$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bb4fc6d-b270-4df7-a776-77d2795dda17.roa File: 8bb4fc6d-b270-4df7-a776-77d2795dda17.roa (raw, json) Hash identifier: AutdTgcCSE8LS7yl0cXAsQ8YcY1KIBpX8qCMKXGksOY= Subject key identifier: 8D:70:C7:73:87:FF:47:9D:8A:43:25:95:69:8D:1B:EC:BB:BD:BA:7F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2C3B59CFF812002AA1646481408FDFFB0155FF95 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bb4fc6d-b270-4df7-a776-77d2795dda17.roa Signing time: Mon 21 Apr 2025 16:31:11 +0000 ROA not before: Mon 21 Apr 2025 16:31:11 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da16:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3b:59:cf:f8:12:00:2a:a1:64:64:81:40:8f:df:fb:01:55:ff:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:31:11 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=4f47fbc8a6ba21fc3eb0848dcacfbe0277e25c9e2b5ba333d6673e64de96e50d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:90:30:a6:93:2b:39:ef:f0:34:f4:26:18: 7f:12:e6:96:8a:d3:d2:25:ac:e2:79:05:40:c5:73: 45:0c:2a:6c:41:5f:cc:69:0c:e5:63:25:98:7c:0f: 1c:69:10:cc:dd:3c:c6:73:6c:d4:11:a0:d5:6e:73: 60:74:8c:2b:8b:ee:e7:e5:53:94:63:c2:2a:f9:2f: 1b:68:09:b7:3d:5e:c7:04:01:4e:75:8b:d4:cd:cb: da:3a:a5:14:9b:00:29:ae:7d:53:df:d4:a0:f8:28: 54:60:3b:27:50:b7:13:81:cc:22:91:5a:e3:7f:78: fb:99:e8:30:9b:75:be:27:d2:62:d4:12:68:8f:d9: ac:d0:78:dd:28:ec:8d:20:39:b8:9d:b8:94:1e:21: 47:6b:94:19:d4:a9:57:49:c3:c5:1c:1f:9d:2c:f2: 95:23:5c:fb:9e:47:b8:c2:fd:7f:99:4f:f6:62:83: de:fb:1e:1b:13:48:4a:cc:44:03:70:88:47:c0:d8: 9d:fb:d3:46:c1:0b:12:db:92:c4:b6:dd:cf:b4:12: 44:13:25:fb:c4:4c:f4:f4:b9:26:ec:aa:63:1a:e4: 5e:aa:fb:dd:18:6b:fb:fd:f8:e2:9e:79:3b:c1:60: 23:a0:df:d6:b1:ce:f2:34:28:55:a2:5f:72:f7:40: 0d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:70:C7:73:87:FF:47:9D:8A:43:25:95:69:8D:1B:EC:BB:BD:BA:7F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bb4fc6d-b270-4df7-a776-77d2795dda17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da16:c00::/38 Signature Algorithm: sha256WithRSAEncryption 3e:ea:3d:30:91:51:c2:15:a5:29:f0:cc:53:13:39:83:6f:75: ce:f9:a3:9e:4d:3b:2a:9e:8d:bb:5c:b6:35:53:73:93:2b:37: 0b:98:f0:fa:ab:2b:55:be:6e:e1:7f:cc:42:1a:5b:27:86:d9: 57:bb:a5:78:44:98:fc:a5:b5:b5:66:2a:60:7b:76:db:c8:6e: 35:b9:08:e5:70:ed:3f:9c:41:48:8c:dd:5a:2e:e5:e0:16:af: 0a:66:92:e4:f9:8d:c5:0b:c4:72:56:5e:3d:6c:0b:3c:e4:36: 53:88:c1:46:d1:0b:f2:6b:45:dc:97:53:a4:13:89:fa:5b:98: 6a:c3:b5:b3:9d:b5:93:35:8b:15:56:b3:ca:9f:4e:48:88:78: 96:53:c2:e8:1f:11:f7:f8:cc:54:85:9c:1d:0d:75:07:8f:18: ba:dd:4e:f7:b2:d4:01:df:e5:aa:a4:40:10:be:60:c9:aa:97: 1f:ff:7f:c7:e2:21:46:87:cf:0d:b3:67:91:f2:cc:67:3a:de: 19:e0:d8:f5:f6:6c:9a:fe:d0:0d:fe:4d:d8:bd:94:f0:18:dc: 66:e5:dc:1e:36:b3:6f:57:7d:ff:83:8e:36:88:6c:8c:61:1f: 8f:3d:2a:04:45:8a:65:3c:e6:bc:86:b0:13:7b:3e:8a:e4:aa: 05:81:77:66 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIULDtZz/gSACqhZGSBQI/f+wFV/5UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MzExMVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANGY0N2ZiYzhhNmJhMjFmYzNlYjA4 NDhkY2FjZmJlMDI3N2UyNWM5ZTJiNWJhMzMzZDY2NzNlNjRkZTk2ZTUwZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus6QMKaTKznv8DT0Jhh/EuaWitPS JazieQVAxXNFDCpsQV/MaQzlYyWYfA8caRDM3TzGc2zUEaDVbnNgdIwri+7n5VOU Y8Iq+S8baAm3PV7HBAFOdYvUzcvaOqUUmwAprn1T39Sg+ChUYDsnULcTgcwikVrj f3j7megwm3W+J9Ji1BJoj9ms0HjdKOyNIDm4nbiUHiFHa5QZ1KlXScPFHB+dLPKV I1z7nke4wv1/mU/2YoPe+x4bE0hKzEQDcIhHwNid+9NGwQsS25LEtt3PtBJEEyX7 xEz09Lkm7KpjGuReqvvdGGv7/fjinnk7wWAjoN/Wsc7yNChVol9y90ANWQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFI1wx3OH/0edikMllWmNG+y7vbp/MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiYjRmYzZkLWIyNzAtNGRmNy1hNzc2LTc3ZDI3OTVkZGExNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaFgwwDQYJKoZIhvcNAQELBQADggEBAD7qPTCRUcIVpSnwzFMT OYNvdc75o55NOyqejbtctjVTc5MrNwuY8PqrK1W+buF/zEIaWyeG2Ve7pXhEmPyl tbVmKmB7dtvIbjW5COVw7T+cQUiM3Vou5eAWrwpmkuT5jcULxHJWXj1sCzzkNlOI wUbRC/JrRdyXU6QTifpbmGrDtbOdtZM1ixVWs8qfTkiIeJZTwugfEff4zFSFnB0N dQePGLrdTvey1AHf5aqkQBC+YMmqlx//f8fiIUaHzw2zZ5HyzGc63hng2PX2bJr+ 0A3+Tdi9lPAY3Gbl3B42s29Xff+DjjaIbIxhH489KgRFimU85ryGsBN7PorkqgWB d2Y= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net