$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ad80375d-e709-447c-8867-372df16e6e62.roa File: ad80375d-e709-447c-8867-372df16e6e62.roa (raw, json) Hash identifier: yvw0ot6JcDOz9qjGJDDNEXesQgZdGswWNzIB5TJcfJg= Subject key identifier: 29:E5:B5:1B:95:A1:1D:83:BD:D6:21:09:8A:97:60:5A:B9:47:FD:50 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 657252A86CCA7B42B014BDCE5F299BD7ECE67544 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ad80375d-e709-447c-8867-372df16e6e62.roa Signing time: Mon 21 Apr 2025 15:12:13 +0000 ROA not before: Mon 21 Apr 2025 15:12:13 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:72:52:a8:6c:ca:7b:42:b0:14:bd:ce:5f:29:9b:d7:ec:e6:75:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:12:13 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=0447bc2fb8b7a67885d1676978a380ec1f904bf796802465a04f13e88a62480e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:f9:52:68:43:b3:42:22:02:65:2c:20:c5: 1c:63:5b:7a:0a:28:1e:e2:52:ce:b0:08:69:7a:80: 11:45:47:d0:e1:96:35:13:54:75:f8:bd:53:ab:5f: 86:4b:91:2f:da:f7:26:d8:58:0d:30:b0:1a:7b:2e: 35:94:04:f2:ae:1c:11:61:70:2f:e5:7b:42:11:8a: 83:d3:9d:6f:d3:3d:dd:09:25:95:7f:b4:59:46:a4: cc:1f:04:38:ea:9f:5e:de:f0:83:1a:a5:8c:da:81: 94:d4:6b:c9:de:f9:74:54:b5:e3:5d:a5:9f:d4:bc: 8c:d7:67:b8:cf:3b:3d:ec:d7:94:c4:05:f0:ff:99: 8c:f7:ac:99:3f:38:03:f7:70:bb:97:be:40:61:d5: c1:b4:4c:d7:d2:d1:33:6b:93:fc:f7:fd:da:4c:fa: 34:28:0f:37:f8:05:d6:fc:32:aa:37:be:97:bd:20: 3b:67:d5:00:a2:41:91:ac:7d:9f:b3:79:b8:32:07: c5:dd:e6:91:80:b7:52:99:44:37:03:6f:d9:99:6c: f4:39:eb:4a:b9:2f:4a:99:8a:92:2a:32:d7:e8:d3: 38:8f:b0:f9:9c:ff:b8:d7:28:36:eb:c5:c9:bb:41: 16:2a:91:f9:87:da:73:90:70:97:b4:75:07:cb:c3: 3c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E5:B5:1B:95:A1:1D:83:BD:D6:21:09:8A:97:60:5A:B9:47:FD:50 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ad80375d-e709-447c-8867-372df16e6e62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:8000::/40 Signature Algorithm: sha256WithRSAEncryption 81:bc:53:8d:ca:fb:67:a4:13:14:59:c6:60:fc:c2:ed:9f:2c: 29:1a:05:dc:d6:16:75:bd:d6:30:14:64:e8:17:0f:9a:e3:b8: 91:1e:1b:66:17:cc:48:bd:e6:98:6d:b1:33:a7:1b:58:2d:6e: a4:48:82:52:a9:25:b9:3a:d6:a4:79:1b:35:06:ec:d2:ef:b4: 48:d2:8d:56:bd:75:66:41:74:8a:7d:12:b3:b6:cc:50:fe:15: df:3d:2b:c7:c0:56:0b:c3:5c:1d:8c:9d:66:45:db:d0:33:c2: 51:7c:27:be:af:59:d2:2e:32:04:01:8a:39:61:88:ec:04:13: bd:6d:55:8d:14:0a:8b:1b:bf:d4:d9:84:4f:4a:75:0c:c5:c9: 14:c1:d7:b9:8b:4d:bc:63:81:a5:4b:86:35:b8:a1:0d:b5:12: 4d:45:cc:0f:26:a1:f5:18:47:17:3f:19:1f:69:6d:c2:1e:c8: 85:d0:6f:0c:f4:0e:70:4a:28:3e:25:b9:48:23:b3:35:d1:0a: 25:5b:ca:3d:b9:94:58:2a:8d:30:90:9d:82:03:25:89:86:aa: e5:1f:9d:e2:d2:6f:e5:21:8f:f0:4a:e3:a4:ad:95:38:bc:19: d1:78:5e:df:b8:55:c2:97:4c:0d:04:7f:00:5c:b1:15:d2:38: b3:c1:18:f9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZXJSqGzKe0KwFL3OXymb1+zmdUQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MTIxM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMDQ0N2JjMmZiOGI3YTY3ODg1ZDE2 NzY5NzhhMzgwZWMxZjkwNGJmNzk2ODAyNDY1YTA0ZjEzZTg4YTYyNDgwZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFT5UmhDs0IiAmUsIMUcY1t6Cige 4lLOsAhpeoARRUfQ4ZY1E1R1+L1Tq1+GS5Ev2vcm2FgNMLAaey41lATyrhwRYXAv 5XtCEYqD051v0z3dCSWVf7RZRqTMHwQ46p9e3vCDGqWM2oGU1GvJ3vl0VLXjXaWf 1LyM12e4zzs97NeUxAXw/5mM96yZPzgD93C7l75AYdXBtEzX0tEza5P89/3aTPo0 KA83+AXW/DKqN76XvSA7Z9UAokGRrH2fs3m4MgfF3eaRgLdSmUQ3A2/ZmWz0OetK uS9KmYqSKjLX6NM4j7D5nP+41yg268XJu0EWKpH5h9pzkHCXtHUHy8M8CwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCnltRuVoR2DvdYhCYqXYFq5R/1QMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FkODAzNzVkLWU3MDktNDQ3Yy04ODY3LTM3MmRmMTZlNmU2Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAIAwDQYJKoZIhvcNAQELBQADggEBAIG8U43K+2ekExRZxmD8 wu2fLCkaBdzWFnW91jAUZOgXD5rjuJEeG2YXzEi95phtsTOnG1gtbqRIglKpJbk6 1qR5GzUG7NLvtEjSjVa9dWZBdIp9ErO2zFD+Fd89K8fAVgvDXB2MnWZF29AzwlF8 J76vWdIuMgQBijlhiOwEE71tVY0UCosbv9TZhE9KdQzFyRTB17mLTbxjgaVLhjW4 oQ21Ek1FzA8mofUYRxc/GR9pbcIeyIXQbwz0DnBKKD4luUgjszXRCiVbyj25lFgq jTCQnYIDJYmGquUfneLSb+Uhj/BK46StlTi8GdF4Xt+4VcKXTA0EfwBcsRXSOLPB GPk= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:49 2025 by rpki-client on console.sobornost.net