$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa File: 8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa (raw, json) Hash identifier: ZwoGNoh/dDwT61nYeX1oaX4wEGgJp2ZoG0u97W/ze98= Subject key identifier: AD:04:34:53:57:51:E2:FC:75:48:40:78:20:8A:4C:B3:0A:18:70:E0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 46C06C8F960598EE7486A3C3FF35A8F7A0B9F861 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa Signing time: Sat 19 Apr 2025 00:10:37 +0000 ROA not before: Sat 19 Apr 2025 00:10:37 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c0:6c:8f:96:05:98:ee:74:86:a3:c3:ff:35:a8:f7:a0:b9:f8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:10:37 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=161d83f9304d2515b73454d565e90bfeb31a0073611391a0574573e23e683ca1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:7d:2e:84:94:c1:fb:30:55:68:a3:1e:84: 95:ae:9c:de:48:7c:57:b2:c3:3a:ae:db:78:2d:bf: 9d:6c:09:6a:3c:2a:30:0e:cd:80:fc:b4:09:ba:4b: 28:2a:38:7a:b2:72:0f:bc:bb:1b:ac:ce:98:0c:f9: 40:b4:e5:d6:03:dd:20:8a:fc:b2:b8:12:00:7e:03: 4e:38:6f:c9:17:5a:e2:9d:09:15:f9:43:f5:9f:39: da:ed:da:4f:d5:f9:0b:2f:57:7c:28:a6:bf:7e:2d: e9:9c:21:b2:40:b4:b8:45:ac:08:6b:96:b9:45:58: 19:e0:b8:71:67:1f:95:29:ae:cd:cb:9c:2a:9c:45: 09:82:d1:05:da:80:a0:08:1f:6c:e9:05:23:36:a8: 4e:8c:c8:d6:72:a7:88:5c:c4:2e:f6:f7:53:0a:45: 9f:bc:99:81:88:e2:a8:21:64:75:cb:13:eb:58:09: 50:5b:59:a6:d0:6f:a6:4b:8c:56:9f:40:90:ac:95: 60:c5:0c:8d:64:75:af:86:fa:e9:06:5d:d5:18:b7: 5d:da:02:ab:e6:b4:7c:0a:e8:b4:06:64:a5:51:37: 5f:1f:47:7e:23:69:f0:d5:26:23:f0:e5:21:29:a4: 49:f0:8e:5a:b3:bc:2a:e7:79:ae:af:80:0b:49:07: dc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:04:34:53:57:51:E2:FC:75:48:40:78:20:8A:4C:B3:0A:18:70:E0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8fd3f39f-42a6-40ff-8efd-778bc823f3d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8800::/40 Signature Algorithm: sha256WithRSAEncryption 0d:85:9c:ff:85:4f:e1:ad:3f:81:0d:ca:fd:48:76:42:fe:80: 12:60:79:f6:e4:84:7a:b0:25:e8:21:aa:0f:65:b9:8c:8e:c7: 87:0d:64:51:2a:d7:62:22:46:5b:55:72:b6:e6:ea:a5:a1:7b: ea:7d:d9:ee:b2:18:ee:90:f1:a1:bf:16:5d:2a:86:47:70:d0: df:33:69:f4:4e:ad:27:8d:34:99:7e:6e:2d:8e:f3:74:4d:bb: 88:7f:7b:15:6d:b9:e0:87:c1:39:cf:27:e0:4b:c2:1e:ad:15: 1d:01:01:f8:69:ca:a0:45:a6:59:20:64:31:51:99:55:ef:b6: c6:5f:a4:30:6f:31:3c:60:56:7d:17:89:23:4e:1a:0d:d3:8c: cc:9f:cd:c3:27:68:f8:61:d6:65:28:8e:ee:70:49:8a:80:f0: ad:4a:60:ac:dc:fb:d9:91:c8:f0:dc:8e:7e:2c:be:db:ea:e2: d8:37:e2:72:36:d7:18:c5:8d:22:c2:9e:0b:93:d9:50:d2:07: 78:fd:34:39:71:9c:13:fd:8f:7d:c8:bd:2d:1e:76:07:a6:90: 05:38:2d:55:ad:54:a3:70:8b:ce:41:af:bd:de:82:48:8b:bb: 7d:e2:82:e8:a9:a7:b7:98:e4:55:49:2e:9e:ce:67:da:61:d0: 07:0e:dc:24 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURsBsj5YFmO50hqPD/zWo96C5+GEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMTAzN1oX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAMTYxZDgzZjkzMDRkMjUxNWI3MzQ1 NGQ1NjVlOTBiZmViMzFhMDA3MzYxMTM5MWEwNTc0NTczZTIzZTY4M2NhMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDx9LoSUwfswVWijHoSVrpzeSHxX ssM6rtt4Lb+dbAlqPCowDs2A/LQJuksoKjh6snIPvLsbrM6YDPlAtOXWA90givyy uBIAfgNOOG/JF1rinQkV+UP1nzna7dpP1fkLL1d8KKa/fi3pnCGyQLS4RawIa5a5 RVgZ4LhxZx+VKa7Ny5wqnEUJgtEF2oCgCB9s6QUjNqhOjMjWcqeIXMQu9vdTCkWf vJmBiOKoIWR1yxPrWAlQW1mm0G+mS4xWn0CQrJVgxQyNZHWvhvrpBl3VGLdd2gKr 5rR8Cui0BmSlUTdfH0d+I2nw1SYj8OUhKaRJ8I5as7wq53mur4ALSQfcAQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFK0ENFNXUeL8dUhAeCCKTLMKGHDgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhmZDNmMzlmLTQyYTYtNDBmZi04ZWZkLTc3OGJjODIzZjNkNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8ogwDQYJKoZIhvcNAQELBQADggEBAA2FnP+FT+GtP4ENyv1I dkL+gBJgefbkhHqwJeghqg9luYyOx4cNZFEq12IiRltVcrbm6qWhe+p92e6yGO6Q 8aG/Fl0qhkdw0N8zafROrSeNNJl+bi2O83RNu4h/exVtueCHwTnPJ+BLwh6tFR0B AfhpyqBFplkgZDFRmVXvtsZfpDBvMTxgVn0XiSNOGg3TjMyfzcMnaPhh1mUoju5w SYqA8K1KYKzc+9mRyPDcjn4svtvq4tg34nI21xjFjSLCnguT2VDSB3j9NDlxnBP9 j33IvS0edgemkAU4LVWtVKNwi85Br73egkiLu33iguipp7eY5FVJLp7OZ9ph0AcO 3CQ= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net