$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a21dee66-37c0-469d-8b01-08b0f731a865.roa File: a21dee66-37c0-469d-8b01-08b0f731a865.roa (raw, json) Hash identifier: k19AceiknAstVHQd/d7wyV49YrkVU6rsqbo1AGLRkRA= Subject key identifier: F8:19:72:0C:42:BD:A0:9C:D0:AA:30:5C:2F:15:47:75:F0:47:65:0A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5531C27DBF6C281B5529B3456ACE452643198682 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a21dee66-37c0-469d-8b01-08b0f731a865.roa Signing time: Mon 21 Apr 2025 16:00:13 +0000 ROA not before: Mon 21 Apr 2025 16:00:13 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:31:c2:7d:bf:6c:28:1b:55:29:b3:45:6a:ce:45:26:43:19:86:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:00:13 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=cdbfb62d6089f04de6420090261d99448b3cc1e5eb9608913bebef9e27f508d9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:83:a8:47:07:71:94:4a:23:cf:4b:44:c7: 0d:11:18:43:2a:e1:c1:d8:84:cd:fa:e7:2c:b3:56: bd:1b:9c:95:e1:17:bf:bc:7b:8a:b5:81:cc:da:74: 54:30:d4:ed:12:87:f1:ce:4e:5a:40:4a:04:32:6c: 4e:51:d4:62:dd:d9:11:d3:32:5b:fd:d0:01:26:95: 00:94:da:96:37:0a:63:8c:1c:fe:81:5c:cb:56:a1: ce:d9:75:05:90:0b:ea:57:6a:50:62:af:1b:5e:73: 13:99:a0:72:43:46:02:5a:09:ef:5d:8d:46:00:3f: 5d:d4:9f:93:56:c7:b8:d4:31:b3:13:01:f2:e7:8d: 26:e5:11:5a:78:49:a0:8b:09:dc:b5:d4:36:28:2a: 76:ce:9a:43:b5:6a:59:0a:63:8f:d2:3f:59:4b:1c: ab:a2:8d:c5:7e:79:a7:db:96:61:da:c0:db:32:f1: 96:53:17:57:b4:45:48:b6:e0:4b:a1:3a:01:5a:d1: 69:18:1a:4b:4e:fa:1c:2b:c3:4b:1d:c2:53:49:6d: e6:5e:04:2a:20:c9:d0:4c:7b:ce:ca:8c:ab:c4:e0: a3:49:6d:74:30:ae:77:d5:69:e6:f0:fc:8e:12:48: 6b:00:a3:04:ff:2a:45:b4:1d:75:44:4a:d1:e7:f0: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:19:72:0C:42:BD:A0:9C:D0:AA:30:5C:2F:15:47:75:F0:47:65:0A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a21dee66-37c0-469d-8b01-08b0f731a865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:b000::/40 Signature Algorithm: sha256WithRSAEncryption 78:7e:28:ad:da:30:be:1a:8b:f7:25:26:f7:3d:36:72:82:8f: 9d:85:07:36:f9:d7:34:c7:31:af:c5:ac:98:ad:f2:5e:a4:f1: d9:fe:56:41:9d:96:17:f7:52:74:7b:6b:7d:a5:31:65:9e:49: 34:88:9d:c4:2d:8f:35:5a:09:55:ef:de:d9:5b:d6:c1:77:6b: c7:c9:98:5d:ad:c9:18:72:db:dc:0a:4c:71:25:7d:66:7f:81: 13:3b:d3:18:81:43:d1:56:8a:83:c4:04:7b:e7:d7:c6:10:d9: 41:47:b9:3d:19:f0:e3:4d:33:76:e0:a2:5b:fe:20:cc:26:20: e9:59:48:f0:37:c6:78:9b:94:23:6b:a4:6c:5d:5b:e1:0d:d9: 55:2a:e5:dd:7c:5c:a5:dc:36:0c:2b:b8:56:92:f1:67:95:3c: d6:16:5f:6b:0b:9c:e2:05:4f:d9:49:f3:60:4f:81:05:cc:78: 75:26:6f:ce:30:42:30:e0:9e:63:66:9d:72:5e:0f:cd:be:95: 6e:bd:85:fd:bb:c0:5b:8a:3f:35:5d:c2:5b:42:7c:9d:3c:ec: ae:33:f6:80:d8:00:eb:31:be:7a:14:01:04:63:fe:cf:e6:32: 36:8e:ce:fb:ed:56:59:a5:95:ff:95:a7:37:1a:ef:47:00:9f: ec:b6:3f:14 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVTHCfb9sKBtVKbNFas5FJkMZhoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MDAxM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAY2RiZmI2MmQ2MDg5ZjA0ZGU2NDIw MDkwMjYxZDk5NDQ4YjNjYzFlNWViOTYwODkxM2JlYmVmOWUyN2Y1MDhkOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue+DqEcHcZRKI89LRMcNERhDKuHB 2ITN+ucss1a9G5yV4Re/vHuKtYHM2nRUMNTtEofxzk5aQEoEMmxOUdRi3dkR0zJb /dABJpUAlNqWNwpjjBz+gVzLVqHO2XUFkAvqV2pQYq8bXnMTmaByQ0YCWgnvXY1G AD9d1J+TVse41DGzEwHy540m5RFaeEmgiwnctdQ2KCp2zppDtWpZCmOP0j9ZSxyr oo3Ffnmn25Zh2sDbMvGWUxdXtEVItuBLoToBWtFpGBpLTvocK8NLHcJTSW3mXgQq IMnQTHvOyoyrxOCjSW10MK531Wnm8PyOEkhrAKME/ypFtB11RErR5/CCqQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPgZcgxCvaCc0KowXC8VR3XwR2UKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EyMWRlZTY2LTM3YzAtNDY5ZC04YjAxLTA4YjBmNzMxYTg2NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNrAwDQYJKoZIhvcNAQELBQADggEBAHh+KK3aML4ai/clJvc9 NnKCj52FBzb51zTHMa/FrJit8l6k8dn+VkGdlhf3UnR7a32lMWWeSTSIncQtjzVa CVXv3tlb1sF3a8fJmF2tyRhy29wKTHElfWZ/gRM70xiBQ9FWioPEBHvn18YQ2UFH uT0Z8ONNM3bgolv+IMwmIOlZSPA3xniblCNrpGxdW+EN2VUq5d18XKXcNgwruFaS 8WeVPNYWX2sLnOIFT9lJ82BPgQXMeHUmb84wQjDgnmNmnXJeD82+lW69hf27wFuK PzVdwltCfJ087K4z9oDYAOsxvnoUAQRj/s/mMjaOzvvtVlmllf+Vpzca70cAn+y2 PxQ= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:48 2025 by rpki-client on console.sobornost.net