0e:ce:f0:2f:5a:f9: fd:29:e0:c4:46:fc:0c:36:0e:e4:8e:81:67:6c:c9: 4b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C9:9E:27:85:B3:07:12:0A:EC:3E:9C:26:D7:CA:2C:DC:39:A0:89 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80672242-3fdf-44d8-88c6-841fcfbe1251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:8800::/40 Signature Algorithm: sha256WithRSAEncryption 2c:92:b4:0f:2d:fc:e4:c3:b2:e3:4f:20:e4:7b:aa:e4:6c:2c: c4:50:41:17:3c:71:71:73:c4:e0:e2:63:cd:d9:1e:36:ca:bb: 66:ae:b6:d1:8a:33:3c:27:69:f0:12:b1:1c:dc:de:cf:33:ff: a4:61:78:84:e3:c5:0c:66:d7:01:7e:23:a5:39:29:21:fe:0f: f4:30:9d:ab:88:18:df:33:d4:ea:1c:b9:ff:86:c0:39:89:ee: fe:f9:dc:d8:06:19:0d:01:b8:da:2a:5c:bf:af:9c:a3:9d:4c: 0a:fe:a2:05:15:90:4a:45:bb:b5:43:57:95:24:5b:ad:85:51: 6d:b0:cf:85:4a:60:f5:13:89:4d:0a:35:a7:e9:ad:87:f7:6f: d7:c5:88:2e:c8:68:9c:a8:b0:dd:7e:fb:4e:7b:68:72:bb:77: 76:3f:f8:45:ba:f4:8d:75:7e:36:5e:74:6f:e0:f4:ac:9a:e3: 75:0c:a5:f7:1f:fc:4e:49:de:f0:b8:60:d3:20:04:bd:fd:63: 05:12:15:98:d1:dd:ad:34:6f:bc:c7:35:31:30:af:4f:99:cb: 18:c8:b6:ea:8b:4e:48:e1:94:c7:08:df:36:ef:88:9e:bc:a2: 32:07:ef:16:3f:e9:63:a8:c5:65:ad:7c:27:d5:49:c8:db:fc: 45:ca:54:40 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdMfmWOS67+6+PCpLtZ5PgJ+vw8EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MzAyMVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAY2I1NWZjMjgzNTg4YjU3M2E4MGM2 MWY0YTA3Y2EyY2M1NzAwNGE4NGMxYmU5MjQ0MTA3NmVmM2E3MzA1NmJhMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1MgH/Cfn8J7KUrhOhsRUP4aL6u4 BWNghxfofN91TjuNul5qZwOqf+Cx1dRixAaqch3lD4uq5nsf29uk4DmV9MYEuuyT 4v3ppjqGc8qn3PR5t4JWCtgp4/XFkWtxVZV3eMHR/e6Q4tBHUAmTPrCZ9+Pbmf/x tR3+rBVT5rqzigN5l+IHXCObbPS9OBkHbhHccLQIYBfqP590o6TF5ctwZmwVHeit RUz9i9hR5Zym5Qb7AAnAlhpPhzo9N65XvciT89lL8cCfSiEQ5yjxhi0LjPewvfSF uvy2DhbOaqPa1GqWjsLHx9kycfcOzvAvWvn9KeDERvwMNg7kjoFnbMlLWwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFN3JnieFswcSCuw+nCbXyizcOaCJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgwNjcyMjQyLTNmZGYtNDRkOC04OGM2LTg0MWZjZmJlMTI1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaYgwDQYJKoZIhvcNAQELBQADggEBACyStA8t/OTDsuNPIOR7 quRsLMRQQRc8cXFzxODiY83ZHjbKu2auttGKMzwnafASsRzc3s8z/6RheITjxQxm 1wF+I6U5KSH+D/QwnauIGN8z1Oocuf+GwDmJ7v753NgGGQ0BuNoqXL+vnKOdTAr+ ogUVkEpFu7VDV5UkW62FUW2wz4VKYPUTiU0KNafprYf3b9fFiC7IaJyosN1++057 aHK7d3Y/+EW69I11fjZedG/g9Kya43UMpfcf/E5J3vC4YNMgBL39YwUSFZjR3a00 b7zHNTEwr0+ZyxjItuqLTkjhlMcI3zbviJ68ojIH7xY/6WOoxWWtfCfVScjb/EXK VEA= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net