$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a676288b-4148-4f4e-bfbe-57a18eb9b25c.roa File: a676288b-4148-4f4e-bfbe-57a18eb9b25c.roa (raw, json) Hash identifier: EN5Uc5FsjRdVxFFo/hIlMkdI01JCGAiE3OqN6FVK8uE= Subject key identifier: 13:37:6B:5C:60:6F:34:D6:BF:75:84:18:37:29:4A:DB:7C:B6:A8:6A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 265C9F049463FBBBB016E79B5C4B4A1CED52ECED Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a676288b-4148-4f4e-bfbe-57a18eb9b25c.roa Signing time: Sat 19 Apr 2025 00:51:41 +0000 ROA not before: Sat 19 Apr 2025 00:51:41 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5c:9f:04:94:63:fb:bb:b0:16:e7:9b:5c:4b:4a:1c:ed:52:ec:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:51:41 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=92b4fa11de39c6bab180564c78c3c41eb910f2f5668004c50e9f0d6b6791b52f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b4:54:66:dd:64:2e:eb:cf:a0:e9:62:dc:f8: ff:4c:ef:50:5b:a0:13:41:bf:3c:7a:9b:99:84:35: b5:34:55:e2:d7:be:7c:23:9b:82:e0:78:f3:8d:78: a0:68:dc:e6:63:84:7a:07:ff:c6:5b:ff:ce:f4:55: ac:73:0c:e7:73:f9:33:84:04:14:88:96:f2:f8:1a: b9:30:b2:11:dc:b9:60:35:c6:65:37:31:25:dc:11: 5c:b3:24:98:58:ce:7f:5f:f5:de:61:88:24:ae:09: 8c:66:a0:a5:44:5a:48:f4:38:91:6e:1b:34:00:24: 09:63:9f:3e:c6:1b:2c:46:4a:ab:27:dd:01:f0:9f: 15:d2:b4:a0:5c:a1:09:dd:b2:39:4e:a9:46:ab:de: f1:2a:73:85:6e:75:93:06:84:a2:9f:5a:7c:77:5f: 26:77:31:40:5c:52:24:9e:62:0d:e4:56:85:e0:63: e9:bb:70:2a:7b:7b:21:6e:bf:d5:8a:a2:89:17:40: cf:9a:e2:3d:8b:44:53:78:f5:5e:20:a3:ef:10:2b: 3a:6b:9f:e9:04:07:5f:22:4c:c5:ee:72:82:7c:39: c2:1e:cb:51:ed:e7:e9:09:a7:8c:97:b4:39:cb:7a: b3:2e:10:87:ad:d2:3c:38:f7:db:3a:6d:d7:f8:84: 18:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:37:6B:5C:60:6F:34:D6:BF:75:84:18:37:29:4A:DB:7C:B6:A8:6A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a676288b-4148-4f4e-bfbe-57a18eb9b25c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:880::/48 Signature Algorithm: sha256WithRSAEncryption 68:93:92:cf:bc:00:e4:4c:e6:2c:92:a5:1e:62:b1:d2:42:a2: c2:3f:29:77:02:d1:37:ab:b7:af:bc:51:63:f2:19:21:db:77: 55:65:2a:62:8e:4c:86:d5:7e:d0:8d:05:30:64:55:57:f1:53: fe:d3:1e:bc:30:63:1b:6d:65:9e:08:54:d9:92:bd:3b:26:bf: 10:eb:36:d8:b1:c8:b2:c2:94:8b:3d:80:b0:40:4e:41:e9:4c: 7e:c5:98:ea:5a:f4:f3:9d:5c:c5:04:eb:4e:1d:4a:26:8c:9e: d3:47:08:6e:aa:43:73:5c:6c:81:af:97:ec:83:f6:56:7d:e0: ba:17:c1:29:97:f4:9a:20:da:7e:0e:01:78:b2:2d:ce:08:2f: a1:35:43:69:0b:f7:9b:76:d1:5f:90:d5:15:a9:da:76:8b:93: 0d:97:5f:2a:15:3c:8d:81:ea:dd:34:3a:23:31:e7:7f:a3:2e: f6:6d:a6:81:60:1a:b1:fc:93:7b:42:6b:fd:e9:0a:68:b8:67: bc:b1:cf:43:60:2b:cc:27:17:40:ab:3d:bd:48:23:bc:42:9d: 13:24:42:78:c2:e3:47:63:e5:99:16:de:24:12:70:d0:93:33: 72:a2:e5:d4:16:f2:2c:8f:04:aa:48:18:45:02:b6:cc:b6:73: cf:86:e4:01 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJlyfBJRj+7uwFuebXEtKHO1S7O0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwNTE0MVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAOTJiNGZhMTFkZTM5YzZiYWIxODA1 NjRjNzhjM2M0MWViOTEwZjJmNTY2ODAwNGM1MGU5ZjBkNmI2NzkxYjUyZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7RUZt1kLuvPoOli3Pj/TO9QW6AT Qb88epuZhDW1NFXi1758I5uC4HjzjXigaNzmY4R6B//GW//O9FWscwznc/kzhAQU iJby+Bq5MLIR3LlgNcZlNzEl3BFcsySYWM5/X/XeYYgkrgmMZqClRFpI9DiRbhs0 ACQJY58+xhssRkqrJ90B8J8V0rSgXKEJ3bI5TqlGq97xKnOFbnWTBoSin1p8d18m dzFAXFIknmIN5FaF4GPpu3Aqe3shbr/ViqKJF0DPmuI9i0RTePVeIKPvECs6a5/p BAdfIkzF7nKCfDnCHstR7efpCaeMl7Q5y3qzLhCHrdI8OPfbOm3X+IQYwwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBM3a1xgbzTWv3WEGDcpStt8tqhqMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E2NzYyODhiLTQxNDgtNGY0ZS1iZmJlLTU3YTE4ZWI5YjI1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8giAMA0GCSqGSIb3DQEBCwUAA4IBAQBok5LPvADkTOYskqUe YrHSQqLCPyl3AtE3q7evvFFj8hkh23dVZSpijkyG1X7QjQUwZFVX8VP+0x68MGMb bWWeCFTZkr07Jr8Q6zbYsciywpSLPYCwQE5B6Ux+xZjqWvTznVzFBOtOHUomjJ7T RwhuqkNzXGyBr5fsg/ZWfeC6F8Epl/SaINp+DgF4si3OCC+hNUNpC/ebdtFfkNUV qdp2i5MNl18qFTyNgerdNDojMed/oy72baaBYBqx/JN7Qmv96QpouGe8sc9DYCvM JxdAqz29SCO8Qp0TJEJ4wuNHY+WZFt4kEnDQkzNyouXUFvIsjwSqSBhFArbMtnPP huQB -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:49 2025 by rpki-client on console.sobornost.net