$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c804d9a-be43-4636-8f74-69e695113d21.roa File: 9c804d9a-be43-4636-8f74-69e695113d21.roa (raw, json) Hash identifier: qiupKeNVQfAf1Ak5KHnA2ZR03YKgCi4z5BdDthRqOyk= Subject key identifier: 16:FD:C4:F1:B4:7B:12:4D:12:CC:ED:26:28:47:CC:B7:7D:4F:E0:A9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4C2027EA2F553694D57522AD676B4769B6980D18 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c804d9a-be43-4636-8f74-69e695113d21.roa Signing time: Mon 21 Apr 2025 15:41:41 +0000 ROA not before: Mon 21 Apr 2025 15:41:41 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:20:27:ea:2f:55:36:94:d5:75:22:ad:67:6b:47:69:b6:98:0d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:41:41 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=80d6f5170aa88fc4e2664ab56beab17b14c4b07dbdee09d97e39b0b1ae00807b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:b1:86:1a:1a:08:b9:75:13:41:18:ca:32: 94:87:b4:fc:16:c8:67:a8:95:de:27:f6:e7:e9:50: 95:df:b7:50:29:4d:88:b2:60:c4:90:4b:99:56:96: ec:ad:6d:69:6e:45:b6:94:6a:fa:6d:5b:19:e0:ac: 5c:7e:c2:5c:7c:83:24:89:ae:1d:78:66:10:ee:14: cb:00:9d:6e:a2:52:f0:17:70:64:24:16:a9:15:38: 2f:01:55:b2:8c:df:07:a9:dc:5b:da:b2:56:2e:8f: 9d:d9:0c:f1:91:f4:ba:f3:c3:48:a2:10:97:ed:c7: 6c:39:80:e3:36:58:1d:35:6c:ee:9d:46:c0:0f:06: 33:37:56:c2:41:61:75:32:51:15:04:59:27:7d:ed: 1b:4e:a8:c8:22:6c:6b:d2:39:71:8c:98:30:b0:93: 26:fd:bc:7f:7a:53:f0:06:b1:bf:ad:67:f9:31:a8: c7:62:c5:3a:96:54:d6:44:02:c9:e3:61:a8:77:ab: b6:11:de:6e:54:ee:d6:a7:ae:5b:7d:0e:8c:b1:ed: e8:c5:2a:72:e6:5f:9f:77:f1:2d:28:aa:dd:7d:56: 33:ad:56:5c:9f:bf:8d:03:c6:29:34:70:0b:88:ab: 41:0b:49:98:e1:67:d7:06:5a:2a:7e:5e:c5:39:d0: 5d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FD:C4:F1:B4:7B:12:4D:12:CC:ED:26:28:47:CC:B7:7D:4F:E0:A9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9c804d9a-be43-4636-8f74-69e695113d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:7000::/40 Signature Algorithm: sha256WithRSAEncryption 14:64:a0:2b:03:c3:1e:52:7b:64:92:d6:8c:72:d1:f1:2a:05: af:83:af:42:46:47:e9:82:72:91:cb:17:74:5b:d7:33:07:0f: b4:32:68:65:9c:ce:a5:d0:dc:72:1d:17:c1:13:9f:c7:68:6b: 4c:a6:38:18:f0:2d:b1:2b:d3:c1:f3:b7:57:f0:d4:49:eb:fa: e3:9e:48:5e:4f:47:a9:7d:9a:be:8f:6b:24:7b:d7:e5:35:91: d5:07:2c:6b:ba:05:7d:3c:66:4d:1c:7a:61:61:62:17:e5:0b: c2:2c:4a:30:d9:9a:91:cc:08:5f:2b:ef:c7:c4:93:27:d7:6c: 85:6a:84:07:f1:86:e8:7a:da:ed:5e:05:d6:a6:dd:44:3a:37: 6d:d5:bd:00:7d:55:f4:04:cf:12:5c:b2:69:6a:0f:e0:a5:af: 0e:94:93:af:d9:4c:64:50:4e:02:37:be:01:0a:cb:3f:00:d6: 71:91:4d:dd:f0:9d:c1:44:bc:23:13:7f:55:43:83:f9:95:73: 93:2d:ef:2d:bc:ca:b8:69:68:56:bb:4a:59:7f:7b:30:53:66: c4:d6:cc:22:8a:ab:ff:cd:fc:b8:1f:28:46:f1:70:5c:f3:cc: e9:d8:db:af:5a:37:83:6c:43:a2:de:6b:86:78:7c:31:68:41: a9:4b:18:7e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTCAn6i9VNpTVdSKtZ2tHabaYDRgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NDE0MVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAODBkNmY1MTcwYWE4OGZjNGUyNjY0 YWI1NmJlYWIxN2IxNGM0YjA3ZGJkZWUwOWQ5N2UzOWIwYjFhZTAwODA3YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O+xhhoaCLl1E0EYyjKUh7T8Fshn qJXeJ/bn6VCV37dQKU2IsmDEkEuZVpbsrW1pbkW2lGr6bVsZ4KxcfsJcfIMkia4d eGYQ7hTLAJ1uolLwF3BkJBapFTgvAVWyjN8Hqdxb2rJWLo+d2QzxkfS688NIohCX 7cdsOYDjNlgdNWzunUbADwYzN1bCQWF1MlEVBFknfe0bTqjIImxr0jlxjJgwsJMm /bx/elPwBrG/rWf5MajHYsU6llTWRALJ42God6u2Ed5uVO7Wp65bfQ6Mse3oxSpy 5l+fd/EtKKrdfVYzrVZcn7+NA8YpNHALiKtBC0mY4WfXBloqfl7FOdBdSQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBb9xPG0exJNEsztJihHzLd9T+CpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzljODA0ZDlhLWJlNDMtNDYzNi04Zjc0LTY5ZTY5NTExM2QyMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba93AwDQYJKoZIhvcNAQELBQADggEBABRkoCsDwx5Se2SS1oxy 0fEqBa+Dr0JGR+mCcpHLF3Rb1zMHD7QyaGWczqXQ3HIdF8ETn8doa0ymOBjwLbEr 08Hzt1fw1Enr+uOeSF5PR6l9mr6PayR71+U1kdUHLGu6BX08Zk0cemFhYhflC8Is SjDZmpHMCF8r78fEkyfXbIVqhAfxhuh62u1eBdam3UQ6N23VvQB9VfQEzxJcsmlq D+Clrw6Uk6/ZTGRQTgI3vgEKyz8A1nGRTd3wncFEvCMTf1VDg/mVc5Mt7y28yrhp aFa7Sll/ezBTZsTWzCKKq//N/LgfKEbxcFzzzOnY269aN4NsQ6Lea4Z4fDFoQalL GH4= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:48 2025 by rpki-client on console.sobornost.net