$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d4119e3-c0cc-4acb-9dbf-e8db1c2f9395.roa File: 9d4119e3-c0cc-4acb-9dbf-e8db1c2f9395.roa (raw, json) Hash identifier: HXVEoLtfVualZByUlJfMM/vqtrD7n700HHimm1fY5sc= Subject key identifier: A3:92:28:0C:7B:42:82:E6:F0:4F:2C:15:68:E7:3B:12:50:C3:DE:95 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 18D2CB6A0C0A65C575566B01DA067ECFE40783E8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d4119e3-c0cc-4acb-9dbf-e8db1c2f9395.roa Signing time: Mon 21 Apr 2025 16:20:15 +0000 ROA not before: Mon 21 Apr 2025 16:20:15 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da70:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d2:cb:6a:0c:0a:65:c5:75:56:6b:01:da:06:7e:cf:e4:07:83:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:20:15 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=679a135160f4cc4cd4866135d4ddd1996fc0684f135006aedc852f59e045c239, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:67:96:55:4b:f7:34:25:11:31:2f:ae:b0:ec: 44:51:9f:4b:df:df:82:e6:75:99:f5:b7:60:da:2c: fa:3a:84:14:c0:85:99:64:c5:e8:b5:09:6d:dd:3d: 26:5a:6b:2d:41:86:5e:27:32:ce:bc:22:ae:da:3f: 1e:c3:c8:aa:5b:34:a7:35:61:6c:48:d8:9f:57:fe: 6a:87:4e:1d:47:5c:e2:82:cd:7f:03:c5:65:fd:43: bb:71:d1:7a:47:ed:83:91:30:ea:76:2b:51:da:05: ec:d1:1a:bd:bb:0f:91:e2:7c:8c:fc:c0:39:39:49: 11:9c:77:73:f6:87:21:a7:da:1d:69:f7:20:a4:86: 6b:5c:42:ac:fc:1b:bf:ac:2f:41:ca:83:d6:46:a7: 73:2a:9d:34:79:10:12:18:24:db:c2:d0:b2:6d:31: cc:8f:4a:58:55:be:48:f1:3b:63:78:9d:0a:93:91: c3:44:10:8b:bb:85:bc:da:64:e9:03:81:f5:e6:5f: b5:73:28:da:be:63:86:7f:dd:47:ed:c1:49:a7:92: e0:fc:6d:8e:fc:6f:80:92:64:41:74:27:61:63:e1: 9d:3c:49:6f:69:2e:0f:70:80:39:81:6c:57:aa:29: 05:d6:df:e8:06:dc:5d:46:ab:ad:b6:ab:cb:32:5b: 0a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:92:28:0C:7B:42:82:E6:F0:4F:2C:15:68:E7:3B:12:50:C3:DE:95 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d4119e3-c0cc-4acb-9dbf-e8db1c2f9395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da70:f000::/40 Signature Algorithm: sha256WithRSAEncryption 53:eb:be:bc:fc:ae:fd:55:41:7b:c1:70:e9:bf:fb:92:8c:c6: 2f:ae:56:7f:9c:3e:4d:04:05:1f:50:17:93:fb:78:4d:16:e4: 2e:a3:b5:a3:68:b7:72:c3:84:30:84:be:bb:9d:f5:0a:b7:28: cc:c8:f8:61:3a:3e:85:f4:a3:06:2c:5a:88:7b:12:f8:ca:21: 3d:85:3f:bd:f0:bc:b4:12:1f:f8:2d:43:7b:e3:20:af:f6:d2: 9b:e0:07:67:6c:19:af:b0:60:09:49:f8:74:51:d5:98:8d:02: 60:c7:53:c7:cf:09:00:18:bb:33:56:9a:8e:b5:f3:48:21:cd: c4:16:3e:5c:e1:2d:33:7c:e5:98:49:91:3c:00:b5:69:15:69: a6:df:6e:b5:82:4d:2b:de:ff:36:0c:ea:7d:8c:fe:c8:ea:0f: 28:b0:25:39:94:e5:7a:53:11:5b:23:e3:4c:35:d1:ab:f7:5e: 27:29:d5:51:e0:bd:e5:f3:e3:55:d0:5b:5f:17:9b:b1:44:38: fd:cc:20:ab:92:75:96:61:3f:7c:ab:19:8d:d6:a5:c5:e3:2e: fc:6b:24:bf:57:c3:f8:dc:7a:f5:b0:c1:28:c8:91:34:91:98: c8:62:2d:ae:be:8e:3e:8a:60:ef:e5:a6:74:67:8e:06:9e:2f: be:fe:23:2d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUGNLLagwKZcV1VmsB2gZ+z+QHg+gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MjAxNVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANjc5YTEzNTE2MGY0Y2M0Y2Q0ODY2 MTM1ZDRkZGQxOTk2ZmMwNjg0ZjEzNTAwNmFlZGM4NTJmNTllMDQ1YzIzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WeWVUv3NCURMS+usOxEUZ9L39+C 5nWZ9bdg2iz6OoQUwIWZZMXotQlt3T0mWmstQYZeJzLOvCKu2j8ew8iqWzSnNWFs SNifV/5qh04dR1zigs1/A8Vl/UO7cdF6R+2DkTDqditR2gXs0Rq9uw+R4nyM/MA5 OUkRnHdz9ochp9odafcgpIZrXEKs/Bu/rC9ByoPWRqdzKp00eRASGCTbwtCybTHM j0pYVb5I8TtjeJ0Kk5HDRBCLu4W82mTpA4H15l+1cyjavmOGf91H7cFJp5Lg/G2O /G+AkmRBdCdhY+GdPElvaS4PcIA5gWxXqikF1t/oBtxdRquttqvLMlsKxQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKOSKAx7QoLm8E8sFWjnOxJQw96VMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkNDExOWUzLWMwY2MtNGFjYi05ZGJmLWU4ZGIxYzJmOTM5NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbacPAwDQYJKoZIhvcNAQELBQADggEBAFPrvrz8rv1VQXvBcOm/ +5KMxi+uVn+cPk0EBR9QF5P7eE0W5C6jtaNot3LDhDCEvrud9Qq3KMzI+GE6PoX0 owYsWoh7EvjKIT2FP73wvLQSH/gtQ3vjIK/20pvgB2dsGa+wYAlJ+HRR1ZiNAmDH U8fPCQAYuzNWmo6180ghzcQWPlzhLTN85ZhJkTwAtWkVaabfbrWCTSve/zYM6n2M /sjqDyiwJTmU5XpTEVsj40w10av3Xicp1VHgveXz41XQW18Xm7FEOP3MIKuSdZZh P3yrGY3WpcXjLvxrJL9Xw/jcevWwwSjIkTSRmMhiLa6+jj6KYO/lpnRnjgaeL77+ Iy0= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:48 2025 by rpki-client on console.sobornost.net