$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86c08b39-5a49-4ee9-baad-a93e86d62b0a.roa File: 86c08b39-5a49-4ee9-baad-a93e86d62b0a.roa (raw, json) Hash identifier: ocHjroP15FUq7UN+A9nXK+WVyZ2OvsursW61VqMXZNY= Subject key identifier: 2B:B6:99:5A:40:2F:9E:7F:13:C3:E5:8B:72:38:B8:F7:24:62:D0:98 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1E70EBBA1E8EFB87AF8829F3422FED6754682604 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86c08b39-5a49-4ee9-baad-a93e86d62b0a.roa Signing time: Mon 21 Apr 2025 16:31:49 +0000 ROA not before: Mon 21 Apr 2025 16:31:49 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf1:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:70:eb:ba:1e:8e:fb:87:af:88:29:f3:42:2f:ed:67:54:68:26:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:31:49 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=5bc9ed6c0a4ad16fbd328623470d25f0e4d7eb9bce64fa7d8616dd31dd3f35cf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:20:6f:7d:ce:ea:0b:8a:e5:f8:4e:aa:fd: 37:22:f3:18:6d:7f:22:fe:2c:37:f5:7f:95:f7:ef: 64:56:89:85:9b:58:23:81:4f:89:dc:74:9d:a2:6e: 11:cd:c3:08:31:6c:a4:d4:97:ae:44:76:2d:1a:1f: 5c:f0:28:9a:89:b5:22:d4:72:d5:16:bb:03:ba:5f: 65:6d:10:14:7c:7c:ce:10:7e:fd:b2:08:eb:e8:b3: 2c:e4:7b:a2:c5:15:9c:c8:79:9e:52:b2:dd:e8:1f: 30:44:42:2f:da:6d:79:c7:bc:3c:4a:d5:54:c2:fd: 25:b0:36:19:dd:cc:8e:49:0f:d7:89:de:b9:ac:c1: 0b:2a:9a:2e:57:70:1b:73:44:92:48:d8:7b:79:3b: fc:aa:60:59:89:c0:0f:8a:e5:9b:06:81:55:8a:95: 68:02:a7:44:be:30:28:4d:48:b2:ed:a1:bf:8b:52: 49:bd:3b:4b:27:b7:8e:17:5f:53:59:7c:09:02:b1: 20:bf:10:cb:1d:d1:60:21:ee:89:27:f0:5f:d6:91: 4c:aa:16:75:3e:e0:06:39:07:5f:ee:1b:b9:56:a4: 03:cf:d7:38:5d:72:94:14:e4:6b:49:a5:47:14:28: ab:ba:d7:d8:60:04:eb:bb:fd:af:00:20:0b:c5:79: 0a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B6:99:5A:40:2F:9E:7F:13:C3:E5:8B:72:38:B8:F7:24:62:D0:98 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86c08b39-5a49-4ee9-baad-a93e86d62b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf1:f000::/40 Signature Algorithm: sha256WithRSAEncryption 34:d1:b4:2c:93:f9:13:c3:5c:f4:92:f0:ce:28:3d:bf:88:c4: f2:09:6c:91:78:d0:e9:3e:80:30:50:9a:18:86:d6:9e:1d:75: 0f:f4:aa:d4:04:aa:fb:e5:92:c9:c8:93:b4:c3:9d:e1:dc:43: 11:fb:71:8f:09:fd:35:a9:88:62:c3:18:c9:24:bc:3f:6b:2c: 98:ed:72:23:d4:11:c2:cb:30:96:da:92:58:df:3a:11:f4:19: 91:04:ba:31:ce:10:4d:71:08:30:cb:d4:ae:57:a2:80:3c:8c: 5c:5c:79:4a:62:ce:ac:d8:f0:c6:ee:9e:3e:42:a0:2a:f3:46: e7:45:b2:64:e6:14:cb:9d:e0:46:37:d6:11:ac:a4:d2:53:59: f2:ce:a6:83:d4:e8:fe:31:9d:fc:cb:2c:6a:dd:27:d8:b0:6c: aa:7e:32:7d:88:7a:17:0c:c1:f8:6e:bb:c3:72:c0:38:4e:57: a9:64:62:b6:04:1f:ed:b5:8a:c1:47:13:3a:4e:b8:e8:24:34: 65:f5:54:76:e4:2d:85:73:8a:9c:44:02:41:1e:d2:93:de:fb: b6:9b:50:14:81:17:33:02:ef:bb:cd:2d:75:b4:82:da:3e:6d: dd:39:4b:90:dd:1e:74:33:9c:66:da:a4:e3:ed:cb:8b:ce:3c: 72:c1:6e:33 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUHnDruh6O+4eviCnzQi/tZ1RoJgQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MzE0OVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANWJjOWVkNmMwYTRhZDE2ZmJkMzI4 NjIzNDcwZDI1ZjBlNGQ3ZWI5YmNlNjRmYTdkODYxNmRkMzFkZDNmMzVjZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8wgb33O6guK5fhOqv03IvMYbX8i /iw39X+V9+9kVomFm1gjgU+J3HSdom4RzcMIMWyk1JeuRHYtGh9c8CiaibUi1HLV FrsDul9lbRAUfHzOEH79sgjr6LMs5HuixRWcyHmeUrLd6B8wREIv2m15x7w8StVU wv0lsDYZ3cyOSQ/Xid65rMELKpouV3Abc0SSSNh7eTv8qmBZicAPiuWbBoFVipVo AqdEvjAoTUiy7aG/i1JJvTtLJ7eOF19TWXwJArEgvxDLHdFgIe6JJ/Bf1pFMqhZ1 PuAGOQdf7hu5VqQDz9c4XXKUFORrSaVHFCirutfYYATru/2vACALxXkKHwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCu2mVpAL55/E8Pli3I4uPckYtCYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2YzA4YjM5LTVhNDktNGVlOS1iYWFkLWE5M2U4NmQ2MmIwYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8fAwDQYJKoZIhvcNAQELBQADggEBADTRtCyT+RPDXPSS8M4o Pb+IxPIJbJF40Ok+gDBQmhiG1p4ddQ/0qtQEqvvlksnIk7TDneHcQxH7cY8J/TWp iGLDGMkkvD9rLJjtciPUEcLLMJbakljfOhH0GZEEujHOEE1xCDDL1K5XooA8jFxc eUpizqzY8Mbunj5CoCrzRudFsmTmFMud4EY31hGspNJTWfLOpoPU6P4xnfzLLGrd J9iwbKp+Mn2IehcMwfhuu8NywDhOV6lkYrYEH+21isFHEzpOuOgkNGX1VHbkLYVz ipxEAkEe0pPe+7abUBSBFzMC77vNLXW0gto+bd05S5DdHnQznGbapOPty4vOPHLB bjM= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net