$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b352ee85-d0a5-41eb-9945-727b07289bdb.roa File: b352ee85-d0a5-41eb-9945-727b07289bdb.roa (raw, json) Hash identifier: HERL/kSiMOwg1TRi2gBCvVo4jUVFr18K/jtEPdz+0CI= Subject key identifier: 1B:9D:FF:B0:56:1D:CF:3B:B7:93:B6:37:A6:32:70:C0:2B:E4:4A:E2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 43ACD6E8112C24C5C617CD344041317D9B165D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b352ee85-d0a5-41eb-9945-727b07289bdb.roa Signing time: Sat 19 Apr 2025 00:10:40 +0000 ROA not before: Sat 19 Apr 2025 00:10:40 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ac:d6:e8:11:2c:24:c5:c6:17:cd:34:40:41:31:7d:9b:16:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:10:40 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=c41d61258925e3eb7153189b5bcd8f0ee099df3b0779b19c4c0d8ae1468f1ea6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:08:af:f3:48:11:08:4f:6b:6f:1e:99:f8: 1c:bf:7e:ba:91:77:63:ea:c9:72:ae:02:c2:57:e0: 58:57:dd:ec:9f:65:2b:99:b7:00:8b:f4:23:54:33: 9f:85:1b:16:b1:79:a5:f8:99:6c:c8:0b:6d:6a:0c: d7:b8:f4:99:dd:f5:c0:97:a8:be:1f:ef:21:38:45: 6a:94:7a:0b:4f:2a:2e:a9:92:26:5f:59:09:b7:86: be:eb:ac:20:17:81:a8:fb:77:a5:4b:26:6c:57:40: c8:7a:fb:c2:c4:4f:1f:45:7f:d0:a5:be:b9:70:e2: 2e:a0:5c:d8:32:1a:1c:6d:00:ea:74:13:8b:0e:c9: cc:b4:c7:af:bf:9e:a7:41:0e:1e:72:01:91:0e:5c: 37:86:c3:26:ed:09:e8:e1:71:ab:2f:44:44:a2:09: ee:5c:ce:e6:88:86:bd:e9:f9:9a:24:96:f4:86:f4: cb:08:7d:27:d4:f8:01:ac:c2:39:c0:90:f2:06:76: f8:31:cc:3a:47:73:06:a8:1b:00:9d:8e:5c:25:f2: 2e:36:9b:ec:df:3b:15:dd:0b:ef:85:ce:8c:c0:3b: 49:e0:5f:07:d1:dd:45:9e:a3:cd:ab:8d:03:1d:8b: ea:3c:bb:81:f9:92:e6:0d:04:3f:85:f6:49:08:cd: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9D:FF:B0:56:1D:CF:3B:B7:93:B6:37:A6:32:70:C0:2B:E4:4A:E2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b352ee85-d0a5-41eb-9945-727b07289bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:4880::/48 Signature Algorithm: sha256WithRSAEncryption b6:01:0f:10:d4:7d:da:73:ec:ce:b2:8b:73:b9:e4:44:4f:77: 71:c3:54:d4:77:e1:96:39:c7:a0:aa:96:ea:fb:52:98:c8:74: 82:fb:26:3e:86:70:00:81:be:83:0c:ce:89:29:78:73:03:70: 4e:55:2b:4f:c2:b9:b1:06:e2:bd:b3:a3:34:b9:94:c5:2f:77: 5a:1a:e2:9d:0e:27:b6:a0:05:a9:ec:2d:8f:10:4a:05:9d:3d: 3d:fd:de:55:f5:25:94:86:c6:7c:a3:d8:66:84:f9:b7:ba:51: d2:54:dd:26:f3:b2:ec:bd:73:62:b8:04:57:ef:d1:fc:17:be: