$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b388e43-5501-4c94-b15f-b02861508541.roa File: 9b388e43-5501-4c94-b15f-b02861508541.roa (raw, json) Hash identifier: sutPTucS6dn6vitfXsdfI4No6F8CveNqU6bp+pIhgHk= Subject key identifier: FB:CB:E7:B1:5B:89:05:F9:3B:1F:0A:F9:7D:EE:77:E4:09:1E:A3:05 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6F5C207BAD88D352C7CE301ACA486E2EF8465776 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b388e43-5501-4c94-b15f-b02861508541.roa Signing time: Fri 18 Apr 2025 00:10:13 +0000 ROA not before: Fri 18 Apr 2025 00:10:13 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:48c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5c:20:7b:ad:88:d3:52:c7:ce:30:1a:ca:48:6e:2e:f8:46:57:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 18 00:10:13 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=192a4a596b6cfb0236a3a785237a25bc14a37796bb9813ad0e8f13580e4322c4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:02:b3:aa:8f:f4:6d:16:f5:50:f0:86:27: 78:48:19:7c:0c:6d:94:c6:34:2b:de:3a:2c:4c:89: 84:77:ac:a5:2f:ee:08:b6:c3:88:6b:65:61:1b:cf: 4a:b8:b2:81:d7:45:29:ad:ed:26:cd:a6:df:34:1a: 59:45:c7:b5:8c:89:61:8d:aa:3b:12:6a:41:89:13: f5:e8:0f:4e:a0:7e:5a:3b:7f:e5:b6:d4:51:26:dd: 2d:95:47:aa:eb:2f:16:00:c0:fc:1d:f9:e7:97:f7: 4e:94:f4:2f:56:d0:8b:cc:fa:d7:eb:75:fd:42:62: 3e:a7:3d:93:e3:81:9f:92:eb:68:b1:24:ae:72:b6: b5:97:a9:56:9b:ce:02:f3:93:08:87:cc:b9:f7:24: e5:7c:08:60:8d:19:bb:a1:89:2e:a0:63:20:c5:81: 1c:cd:43:66:35:2a:a4:59:62:d1:4b:6f:8e:4a:19: 6e:ce:f4:c9:d3:8d:a8:b8:7e:99:f4:05:2d:12:01: c3:6a:58:23:c8:cf:a0:b2:16:f4:49:73:ae:c1:cb: 93:e3:71:29:17:e4:fd:0e:ed:4a:da:02:98:c4:48: c7:db:1f:22:04:6b:2d:bb:3e:c8:6e:a9:fe:7c:60: 67:97:7f:ed:eb:38:cd:af:2c:5f:26:3c:f7:9a:e7: 13:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CB:E7:B1:5B:89:05:F9:3B:1F:0A:F9:7D:EE:77:E4:09:1E:A3:05 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9b388e43-5501-4c94-b15f-b02861508541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:48c0::/48 Signature Algorithm: sha256WithRSAEncryption 84:16:5e:6c:f3:ee:d2:9a:42:7b:e8:7d:21:0b:7d:f6:90:85: ed:91:e8:be:28:b4:fe:53:1f:7a:be:ee:a4:66:7d:3a:b2:1c: f4:d7:b8:29:94:7f:e4:c0:cb:fe:c6:b7:6c:34:5e:00:a1:b9: 6e:27:16:2c:ec:af:da:7e:94:cd:2f:c2:84:ef:3a:e7:1d:6b: 2e:a0:80:72:7c:25:74:bc:a4:14:61:d6:57:4a:67:94:1f:28: 5f:a8:3e:68:a2:4c:46:7e:7b:54:7d:52:64:01:d7:33:ee:58: 63:c4:df:62:be:46:d8:35:23:73:cd:d1:f5:97:62:20:2b:cb: 68:ea:63:99:06:51:c6:20:98:26:1d:0d:74:a9:f2:3b:40:8b: e5:45:7f:20:51:f4:3a:92:47:4e:f2:af:88:78:bb:40:d8:58: 8c:b2:78:c3:ab:5f:4f:25:66:9f:4b:ab:5e:39:51:30:10:8a: 14:79:62:f8:4a:d0:6b:12:03:0f:85:62:81:e7:0f:2e:95:ad: 13:c7:20:17:4a:7f:17:2d:ec:4f:b0:e1:5b:39:71:d6:e5:dc: ef:7f:17:9c:23:18:6b:39:74:45:7a:6f:39:ef:d2:45:95:6d: 84:47:13:89:cd:99:df:7c:32:7e:29:44:e1:28:2d:f8:af:32: 3f:e7:f4:e6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUb1wge62I01LHzjAaykhuLvhGV3YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxODAwMTAxM1oX DTI1MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAMTkyYTRhNTk2YjZjZmIwMjM2YTNh Nzg1MjM3YTI1YmMxNGEzNzc5NmJiOTgxM2FkMGU4ZjEzNTgwZTQzMjJjNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUACs6qP9G0W9VDwhid4SBl8DG2U xjQr3josTImEd6ylL+4ItsOIa2VhG89KuLKB10Upre0mzabfNBpZRce1jIlhjao7 EmpBiRP16A9OoH5aO3/lttRRJt0tlUeq6y8WAMD8Hfnnl/dOlPQvVtCLzPrX63X9 QmI+pz2T44GfkutosSSucra1l6lWm84C85MIh8y59yTlfAhgjRm7oYkuoGMgxYEc zUNmNSqkWWLRS2+OShluzvTJ042ouH6Z9AUtEgHDalgjyM+gshb0SXOuwcuT43Ep F+T9Du1K2gKYxEjH2x8iBGstuz7Ibqn+fGBnl3/t6zjNryxfJjz3mucT/wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPvL57FbiQX5Ox8K+X3ud+QJHqMFMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzliMzg4ZTQzLTU1MDEtNGM5NC1iMTVmLWIwMjg2MTUwODU0MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYUjAMA0GCSqGSIb3DQEBCwUAA4IBAQCEFl5s8+7SmkJ76H0h C332kIXtkei+KLT+Ux96vu6kZn06shz017gplH/kwMv+xrdsNF4AobluJxYs7K/a fpTNL8KE7zrnHWsuoIByfCV0vKQUYdZXSmeUHyhfqD5ookxGfntUfVJkAdcz7lhj xN9ivkbYNSNzzdH1l2IgK8to6mOZBlHGIJgmHQ10qfI7QIvlRX8gUfQ6kkdO8q+I eLtA2FiMsnjDq19PJWafS6teOVEwEIoUeWL4StBrEgMPhWKB5w8ula0TxyAXSn8X LexPsOFbOXHW5dzvfxecIxhrOXRFem8579JFlW2ERxOJzZnffDJ+KUThKC34rzI/ 5/Tm -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:48 2025 by rpki-client on console.sobornost.net