$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20e4da9-5b91-4842-953a-dc2ccf035e85.roa File: b20e4da9-5b91-4842-953a-dc2ccf035e85.roa (raw, json) Hash identifier: Rh7APdvJSA9knoDdAAj5F0jBsbSBQOT5epei06SHmNM= Subject key identifier: A7:EE:64:62:80:CF:52:FA:BC:E2:76:28:24:39:3F:2D:39:E4:E2:8B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41BA45DC8DE185037C2A6BB794D47DEC2BA95461 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20e4da9-5b91-4842-953a-dc2ccf035e85.roa Signing time: Mon 21 Apr 2025 15:41:07 +0000 ROA not before: Mon 21 Apr 2025 15:41:07 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ba:45:dc:8d:e1:85:03:7c:2a:6b:b7:94:d4:7d:ec:2b:a9:54:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:41:07 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=7ccb9e1f52e24998839f194bf3c2de35b4af1e087da4fa200c6e37eb6d2b69be, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5b:93:ac:5c:bb:fd:4a:93:4b:e6:cc:71:09: 2b:d6:a0:41:a1:d1:f5:e5:a9:64:1c:ff:10:ba:90: 06:e5:b4:e9:43:17:e6:1c:f0:93:ef:bc:fa:90:73: 9d:f4:14:c7:9d:7e:94:91:81:2e:72:dd:f4:95:c7: f2:74:95:c6:14:a8:f6:95:53:59:8a:29:f6:c7:d6: 40:4a:cf:35:43:a9:5b:30:9f:c8:8b:1b:1f:5f:28: 5c:e2:2c:04:9c:99:c8:ef:80:44:bb:0c:75:70:42: d2:c3:d2:96:eb:06:aa:8e:eb:f9:61:c5:4a:b3:77: 4f:58:87:9f:4e:03:c4:48:81:de:74:39:6f:27:f3: a8:3c:9f:e7:8f:7c:54:d5:b7:ca:ac:73:d0:bf:94: 86:33:5e:0c:79:63:cb:5a:74:f5:fe:5e:b8:ed:43: 7f:b6:ee:0c:f4:d8:a9:4e:f7:32:16:e3:7a:d6:36: 71:d0:ac:12:4f:e9:72:87:5a:44:1b:eb:a2:a5:3e: 24:15:9d:f3:d3:2a:dd:bb:03:b0:54:c7:25:16:39: 62:df:09:00:13:ca:75:e2:c8:92:1a:59:89:5e:45: c9:4f:53:e1:3f:c6:83:4f:74:c6:85:ff:f8:22:12: f4:9b:47:c5:5a:6d:4a:e3:ce:85:5b:79:f0:c0:3d: 66:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EE:64:62:80:CF:52:FA:BC:E2:76:28:24:39:3F:2D:39:E4:E2:8B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b20e4da9-5b91-4842-953a-dc2ccf035e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:4000::/40 Signature Algorithm: sha256WithRSAEncryption 1a:a1:30:81:ff:3f:26:3a:6f:20:8e:7c:eb:52:88:bc:27:c8: 34:32:49:89:af:6d:47:36:51:9d:4d:89:9d:82:2e:01:3f:71: e7:6a:2f:00:5d:6d:14:f0:26:9c:a5:b7:3f:cb:c4:a7:27:3b: 4a:f4:af:a1:0c:e2:08:55:64:00:b8:50:b4:86:c1:48:ff:68: ad:f2:fe:2a:85:fc:45:26:57:ad:72:27:aa:c8:a7:14:a5:98: 15:0e:c7:75:23:7b:db:a6:ae:f2:3a:33:0c:a7:3f:0d:10:ba: 88:46:ca:0c:a0:bd:bd:90:23:40:9d:72:52:8e:00:fe:55:09: de:d8:57:8c:c7:07:a9:b0:67:5d:4f:90:b2:a0:a4:22:a7:ee: c9:73:de:56:55:d2:fb:8b:df:18:91:ad:65:31:45:c3:55:c3: ac:e4:a9:55:ce:1a:d2:32:da:e5:13:24:ce:79:9a:c8:7c:60: da:ed:8b:2f:e0:8b:90:fd:06:7a:e6:f8:76:05:f6:10:62:83: c1:ec:75:38:ef:0c:44:8a:e2:4f:05:ca:85:c5:83:9a:13:4e: e6:35:cb:d6:52:e3:ab:75:2a:08:59:77:32:2d:28:43:e7:d1: 86:b1:8c:a9:3b:35:e9:49:e7:3d:29:c8:5a:82:ea:09:e9:54: 2b:bc:71:b9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUQbpF3I3hhQN8Kmu3lNR97CupVGEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NDEwN1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAN2NjYjllMWY1MmUyNDk5ODgzOWYx OTRiZjNjMmRlMzViNGFmMWUwODdkYTRmYTIwMGM2ZTM3ZWI2ZDJiNjliZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVuTrFy7/UqTS+bMcQkr1qBBodH1 5alkHP8QupAG5bTpQxfmHPCT77z6kHOd9BTHnX6UkYEuct30lcfydJXGFKj2lVNZ iin2x9ZASs81Q6lbMJ/IixsfXyhc4iwEnJnI74BEuwx1cELSw9KW6waqjuv5YcVK s3dPWIefTgPESIHedDlvJ/OoPJ/nj3xU1bfKrHPQv5SGM14MeWPLWnT1/l647UN/ tu4M9NipTvcyFuN61jZx0KwST+lyh1pEG+uipT4kFZ3z0yrduwOwVMclFjli3wkA E8p14siSGlmJXkXJT1PhP8aDT3TGhf/4IhL0m0fFWm1K486FW3nwwD1m7wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKfuZGKAz1L6vOJ2KCQ5Py055OKLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IyMGU0ZGE5LTViOTEtNDg0Mi05NTNhLWRjMmNjZjAzNWU4NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+0AwDQYJKoZIhvcNAQELBQADggEBABqhMIH/PyY6byCOfOtS iLwnyDQySYmvbUc2UZ1NiZ2CLgE/cedqLwBdbRTwJpyltz/LxKcnO0r0r6EM4ghV ZAC4ULSGwUj/aK3y/iqF/EUmV61yJ6rIpxSlmBUOx3Uje9umrvI6MwynPw0QuohG ygygvb2QI0CdclKOAP5VCd7YV4zHB6mwZ11PkLKgpCKn7slz3lZV0vuL3xiRrWUx RcNVw6zkqVXOGtIy2uUTJM55msh8YNrtiy/gi5D9Bnrm+HYF9hBig8HsdTjvDESK 4k8FyoXFg5oTTuY1y9ZS46t1KghZdzItKEPn0YaxjKk7NelJ5z0pyFqC6gnpVCu8 cbk= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:49 2025 by rpki-client on console.sobornost.net