$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1a24a25-9b3a-42e4-87bd-b212f7fd79c9.roa File: b1a24a25-9b3a-42e4-87bd-b212f7fd79c9.roa (raw, json) Hash identifier: te7OCxhg08Q+vxHbP3P2K1P1K9VCATYnihf/WCCDpwc= Subject key identifier: A0:04:79:2D:E9:A9:F4:2F:9B:A8:28:82:3A:C1:AB:5B:A4:C8:B8:56 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 28374F5CF6FF8124C44B0B4133085F235714A843 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1a24a25-9b3a-42e4-87bd-b212f7fd79c9.roa Signing time: Fri 18 Apr 2025 00:11:49 +0000 ROA not before: Fri 18 Apr 2025 00:11:49 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:37:4f:5c:f6:ff:81:24:c4:4b:0b:41:33:08:5f:23:57:14:a8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 18 00:11:49 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=88e6fdf2c29251ea66f8a5d848a58661b2214e0ab20180d032f71e95cd5ef495, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:53:6f:6c:48:3d:6e:2c:71:2a:0e:63:06: d8:9a:24:4b:c8:4d:26:d7:5a:f6:0a:59:3a:02:32: 2f:ce:ef:c5:bd:ff:1a:83:5e:55:d9:57:5b:e7:7a: 7b:83:29:ba:12:06:00:4e:cb:df:ec:15:a9:cc:86: a4:d5:b2:c6:f4:87:45:8f:49:91:53:81:03:e0:6b: b3:3e:bd:7a:1d:77:df:a3:46:c1:7e:71:64:c1:f5: a5:27:bc:1e:40:a1:c7:b8:75:5d:5f:d0:64:6a:a7: 04:34:c3:f3:ed:78:22:f5:03:b0:50:7a:43:b6:b3: cc:d9:ea:87:03:fd:1f:98:03:28:df:29:19:26:6a: 96:87:a1:2e:b0:99:e6:2e:02:71:4f:71:a6:ed:d6: e4:a2:7d:a6:1d:54:ab:91:6b:cf:b0:d4:fb:e9:8c: 71:3e:de:2e:39:f9:20:80:6a:a0:67:c0:7c:ed:da: 22:30:eb:6f:04:44:89:a1:4f:77:fb:d3:19:c3:7a: c7:63:0d:6b:26:67:4d:fe:0e:29:6e:6a:76:bc:24: 5f:51:c4:32:b0:a3:36:a8:1c:f9:15:10:48:3c:7b: 70:51:21:2e:ff:b6:20:f4:6c:5f:84:91:1f:b1:0e: 8e:17:55:e0:ab:99:c7:e7:99:ee:db:79:48:32:77: 26:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:04:79:2D:E9:A9:F4:2F:9B:A8:28:82:3A:C1:AB:5B:A4:C8:B8:56 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1a24a25-9b3a-42e4-87bd-b212f7fd79c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8080::/48 Signature Algorithm: sha256WithRSAEncryption 6b:6b:a8:25:bf:54:88:08:c5:be:0b:20:6a:1d:44:95:6b:7e: fc:75:ae:68:53:bb:5b:97:69:09:f5:8c:46:e5:4d:8e:1d:67: bf:47:f6:9f:ec:bf:30:46:bc:a9:d9:60:d7:02:cb:7f:2c:c5: 3d:32:5f:07:5d:43:be:be:48:0d:0a:c1:8a:a4:a7:fe:17:b6: cc:58:fc:06:de:54:dc:54:5b:e8:97:cc:fe:18:ca:18:eb:c1: 32:82:02:27:66:74:42:9c:a0:43:69:20:a4:70:3f:32:62:b3: 2b:56:92:8c:6c:3a:fd:e6:6d:b0:af:63:ac:59:74:78:f6:7a: db:b7:fc:ac:89:fd:b6:89:da:8f:1f:22:5f:9c:aa:8e:48:f7: 1a:5e:7e:51:5d:18:71:6f:bc:e7:e9:99:38:ec:a9:14:9b:37: 00:a3:3e:44:be:e5:81:22:75:34:3b:9d:c0:aa:75:a6:ca:e4: a3:a2:52:6b:49:81:20:b3:29:15:db:3c:23:85:2e:36:88:ae: 69:df:14:9c:8c:81:d3:9a:2a:62:dc:6e:6b:43:81:77:d5:fb: 08:6d:42:e2:c9:cf:22:7a:29:c7:4f:4c:26:99:0c:45:f6:b6: 9a:bb:30:e3:7f:6b:e4:58:97:56:f7:ca:97:ed:38:a2:15:2d: e8:7d:e5:f8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKDdPXPb/gSTESwtBMwhfI1cUqEMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxODAwMTE0OVoX DTI1MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAODhlNmZkZjJjMjkyNTFlYTY2Zjhh NWQ4NDhhNTg2NjFiMjIxNGUwYWIyMDE4MGQwMzJmNzFlOTVjZDVlZjQ5NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLZTb2xIPW4scSoOYwbYmiRLyE0m 11r2Clk6AjIvzu/Fvf8ag15V2Vdb53p7gym6EgYATsvf7BWpzIak1bLG9IdFj0mR U4ED4GuzPr16HXffo0bBfnFkwfWlJ7weQKHHuHVdX9BkaqcENMPz7Xgi9QOwUHpD trPM2eqHA/0fmAMo3ykZJmqWh6EusJnmLgJxT3Gm7dbkon2mHVSrkWvPsNT76Yxx Pt4uOfkggGqgZ8B87doiMOtvBESJoU93+9MZw3rHYw1rJmdN/g4pbmp2vCRfUcQy sKM2qBz5FRBIPHtwUSEu/7Yg9GxfhJEfsQ6OF1Xgq5nH55nu23lIMncm3QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFKAEeS3pqfQvm6gogjrBq1ukyLhWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IxYTI0YTI1LTliM2EtNDJlNC04N2JkLWIyMTJmN2ZkNzljOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8oCAMA0GCSqGSIb3DQEBCwUAA4IBAQBra6glv1SICMW+CyBq HUSVa378da5oU7tbl2kJ9YxG5U2OHWe/R/af7L8wRryp2WDXAst/LMU9Ml8HXUO+ vkgNCsGKpKf+F7bMWPwG3lTcVFvol8z+GMoY68EyggInZnRCnKBDaSCkcD8yYrMr VpKMbDr95m2wr2OsWXR49nrbt/ysif22idqPHyJfnKqOSPcaXn5RXRhxb7zn6Zk4 7KkUmzcAoz5EvuWBInU0O53AqnWmyuSjolJrSYEgsykV2zwjhS42iK5p3xScjIHT mipi3G5rQ4F31fsIbULiyc8ieinHT0wmmQxF9raauzDjf2vkWJdW98qX7TiiFS3o feX4 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:49 2025 by rpki-client on console.sobornost.net