$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa File: 95769528-fe79-42fd-bbc3-1d9507dfe45c.roa (raw, json) Hash identifier: Q9uCX+2CBZV9dfAEAnWQ+ccHct/VAx34/F2SwTItsZE= Subject key identifier: 68:30:61:CE:E9:97:CE:04:24:2B:01:62:5A:4E:34:ED:04:C6:A4:77 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 75EE51529B7E841A5609DEC007F00318F5D0CB18 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa Signing time: Mon 21 Apr 2025 15:11:03 +0000 ROA not before: Mon 21 Apr 2025 15:11:03 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ee:51:52:9b:7e:84:1a:56:09:de:c0:07:f0:03:18:f5:d0:cb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:11:03 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=0940272f12c8c59643239dca7e1dbfe1b502c7d596740d36df481a2f0aa172ac, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:46:2b:49:6f:70:07:34:d3:b0:8a:d7:ee:f8: 80:e7:6e:57:b0:42:42:63:2c:e9:93:dc:e7:8d:58: fd:17:91:57:8a:75:7b:3a:75:13:a2:98:a7:2f:dd: 18:68:92:a4:7a:e5:c7:27:ce:d9:7a:ad:87:73:86: cf:8b:d3:da:c0:5c:4d:07:79:59:01:7e:69:5f:b0: 52:9b:7b:60:ad:70:c7:40:48:dd:81:ff:8f:43:ed: a4:d8:8a:b6:f2:ca:b9:85:f0:9b:45:8f:b3:d3:c7: c4:16:58:6d:e7:04:94:21:bb:df:65:39:63:b7:9e: a7:4c:3e:a2:c1:22:b0:8f:a2:c0:82:2b:8b:2d:64: 1a:21:cf:c1:75:7e:1c:45:36:1c:d6:6e:fb:89:33: 1a:dc:83:84:70:eb:21:ab:29:e1:ff:42:c2:ff:c0: eb:63:79:3c:54:5c:84:aa:20:be:90:bc:05:7d:61: 86:89:57:17:e1:a6:31:b6:c6:11:96:2b:9b:1e:1c: 71:fa:b1:e9:da:17:9b:5e:3b:1e:64:01:e8:fe:b7: 84:2f:fe:df:de:2a:c8:44:66:b5:e0:6d:de:f0:d0: c0:91:c0:62:c0:84:70:bb:fb:f3:0c:c0:83:1c:b2: 89:ad:19:62:6d:5f:e9:55:74:10:a5:3b:c1:8c:04: 5f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:30:61:CE:E9:97:CE:04:24:2B:01:62:5A:4E:34:ED:04:C6:A4:77 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:800::/40 Signature Algorithm: sha256WithRSAEncryption 0e:a1:0c:07:34:2a:39:ba:9f:ec:94:5e:5d:4d:48:c9:e0:ad: 81:b8:69:73:06:88:21:2b:d0:eb:2f:47:39:76:a4:53:8a:7e: 79:43:58:9d:9b:24:aa:59:66:e3:0b:13:e9:c7:8b:c0:b9:c0: 8e:27:86:f4:a9:eb:ed:53:a9:66:77:00:b7:71:05:5d:7e:ea: 86:33:08:63:5a:7a:b0:8b:a4:f3:4a:4a:d4:73:28:cf:a3:02: 47:96:7e:63:60:94:83:cd:91:02:e7:45:1c:7a:f4:f9:ab:20: ca:06:be:11:6b:e0:14:80:8d:c8:dc:1d:91:35:d9:a2:e6:ca: 83:df:78:3f:67:be:18:52:91:b0:56:19:b4:d5:51:80:84:5b: c8:01:c4:ff:60:0a:a8:53:cb:31:00:48:dc:96:14:22:25:04: 33:5b:dd:e0:8e:19:c3:29:ff:09:df:94:c7:57:07:c5:0a:03: 9f:7f:c0:d9:b1:7a:68:de:b1:62:67:4e:61:58:d0:ce:54:1c: fe:40:9d:ea:0e:4b:55:94:f8:00:4d:1c:6d:b5:26:86:23:80: 97:0d:44:3e:ae:8b:e8:da:82:11:0d:ab:61:58:80:7b:0d:0f: e4:17:f7:b6:2e:2e:60:2f:75:45:33:04:62:17:98:f7:35:23: cd:2e:19:29 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUde5RUpt+hBpWCd7AB/ADGPXQyxgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MTEwM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMDk0MDI3MmYxMmM4YzU5NjQzMjM5 ZGNhN2UxZGJmZTFiNTAyYzdkNTk2NzQwZDM2ZGY0ODFhMmYwYWExNzJhYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokYrSW9wBzTTsIrX7viA525XsEJC Yyzpk9znjVj9F5FXinV7OnUTopinL90YaJKkeuXHJ87Zeq2Hc4bPi9PawFxNB3lZ AX5pX7BSm3tgrXDHQEjdgf+PQ+2k2Iq28sq5hfCbRY+z08fEFlht5wSUIbvfZTlj t56nTD6iwSKwj6LAgiuLLWQaIc/BdX4cRTYc1m77iTMa3IOEcOshqynh/0LC/8Dr Y3k8VFyEqiC+kLwFfWGGiVcX4aYxtsYRliubHhxx+rHp2hebXjseZAHo/reEL/7f 3irIRGa14G3e8NDAkcBiwIRwu/vzDMCDHLKJrRlibV/pVXQQpTvBjARfKwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFGgwYc7pl84EJCsBYlpONO0ExqR3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk1NzY5NTI4LWZlNzktNDJmZC1iYmMzLTFkOTUwN2RmZTQ1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/wgwDQYJKoZIhvcNAQELBQADggEBAA6hDAc0Kjm6n+yUXl1N SMngrYG4aXMGiCEr0OsvRzl2pFOKfnlDWJ2bJKpZZuMLE+nHi8C5wI4nhvSp6+1T qWZ3ALdxBV1+6oYzCGNaerCLpPNKStRzKM+jAkeWfmNglIPNkQLnRRx69PmrIMoG vhFr4BSAjcjcHZE12aLmyoPfeD9nvhhSkbBWGbTVUYCEW8gBxP9gCqhTyzEASNyW FCIlBDNb3eCOGcMp/wnflMdXB8UKA59/wNmxemjesWJnTmFY0M5UHP5AneoOS1WU +ABNHG21JoYjgJcNRD6ui+jaghENq2FYgHsND+QX97YuLmAvdUUzBGIXmPc1I80u GSk= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:48 2025 by rpki-client on console.sobornost.net