$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a22c3d64-afd9-44fd-96c2-3def5d30f274.roa File: a22c3d64-afd9-44fd-96c2-3def5d30f274.roa (raw, json) Hash identifier: F62V9ybjgruIOP8Gd+b/iRkV9WGNMk1grqkh+H3tHxs= Subject key identifier: 55:B2:72:A2:1D:34:9B:FD:DE:E4:C5:EB:7B:97:C6:26:91:D8:0B:26 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 102A32F6C5EAE52D9105310D8F3F94E74F595B7F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a22c3d64-afd9-44fd-96c2-3def5d30f274.roa Signing time: Sat 19 Apr 2025 00:40:19 +0000 ROA not before: Sat 19 Apr 2025 00:40:19 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:2a:32:f6:c5:ea:e5:2d:91:05:31:0d:8f:3f:94:e7:4f:59:5b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:40:19 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=4ec843f3d05620ed6093c16c80fccb19fe0f7f71df4a643c30a909de82b1ae3f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:44:03:52:66:ae:ad:22:e8:7f:3c:19:e0: 93:c1:9c:29:5e:76:26:f1:2e:d9:e3:b5:fc:4e:40: f0:ac:af:f6:1f:48:88:61:d6:21:e8:00:84:02:85: a1:a1:e3:94:fd:b8:4e:c6:5f:ec:24:02:b0:79:55: e4:e4:58:47:e2:48:92:02:45:68:47:cb:7a:17:98: 3e:cc:74:44:d4:8b:16:7a:da:3e:4b:1b:b7:57:5b: e8:00:79:c8:b2:1b:e6:9f:ba:bb:f0:1a:b4:3c:0d: 06:ca:b8:07:8d:49:3a:73:ed:4b:f0:1f:94:ac:9a: 84:69:37:2c:ab:cc:1a:a6:88:8a:66:8c:c2:06:9f: 2f:66:7c:47:b8:3e:b3:ea:8b:a2:4f:d7:e7:75:0f: d4:1a:0a:e1:f7:ac:40:30:2f:3b:7b:44:90:f9:95: c1:83:ae:39:00:9d:4d:aa:11:0d:f6:cb:08:46:65: 3b:1c:5c:f2:fe:9e:26:05:f1:0f:67:d6:d7:13:27: bf:bc:49:0b:37:ae:79:76:9b:d4:86:ef:c7:04:88: f2:ff:0c:c9:c2:d0:31:8a:5d:45:30:15:1b:39:86: 4c:72:c0:36:2b:fa:c1:54:83:07:94:82:c0:e3:5a: 4b:dc:8a:53:d6:8d:45:dc:57:51:7d:9f:7f:e0:78: 3c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B2:72:A2:1D:34:9B:FD:DE:E4:C5:EB:7B:97:C6:26:91:D8:0B:26 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a22c3d64-afd9-44fd-96c2-3def5d30f274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8c0::/48 Signature Algorithm: sha256WithRSAEncryption a8:bd:a8:8c:0f:7e:29:a6:97:4d:a4:c9:28:b7:44:56:01:6e: e1:45:b0:7c:50:57:ee:be:5e:6f:a6:0f:95:b5:0d:41:ab:5a: ab:fa:15:87:3d:c6:a4:4c:12:45:85:22:bf:1f:1e:22:8a:6e: 98:69:c9:56:51:7e:1a:dc:ff:18:0e:d7:ae:19:c0:51:37:36: 79:96:32:7a:62:43:f5:c8:b1:d4:9f:5e:2b:eb:7b:54:a9:b0: cb:14:ee:4a:96:0e:22:fc:9e:8f:47:9a:2f:00:c2:12:31:1e: 7e:8b:3a:e0:87:1c:3c:58:0f:ba:d2:00:a1:15:08:f8:39:3f: 10:97:3c:0c:d3:b7:b2:6e:6d:2c:77:c8:fe:e9:0f:1a:d9:a3: 15:10:86:16:f1:42:99:02:82:25:24:7c:da:e0:bc:64:2f:9f: 5b:4a:ad:c8:be:c6:51:0b:72:e5:f7:05:e7:30:e4:2e:fa:14: 49:78:d1:1d:51:b3:57:81:38:67:64:6d:66:0c:69:03:03:f4: bf:dc:37:ff:e1:1b:46:25:53:7a:43:5c:40:c6:e3:d6:a9:36: 59:d1:4b:13:44:03:7f:7d:7f:68:dc:2e:8c:7f:67:0c:6d:18: 44:fb:02:36:47:88:90:24:44:76:bd:26:42:b5:a5:e4:93:b2: c4:fd:c1:f7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUECoy9sXq5S2RBTENjz+U509ZW38wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwNDAxOVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNANGVjODQzZjNkMDU2MjBlZDYwOTNj MTZjODBmY2NiMTlmZTBmN2Y3MWRmNGE2NDNjMzBhOTA5ZGU4MmIxYWUzZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHdEA1Jmrq0i6H88GeCTwZwpXnYm 8S7Z47X8TkDwrK/2H0iIYdYh6ACEAoWhoeOU/bhOxl/sJAKweVXk5FhH4kiSAkVo R8t6F5g+zHRE1IsWeto+Sxu3V1voAHnIshvmn7q78Bq0PA0GyrgHjUk6c+1L8B+U rJqEaTcsq8wapoiKZozCBp8vZnxHuD6z6ouiT9fndQ/UGgrh96xAMC87e0SQ+ZXB g645AJ1NqhEN9ssIRmU7HFzy/p4mBfEPZ9bXEye/vEkLN655dpvUhu/HBIjy/wzJ wtAxil1FMBUbOYZMcsA2K/rBVIMHlILA41pL3IpT1o1F3FdRfZ9/4Hg8zQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFWycqIdNJv93uTF63uXxiaR2AsmMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2EyMmMzZDY0LWFmZDktNDRmZC05NmMyLTNkZWY1ZDMwZjI3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYQjAMA0GCSqGSIb3DQEBCwUAA4IBAQCovaiMD34pppdNpMko t0RWAW7hRbB8UFfuvl5vpg+VtQ1Bq1qr+hWHPcakTBJFhSK/Hx4iim6YaclWUX4a 3P8YDteuGcBRNzZ5ljJ6YkP1yLHUn14r63tUqbDLFO5Klg4i/J6PR5ovAMISMR5+ izrghxw8WA+60gChFQj4OT8QlzwM07eybm0sd8j+6Q8a2aMVEIYW8UKZAoIlJHza 4LxkL59bSq3IvsZRC3Ll9wXnMOQu+hRJeNEdUbNXgThnZG1mDGkDA/S/3Df/4RtG JVN6Q1xAxuPWqTZZ0UsTRAN/fX9o3C6Mf2cMbRhE+wI2R4iQJER2vSZCtaXkk7LE /cH3 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:48 2025 by rpki-client on console.sobornost.net