$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3eb2916-fdc8-4499-8857-c751c9ab3822.roa File: b3eb2916-fdc8-4499-8857-c751c9ab3822.roa (raw, json) Hash identifier: 79qJpUDZrVeQeTXgepT0q76lkJki1YhNroPO9553idQ= Subject key identifier: 66:88:01:6E:45:A8:A4:5F:91:8C:63:AA:DF:0B:94:C4:9C:3D:D3:7C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7588B29B594594252F5C7F24FB82802AB241F75C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3eb2916-fdc8-4499-8857-c751c9ab3822.roa Signing time: Mon 21 Apr 2025 15:31:33 +0000 ROA not before: Mon 21 Apr 2025 15:31:33 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:4040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:88:b2:9b:59:45:94:25:2f:5c:7f:24:fb:82:80:2a:b2:41:f7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:31:33 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=520f7449146e1dfdad28252aa5cb7833d8035d9773d537ce93e26ce8787ea547, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:02:62:38:c1:c3:db:fc:93:03:89:cb:a1: a0:4e:5b:6f:4f:cc:0b:7a:b3:b2:a7:48:60:fe:12: f2:5d:ba:6b:69:b8:6b:ea:3b:14:b2:f3:c8:0a:fd: ee:ab:d2:06:7d:fd:3d:74:48:a1:1d:1b:3d:25:7e: 16:90:43:13:b2:ea:47:61:05:c1:ee:22:93:11:5c: d2:50:88:d6:af:25:9f:bb:ab:60:f2:df:fa:3a:4b: 3b:d4:a6:e4:05:f1:32:4e:f5:56:e7:f8:17:6b:ae: eb:91:9e:75:a6:41:6f:ae:3e:83:05:41:a5:1e:5e: 0f:f0:7c:5c:1e:4f:12:8a:69:83:a4:c7:97:6d:41: 66:7b:2b:b2:51:1b:ae:83:5e:b2:2d:45:f3:44:09: 0e:0f:4d:d5:d4:a4:dc:af:95:ab:25:db:2f:4c:e9: 97:ca:b1:89:d0:ef:d0:f1:e5:3e:96:84:ae:24:7f: bf:b9:91:62:a9:3d:e2:96:31:3c:6c:6d:67:0e:c7: fa:b3:fb:ec:95:a2:f4:41:f3:a5:cc:29:5c:2a:8c: cd:55:98:f1:72:71:4d:8c:02:73:5f:f2:5e:f3:5e: 13:e8:2d:bb:63:4e:89:b8:7b:13:1d:81:26:b5:d7: c3:c5:4f:a1:d1:a2:d4:e8:79:f0:e1:80:24:b3:1e: d6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:88:01:6E:45:A8:A4:5F:91:8C:63:AA:DF:0B:94:C4:9C:3D:D3:7C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3eb2916-fdc8-4499-8857-c751c9ab3822.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:4040::/46 Signature Algorithm: sha256WithRSAEncryption 3a:9c:35:11:d1:85:ac:c2:a3:f9:b9:da:72:eb:1f:bf:cf:27: c9:6f:b8:14:ef:0f:81:8d:9e:34:a2:a3:f2:b9:7c:95:41:1a: 0d:ec:0f:f8:16:4b:86:25:fe:cc:71:22:68:96:7c:2d:2b:f1: 7f:24:36:78:8c:03:d3:88:1c:c2:49:af:46:5c:81:c9:fa:76: 5b:cb:ff:93:06:d5:8f:a1:00:8e:ce:21:63:21:b3:73:12:37: 00:26:6c:f7:74:c4:22:1b:2e:a7:62:39:57:71:d3:da:33:d2: d0:61:0d:85:dd:75:97:0e:28:71:e5:47:77:77:7e:74:36:9f: f2:d5:82:de:e4:02:aa:f6:3c:a3:2d:50:ac:3f:a9:07:c1:b5: 6d:4d:49:ef:57:a1:46:24:e9:2e:48:60:0c:50:2b:06:47:b3: 37:cb:60:54:26:ce:c0:89:92:a3:eb:7b:ca:8c:db:e9:4c:52: c7:78:10:78:66:34:ab:4a:79:ac:fc:48:22:27:ac:5c:b0:c6: c5:1a:24:ee:f2:79:3e:72:bc:fb:b3:7b:3c:6d:e6:4e:23:56: a6:e2:0f:fb:8c:12:be:c3:1b:4e:fc:f5:63:8d:a1:73:b5:d3: 78:0e:07:a3:ed:1d:87:d1:7a:14:1f:bb:d9:ad:4d:b9:25:44: 0c:be:ed:68 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUdYiym1lFlCUvXH8k+4KAKrJB91wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MzEzM1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANTIwZjc0NDkxNDZlMWRmZGFkMjgy NTJhYTVjYjc4MzNkODAzNWQ5NzczZDUzN2NlOTNlMjZjZTg3ODdlYTU0NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAoCYjjBw9v8kwOJy6GgTltvT8wL erOyp0hg/hLyXbprabhr6jsUsvPICv3uq9IGff09dEihHRs9JX4WkEMTsupHYQXB 7iKTEVzSUIjWryWfu6tg8t/6Oks71KbkBfEyTvVW5/gXa67rkZ51pkFvrj6DBUGl Hl4P8HxcHk8SimmDpMeXbUFmeyuyURuug16yLUXzRAkOD03V1KTcr5WrJdsvTOmX yrGJ0O/Q8eU+loSuJH+/uZFiqT3iljE8bG1nDsf6s/vslaL0QfOlzClcKozNVZjx cnFNjAJzX/Je814T6C27Y06JuHsTHYEmtdfDxU+h0aLU6Hnw4YAksx7WowIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGaIAW5FqKRfkYxjqt8LlMScPdN8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IzZWIyOTE2LWZkYzgtNDQ5OS04ODU3LWM3NTFjOWFiMzgyMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+0BAMA0GCSqGSIb3DQEBCwUAA4IBAQA6nDUR0YWswqP5udpy 6x+/zyfJb7gU7w+BjZ40oqPyuXyVQRoN7A/4FkuGJf7McSJolnwtK/F/JDZ4jAPT iBzCSa9GXIHJ+nZby/+TBtWPoQCOziFjIbNzEjcAJmz3dMQiGy6nYjlXcdPaM9LQ YQ2F3XWXDihx5Ud3d350Np/y1YLe5AKq9jyjLVCsP6kHwbVtTUnvV6FGJOkuSGAM UCsGR7M3y2BUJs7AiZKj63vKjNvpTFLHeBB4ZjSrSnms/EgiJ6xcsMbFGiTu8nk+ crz7s3s8beZOI1am4g/7jBK+wxtO/PVjjaFztdN4Dgej7R2H0XoUH7vZrU25JUQM vu1o -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:49 2025 by rpki-client on console.sobornost.net