$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b04ab6cc-e646-42b2-b8a0-75a22e4744ea.roa File: b04ab6cc-e646-42b2-b8a0-75a22e4744ea.roa (raw, json) Hash identifier: Mql8U/z23aaFw/VgPYrRK+lgHQf8HVWmoSpxnxNXoI0= Subject key identifier: 83:40:C7:60:1E:79:3E:55:02:20:98:C3:2A:20:67:01:00:17:53:A4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6C3AC598918F8BA8DE03C59A88CC58E9A6FCAA4C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b04ab6cc-e646-42b2-b8a0-75a22e4744ea.roa Signing time: Wed 09 Apr 2025 00:00:03 +0000 ROA not before: Wed 09 Apr 2025 00:00:03 +0000 ROA not after: Wed 14 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da32:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:3a:c5:98:91:8f:8b:a8:de:03:c5:9a:88:cc:58:e9:a6:fc:aa:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 9 00:00:03 2025 GMT Not After : May 14 23:59:59 2025 GMT Subject: serialNumber=ff24a56ec10468cdb42779e82c7b0885a1e33037dee7bbe2369fb2458b2384f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:18:0c:02:9d:e3:1b:25:f8:73:90:11:de: 79:93:1b:64:ec:89:10:6c:94:ec:f9:96:70:3d:0c: c3:e0:74:75:70:7c:2a:7c:3a:d7:d4:28:bf:14:38: e4:df:5e:53:c5:c3:2b:a8:84:ec:7a:f6:e5:10:47: 47:57:10:cb:c3:0a:7c:1a:db:79:52:57:5b:fe:ac: 6b:5f:42:1a:bf:b5:c1:98:ba:31:6e:5c:1f:d1:bb: 1d:78:7f:99:f6:b1:83:29:f4:a8:5c:c9:0f:76:67: 45:38:ff:b7:c6:aa:b7:d4:0d:11:ff:36:62:d0:38: e5:f5:76:45:d2:db:7d:27:fb:46:c3:fe:43:f5:19: 8e:6e:0b:bb:35:cb:97:8a:a0:4e:42:04:97:9d:44: ae:98:91:19:df:0e:32:33:12:0b:88:a6:f2:90:46: e3:4a:0b:b2:2c:cc:53:10:c3:d3:4e:04:c0:35:01: 2e:9a:a0:db:0a:81:4f:1b:ec:69:94:e5:fd:46:a5: 9a:33:4f:02:4b:7d:0b:82:c1:d8:54:b8:19:1e:49: 42:12:c5:09:17:00:a6:05:82:9b:72:0a:55:59:82: 03:3f:ec:b3:5a:3d:6c:10:e0:ea:a4:cc:c2:94:2e: c8:cf:30:5c:2b:0d:03:9d:2e:5f:12:04:f2:f4:9f: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:40:C7:60:1E:79:3E:55:02:20:98:C3:2A:20:67:01:00:17:53:A4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b04ab6cc-e646-42b2-b8a0-75a22e4744ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da32:1000::/40 Signature Algorithm: sha256WithRSAEncryption 1b:2c:16:21:1f:f3:03:69:5a:31:87:88:7b:17:e1:f6:d7:b6: 8b:08:98:e0:64:b0:bf:85:12:57:1d:09:70:01:7c:02:84:90: 8d:0c:03:7f:97:a5:28:34:cd:44:ea:3d:fd:6f:f2:63:35:54: 44:f1:48:0e:9f:01:94:58:b9:c6:89:6d:03:58:d7:64:26:93: bd:18:7f:9c:b7:00:04:35:51:5e:c8:45:96:04:9a:b3:d5:49: 5c:61:4b:49:4b:6c:2f:1c:80:3d:1a:93:93:5d:58:f7:c4:76: c7:65:4a:91:6b:8b:95:a4:67:f6:6a:76:ef:0e:fe:c4:56:f0: 02:8e:90:c0:d8:08:73:cc:14:fa:b7:b9:94:74:bb:f7:25:83: 3b:76:be:d4:33:3d:32:0a:e5:07:9f:fe:f5:fb:b1:f3:b1:b2: 8f:20:bb:71:3c:50:aa:e4:7a:55:c3:ed:b9:6b:41:90:e8:ef: e0:33:cf:18:a1:c2:23:7b:bb:c8:11:7b:f3:e6:75:ad:7d:e0: 38:3f:d3:28:3f:e7:32:08:5f:e1:12:20:4c:22:23:b9:29:5d: 9a:85:f0:61:8b:fd:d0:49:22:00:61:f4:49:51:7c:09:94:e1: 1c:6a:df:f2:f5:a7:57:ff:d8:be:21:8c:67:97:62:b4:87:6f: 92:f1:47:91 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbDrFmJGPi6jeA8WaiMxY6ab8qkwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwOTAwMDAwM1oX DTI1MDUxNDIzNTk1OVowejFJMEcGA1UEBRNAZmYyNGE1NmVjMTA0NjhjZGI0Mjc3 OWU4MmM3YjA4ODVhMWUzMzAzN2RlZTdiYmUyMzY5ZmIyNDU4YjIzODRmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuEYDAKd4xsl+HOQEd55kxtk7IkQ bJTs+ZZwPQzD4HR1cHwqfDrX1Ci/FDjk315TxcMrqITsevblEEdHVxDLwwp8Gtt5 Uldb/qxrX0Iav7XBmLoxblwf0bsdeH+Z9rGDKfSoXMkPdmdFOP+3xqq31A0R/zZi 0Djl9XZF0tt9J/tGw/5D9RmObgu7NcuXiqBOQgSXnUSumJEZ3w4yMxILiKbykEbj SguyLMxTEMPTTgTANQEumqDbCoFPG+xplOX9RqWaM08CS30LgsHYVLgZHklCEsUJ FwCmBYKbcgpVWYIDP+yzWj1sEODqpMzClC7IzzBcKw0DnS5fEgTy9J8AywIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFINAx2AeeT5VAiCYwyogZwEAF1OkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IwNGFiNmNjLWU2NDYtNDJiMi1iOGEwLTc1YTIyZTQ3NDRlYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaMhAwDQYJKoZIhvcNAQELBQADggEBABssFiEf8wNpWjGHiHsX 4fbXtosImOBksL+FElcdCXABfAKEkI0MA3+XpSg0zUTqPf1v8mM1VETxSA6fAZRY ucaJbQNY12Qmk70Yf5y3AAQ1UV7IRZYEmrPVSVxhS0lLbC8cgD0ak5NdWPfEdsdl SpFri5WkZ/Zqdu8O/sRW8AKOkMDYCHPMFPq3uZR0u/clgzt2vtQzPTIK5Qef/vX7 sfOxso8gu3E8UKrkelXD7blrQZDo7+AzzxihwiN7u8gRe/Pmda194Dg/0yg/5zII X+ESIEwiI7kpXZqF8GGL/dBJIgBh9ElRfAmU4Rxq3/L1p1f/2L4hjGeXYrSHb5Lx R5E= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:49 2025 by rpki-client on console.sobornost.net