$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b105a261-7baa-401b-b853-65b2635b3f6d.roa File: b105a261-7baa-401b-b853-65b2635b3f6d.roa (raw, json) Hash identifier: PNZrPPqLz/XCcdW0nBqSBS7ILjP9PU9BFOAJUYI0Oz8= Subject key identifier: 08:91:94:75:B7:68:23:94:74:1F:09:19:4B:90:B3:69:C8:C1:03:42 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A423B7740B95CB20310AABE56432F065FBC32D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b105a261-7baa-401b-b853-65b2635b3f6d.roa Signing time: Mon 07 Apr 2025 15:00:04 +0000 ROA not before: Mon 07 Apr 2025 15:00:04 +0000 ROA not after: Mon 12 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da24:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:42:3b:77:40:b9:5c:b2:03:10:aa:be:56:43:2f:06:5f:bc:32:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 7 15:00:04 2025 GMT Not After : May 12 23:59:59 2025 GMT Subject: serialNumber=43604db2ae65b7fc20c98014b766c08e2530f136fc2e72e23b91bdc763def1d9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:31:61:7e:9a:6c:19:51:c6:11:0c:3a:1f: 57:a0:67:37:09:bd:14:96:5e:65:92:76:c6:0a:df: 8a:3f:ce:f2:0b:71:3f:7f:e0:64:77:d4:f6:58:21: 57:d9:b1:f1:67:43:7b:96:81:e9:4c:66:1a:6a:09: 2b:c0:d1:a5:00:27:d8:11:09:15:41:b3:33:82:58: d4:99:be:45:1d:92:94:8d:fe:d9:96:52:f1:3f:3f: 01:79:10:c8:85:d3:f3:6d:b9:88:4e:6e:9f:44:2d: 6c:ae:ce:87:86:3c:aa:7e:87:e7:43:b9:39:b7:b5: 88:02:f2:d2:64:9b:91:e9:65:7d:6a:75:0d:dc:34: fe:39:c8:15:be:56:8e:08:4f:4b:fe:e8:41:31:78: 37:1b:c1:32:27:6a:fd:6e:39:01:0e:67:c5:3c:2f: f7:7d:40:e9:91:f9:80:9c:ab:20:09:b0:f8:02:41: 6d:6f:14:04:ec:da:e0:25:47:d0:b0:ed:e6:73:66: f1:d0:9a:ec:69:3b:87:6e:06:91:6a:95:ea:90:7a: 39:b9:23:67:e8:d4:9e:3a:e4:d9:16:b7:10:d9:5b: 4b:b8:b4:f0:23:b1:06:de:1b:7d:c5:28:7c:05:9e: a6:19:14:19:11:55:2b:a3:32:77:07:a9:97:56:ad: d2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:91:94:75:B7:68:23:94:74:1F:09:19:4B:90:B3:69:C8:C1:03:42 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b105a261-7baa-401b-b853-65b2635b3f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da24:8000::/36 Signature Algorithm: sha256WithRSAEncryption 21:89:f9:f0:4a:18:e8:43:f8:78:08:42:4d:11:7d:5a:5e:2f: f4:45:df:9e:a1:83:3a:64:dd:30:70:11:c6:f5:21:d4:3c:2e: 99:f1:3a:cb:dc:7e:1d:d2:96:c7:61:dc:44:5f:b6:e8:1f:5a: d2:11:7f:6c:be:0b:b0:89:41:59:f4:69:2a:e8:da:e2:43:b5: 40:0b:42:ae:fe:22:19:0f:1c:f1:1f:7a:b2:26:24:f3:98:1b: a8:b6:a7:d3:83:b5:13:47:82:e0:1c:19:4b:29:20:4b:72:95: 00:d6:94:36:8b:f7:1b:27:ae:19:06:e2:b3:7b:45:10:26:8b: 28:7f:15:01:97:78:ca:a4:ed:c5:72:c5:12:6c:11:bf:90:04: 25:6a:50:95:33:ba:06:7a:5f:77:80:b5:11:8f:ba:07:36:c7: 3b:33:7a:6f:1a:75:e2:c3:07:28:7c:27:86:81:e7:eb:66:bd: 54:f0:ab:0b:b4:b2:74:b3:c7:3c:fc:78:06:c3:df:11:57:77: 8d:30:07:54:4d:a0:47:ce:3a:5d:51:4f:fd:12:14:6f:d8:6e: f1:8c:4d:1e:ba:69:5d:05:31:4c:e4:ba:35:e4:01:92:00:df: f8:e8:4a:93:62:89:a0:2a:3b:2a:47:f4:15:a1:62:ac:f2:72: 66:73:25:58 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUKkI7d0C5XLIDEKq+VkMvBl+8MtcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwNzE1MDAwNFoX DTI1MDUxMjIzNTk1OVowejFJMEcGA1UEBRNANDM2MDRkYjJhZTY1YjdmYzIwYzk4 MDE0Yjc2NmMwOGUyNTMwZjEzNmZjMmU3MmUyM2I5MWJkYzc2M2RlZjFkOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmoxYX6abBlRxhEMOh9XoGc3Cb0U ll5lknbGCt+KP87yC3E/f+Bkd9T2WCFX2bHxZ0N7loHpTGYaagkrwNGlACfYEQkV QbMzgljUmb5FHZKUjf7ZllLxPz8BeRDIhdPzbbmITm6fRC1srs6HhjyqfofnQ7k5 t7WIAvLSZJuR6WV9anUN3DT+OcgVvlaOCE9L/uhBMXg3G8EyJ2r9bjkBDmfFPC/3 fUDpkfmAnKsgCbD4AkFtbxQE7NrgJUfQsO3mc2bx0JrsaTuHbgaRapXqkHo5uSNn 6NSeOuTZFrcQ2VtLuLTwI7EG3ht9xSh8BZ6mGRQZEVUrozJ3B6mXVq3SXwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAiRlHW3aCOUdB8JGUuQs2nIwQNCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IxMDVhMjYxLTdiYWEtNDAxYi1iODUzLTY1YjI2MzViM2Y2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaJIAwDQYJKoZIhvcNAQELBQADggEBACGJ+fBKGOhD+HgIQk0R fVpeL/RF356hgzpk3TBwEcb1IdQ8LpnxOsvcfh3Slsdh3ERftugfWtIRf2y+C7CJ QVn0aSro2uJDtUALQq7+IhkPHPEferImJPOYG6i2p9ODtRNHguAcGUspIEtylQDW lDaL9xsnrhkG4rN7RRAmiyh/FQGXeMqk7cVyxRJsEb+QBCVqUJUzugZ6X3eAtRGP ugc2xzszem8adeLDByh8J4aB5+tmvVTwqwu0snSzxzz8eAbD3xFXd40wB1RNoEfO Ol1RT/0SFG/YbvGMTR66aV0FMUzkujXkAZIA3/joSpNiiaAqOypH9BWhYqzycmZz JVg= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:49 2025 by rpki-client on console.sobornost.net