$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a78bbd2b-4153-482f-a036-7e819539104c.roa File: a78bbd2b-4153-482f-a036-7e819539104c.roa (raw, json) Hash identifier: sFK3B6vu+rq4pNMYFb2bY0qaEOcjVR5zHnYuUfIFPX4= Subject key identifier: 18:26:54:CC:98:31:45:F8:46:FA:19:16:F5:25:F1:05:4A:A2:41:DF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6AE34B4DE63B37C678CA58BC0351E35B3106CE28 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a78bbd2b-4153-482f-a036-7e819539104c.roa Signing time: Fri 18 Apr 2025 00:20:21 +0000 ROA not before: Fri 18 Apr 2025 00:20:21 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e3:4b:4d:e6:3b:37:c6:78:ca:58:bc:03:51:e3:5b:31:06:ce:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 18 00:20:21 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=70b1e7e2642195b3c7c0a4b2bdee546355e2d29a23a7846d870a201737a05b83, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:02:d6:79:27:f7:85:15:89:85:2a:ee:74:66: 0d:53:3d:05:e8:a6:15:34:a7:96:97:bf:45:c4:45: 54:dd:57:c0:14:3f:fb:a0:75:20:1f:07:11:42:5a: 59:df:49:a8:b3:97:03:bd:a7:f6:29:41:65:3e:31: 9d:a4:60:35:76:66:65:83:20:a3:9a:85:d1:7e:9a: c6:fc:be:b8:47:8e:eb:95:40:3b:7a:38:b7:d5:32: 84:ec:b1:eb:79:34:d7:3b:19:bf:4b:3d:29:ec:97: 67:d8:74:75:b8:de:51:82:76:55:41:70:3f:ba:6b: b2:27:ef:f2:e1:79:e8:37:b4:fa:e9:87:b4:0b:ef: 51:a2:c0:55:b4:1b:10:89:a7:fe:87:ec:13:5c:01: 85:24:88:19:06:0f:16:9e:87:9b:11:cd:b8:b9:ca: 5c:04:b4:79:a2:e6:f6:64:32:83:a7:6f:da:9c:9c: 52:02:0a:29:e2:ac:91:a2:26:16:91:a0:a2:e6:54: a0:0c:c3:02:48:5b:17:9e:5f:47:f4:ab:23:84:99: 00:26:e6:ee:17:05:a6:75:2a:80:72:21:cf:f3:ff: b0:83:3e:e7:8d:41:52:15:75:31:fb:9c:83:b1:37: 84:55:81:08:e2:f5:0c:14:c1:ea:af:0f:92:00:c2: d4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:26:54:CC:98:31:45:F8:46:FA:19:16:F5:25:F1:05:4A:A2:41:DF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a78bbd2b-4153-482f-a036-7e819539104c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4800::/40 Signature Algorithm: sha256WithRSAEncryption 30:2d:96:c0:e5:75:29:11:9b:5c:26:50:22:b5:8e:25:fa:10: d0:29:20:ee:9d:7d:83:b2:0a:31:6c:e9:f0:d1:45:3a:be:41: d2:ce:93:56:7c:d0:25:6e:22:b4:6e:8a:3c:33:82:cd:d9:e9: b0:31:83:15:2b:18:86:c4:51:68:a5:fa:f0:97:d0:8a:21:d6: f0:0c:2f:b6:f7:ac:d2:3c:ec:52:b5:3e:01:41:48:a5:e8:44: db:01:6d:73:28:2e:11:94:d1:26:e7:c1:02:4f:0c:29:78:46: b8:0d:b2:7f:96:f4:49:73:1c:0b:38:7c:35:94:57:28:7d:70: 2b:52:11:a4:52:ac:b7:bc:23:ad:4e:53:5e:1f:51:8a:07:07: 39:5d:06:1f:40:dd:f7:96:bf:90:d8:9e:a7:38:0e:47:24:59: c6:9f:65:36:5d:9d:35:b6:03:92:9d:4a:4f:80:be:f9:49:0f: 71:9b:0c:45:77:8b:c5:8d:bb:5e:4e:b8:d0:b1:5b:fd:4e:8a: 2f:c3:f1:06:c4:27:11:50:6e:d1:2a:3e:97:1a:52:13:1a:b6: 41:d6:9d:9d:83:83:31:88:aa:de:95:a5:05:0b:23:c7:3f:fc: df:9b:a1:30:3d:c9:3d:6e:f0:c3:43:79:51:84:ec:fb:f2:db: 7d:87:ac:d3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUauNLTeY7N8Z4yli8A1HjWzEGzigwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxODAwMjAyMVoX DTI1MDUyMzIzNTk1OVowejFJMEcGA1UEBRNANzBiMWU3ZTI2NDIxOTViM2M3YzBh NGIyYmRlZTU0NjM1NWUyZDI5YTIzYTc4NDZkODcwYTIwMTczN2EwNWI4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngLWeSf3hRWJhSrudGYNUz0F6KYV NKeWl79FxEVU3VfAFD/7oHUgHwcRQlpZ30mos5cDvaf2KUFlPjGdpGA1dmZlgyCj moXRfprG/L64R47rlUA7eji31TKE7LHreTTXOxm/Sz0p7Jdn2HR1uN5RgnZVQXA/ umuyJ+/y4XnoN7T66Ye0C+9RosBVtBsQiaf+h+wTXAGFJIgZBg8WnoebEc24ucpc BLR5oub2ZDKDp2/anJxSAgop4qyRoiYWkaCi5lSgDMMCSFsXnl9H9KsjhJkAJubu FwWmdSqAciHP8/+wgz7njUFSFXUx+5yDsTeEVYEI4vUMFMHqrw+SAMLUKQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBgmVMyYMUX4RvoZFvUl8QVKokHfMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3OGJiZDJiLTQxNTMtNDgyZi1hMDM2LTdlODE5NTM5MTA0Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8kgwDQYJKoZIhvcNAQELBQADggEBADAtlsDldSkRm1wmUCK1 jiX6ENApIO6dfYOyCjFs6fDRRTq+QdLOk1Z80CVuIrRuijwzgs3Z6bAxgxUrGIbE UWil+vCX0Ioh1vAML7b3rNI87FK1PgFBSKXoRNsBbXMoLhGU0SbnwQJPDCl4RrgN sn+W9ElzHAs4fDWUVyh9cCtSEaRSrLe8I61OU14fUYoHBzldBh9A3feWv5DYnqc4 DkckWcafZTZdnTW2A5KdSk+AvvlJD3GbDEV3i8WNu15OuNCxW/1Oii/D8QbEJxFQ btEqPpcaUhMatkHWnZ2DgzGIqt6VpQULI8c//N+boTA9yT1u8MNDeVGE7Pvy232H rNM= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:49 2025 by rpki-client on console.sobornost.net