$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86eb88ff-78f4-4f08-a1fa-b28fc3bf05ef.roa File: 86eb88ff-78f4-4f08-a1fa-b28fc3bf05ef.roa (raw, json) Hash identifier: edlVhn3dz6+UKeYZIQeF9XDFgopEmyi0UFeEhKlR56w= Subject key identifier: 63:90:2F:4D:7A:F8:D5:E7:C5:A5:C2:86:3A:29:6E:41:69:17:0B:C5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 27C325B1723155460BD1EF6D04980DE7A4CEE3CD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86eb88ff-78f4-4f08-a1fa-b28fc3bf05ef.roa Signing time: Tue 15 Apr 2025 00:00:18 +0000 ROA not before: Tue 15 Apr 2025 00:00:18 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da60:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c3:25:b1:72:31:55:46:0b:d1:ef:6d:04:98:0d:e7:a4:ce:e3:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 15 00:00:18 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=b5aa064ec9309ae8ffda18c0ecba5cf30377bd2604d7057dcaa07dcc732441d3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:37:0f:5d:ca:34:a7:ed:00:5e:85:ad:f9:90: a2:90:2f:62:89:2f:6d:0c:06:98:b5:2a:67:2a:c8: 3d:b5:d2:1c:06:c8:10:e6:a1:bb:28:4c:a5:86:54: 7d:95:b4:10:95:be:b8:83:60:e4:3c:45:1b:b0:9b: 0d:a5:07:7c:80:19:8d:a1:a2:bb:01:58:b9:e6:36: 3a:90:47:a2:52:98:90:9d:8b:6e:a1:95:2f:bf:fb: 05:a6:16:d2:26:13:0f:b2:71:d9:7f:83:98:a6:0e: d2:9f:93:e4:bd:53:97:94:18:07:a0:4c:a1:75:fc: dc:87:8e:4c:cc:31:27:d9:b3:90:0e:49:89:ec:cf: b2:91:4c:1a:49:42:5e:7d:7c:95:28:32:21:92:ac: ad:4e:8f:8a:02:ac:e6:15:d8:f5:9c:65:4a:f8:c2: bc:26:a6:ae:ec:bc:0b:ce:51:60:a5:a6:c1:65:75: c4:1a:b4:a9:07:35:bc:58:4b:03:aa:a6:b8:32:e0: e7:dd:bc:ea:37:2c:62:89:d5:c5:68:de:35:47:3b: 6e:93:ae:0b:9a:1e:0a:bd:de:b5:df:ef:00:e9:6b: cd:5a:11:0d:d0:43:83:12:f8:a0:a1:18:58:74:c1: 6d:05:88:81:7c:5c:66:23:c5:1c:4c:f0:dc:f4:41: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:90:2F:4D:7A:F8:D5:E7:C5:A5:C2:86:3A:29:6E:41:69:17:0B:C5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86eb88ff-78f4-4f08-a1fa-b28fc3bf05ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:1000::/40 Signature Algorithm: sha256WithRSAEncryption 02:34:8d:85:65:25:8f:42:14:b5:54:02:72:36:e2:13:9d:5b: 4d:b1:05:87:f5:97:62:cc:4c:1e:ce:58:0b:79:04:a7:d6:86: 4a:d1:44:9b:b3:df:c2:45:a9:eb:3d:96:ec:45:c9:a8:63:7d: a8:15:75:f5:4a:60:71:ec:16:11:a2:89:32:17:a5:92:8a:1d: 42:c3:af:4c:d6:2b:7e:19:a1:2c:36:83:00:c1:ab:b9:a1:f0: b7:d0:ba:27:78:57:c7:04:0b:c5:57:62:95:f4:1e:90:9f:96: 80:db:a1:2d:35:87:0d:c1:1d:83:9f:a8:e5:eb:ce:dc:24:df: e8:30:35:fb:32:eb:11:b9:ac:b8:af:d2:94:7a:1b:45:88:78: 93:be:c8:31:98:39:84:b3:24:d1:e2:d3:8d:27:c5:6e:dc:7d: 7c:1a:9a:a5:56:6c:45:3d:be:a7:5c:7a:b0:a4:89:21:b9:32: cb:a5:cb:b5:5e:4f:62:e1:05:22:68:08:9a:de:ba:9a:a1:93: e4:3d:25:31:35:66:45:60:6b:1a:2f:a4:c0:34:b4:ab:1c:30: ad:8f:ef:e6:01:be:ea:3d:99:27:ae:02:18:a7:41:07:bd:3b: d5:ab:73:d6:8b:1a:54:a7:8c:f5:0f:f3:67:36:b9:c0:8b:94: 69:3e:62:16 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJ8MlsXIxVUYL0e9tBJgN56TO480wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNTAwMDAxOFoX DTI1MDUyMDIzNTk1OVowejFJMEcGA1UEBRNAYjVhYTA2NGVjOTMwOWFlOGZmZGEx OGMwZWNiYTVjZjMwMzc3YmQyNjA0ZDcwNTdkY2FhMDdkY2M3MzI0NDFkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTcPXco0p+0AXoWt+ZCikC9iiS9t DAaYtSpnKsg9tdIcBsgQ5qG7KEylhlR9lbQQlb64g2DkPEUbsJsNpQd8gBmNoaK7 AVi55jY6kEeiUpiQnYtuoZUvv/sFphbSJhMPsnHZf4OYpg7Sn5PkvVOXlBgHoEyh dfzch45MzDEn2bOQDkmJ7M+ykUwaSUJefXyVKDIhkqytTo+KAqzmFdj1nGVK+MK8 Jqau7LwLzlFgpabBZXXEGrSpBzW8WEsDqqa4MuDn3bzqNyxiidXFaN41Rztuk64L mh4Kvd613+8A6WvNWhEN0EODEvigoRhYdMFtBYiBfFxmI8UcTPDc9EHJDQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGOQL016+NXnxaXChjopbkFpFwvFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg2ZWI4OGZmLTc4ZjQtNGYwOC1hMWZhLWIyOGZjM2JmMDVlZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYBAwDQYJKoZIhvcNAQELBQADggEBAAI0jYVlJY9CFLVUAnI2 4hOdW02xBYf1l2LMTB7OWAt5BKfWhkrRRJuz38JFqes9luxFyahjfagVdfVKYHHs FhGiiTIXpZKKHULDr0zWK34ZoSw2gwDBq7mh8LfQuid4V8cEC8VXYpX0HpCfloDb oS01hw3BHYOfqOXrztwk3+gwNfsy6xG5rLiv0pR6G0WIeJO+yDGYOYSzJNHi040n xW7cfXwamqVWbEU9vqdcerCkiSG5Msuly7VeT2LhBSJoCJreupqhk+Q9JTE1ZkVg axovpMA0tKscMK2P7+YBvuo9mSeuAhinQQe9O9Wrc9aLGlSnjPUP82c2ucCLlGk+ YhY= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net