$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6726238-8e0b-4518-8844-5c38ea3f41a4.roa File: a6726238-8e0b-4518-8844-5c38ea3f41a4.roa (raw, json) Hash identifier: vM8OvWf6kgIDgZQ+cdjNrgVI1VYSDFXZZzymZWNLdVk= Subject key identifier: EE:7C:43:BF:D0:9D:19:F4:94:DC:C4:A2:DC:F1:25:ED:8D:74:27:CB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7669AB55B0215FA1848A046AF177069D726CDFE8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6726238-8e0b-4518-8844-5c38ea3f41a4.roa Signing time: Wed 16 Apr 2025 18:52:22 +0000 ROA not before: Wed 16 Apr 2025 18:52:22 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:69:ab:55:b0:21:5f:a1:84:8a:04:6a:f1:77:06:9d:72:6c:df:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 16 18:52:22 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=269b05245f63b777d1f8e0ffd6f6999020652f6bbfbe078fe58c2cf60e33b8b9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:43:f0:25:23:4d:be:7e:08:9d:1a:22:34: ce:b9:9f:d4:aa:2e:80:f3:d2:ff:37:14:b0:de:a9: b9:d0:ae:73:90:6a:7d:fa:b9:7f:b5:eb:d0:81:ed: 00:81:ba:b5:41:64:7f:ca:71:5c:41:d2:6c:b9:e5: 02:55:38:18:d0:ef:7a:1a:5a:4c:c3:a3:d3:46:e6: 40:60:05:fd:32:ce:30:4d:52:dc:57:7a:d3:2f:ee: 7b:66:fb:d0:50:cf:1d:f2:af:96:26:54:87:6c:f6: 73:fd:7d:bd:b2:7e:65:c0:67:1b:1c:56:b0:8a:9d: f6:b7:bd:fe:2b:77:66:53:18:a5:79:f0:cc:f5:25: 20:0c:08:d9:19:59:0c:ec:5e:12:c9:2a:ee:18:0d: 3d:e5:5c:a7:87:b1:89:42:97:42:34:92:69:6a:6f: 11:51:3d:24:88:52:ee:a2:68:9f:32:86:be:8c:d8: 2f:8a:a8:8b:4b:6d:2a:9d:2d:2f:ef:45:a6:50:c6: eb:84:29:65:56:71:d3:0e:b2:51:32:7c:3f:2e:ba: 32:7c:65:89:35:ed:7a:08:cb:3d:46:70:ab:c9:5c: 33:cb:be:3f:06:56:1f:cf:a6:a5:45:90:2c:21:7c: 49:61:3b:70:e2:df:63:23:b9:16:9e:2c:af:ef:69: 84:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7C:43:BF:D0:9D:19:F4:94:DC:C4:A2:DC:F1:25:ED:8D:74:27:CB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6726238-8e0b-4518-8844-5c38ea3f41a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:a000::/40 Signature Algorithm: sha256WithRSAEncryption 24:ff:9f:a9:13:17:c9:aa:57:69:cb:ed:95:df:d3:55:fe:af: 74:3b:64:24:c3:39:ff:e7:2f:76:1c:52:f2:d4:cd:0d:49:76: 22:af:2e:97:f8:bf:5d:94:d4:ad:2f:b8:5f:5d:2e:38:f9:49: e7:09:97:95:3d:d6:74:28:49:40:1c:15:82:7f:a5:59:22:cf: ed:68:42:6d:7d:5a:31:1a:89:ee:81:8b:96:b1:a6:3f:91:c6: e4:34:51:71:b4:39:a5:cf:ef:4d:c7:17:6e:68:f3:36:e7:c8: 18:f7:81:70:dc:e8:38:6a:3b:67:e1:97:70:ff:e0:cb:88:a1: 97:cf:2a:0b:13:8c:57:77:3d:c6:e4:ac:56:31:44:e7:4d:3e: 66:3d:57:da:77:3d:c5:bf:13:d6:2b:ed:66:8f:a0:eb:48:2a: 1c:1b:44:dc:a0:b9:f5:6f:c5:07:da:43:3a:d6:1a:f6:e0:8f: 71:03:4d:a8:8e:c9:89:84:29:59:3b:ba:ad:a0:55:93:6b:d5: cb:d6:85:f4:a4:ac:64:35:6d:1b:ef:79:c4:34:7f:ef:a9:2a: 80:ec:5f:5a:56:34:e5:3a:7d:14:12:1c:e2:86:73:1b:fe:d4: 0f:93:89:f0:a1:be:ce:9b:63:44:58:68:cd:91:61:27:7d:36: 81:f9:14:de -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdmmrVbAhX6GEigRq8XcGnXJs3+gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNjE4NTIyMloX DTI1MDUyMTIzNTk1OVowejFJMEcGA1UEBRNAMjY5YjA1MjQ1ZjYzYjc3N2QxZjhl MGZmZDZmNjk5OTAyMDY1MmY2YmJmYmUwNzhmZTU4YzJjZjYwZTMzYjhiOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFRD8CUjTb5+CJ0aIjTOuZ/Uqi6A 89L/NxSw3qm50K5zkGp9+rl/tevQge0Agbq1QWR/ynFcQdJsueUCVTgY0O96GlpM w6PTRuZAYAX9Ms4wTVLcV3rTL+57ZvvQUM8d8q+WJlSHbPZz/X29sn5lwGcbHFaw ip32t73+K3dmUxilefDM9SUgDAjZGVkM7F4SySruGA095Vynh7GJQpdCNJJpam8R UT0kiFLuomifMoa+jNgviqiLS20qnS0v70WmUMbrhCllVnHTDrJRMnw/LroyfGWJ Ne16CMs9RnCryVwzy74/BlYfz6alRZAsIXxJYTtw4t9jI7kWniyv72mErQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFO58Q7/QnRn0lNzEotzxJe2NdCfLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E2NzI2MjM4LThlMGItNDUxOC04ODQ0LTVjMzhlYTNmNDFhNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9KAwDQYJKoZIhvcNAQELBQADggEBACT/n6kTF8mqV2nL7ZXf 01X+r3Q7ZCTDOf/nL3YcUvLUzQ1JdiKvLpf4v12U1K0vuF9dLjj5SecJl5U91nQo SUAcFYJ/pVkiz+1oQm19WjEaie6Bi5axpj+RxuQ0UXG0OaXP703HF25o8zbnyBj3 gXDc6DhqO2fhl3D/4MuIoZfPKgsTjFd3PcbkrFYxROdNPmY9V9p3PcW/E9Yr7WaP oOtIKhwbRNygufVvxQfaQzrWGvbgj3EDTaiOyYmEKVk7uq2gVZNr1cvWhfSkrGQ1 bRvvecQ0f++pKoDsX1pWNOU6fRQSHOKGcxv+1A+TifChvs6bY0RYaM2RYSd9NoH5 FN4= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:49 2025 by rpki-client on console.sobornost.net