$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa File: 8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa (raw, json) Hash identifier: O3DuQF7obC+tNfALARwqsPi3WhJ7IiAXn0l/YSr70es= Subject key identifier: E2:5E:87:3D:90:AE:61:BB:96:3D:ED:01:17:6B:D6:06:DB:DC:F6:DD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7871369B1D41ED9540107E1DE0016EC821C5A3BF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa Signing time: Sat 19 Apr 2025 00:51:39 +0000 ROA not before: Sat 19 Apr 2025 00:51:39 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:71:36:9b:1d:41:ed:95:40:10:7e:1d:e0:01:6e:c8:21:c5:a3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:51:39 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=98961ea976f3370ee3711b971ca875d1fbb1b0e1dc2e24dbdf5be430f12218b8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:56:6b:73:00:15:2a:6f:08:df:ad:26:70:33: 33:60:80:fa:81:28:3c:fa:f6:d5:ce:60:fc:42:23: b7:d1:bd:5b:42:64:08:22:f7:1f:86:b9:01:03:58: 4e:0e:2a:3d:7e:31:91:cf:fc:98:a9:67:e9:15:e2: cb:a0:00:9b:63:32:c5:16:ea:68:7b:34:70:cf:ff: 52:b7:ea:af:1f:d1:8a:9b:ac:b1:6f:b6:24:d5:32: 17:72:c9:cf:b0:da:73:ff:08:5f:ab:20:00:d8:b7: 9d:51:3b:d7:9b:90:8f:95:a1:da:22:0d:d6:ae:b0: c8:be:9e:cc:71:52:77:59:aa:dd:4f:ee:b2:14:90: 86:e0:04:d3:2e:70:45:86:9f:f7:8f:86:a2:45:87: 6a:4b:4c:bf:ad:ba:ff:f6:f2:77:d4:ec:3b:25:ee: bd:98:7f:61:ab:52:3f:db:ce:ae:8f:9d:72:3e:15: 71:34:4f:ee:85:6e:36:ee:19:14:02:8d:34:90:bc: 99:16:ba:84:b8:3c:fa:5d:f5:e1:62:ca:b3:16:f9: 1d:af:2e:ee:b1:64:ae:36:08:ac:a5:e1:d0:f8:cf: ff:24:50:aa:af:b0:8b:80:89:73:f4:fa:c1:45:c8: 61:36:5f:91:4b:5d:57:5f:83:e8:c0:b1:d4:86:8f: 2e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5E:87:3D:90:AE:61:BB:96:3D:ED:01:17:6B:D6:06:DB:DC:F6:DD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:8020::/48 Signature Algorithm: sha256WithRSAEncryption 58:52:01:8d:25:9b:7e:98:37:e2:d1:aa:87:2b:e2:be:1c:49: 9f:8e:ca:57:cf:3f:2a:d4:78:cc:75:b5:7a:32:52:d9:ef:a3: 0c:64:e3:d1:fb:b1:be:2b:6e:92:26:a8:3a:39:d4:2a:36:91: 49:f6:9c:8d:e7:7a:ab:0c:9a:c0:b1:bd:77:b2:cb:cd:02:27: 35:04:81:bc:d6:14:ee:2b:5e:37:42:43:15:61:24:ad:53:32: da:64:cc:ef:b0:09:bf:37:0f:76:3d:98:9d:31:9e:7c:cf:f5: a8:0a:20:ac:1c:a0:f2:d6:7c:dc:8f:1e:60:57:cf:5d:cd:49: 56:d3:3a:51:08:3c:a7:d0:09:17:94:7a:7a:ab:26:c8:5b:e4: 1a:c9:ad:e3:7b:1f:a7:de:b7:9e:ff:75:10:31:2f:1b:db:74: df:d5:f1:da:25:d0:fa:47:c5:86:2e:94:08:b5:92:75:cc:6a: 01:21:6e:cd:9b:5a:d1:5f:63:71:2f:87:93:3b:aa:40:ee:42: 9a:30:3b:97:f2:e6:cd:b6:c5:d5:42:05:c8:26:f4:27:a1:85: 26:2f:50:b3:fa:bd:a6:0d:a0:3f:56:a0:07:95:90:a8:1f:a2: c6:4d:16:2c:25:8d:90:39:24:49:6e:05:21:0f:a4:1e:76:91: 0a:a2:e4:81 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeHE2mx1B7ZVAEH4d4AFuyCHFo78wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwNTEzOVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAOTg5NjFlYTk3NmYzMzcwZWUzNzEx Yjk3MWNhODc1ZDFmYmIxYjBlMWRjMmUyNGRiZGY1YmU0MzBmMTIyMThiODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71ZrcwAVKm8I360mcDMzYID6gSg8 +vbVzmD8QiO30b1bQmQIIvcfhrkBA1hODio9fjGRz/yYqWfpFeLLoACbYzLFFupo ezRwz/9St+qvH9GKm6yxb7Yk1TIXcsnPsNpz/whfqyAA2LedUTvXm5CPlaHaIg3W rrDIvp7McVJ3WardT+6yFJCG4ATTLnBFhp/3j4aiRYdqS0y/rbr/9vJ31Ow7Je69 mH9hq1I/286uj51yPhVxNE/uhW427hkUAo00kLyZFrqEuDz6XfXhYsqzFvkdry7u sWSuNgispeHQ+M//JFCqr7CLgIlz9PrBRchhNl+RS11XX4PowLHUho8uKwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOJehz2QrmG7lj3tARdr1gbb3PbdMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhjYTM3MWQ5LTIxNTMtNDA1My05OWFjLTFiZGMwYzQyOTRhYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAIAgMA0GCSqGSIb3DQEBCwUAA4IBAQBYUgGNJZt+mDfi0aqH K+K+HEmfjspXzz8q1HjMdbV6MlLZ76MMZOPR+7G+K26SJqg6OdQqNpFJ9pyN53qr DJrAsb13ssvNAic1BIG81hTuK143QkMVYSStUzLaZMzvsAm/Nw92PZidMZ58z/Wo CiCsHKDy1nzcjx5gV89dzUlW0zpRCDyn0AkXlHp6qybIW+Qaya3jex+n3ree/3UQ MS8b23Tf1fHaJdD6R8WGLpQItZJ1zGoBIW7Nm1rRX2NxL4eTO6pA7kKaMDuX8ubN tsXVQgXIJvQnoYUmL1Cz+r2mDaA/VqAHlZCoH6LGTRYsJY2QOSRJbgUhD6QedpEK ouSB -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net