$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fbb5c5-0ff9-4548-bb50-6e421ec6e274.roa File: 89fbb5c5-0ff9-4548-bb50-6e421ec6e274.roa (raw, json) Hash identifier: l2zOWiowsRJ8S8WpjfBWNStRMikpilQ2hNTKaNM69mg= Subject key identifier: 2D:14:BC:65:50:EF:8E:D4:C0:CF:5A:23:74:BF:1F:68:46:E3:CC:3E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77A50A98DFFC626DD5F39D6453903371041FE0F6 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fbb5c5-0ff9-4548-bb50-6e421ec6e274.roa Signing time: Mon 21 Apr 2025 15:11:16 +0000 ROA not before: Mon 21 Apr 2025 15:11:16 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:2020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a5:0a:98:df:fc:62:6d:d5:f3:9d:64:53:90:33:71:04:1f:e0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:11:16 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=16b86e21e282cdab796ff65f5ee30772d6ff96b850c3c05c59d6befd733adc7f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:d8:32:df:88:8f:d7:90:74:bd:51:dd:c8: 0f:1b:73:a8:7a:60:99:5b:f1:6e:e8:05:06:22:9d: e7:bc:cf:21:68:e5:df:ea:fd:64:23:6a:b1:d1:6b: 06:4e:98:70:9a:ff:6f:93:35:91:e4:8d:76:3f:a1: 08:8e:1a:1c:9d:63:16:e8:d6:e2:2b:46:36:6f:41: f9:91:ed:76:25:6d:d8:97:5c:52:89:14:47:05:4f: 05:5c:d6:7e:53:f2:2e:bf:3f:10:2f:6b:a8:fd:13: 77:36:3c:fb:08:73:10:2c:89:6b:40:f4:76:2c:d7: 0a:84:f6:85:06:e5:7b:db:da:7c:68:c9:1a:f5:62: b9:1a:c4:e2:1f:3d:4e:5b:53:c6:88:bd:b1:07:ec: 2a:66:ad:f6:10:90:44:6e:2c:79:40:dd:09:11:79: 17:d1:93:20:74:95:3a:74:d6:f7:74:00:f4:ab:ab: 05:1b:44:fe:82:be:09:61:a4:eb:47:de:b1:a2:3d: 3e:ac:84:33:2f:49:d2:94:46:a7:5b:e7:30:41:cf: c4:53:92:11:34:0c:a4:1a:47:aa:e1:90:7c:75:b7: e1:a3:90:5f:fb:36:0b:97:00:e8:58:21:73:38:36: de:45:6f:b6:4c:2d:10:6d:c1:56:bb:08:9a:02:a5: 02:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:14:BC:65:50:EF:8E:D4:C0:CF:5A:23:74:BF:1F:68:46:E3:CC:3E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fbb5c5-0ff9-4548-bb50-6e421ec6e274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:2020::/46 Signature Algorithm: sha256WithRSAEncryption 91:3a:15:2e:71:52:89:1f:4b:61:ae:3b:59:55:ef:b2:55:a9: 98:c4:7d:b7:86:29:0a:f3:13:c6:ea:ac:c9:e0:49:d7:bb:f9: e5:2a:c9:b7:34:ad:83:c7:59:2e:ff:9c:0a:31:78:08:53:4e: 72:47:7f:2e:40:47:a7:31:eb:56:8b:d5:c1:28:18:67:d9:87: d7:1c:02:d5:48:0d:3b:b3:00:62:0f:c1:8d:24:17:28:2e:f4: 63:72:50:4d:ea:58:73:5e:40:54:fb:c1:ab:b2:00:c3:fd:75: 6b:e0:45:e5:8e:d2:20:d7:5e:14:f6:17:45:4a:b0:8d:eb:1b: 6f:91:6f:9c:02:09:a1:55:dd:6e:ea:f5:c0:e5:d2:5a:07:67: 79:11:a2:e2:b7:32:46:87:65:a7:f7:9a:47:bd:bb:fe:22:e9: 87:19:18:53:d5:a7:7d:95:75:67:a5:d2:16:58:56:45:7e:0a: 5a:5c:96:ae:6f:d1:a5:ba:34:2f:60:ed:2c:d2:6c:ed:a5:d7: 6f:19:1d:5b:2b:14:5b:0a:a1:1a:f1:e2:42:6e:2a:0a:79:39: e0:9e:12:b0:76:39:af:1c:1d:65:05:c5:dc:a9:b4:7e:1f:d9: 9a:59:9a:63:b2:7a:67:d0:53:38:77:43:96:72:ad:e8:ac:d2: b9:51:22:e4 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUd6UKmN/8Ym3V851kU5AzcQQf4PYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MTExNloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMTZiODZlMjFlMjgyY2RhYjc5NmZm NjVmNWVlMzA3NzJkNmZmOTZiODUwYzNjMDVjNTlkNmJlZmQ3MzNhZGM3ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNzYMt+Ij9eQdL1R3cgPG3OoemCZ W/Fu6AUGIp3nvM8haOXf6v1kI2qx0WsGTphwmv9vkzWR5I12P6EIjhocnWMW6Nbi K0Y2b0H5ke12JW3Yl1xSiRRHBU8FXNZ+U/Iuvz8QL2uo/RN3Njz7CHMQLIlrQPR2 LNcKhPaFBuV729p8aMka9WK5GsTiHz1OW1PGiL2xB+wqZq32EJBEbix5QN0JEXkX 0ZMgdJU6dNb3dAD0q6sFG0T+gr4JYaTrR96xoj0+rIQzL0nSlEanW+cwQc/EU5IR NAykGkeq4ZB8dbfho5Bf+zYLlwDoWCFzODbeRW+2TC0QbcFWuwiaAqUClQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFC0UvGVQ747UwM9aI3S/H2hG48w+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzg5ZmJiNWM1LTBmZjktNDU0OC1iYjUwLTZlNDIxZWM2ZTI3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9yAgMA0GCSqGSIb3DQEBCwUAA4IBAQCROhUucVKJH0thrjtZ Ve+yVamYxH23hikK8xPG6qzJ4EnXu/nlKsm3NK2Dx1ku/5wKMXgIU05yR38uQEen MetWi9XBKBhn2YfXHALVSA07swBiD8GNJBcoLvRjclBN6lhzXkBU+8GrsgDD/XVr 4EXljtIg114U9hdFSrCN6xtvkW+cAgmhVd1u6vXA5dJaB2d5EaLitzJGh2Wn95pH vbv+IumHGRhT1ad9lXVnpdIWWFZFfgpaXJaub9GlujQvYO0s0mztpddvGR1bKxRb CqEa8eJCbioKeTngnhKwdjmvHB1lBcXcqbR+H9maWZpjsnpn0FM4d0OWcq3orNK5 USLk -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net