$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9dcf5f8f-9941-4c57-93c6-6df3440d00a0.roa File: 9dcf5f8f-9941-4c57-93c6-6df3440d00a0.roa (raw, json) Hash identifier: exv+/AyDhjN4FaElRV8GAk8ddTTu+uUrugW3JxL2Az0= Subject key identifier: B4:E7:B5:C4:CF:3F:9F:05:5E:BF:D8:CF:C7:7A:CA:8B:50:C3:6D:98 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5B9B2C53572BB049000F5874912035DAE8ECCEDF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9dcf5f8f-9941-4c57-93c6-6df3440d00a0.roa Signing time: Mon 21 Apr 2025 16:51:13 +0000 ROA not before: Mon 21 Apr 2025 16:51:13 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da10:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9b:2c:53:57:2b:b0:49:00:0f:58:74:91:20:35:da:e8:ec:ce:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:51:13 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=3a1eab9a1b6c3814784151dcfbfedcca12b3a1f39b7e6dcfa95750801b403ce2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:42:15:76:45:ed:0c:37:5b:e6:2b:f6:c0: 04:4b:37:6c:54:22:4a:1f:00:7e:90:06:9a:ff:05: 24:45:5a:f7:f3:20:27:12:94:d1:98:88:04:5b:f1: c8:b9:49:96:d5:7f:27:9c:a7:bd:27:9c:2f:34:53: 8c:8d:a3:94:11:e7:a7:d7:98:4e:81:92:43:5d:3c: 74:fb:f9:06:72:05:29:2c:d7:f8:10:e5:bb:01:03: 4a:60:a1:c3:99:b4:49:60:96:23:1b:72:73:e8:a4: 9e:5c:b7:9b:1a:53:ea:77:27:61:f8:59:c7:2c:07: f4:26:d7:c4:36:d6:2a:9f:a2:7d:35:31:bb:05:2a: 53:0e:0f:8c:18:75:a0:99:6f:b5:de:35:ba:a4:cb: 7a:cc:57:33:2b:85:8c:49:27:2a:0b:4f:5d:43:52: ba:7d:ec:20:88:8b:41:0e:7b:3a:40:54:38:f7:53: 72:2b:a7:75:b9:2d:82:69:07:fe:93:1a:0b:36:a1: 41:1f:a3:50:7a:02:88:5c:f5:78:38:be:25:76:be: 95:df:53:16:35:e5:81:8f:ee:c5:e3:16:84:49:68: 40:6d:58:c0:47:d3:f4:02:c4:3f:c8:05:6b:e2:0e: ab:43:de:f3:15:f8:30:86:1b:fd:7f:7a:a9:9b:b9: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E7:B5:C4:CF:3F:9F:05:5E:BF:D8:CF:C7:7A:CA:8B:50:C3:6D:98 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9dcf5f8f-9941-4c57-93c6-6df3440d00a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da10:8000::/36 Signature Algorithm: sha256WithRSAEncryption 81:12:d2:ab:d0:50:75:53:47:0d:44:dc:6b:8b:19:ed:63:9e: 0d:ef:fa:34:7a:15:2a:ae:ec:0e:ac:c8:ca:82:10:d2:ce:ba: 28:8b:34:bd:63:0a:c6:5e:f2:8b:5c:30:d8:1f:a3:d7:81:fc: 09:f1:ca:c8:8a:a4:13:e9:41:d4:ca:24:7c:14:97:1c:59:38: 63:f3:0a:fb:03:56:45:7b:95:3f:01:a5:5f:77:22:d2:71:c3: d0:f8:d3:88:a7:31:28:38:f2:33:5f:1a:3a:fb:15:26:d2:0a: 97:7c:0b:9c:5a:ca:7b:02:d8:ac:94:0c:27:b8:04:74:57:c3: ea:d4:97:6b:9a:70:2f:71:6b:94:b5:9c:3b:3c:21:ef:fa:b2: b9:fd:d9:af:88:47:25:47:49:71:fb:03:5c:d4:08:bf:c9:08: fa:91:66:0a:7f:7c:a4:b0:a9:ae:a0:bc:5b:e6:6f:b5:4d:37: bc:f6:3f:d8:cd:f3:b9:90:2e:cd:d6:ef:5c:0d:c9:fa:19:9b: 3d:e9:61:f4:3d:7a:24:61:cb:4a:57:16:d5:ff:79:b7:37:96: f1:aa:cd:c4:41:02:3a:fa:bd:5c:79:61:5b:96:fb:85:1a:32: 06:c4:8f:ad:4a:fe:15:28:bf:17:75:12:0f:d1:b9:e4:d7:bd: 21:96:ec:5c -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUW5ssU1crsEkAD1h0kSA12ujszt8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2NTExM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAM2ExZWFiOWExYjZjMzgxNDc4NDE1 MWRjZmJmZWRjY2ExMmIzYTFmMzliN2U2ZGNmYTk1NzUwODAxYjQwM2NlMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTdCFXZF7Qw3W+Yr9sAESzdsVCJK HwB+kAaa/wUkRVr38yAnEpTRmIgEW/HIuUmW1X8nnKe9J5wvNFOMjaOUEeen15hO gZJDXTx0+/kGcgUpLNf4EOW7AQNKYKHDmbRJYJYjG3Jz6KSeXLebGlPqdydh+FnH LAf0JtfENtYqn6J9NTG7BSpTDg+MGHWgmW+13jW6pMt6zFczK4WMSScqC09dQ1K6 fewgiItBDns6QFQ491NyK6d1uS2CaQf+kxoLNqFBH6NQegKIXPV4OL4ldr6V31MW NeWBj+7F4xaESWhAbVjAR9P0AsQ/yAVr4g6rQ97zFfgwhhv9f3qpm7mH4wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLTntcTPP58FXr/Yz8d6yotQw22YMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkY2Y1ZjhmLTk5NDEtNGM1Ny05M2M2LTZkZjM0NDBkMDBhMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaEIAwDQYJKoZIhvcNAQELBQADggEBAIES0qvQUHVTRw1E3GuL Ge1jng3v+jR6FSqu7A6syMqCENLOuiiLNL1jCsZe8otcMNgfo9eB/AnxysiKpBPp QdTKJHwUlxxZOGPzCvsDVkV7lT8BpV93ItJxw9D404inMSg48jNfGjr7FSbSCpd8 C5xaynsC2KyUDCe4BHRXw+rUl2uacC9xa5S1nDs8Ie/6srn92a+IRyVHSXH7A1zU CL/JCPqRZgp/fKSwqa6gvFvmb7VNN7z2P9jN87mQLs3W71wNyfoZmz3pYfQ9eiRh y0pXFtX/ebc3lvGqzcRBAjr6vVx5YVuW+4UaMgbEj61K/hUovxd1Eg/RueTXvSGW 7Fw= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:48 2025 by rpki-client on console.sobornost.net