$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9016c8f8-5e23-4acf-929a-ba5a344b35b6.roa File: 9016c8f8-5e23-4acf-929a-ba5a344b35b6.roa (raw, json) Hash identifier: 74U2O1HuGsctFTpz/h+p/Pi2nWrwEPlE6D3NgS3QuQE= Subject key identifier: B2:E7:DE:48:24:0A:50:E3:CA:38:F1:5D:4E:8D:81:A5:8A:E6:15:3C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6CB8975C2EC645C9C038417AB624145A2BA5347B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9016c8f8-5e23-4acf-929a-ba5a344b35b6.roa Signing time: Mon 21 Apr 2025 15:20:11 +0000 ROA not before: Mon 21 Apr 2025 15:20:11 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:4080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b8:97:5c:2e:c6:45:c9:c0:38:41:7a:b6:24:14:5a:2b:a5:34:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:20:11 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=e384ea28823379e7a3e30e38439a943f4420afe52b7a0104cd46d91f75a2c0c5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:32:70:3e:ca:d1:08:5a:ea:30:3a:8b:e1:ed: 5f:70:90:59:89:2f:ab:2e:12:f6:13:af:2e:4e:b8: 57:2a:d7:dc:e5:a3:39:96:2a:c7:b2:c0:f5:34:44: db:08:96:ce:76:cd:97:2a:59:71:68:6e:4e:55:da: d8:2d:64:70:09:e6:cd:81:03:c3:cc:cb:02:4b:1a: 01:9d:3a:da:61:20:d7:1c:83:39:58:a0:38:b2:ab: 08:cd:69:90:4e:4a:98:62:ed:22:c0:36:03:fb:7f: 37:88:01:87:ce:67:7e:28:75:12:91:87:8b:e3:90: 24:d9:7b:40:eb:42:87:85:b4:f7:fe:51:39:bb:87: 95:83:87:c6:ff:f9:1a:a8:f2:a6:0f:1d:85:0d:63: 15:11:21:23:4a:a9:2e:d8:01:01:2c:13:ab:28:08: 2a:fd:4b:8c:38:a5:40:2e:51:8c:34:c3:e5:d3:a2: 16:15:9e:ba:be:4c:84:23:82:04:90:0f:cb:04:9c: 18:c5:e2:80:33:bf:6f:ec:c9:95:9e:be:bf:c8:52: 52:d7:c6:68:d5:92:e6:b1:2d:0d:7d:1c:20:27:d4: aa:28:1b:2c:df:d7:98:71:67:9e:6d:1e:fc:49:85: d8:e5:ee:05:70:e3:14:2a:8d:f2:38:0c:fe:dc:1c: 6f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E7:DE:48:24:0A:50:E3:CA:38:F1:5D:4E:8D:81:A5:8A:E6:15:3C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9016c8f8-5e23-4acf-929a-ba5a344b35b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:4080::/46 Signature Algorithm: sha256WithRSAEncryption 53:6c:4d:c6:17:eb:47:50:ca:53:43:f9:df:27:ee:fd:a8:87: 8b:12:08:d4:e0:60:04:77:2d:68:9f:6c:ba:1a:61:c3:fd:69: c5:f3:41:a0:7d:e6:c0:20:9e:6b:85:3d:4d:60:7c:4c:df:97: d3:0a:00:ae:49:b0:36:5d:3d:55:8b:5e:4e:77:72:04:6a:ed: 47:e7:14:68:55:bb:08:de:f3:4a:d9:1c:4a:82:c0:dd:55:13: 2d:fb:2a:e4:01:24:c6:eb:ab:d8:6f:f0:e2:10:f4:ac:36:e0: 17:71:6d:30:58:ea:ca:24:70:fd:27:23:db:41:84:b6:cc:ff: b8:eb:dd:e5:8b:92:87:b2:75:e6:d4:a9:2a:9c:63:1c:f3:6f: ae:80:61:eb:79:7c:64:03:5d:72:ff:13:bb:54:86:3d:3f:3e: 0f:f9:9e:c9:5e:20:50:f2:5d:fb:97:6c:d0:23:2c:dd:5e:de: 9f:26:9e:30:06:34:33:86:2c:24:8f:18:83:10:77:54:c8:25: ef:6b:d9:ea:ac:ed:91:a9:31:e1:8e:85:5f:9e:72:a5:c2:d5: b9:24:03:a8:f7:c6:2c:26:07:48:ad:7d:7b:8c:45:64:35:e0: 88:3e:86:06:51:c6:92:ae:82:ab:85:af:88:53:43:e7:36:1e: fc:7f:de:e2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUbLiXXC7GRcnAOEF6tiQUWiulNHswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MjAxMVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAZTM4NGVhMjg4MjMzNzllN2EzZTMw ZTM4NDM5YTk0M2Y0NDIwYWZlNTJiN2EwMTA0Y2Q0NmQ5MWY3NWEyYzBjNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjJwPsrRCFrqMDqL4e1fcJBZiS+r LhL2E68uTrhXKtfc5aM5lirHssD1NETbCJbOds2XKllxaG5OVdrYLWRwCebNgQPD zMsCSxoBnTraYSDXHIM5WKA4sqsIzWmQTkqYYu0iwDYD+383iAGHzmd+KHUSkYeL 45Ak2XtA60KHhbT3/lE5u4eVg4fG//kaqPKmDx2FDWMVESEjSqku2AEBLBOrKAgq /UuMOKVALlGMNMPl06IWFZ66vkyEI4IEkA/LBJwYxeKAM79v7MmVnr6/yFJS18Zo 1ZLmsS0NfRwgJ9SqKBss39eYcWeebR78SYXY5e4FcOMUKo3yOAz+3BxvuQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLLn3kgkClDjyjjxXU6NgaWK5hU8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkwMTZjOGY4LTVlMjMtNGFjZi05MjlhLWJhNWEzNDRiMzViNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaUCAMA0GCSqGSIb3DQEBCwUAA4IBAQBTbE3GF+tHUMpTQ/nf J+79qIeLEgjU4GAEdy1on2y6GmHD/WnF80GgfebAIJ5rhT1NYHxM35fTCgCuSbA2 XT1Vi15Od3IEau1H5xRoVbsI3vNK2RxKgsDdVRMt+yrkASTG66vYb/DiEPSsNuAX cW0wWOrKJHD9JyPbQYS2zP+4693li5KHsnXm1KkqnGMc82+ugGHreXxkA11y/xO7 VIY9Pz4P+Z7JXiBQ8l37l2zQIyzdXt6fJp4wBjQzhiwkjxiDEHdUyCXva9nqrO2R qTHhjoVfnnKlwtW5JAOo98YsJgdIrX17jEVkNeCIPoYGUcaSroKrha+IU0PnNh78 f97i -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:47 2025 by rpki-client on console.sobornost.net