$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86af3d6b-7547-4abd-8e4b-90abce9de966.roa File: 86af3d6b-7547-4abd-8e4b-90abce9de966.roa (raw, json) Hash identifier: vqy4r0enZK3AsPKoh+6awU2+kYOPk/ffWOl3JlEAebA= Subject key identifier: 67:F3:DB:DE:C9:0C:7B:0B:A7:53:57:76:07:CC:71:FA:B6:DA:48:F8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 105A58D9E3E0FA31F96D6A54D597274E9ED0487D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86af3d6b-7547-4abd-8e4b-90abce9de966.roa Signing time: Mon 21 Apr 2025 16:50:58 +0000 ROA not before: Mon 21 Apr 2025 16:50:58 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1e:400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:5a:58:d9:e3:e0:fa:31:f9:6d:6a:54:d5:97:27:4e:9e:d0:48:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:50:58 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=46c2da8b5a2a334e4d9bceec05f7c11eabc48e6fdbec482ea5206312085dfb86, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:ec:dc:ca:db:97:ea:17:a9:02:5c:5a:68: c4:18:b5:ba:a9:c9:f8:60:c9:8e:0a:e6:9c:ab:dd: 15:23:03:74:ae:29:28:04:fa:93:b0:c9:99:65:a1: 68:37:7f:85:38:2b:ce:9c:3e:61:2b:26:8d:2e:3a: 3b:4f:9b:c6:ea:b4:d6:65:5a:92:d2:05:e3:86:e5: 7b:c2:93:77:17:50:a2:49:45:7d:19:e8:f6:a3:82: 91:2d:97:36:f7:b5:17:a1:fd:be:ff:d2:b2:17:bb: 39:d4:bf:4b:19:f8:e3:ee:cc:b1:aa:b9:47:93:3d: cc:33:9b:0c:10:44:e6:78:be:6e:ce:7e:f8:91:8b: 56:74:9d:62:42:bb:05:52:1c:ee:8a:9d:23:f1:44: f2:64:7b:49:00:e9:0c:17:db:ae:71:f4:6b:70:4a: 51:ea:0d:4f:1d:ad:72:90:ce:9c:e1:e8:2a:b7:f3: 80:88:a3:cf:9a:ff:95:f0:d9:45:06:cb:fe:62:34: 4e:82:c8:cd:27:c7:79:55:a9:3d:d0:99:a4:a5:9e: 7f:75:da:be:0c:96:1e:f8:4a:e9:c9:c5:c5:d6:86: 99:59:89:39:38:66:8d:d0:12:74:54:ca:55:85:5f: c6:6a:45:e6:db:e7:b1:2e:9f:1a:83:09:31:32:85: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F3:DB:DE:C9:0C:7B:0B:A7:53:57:76:07:CC:71:FA:B6:DA:48:F8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86af3d6b-7547-4abd-8e4b-90abce9de966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1e:400::/38 Signature Algorithm: sha256WithRSAEncryption 22:cd:c6:6f:6a:5a:d3:3c:16:78:63:83:5e:90:d8:51:78:38: 60:e5:99:2f:b5:eb:a2:1a:11:8f:66:91:08:5a:47:b2:9d:49: 9e:f3:c0:cc:57:64:ae:66:d3:c0:0b:fb:17:0f:99:12:06:c1: 80:ee:e2:4a:25:f6:7b:a7:e2:8e:60:44:53:01:e4:ce:29:d7: 3e:e1:97:4e:f4:67:41:88:0c:94:e3:d2:34:a3:6c:77:1c:dd: f0:5a:2f:0b:5f:29:66:42:5c:57:a9:1d:b5:39:d4:f9:0e:dc: 03:c4:7a:46:47:b6:84:09:03:28:78:b6:65:6a:0d:a0:6d:cf: b3:e6:8d:f3:e7:6f:a5:26:f0:8a:81:8d:94:45:d3:66:e3:00: 81:14:2a:7c:f1:bb:9b:f3:76:a7:43:16:d3:de:46:93:15:61: e4:77:16:2c:d9:12:e6:5a:d1:4a:33:6f:f7:dd:29:94:07:d5: e3:d1:80:de:6f:f7:f7:b0:5d:7a:27:84:6e:6d:ce:af:fa:1e: 63:fb:5e:a8:14:7d:cb:5f:40:fc:ef:a9:f1:e5:f6:58:c3:f3: 51:7e:c8:75:e3:f9:68:e9:9f:b7:81:3f:77:6e:37:b2:e5:95: 65:6a:84:74:cf:f0:53:b9:bc:88:1c:90:f2:b7:05:b8:09:fc: 4e:f8:95:28 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEFpY2ePg+jH5bWpU1ZcnTp7QSH0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2NTA1OFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANDZjMmRhOGI1YTJhMzM0ZTRkOWJj ZWVjMDVmN2MxMWVhYmM0OGU2ZmRiZWM0ODJlYTUyMDYzMTIwODVkZmI4NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArurs3Mrbl+oXqQJcWmjEGLW6qcn4 YMmOCuacq90VIwN0rikoBPqTsMmZZaFoN3+FOCvOnD5hKyaNLjo7T5vG6rTWZVqS 0gXjhuV7wpN3F1CiSUV9Gej2o4KRLZc297UXof2+/9KyF7s51L9LGfjj7syxqrlH kz3MM5sMEETmeL5uzn74kYtWdJ1iQrsFUhzuip0j8UTyZHtJAOkMF9uucfRrcEpR 6g1PHa1ykM6c4egqt/OAiKPPmv+V8NlFBsv+YjROgsjNJ8d5Vak90JmkpZ5/ddq+ DJYe+ErpycXF1oaZWYk5OGaN0BJ0VMpVhV/GakXm2+exLp8agwkxMoXY7QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGfz297JDHsLp1NXdgfMcfq22kj4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2YWYzZDZiLTc1NDctNGFiZC04ZTRiLTkwYWJjZTlkZTk2Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHgQwDQYJKoZIhvcNAQELBQADggEBACLNxm9qWtM8Fnhjg16Q 2FF4OGDlmS+166IaEY9mkQhaR7KdSZ7zwMxXZK5m08AL+xcPmRIGwYDu4kol9nun 4o5gRFMB5M4p1z7hl070Z0GIDJTj0jSjbHcc3fBaLwtfKWZCXFepHbU51PkO3APE ekZHtoQJAyh4tmVqDaBtz7PmjfPnb6Um8IqBjZRF02bjAIEUKnzxu5vzdqdDFtPe RpMVYeR3FizZEuZa0Uozb/fdKZQH1ePRgN5v9/ewXXonhG5tzq/6HmP7XqgUfctf QPzvqfHl9ljD81F+yHXj+Wjpn7eBP3duN7LllWVqhHTP8FO5vIgckPK3BbgJ/E74 lSg= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net