$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/998b0117-a2c5-4243-88eb-295661753c25.roa File: 998b0117-a2c5-4243-88eb-295661753c25.roa (raw, json) Hash identifier: cHbfhrFYctFrejGklztYaD7cZd2eRi3HwxSxe1OJgGw= Subject key identifier: CB:7F:6A:F9:81:F3:F4:65:1F:AF:93:FD:2D:80:BD:9B:89:6A:F9:94 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 02E07BF6976119E28755811CF7C5E98242A70002 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/998b0117-a2c5-4243-88eb-295661753c25.roa Signing time: Mon 21 Apr 2025 15:31:58 +0000 ROA not before: Mon 21 Apr 2025 15:31:58 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:2040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e0:7b:f6:97:61:19:e2:87:55:81:1c:f7:c5:e9:82:42:a7:00:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:31:58 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=0c7d5f459649a2d88034a915b074c1feb7d980c2a12a66afb31bd42ba3f843df, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:12:bc:ff:f6:cf:2d:5f:ff:39:84:98:b9: 32:eb:f3:9b:dd:db:e5:44:5a:80:4f:b6:dc:e1:0d: 75:e8:2d:f8:69:7d:8d:68:d3:cd:66:78:8d:85:1a: 21:f4:c7:14:15:04:2a:7b:0a:55:ed:8e:b8:4f:af: 26:3a:84:5c:0a:e1:fa:aa:a3:f7:11:ea:27:db:50: 8d:6f:ad:5a:33:44:29:7f:a5:61:e9:c3:e3:b1:3d: d9:83:8e:8b:7a:6b:5d:d6:f8:31:12:63:88:fa:a5: a3:01:15:fd:30:1f:ae:8a:70:c6:e9:44:5a:79:61: 33:b7:bc:fe:12:d1:0d:e8:6c:81:c6:d9:22:13:f1: 63:f2:9d:be:49:81:ab:02:a8:aa:36:d9:27:1d:97: 3a:2f:94:b2:23:b1:b1:41:f7:18:64:95:88:4a:6a: c6:46:c4:ca:6c:76:bf:19:c5:88:85:f6:2a:8d:12: 06:4d:79:a1:69:90:99:2c:31:b5:ed:64:04:16:d9: dd:ef:73:31:c0:db:10:c1:1c:56:b9:fb:8f:b2:66: 64:c4:13:a2:d4:2e:e4:76:e0:7e:32:3f:d1:c8:a3: 80:e0:cc:f5:16:fb:43:3c:fe:79:09:43:e1:58:d1: ae:e2:a0:f1:c2:5c:20:ff:ac:73:56:11:3d:02:32: f9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7F:6A:F9:81:F3:F4:65:1F:AF:93:FD:2D:80:BD:9B:89:6A:F9:94 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/998b0117-a2c5-4243-88eb-295661753c25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:2040::/46 Signature Algorithm: sha256WithRSAEncryption 0f:0a:33:22:b9:4a:54:d9:f5:f0:6d:f7:96:55:e4:60:7c:b9: 37:9e:78:8f:63:c5:62:9b:e8:83:4f:af:64:9c:90:eb:e2:94: f1:ca:17:60:b6:bf:55:27:f7:0d:98:1a:49:08:7d:f8:8a:1b: 52:a8:f1:9d:17:76:76:8d:56:23:9c:03:04:54:64:6f:ee:98: af:a3:22:93:69:a4:b5:7b:15:a0:d3:0f:99:a9:21:72:77:66: 71:9a:e6:d3:86:e5:75:24:41:a8:68:3d:77:8b:a2:59:f4:9f: 77:f8:3f:7e:09:d6:c0:fb:39:ac:ab:ad:be:0e:b7:7b:73:df: 29:56:c1:ac:df:fc:7e:ec:61:99:78:44:1c:d8:14:b3:80:d6: 12:e5:73:78:82:21:78:4b:e2:9c:6b:28:81:b7:32:62:91:5a: 9d:36:d7:c4:87:70:35:04:8d:ae:21:13:ff:ca:cf:8a:3b:37: 0e:c0:d9:31:02:68:3b:33:7c:9d:e2:b1:09:b2:30:c4:49:58: 23:24:20:e7:1a:c4:49:d2:ff:5f:76:9b:95:fb:af:94:97:a4: c9:c8:e3:31:42:b4:da:8c:6d:98:79:d3:83:75:73:ce:97:f7: 07:19:be:28:69:69:5f:d3:89:b8:81:8d:c4:96:d3:41:8d:d9: 9c:ab:15:7e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAuB79pdhGeKHVYEc98XpgkKnAAIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MzE1OFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMGM3ZDVmNDU5NjQ5YTJkODgwMzRh OTE1YjA3NGMxZmViN2Q5ODBjMmExMmE2NmFmYjMxYmQ0MmJhM2Y4NDNkZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWYSvP/2zy1f/zmEmLky6/Ob3dvl RFqAT7bc4Q116C34aX2NaNPNZniNhRoh9McUFQQqewpV7Y64T68mOoRcCuH6qqP3 Eeon21CNb61aM0Qpf6Vh6cPjsT3Zg46Lemtd1vgxEmOI+qWjARX9MB+uinDG6URa eWEzt7z+EtEN6GyBxtkiE/Fj8p2+SYGrAqiqNtknHZc6L5SyI7GxQfcYZJWISmrG RsTKbHa/GcWIhfYqjRIGTXmhaZCZLDG17WQEFtnd73MxwNsQwRxWufuPsmZkxBOi 1C7kduB+Mj/RyKOA4Mz1FvtDPP55CUPhWNGu4qDxwlwg/6xzVhE9AjL5yQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMt/avmB8/RlH6+T/S2AvZuJavmUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk5OGIwMTE3LWEyYzUtNDI0My04OGViLTI5NTY2MTc1M2MyNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+yBAMA0GCSqGSIb3DQEBCwUAA4IBAQAPCjMiuUpU2fXwbfeW VeRgfLk3nniPY8Vim+iDT69knJDr4pTxyhdgtr9VJ/cNmBpJCH34ihtSqPGdF3Z2 jVYjnAMEVGRv7pivoyKTaaS1exWg0w+ZqSFyd2ZxmubThuV1JEGoaD13i6JZ9J93 +D9+CdbA+zmsq62+Drd7c98pVsGs3/x+7GGZeEQc2BSzgNYS5XN4giF4S+KcayiB tzJikVqdNtfEh3A1BI2uIRP/ys+KOzcOwNkxAmg7M3yd4rEJsjDESVgjJCDnGsRJ 0v9fdpuV+6+Ul6TJyOMxQrTajG2YedODdXPOl/cHGb4oaWlf04m4gY3EltNBjdmc qxV+ -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:48 2025 by rpki-client on console.sobornost.net