$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af6b0407-66be-4076-87b3-370d845449ef.roa File: af6b0407-66be-4076-87b3-370d845449ef.roa (raw, json) Hash identifier: CvZ97LQaHxWK7c1PJR0JG2N/Huk5Ht2fk/bwKgEqbP8= Subject key identifier: BD:3C:19:85:B8:A3:91:DD:94:56:0E:9E:B7:34:1D:65:16:38:07:D3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 649BC271539EAAB0AC78806FFB9E09FB0FCB757D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af6b0407-66be-4076-87b3-370d845449ef.roa Signing time: Fri 18 Apr 2025 00:20:53 +0000 ROA not before: Fri 18 Apr 2025 00:20:53 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9b:c2:71:53:9e:aa:b0:ac:78:80:6f:fb:9e:09:fb:0f:cb:75:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 18 00:20:53 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=a732aae77bd6b49b71c6cc2d61db514edd151de9bb2394df8be834005384e712, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:6f:33:15:b2:f6:d3:ce:24:2f:ae:e9:14: af:6e:f7:e7:d6:93:ca:66:09:98:79:5b:ec:1c:72: e6:08:cb:2c:34:de:b3:81:83:42:f4:18:89:71:07: 60:59:72:bb:9a:fd:bb:67:3c:25:be:de:4f:d2:e5: 95:ef:3c:25:d4:b4:dc:50:b1:7d:00:ea:f5:57:d4: cb:93:16:94:26:a9:38:75:0e:6b:f2:c8:55:0a:ed: 6a:84:6b:0c:04:bb:56:df:0d:b9:a6:57:00:68:37: 46:11:72:e4:e1:ee:2c:2b:0c:46:86:3b:ea:8a:bd: 8d:54:9a:56:a0:62:69:1c:1b:92:4a:76:ea:e7:58: 9c:62:07:ac:79:59:98:f4:cc:29:00:26:88:e1:e9: 3f:45:b9:8e:a8:76:1d:fa:2e:56:15:0d:37:73:fe: d3:40:ab:51:61:06:a3:cc:8b:0f:ec:fb:92:b2:48: 9b:bf:93:5b:18:69:05:6f:a6:08:c9:e0:85:f8:fa: 6b:97:84:21:c8:30:af:01:eb:9a:47:42:b5:ef:8a: 24:9d:23:c5:e2:4d:0d:88:d1:2a:b0:58:98:d4:0c: 2d:ab:01:e7:55:66:41:29:e7:b5:d6:c8:41:9a:a6: 84:98:d9:56:22:f7:f6:77:28:d9:44:c4:97:c6:f1: 5b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3C:19:85:B8:A3:91:DD:94:56:0E:9E:B7:34:1D:65:16:38:07:D3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/af6b0407-66be-4076-87b3-370d845449ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:6040::/48 Signature Algorithm: sha256WithRSAEncryption 2b:7b:e8:b2:9f:50:0a:4a:b8:e4:66:7a:d7:7b:0a:ac:0e:c3: 7b:5a:0f:8e:d1:05:59:1f:4d:5a:18:03:fc:e5:96:f1:71:f3: ae:f1:9b:aa:b2:33:85:45:70:f3:60:c0:f2:a2:91:f2:af:61: 9b:06:ac:ca:a4:c2:91:1c:6a:0e:f0:af:47:19:8b:5b:65:16: a5:e8:be:14:d8:96:4b:f0:cf:d0:de:ff:53:f9:a7:18:ac:f0: 26:ed:50:08:08:01:24:1e:6c:8d:fe:06:41:ec:dd:e4:a3:54: 15:59:88:47:67:0b:b2:8a:a8:e7:6c:c2:f2:cb:84:af:5d:f2: 89:3b:00:35:5f:93:71:f2:56:dd:6b:5c:3d:fa:44:94:12:b0: bc:3c:dd:7b:36:e1:a3:29:cb:b6:cf:6f:ab:af:3f:96:bb:75: cd:ea:e8:8b:8d:79:95:56:e7:b7:99:d9:23:a3:34:ce:41:0d: 55:58:30:bd:bb:3a:6e:68:24:21:e0:d7:39:96:8b:ea:d3:b5: 69:6c:20:b8:26:61:4b:fe:10:55:18:ec:ef:af:e3:68:0e:3e: f1:50:a0:f6:e3:46:c2:8c:2d:f1:67:32:e1:1c:ae:32:98:9e: 7c:2a:bf:90:31:3b:05:68:e1:49:99:af:b3:2d:08:8c:7e:d0: 81:07:78:7c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZJvCcVOeqrCseIBv+54J+w/LdX0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxODAwMjA1M1oX DTI1MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAYTczMmFhZTc3YmQ2YjQ5YjcxYzZj YzJkNjFkYjUxNGVkZDE1MWRlOWJiMjM5NGRmOGJlODM0MDA1Mzg0ZTcxMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswZvMxWy9tPOJC+u6RSvbvfn1pPK ZgmYeVvsHHLmCMssNN6zgYNC9BiJcQdgWXK7mv27Zzwlvt5P0uWV7zwl1LTcULF9 AOr1V9TLkxaUJqk4dQ5r8shVCu1qhGsMBLtW3w25plcAaDdGEXLk4e4sKwxGhjvq ir2NVJpWoGJpHBuSSnbq51icYgeseVmY9MwpACaI4ek/RbmOqHYd+i5WFQ03c/7T QKtRYQajzIsP7PuSskibv5NbGGkFb6YIyeCF+Pprl4QhyDCvAeuaR0K174oknSPF 4k0NiNEqsFiY1AwtqwHnVWZBKee11shBmqaEmNlWIvf2dyjZRMSXxvFbYwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFL08GYW4o5HdlFYOnrc0HWUWOAfTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FmNmIwNDA3LTY2YmUtNDA3Ni04N2IzLTM3MGQ4NDU0NDllZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8mBAMA0GCSqGSIb3DQEBCwUAA4IBAQAre+iyn1AKSrjkZnrX ewqsDsN7Wg+O0QVZH01aGAP85ZbxcfOu8ZuqsjOFRXDzYMDyopHyr2GbBqzKpMKR HGoO8K9HGYtbZRal6L4U2JZL8M/Q3v9T+acYrPAm7VAICAEkHmyN/gZB7N3ko1QV WYhHZwuyiqjnbMLyy4SvXfKJOwA1X5Nx8lbda1w9+kSUErC8PN17NuGjKcu2z2+r rz+Wu3XN6uiLjXmVVue3mdkjozTOQQ1VWDC9uzpuaCQh4Nc5lovq07VpbCC4JmFL /hBVGOzvr+NoDj7xUKD240bCjC3xZzLhHK4ymJ58Kr+QMTsFaOFJma+zLQiMftCB B3h8 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:49 2025 by rpki-client on console.sobornost.net