$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0a2ed07-afde-4341-b34f-44bfbdfef09f.roa File: b0a2ed07-afde-4341-b34f-44bfbdfef09f.roa (raw, json) Hash identifier: lk8d16TgROSr9iZ5RXidqaQxClqbJ0XqCUq2EKYTnO4= Subject key identifier: 25:4C:52:16:CD:C6:54:FC:91:E0:36:E4:5D:78:A9:F5:4E:66:08:E4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5139184E81DC59905B25903171B970A21E98BF88 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0a2ed07-afde-4341-b34f-44bfbdfef09f.roa Signing time: Sat 19 Apr 2025 00:51:30 +0000 ROA not before: Sat 19 Apr 2025 00:51:30 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:39:18:4e:81:dc:59:90:5b:25:90:31:71:b9:70:a2:1e:98:bf:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:51:30 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=27b1f7e932594db24bb7e0dddbd8aefa468143a6b482aed6f8219265eda141cc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:a8:9d:50:09:d3:59:7f:58:cf:db:21:83: 1d:76:63:16:19:9b:10:17:f2:75:c3:b6:6e:42:94: 9e:e7:92:6c:9a:2a:25:9a:c1:30:2f:c8:23:15:53: 1d:81:10:94:89:0a:95:fb:48:20:2b:05:9a:05:ce: 20:eb:ef:a8:5d:3e:c1:b3:d2:37:fc:4a:98:92:d1: cc:ee:0a:62:bb:7b:59:51:ee:e0:d8:ef:9a:08:a0: 1d:bc:47:f7:d2:a5:31:b1:7d:4d:e4:7c:fc:ce:f0: 4d:0f:c5:82:b3:d9:5f:b2:33:87:2d:e0:c2:90:cd: f9:78:33:8b:80:51:5a:d4:dd:58:29:11:74:2b:64: c8:a7:ca:98:89:5b:ae:5c:70:7a:44:2a:d8:11:ba: 7f:9a:a3:df:70:e5:3b:3c:aa:74:e7:36:17:36:c4: 5f:65:f7:fd:aa:a9:48:89:41:9b:59:17:93:05:2b: 6f:43:dd:58:12:22:66:0f:a6:80:1b:dc:b9:c9:04: 61:1f:30:fe:18:1e:5a:f6:bc:95:47:dd:ab:20:0c: 48:c6:1e:74:64:c9:20:ae:85:f7:09:72:72:79:27: 74:76:d5:af:1c:7c:6c:85:2f:b9:ca:2d:77:9f:3c: f4:de:cf:2e:e0:88:e3:3b:1b:c6:ff:68:11:a3:db: 17:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4C:52:16:CD:C6:54:FC:91:E0:36:E4:5D:78:A9:F5:4E:66:08:E4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b0a2ed07-afde-4341-b34f-44bfbdfef09f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption 2b:d4:bf:46:dd:15:1b:c1:cd:61:15:c2:28:f4:8c:c7:29:ca: 82:84:f6:24:7a:b1:7c:d4:c6:68:88:d7:ee:95:c5:85:f7:f5: 07:b1:7f:d6:e8:95:72:13:f6:be:26:a1:74:22:ee:60:7a:55: 2e:a3:3e:c9:91:76:a0:a9:fc:43:b7:5b:38:97:40:fa:6e:df: 4f:8e:6d:86:27:c7:79:ac:f9:f3:53:b6:f4:74:53:05:e9:60: 6a:ca:a7:bd:35:d6:2c:e2:3f:65:5c:78:d9:4d:81:e9:4b:36: 7a:a8:9c:9b:bd:75:87:52:16:8a:f2:44:10:43:b7:64:85:5e: 85:89:32:ee:41:a6:c7:4a:00:cb:f6:e7:aa:28:3f:16:da:a5: 34:5f:1a:2c:9c:2e:8d:c9:28:c9:47:46:6a:5a:60:10:40:02: fb:7a:18:78:b2:9b:1e:66:21:a1:07:ab:f8:02:af:92:40:79: f3:d9:df:63:8f:4c:cf:4b:18:ba:6d:72:50:29:41:66:3d:81: 7d:7c:cc:65:fa:11:85:dd:e8:3c:8d:7e:de:8b:cf:46:26:6e: 30:a4:d2:3e:7b:b7:b5:6d:65:81:f8:64:43:22:c5:33:99:64: da:01:28:0a:a1:d2:ab:df:e2:5e:4a:bb:bc:fe:93:2f:17:53: 87:7c:ed:10 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUTkYToHcWZBbJZAxcblwoh6Yv4gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwNTEzMFoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAMjdiMWY3ZTkzMjU5NGRiMjRiYjdl MGRkZGJkOGFlZmE0NjgxNDNhNmI0ODJhZWQ2ZjgyMTkyNjVlZGExNDFjYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyWonVAJ01l/WM/bIYMddmMWGZsQ F/J1w7ZuQpSe55JsmiolmsEwL8gjFVMdgRCUiQqV+0ggKwWaBc4g6++oXT7Bs9I3 /EqYktHM7gpiu3tZUe7g2O+aCKAdvEf30qUxsX1N5Hz8zvBND8WCs9lfsjOHLeDC kM35eDOLgFFa1N1YKRF0K2TIp8qYiVuuXHB6RCrYEbp/mqPfcOU7PKp05zYXNsRf Zff9qqlIiUGbWReTBStvQ91YEiJmD6aAG9y5yQRhHzD+GB5a9ryVR92rIAxIxh50 ZMkgroX3CXJyeSd0dtWvHHxshS+5yi13nzz03s8u4IjjOxvG/2gRo9sXaQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCVMUhbNxlT8keA25F14qfVOZgjkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IwYTJlZDA3LWFmZGUtNDM0MS1iMzRmLTQ0YmZiZGZlZjA5Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8DAMA0GCSqGSIb3DQEBCwUAA4IBAQAr1L9G3RUbwc1hFcIo 9IzHKcqChPYkerF81MZoiNfulcWF9/UHsX/W6JVyE/a+JqF0Iu5gelUuoz7JkXag qfxDt1s4l0D6bt9Pjm2GJ8d5rPnzU7b0dFMF6WBqyqe9NdYs4j9lXHjZTYHpSzZ6 qJybvXWHUhaK8kQQQ7dkhV6FiTLuQabHSgDL9ueqKD8W2qU0XxosnC6NySjJR0Zq WmAQQAL7ehh4spseZiGhB6v4Aq+SQHnz2d9jj0zPSxi6bXJQKUFmPYF9fMxl+hGF 3eg8jX7ei89GJm4wpNI+e7e1bWWB+GRDIsUzmWTaASgKodKr3+JeSru8/pMvF1OH fO0Q -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:49 2025 by rpki-client on console.sobornost.net