$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c6b3e2f-c441-4d2e-a3fb-511aebd72aa2.roa File: 8c6b3e2f-c441-4d2e-a3fb-511aebd72aa2.roa (raw, json) Hash identifier: gECH/d6UdN6Fo/9egUDBQbEl/1mtx7ROTSUZH6tdqrs= Subject key identifier: 12:48:B3:2B:A7:DC:85:F2:C6:FD:24:CB:5E:1F:24:5E:64:1A:E2:6A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0608D1B16BB0CBAB615DF238DD1A18462513FBE0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c6b3e2f-c441-4d2e-a3fb-511aebd72aa2.roa Signing time: Sat 19 Apr 2025 00:50:46 +0000 ROA not before: Sat 19 Apr 2025 00:50:46 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:08:d1:b1:6b:b0:cb:ab:61:5d:f2:38:dd:1a:18:46:25:13:fb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:50:46 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=de39d453df9e6fd24569ab15c69fb683fe9d03bf37902f7bc09d542a25efd6a8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:1b:4e:c0:2f:64:08:15:98:b5:83:2f:b1: de:0d:a3:a4:0d:6c:39:ea:fc:9c:62:08:aa:3a:58: 92:41:6f:33:f0:2e:2f:04:08:84:c7:26:c8:ab:c4: e6:14:17:61:75:44:b0:d8:60:b1:ee:87:ca:2a:1d: 11:25:97:31:98:ec:65:08:78:19:e9:c2:05:74:69: ce:3c:e0:3b:4f:e8:d0:4a:5e:d2:09:11:91:c6:55: ec:f2:5c:8d:99:30:72:a7:43:00:66:61:9f:70:6d: 01:00:3e:7b:ad:f3:85:ce:0d:f0:88:6f:c3:c9:2d: cc:13:ee:54:1e:e3:30:36:4b:23:61:c0:58:31:67: 6e:eb:b2:29:e0:92:04:28:01:0c:45:7a:8c:5a:4b: 57:52:bd:b2:5e:f4:af:fe:94:8c:74:97:0e:1b:4f: 9b:cd:72:73:85:f7:16:d2:88:cc:2e:38:c0:b3:a4: 64:99:23:bb:cc:35:93:79:3e:41:f6:7c:b8:7f:89: 2d:df:80:5c:cc:4e:d3:03:0e:dd:6b:cc:bf:7a:fe: ef:8b:7a:7f:69:50:69:9e:42:49:78:57:51:3d:8e: 94:01:5f:ed:90:3c:c9:5c:c9:4b:c9:f2:e3:a6:13: 79:7d:c0:c2:28:55:6c:a9:f9:c3:b6:cc:a8:63:4b: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:48:B3:2B:A7:DC:85:F2:C6:FD:24:CB:5E:1F:24:5E:64:1A:E2:6A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c6b3e2f-c441-4d2e-a3fb-511aebd72aa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:2040::/48 Signature Algorithm: sha256WithRSAEncryption 7e:67:2a:ae:3a:8b:45:b4:78:ad:08:aa:f7:33:ab:c4:78:a5: d2:8b:13:35:d3:82:c9:18:ac:0e:a8:7d:2c:83:b4:03:da:18: 27:a4:ed:dc:49:e7:fd:d1:a1:7d:aa:f6:4f:fe:77:94:ec:7a: e3:0d:c2:71:48:ca:15:3a:3b:24:db:3e:1c:83:c0:06:51:51: 82:8b:d6:2b:61:c1:7b:03:93:4e:8e:30:9e:fe:67:46:d1:65: af:41:f4:d4:35:5b:f3:6c:11:cc:dd:f1:16:90:0d:5a:59:63: 41:c9:c8:a8:2e:8a:5a:e4:fd:ba:2b:da:f6:81:ae:90:20:80: 23:7b:b3:6d:79:7c:56:9a:70:0f:99:a0:09:22:cd:0c:c1:f2: e1:8b:7c:41:49:44:80:19:f9:4a:bb:99:e6:07:cb:9e:2d:78: 17:6c:65:4e:b3:6e:72:8a:46:7b:cf:b8:ef:9b:c3:cc:45:08: 2c:59:03:b9:d4:de:00:77:b7:07:08:7a:9e:c1:a8:3b:a9:68: 9f:68:db:9a:07:2f:1d:c7:bd:94:26:05:60:f3:f5:a1:b2:22: 0b:13:eb:41:0d:0d:f6:dc:56:4f:10:54:81:8f:ed:8c:87:42: 93:e0:e5:17:49:78:a6:80:39:82:50:1c:20:06:2f:d3:ab:9e: ef:2f:1b:00 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBgjRsWuwy6thXfI43RoYRiUT++AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwNTA0NloX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAZGUzOWQ0NTNkZjllNmZkMjQ1Njlh YjE1YzY5ZmI2ODNmZTlkMDNiZjM3OTAyZjdiYzA5ZDU0MmEyNWVmZDZhODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnywbTsAvZAgVmLWDL7HeDaOkDWw5 6vycYgiqOliSQW8z8C4vBAiExybIq8TmFBdhdUSw2GCx7ofKKh0RJZcxmOxlCHgZ 6cIFdGnOPOA7T+jQSl7SCRGRxlXs8lyNmTByp0MAZmGfcG0BAD57rfOFzg3wiG/D yS3ME+5UHuMwNksjYcBYMWdu67Ip4JIEKAEMRXqMWktXUr2yXvSv/pSMdJcOG0+b zXJzhfcW0ojMLjjAs6RkmSO7zDWTeT5B9ny4f4kt34BczE7TAw7da8y/ev7vi3p/ aVBpnkJJeFdRPY6UAV/tkDzJXMlLyfLjphN5fcDCKFVsqfnDtsyoY0uA5QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBJIsyun3IXyxv0ky14fJF5kGuJqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhjNmIzZTJmLWM0NDEtNGQyZS1hM2ZiLTUxMWFlYmQ3MmFhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yBAMA0GCSqGSIb3DQEBCwUAA4IBAQB+ZyquOotFtHitCKr3 M6vEeKXSixM104LJGKwOqH0sg7QD2hgnpO3cSef90aF9qvZP/neU7HrjDcJxSMoV Ojsk2z4cg8AGUVGCi9YrYcF7A5NOjjCe/mdG0WWvQfTUNVvzbBHM3fEWkA1aWWNB ycioLopa5P26K9r2ga6QIIAje7NteXxWmnAPmaAJIs0MwfLhi3xBSUSAGflKu5nm B8ueLXgXbGVOs25yikZ7z7jvm8PMRQgsWQO51N4Ad7cHCHqewag7qWifaNuaBy8d x72UJgVg8/WhsiILE+tBDQ323FZPEFSBj+2Mh0KT4OUXSXimgDmCUBwgBi/Tq57v LxsA -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net