d4:3a:77:5a:c3:61:14:ae:9b:60:44:67:c0:99:ed:8c:c8:e7: 3f:6c:a8:03:34:ed:d5:1c:89:84:7f:70:c8:b3:02:5c:1b:22: 46:31:2d:cc:ba:85:6f:24:93:e9:7c:48:a5:e2:a2:4b:06:91: e4:af:ec:08:1a:d0:f3:91:60:8e:c1:6a:4a:18:78:fd:43:44: aa:35:3c:d8:5b:e8:80:f3:fa:7f:33:81:a8:ed:de:e0:cc:54: c2:dd:ee:50:22:c8:da:4e:6d:7c:de:12:ea:8e:9b:ec:24:bb: 85:f9:25:bc:a9:fa:6c:62:a0:7b:d8:bc:f1:e7:33:cc:36:04: bb:0b:16:00 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgITQ6zW6BEsJMXGF800QEExfZsWXTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTFGNjM1RjAwMDAxMTAvBgNVBAUTKDQwNzY4MjU1MjRE MkM2NkQyRTEwNDM2RkU2NUU5M0U4QzFCRDRBMzcwHhcNMjUwNDE5MDAxMDQwWhcN MjUwNTI0MjM1OTU5WjB6MUkwRwYDVQQFE0BjNDFkNjEyNTg5MjVlM2ViNzE1MzE4 OWI1YmNkOGYwZWUwOTlkZjNiMDc3OWIxOWM0YzBkOGFlMTQ2OGYxZWE2MS0wKwYD VQQDEyRjMGJmMGZlOC03MTdjLTRmNzItOWI0NS1jOWM1MTkxMzJhODEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdsQiv80gRCE9rbx6Z+By/frqRd2Pq yXKuAsJX4FhX3eyfZSuZtwCL9CNUM5+FGxaxeaX4mWzIC21qDNe49Jnd9cCXqL4f 7yE4RWqUegtPKi6pkiZfWQm3hr7rrCAXgaj7d6VLJmxXQMh6+8LETx9Ff9Clvrlw 4i6gXNgyGhxtAOp0E4sOycy0x6+/nqdBDh5yAZEOXDeGwybtCejhcasvRESiCe5c zuaIhr3p+ZoklvSG9MsIfSfU+AGswjnAkPIGdvgxzDpHcwaoGwCdjlwl8i42m+zf OxXdC++FzozAO0ngXwfR3UWeo82rjQMdi+o8u4H5kuYNBD+F9kkIzUV5AgMBAAGj ggJLMIICRzAdBgNVHQ4EFgQUG53/sFYdzzu3k7Y3pjJwwCvkSuIwHwYDVR0jBBgw FoAUQHaCVSTSxm0uEENv5l6T6MG9SjcwDgYDVR0PAQH/BAQDAgeAMH4GCCsGAQUF BwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBv c2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1FIYUNWU1RT eG0wdUVFTnY1bDZUNk1HOVNqYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEv YjM1MmVlODUtZDBhNS00MWViLTk5NDUtNzI3YjA3Mjg5YmRiLnJvYTCBlQYDVR0f BIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFt YXpvbmF3cy5jb20vdm9sdW1lLzA4YzJmMjY0LTIzZjktNDlmYi05ZDQzLWY4YjUw YmVjOTI2MS83YmExNzg2My1hNjEzLTQxOTctOWVkNS1iZWRhNmE4OTg2OWYuY3Js MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkBtoASIAwDQYJKoZIhvcNAQELBQADggEBALYBDxDUfdpz7M6yi3O5 5ERPd3HDVNR34ZY5x6Cqlur7UpjIdIL7Jj6GcACBvoMMzokpeHMDcE5VK0/CubEG 4r2zozS5lMUvd1oa4p0OJ7agBansLY8QSgWdPT393lX1JZSGxnyj2GaE+be6UdJU 3Sbzsuy9c2K4BFfv0fwXvtQ6d1rDYRSum2BEZ8CZ7YzI5z9sqAM07dUciYR/cMiz AlwbIkYxLcy6hW8kk+l8SKXioksGkeSv7Aga0PORYI7BakoYeP1DRKo1PNhb6IDz +n8zgajt3uDMVMLd7lAiyNpObXzeEuqOm+wku4X5Jbyp+mxioHvYvPHnM8w2BLsL FgA= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:49 2025 by rpki-client on console.sobornost.net