$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830802a5-d8f4-4fa8-945f-86772db3ed31.roa File: 830802a5-d8f4-4fa8-945f-86772db3ed31.roa (raw, json) Hash identifier: YadLyN+b7R6FOgBGTqIpE7CLiwqRTBfg/ilwpIU942w= Subject key identifier: 4E:80:2B:CF:2A:E4:43:C8:E3:0D:D6:DB:71:02:60:90:4C:CA:15:56 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 230ED08B0518E9AA814040259020C998161A873B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830802a5-d8f4-4fa8-945f-86772db3ed31.roa Signing time: Tue 15 Apr 2025 00:00:54 +0000 ROA not before: Tue 15 Apr 2025 00:00:54 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0e:d0:8b:05:18:e9:aa:81:40:40:25:90:20:c9:98:16:1a:87:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 15 00:00:54 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=454e4f17a5eabc00448c5f05126fdc59e2b44385c513bfd64117514e6c0eaff6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:13:93:e8:28:55:cb:87:46:54:27:47:23: dc:0d:48:69:71:de:53:4f:99:a9:2e:f6:b7:ad:9e: ea:b5:4c:18:bc:5d:9a:a0:ab:7f:68:74:82:a8:ad: 5f:7f:78:c1:60:6e:3c:52:37:57:4a:fe:d9:d6:69: 2b:01:6e:7e:4f:ea:03:fa:6b:e2:33:87:02:52:55: 97:4c:99:31:fe:eb:8b:11:e1:c8:80:7e:aa:ff:78: 90:28:61:20:ba:a3:db:0b:83:93:e2:3b:47:e7:47: 23:cc:9c:52:92:4f:5e:b2:f0:d3:59:84:0a:86:71: 89:03:73:1e:35:af:44:31:b0:4b:19:60:74:ca:a6: f4:89:66:74:09:49:c3:97:0b:a5:4f:17:22:1c:d3: 43:9f:07:f4:6e:84:ac:c1:1f:ff:76:cf:ee:82:94: 37:7c:67:e4:0c:2e:2b:bf:8b:87:b1:c7:75:b7:0f: 69:c8:93:de:7b:94:83:71:8c:75:13:bf:a4:41:5c: b6:99:da:4a:0f:66:a4:dd:b9:59:39:bb:7e:de:7d: ee:37:01:87:62:c7:2e:ad:a4:dd:93:a0:4e:29:02: e4:82:b5:43:59:8c:07:7e:8f:b8:86:a3:7a:97:22: be:86:ee:84:9c:ff:ef:8a:3c:94:29:d1:a0:0f:6d: 41:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:80:2B:CF:2A:E4:43:C8:E3:0D:D6:DB:71:02:60:90:4C:CA:15:56 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/830802a5-d8f4-4fa8-945f-86772db3ed31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:f000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:c3:eb:d8:39:1d:72:ae:5d:08:8e:83:52:fe:b2:be:aa:04: 74:ca:67:78:a8:5d:d1:56:50:a6:01:ae:2c:44:16:5d:26:c0: b3:e5:5e:27:0a:bc:64:99:5e:02:fe:56:8e:f6:43:46:25:3a: f4:45:78:3d:a0:c0:2c:6f:9f:a4:cc:4b:62:3e:89:69:a8:a7: 12:10:ff:cc:ee:9d:ab:75:16:ff:cd:35:4d:63:ab:9d:e2:28: 33:a7:ae:ec:67:85:55:e5:5b:d1:85:7e:b6:e0:4e:97:b0:37: c7:11:d9:32:ba:fc:57:68:f3:56:92:52:86:29:db:da:e4:e7: d5:81:c7:2a:29:5e:5a:fe:86:91:78:7e:9a:45:60:13:a8:11: 4a:20:82:43:26:a5:71:33:f2:2f:57:d2:22:e4:c0:18:d9:ef: 68:75:55:70:0e:14:47:c4:88:a1:11:4a:b5:1d:34:d8:7b:82: e4:cf:97:36:ba:35:cb:73:08:91:f5:d6:e5:fc:9e:19:3f:82: e0:a6:e4:68:f8:1b:e8:e8:4b:a7:25:67:aa:fd:0d:bc:b4:2c: 70:f1:b5:46:7d:0f:db:18:d5:88:91:87:0c:4c:00:b8:36:e1: d6:1c:44:ef:15:fe:a8:45:22:dd:ab:68:80:8a:0a:d6:d5:9b: 28:5f:08:d6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIw7QiwUY6aqBQEAlkCDJmBYahzswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNTAwMDA1NFoX DTI1MDUyMDIzNTk1OVowejFJMEcGA1UEBRNANDU0ZTRmMTdhNWVhYmMwMDQ0OGM1 ZjA1MTI2ZmRjNTllMmI0NDM4NWM1MTNiZmQ2NDExNzUxNGU2YzBlYWZmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiUTk+goVcuHRlQnRyPcDUhpcd5T T5mpLva3rZ7qtUwYvF2aoKt/aHSCqK1ff3jBYG48UjdXSv7Z1mkrAW5+T+oD+mvi M4cCUlWXTJkx/uuLEeHIgH6q/3iQKGEguqPbC4OT4jtH50cjzJxSkk9esvDTWYQK hnGJA3MeNa9EMbBLGWB0yqb0iWZ0CUnDlwulTxciHNNDnwf0boSswR//ds/ugpQ3 fGfkDC4rv4uHscd1tw9pyJPee5SDcYx1E7+kQVy2mdpKD2ak3blZObt+3n3uNwGH YscuraTdk6BOKQLkgrVDWYwHfo+4hqN6lyK+hu6EnP/vijyUKdGgD21BGwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFE6AK88q5EPI4w3W23ECYJBMyhVWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMDgwMmE1LWQ4ZjQtNGZhOC05NDVmLTg2NzcyZGIzZWQzMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYPAwDQYJKoZIhvcNAQELBQADggEBAFzD69g5HXKuXQiOg1L+ sr6qBHTKZ3ioXdFWUKYBrixEFl0mwLPlXicKvGSZXgL+Vo72Q0YlOvRFeD2gwCxv n6TMS2I+iWmopxIQ/8zunat1Fv/NNU1jq53iKDOnruxnhVXlW9GFfrbgTpewN8cR 2TK6/Fdo81aSUoYp29rk59WBxyopXlr+hpF4fppFYBOoEUoggkMmpXEz8i9X0iLk wBjZ72h1VXAOFEfEiKERSrUdNNh7guTPlza6NctzCJH11uX8nhk/guCm5Gj4G+jo S6clZ6r9Dby0LHDxtUZ9D9sY1YiRhwxMALg24dYcRO8V/qhFIt2raICKCtbVmyhf CNY= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net