$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8602e8cf-ec3c-4331-9668-a4ecf6830436.roa File: 8602e8cf-ec3c-4331-9668-a4ecf6830436.roa (raw, json) Hash identifier: /k7ZsCcKFvz12TP1uMvtcsKcN2/H1Tl2fvnxD0m5SvQ= Subject key identifier: CE:63:2F:DD:F8:70:D3:E5:57:9E:D3:8C:68:B4:1B:09:3C:83:2B:21 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4F249C19F129F4F05F6827616D95CD841F1D697A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8602e8cf-ec3c-4331-9668-a4ecf6830436.roa Signing time: Sat 19 Apr 2025 00:30:16 +0000 ROA not before: Sat 19 Apr 2025 00:30:16 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:24:9c:19:f1:29:f4:f0:5f:68:27:61:6d:95:cd:84:1f:1d:69:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:30:16 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=2777d8807d5a6f2d0df6ff70f64072b7a8d0ddd38ed5129686114afa166ab42f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:f5:62:e3:64:a9:fd:7d:b8:e5:fc:d0:04: 6a:45:c9:b1:e0:45:2f:cc:30:8c:73:0a:fa:9c:b1: 8c:93:0b:69:c0:2c:e3:48:a1:4a:f3:86:a6:03:a4: 41:b2:fa:5e:c5:4f:a1:85:5e:09:60:5b:25:13:a0: d7:a7:f3:1f:e3:a1:ac:07:57:ad:b3:f3:6a:44:7e: 20:3d:4a:32:a8:88:1d:ca:d9:cb:cc:d1:ae:d0:e9: f5:1d:a6:0f:0b:63:66:0c:d8:c0:b1:ad:e9:a4:65: dd:3a:c4:06:b8:5c:9b:a4:cb:9e:10:dc:b5:49:8a: ea:e2:44:d3:24:50:9c:59:d7:5f:c1:cc:68:db:11: 54:f8:22:e6:37:5d:94:b2:a3:a1:43:f7:f6:ba:9e: 41:fa:37:ad:e5:a5:0f:c9:91:f7:49:66:2c:bc:97: 37:53:f7:4d:ef:12:c7:00:66:de:34:6f:6b:4d:15: f3:b8:34:c9:0e:ae:93:66:18:7a:1f:99:3e:2b:bd: 96:14:f7:e2:b3:92:88:f1:ee:4c:31:2a:e7:54:3f: 64:37:83:6c:69:cb:f4:99:be:9e:42:c5:5f:a4:76: f8:c5:cd:9b:4a:89:d2:49:9d:c5:72:4a:50:1d:e4: 69:82:df:06:bb:e5:d9:61:a8:ae:cf:bc:70:81:91: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:63:2F:DD:F8:70:D3:E5:57:9E:D3:8C:68:B4:1B:09:3C:83:2B:21 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8602e8cf-ec3c-4331-9668-a4ecf6830436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:9080::/48 Signature Algorithm: sha256WithRSAEncryption 6b:61:e2:60:42:09:5e:57:7b:a9:70:4a:e2:f4:ba:42:a8:3c: 74:f8:50:f0:8e:bc:97:19:ab:52:de:8f:a9:c3:df:14:20:f8: 76:be:e9:f0:64:54:ab:d2:b3:e8:99:2c:66:3f:ee:98:44:66: ea:3c:a0:d6:04:70:55:b9:31:a9:c3:74:73:80:7b:4d:02:f4: 64:97:37:63:e6:67:58:d5:7c:73:de:0b:ef:e3:54:fa:3e:2d: dd:f0:81:ab:1b:87:15:bc:db:14:c7:73:da:2d:ee:d4:57:40: 2e:57:1d:08:69:cc:40:9d:a7:3a:8d:69:4f:96:20:b2:df:e3: eb:91:36:89:5e:1a:61:5b:21:2e:1f:9d:41:2d:ef:5a:67:29: e9:c3:d6:77:b9:cf:be:0f:d8:f7:7e:c1:32:d4:26:1a:42:2e: e2:36:cd:70:7a:26:dd:8d:5e:fd:49:15:63:13:8c:60:e0:a2: 47:ee:eb:e7:68:cb:7c:ad:77:29:8a:81:f3:69:17:6d:3f:b0: ab:dc:15:20:c6:44:58:76:55:49:2a:c0:ee:da:69:80:ab:42: d6:4d:e2:65:0e:07:a0:58:59:bb:00:1f:da:2f:9e:bd:61:db: 02:65:df:ba:3c:05:52:40:84:94:e0:89:36:3c:1f:58:ff:16: ba:68:85:ca -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUTyScGfEp9PBfaCdhbZXNhB8daXowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMzAxNloX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAMjc3N2Q4ODA3ZDVhNmYyZDBkZjZm ZjcwZjY0MDcyYjdhOGQwZGRkMzhlZDUxMjk2ODYxMTRhZmExNjZhYjQyZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1f1YuNkqf19uOX80ARqRcmx4EUv zDCMcwr6nLGMkwtpwCzjSKFK84amA6RBsvpexU+hhV4JYFslE6DXp/Mf46GsB1et s/NqRH4gPUoyqIgdytnLzNGu0On1HaYPC2NmDNjAsa3ppGXdOsQGuFybpMueENy1 SYrq4kTTJFCcWddfwcxo2xFU+CLmN12UsqOhQ/f2up5B+jet5aUPyZH3SWYsvJc3 U/dN7xLHAGbeNG9rTRXzuDTJDq6TZhh6H5k+K72WFPfis5KI8e5MMSrnVD9kN4Ns acv0mb6eQsVfpHb4xc2bSonSSZ3FckpQHeRpgt8Gu+XZYaiuz7xwgZGEqQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFM5jL934cNPlV57TjGi0Gwk8gyshMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2MDJlOGNmLWVjM2MtNDMzMS05NjY4LWE0ZWNmNjgzMDQzNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9JCAMA0GCSqGSIb3DQEBCwUAA4IBAQBrYeJgQgleV3upcEri 9LpCqDx0+FDwjryXGatS3o+pw98UIPh2vunwZFSr0rPomSxmP+6YRGbqPKDWBHBV uTGpw3RzgHtNAvRklzdj5mdY1Xxz3gvv41T6Pi3d8IGrG4cVvNsUx3PaLe7UV0Au Vx0IacxAnac6jWlPliCy3+PrkTaJXhphWyEuH51BLe9aZynpw9Z3uc++D9j3fsEy 1CYaQi7iNs1weibdjV79SRVjE4xg4KJH7uvnaMt8rXcpioHzaRdtP7Cr3BUgxkRY dlVJKsDu2mmAq0LWTeJlDgegWFm7AB/aL569YdsCZd+6PAVSQISU4Ik2PB9Y/xa6 aIXK -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net