$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa File: b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa (raw, json) Hash identifier: rdvzf1ekYrWRJcyS/W4riRPGdvBa8zPUvarlEQXAUb0= Subject key identifier: B6:34:7F:4C:4F:B5:63:1F:72:46:7A:C0:FD:90:70:FD:51:2D:96:9C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F8A984F2F867833CA3D8CFA245ACE0E64481DB2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa Signing time: Sat 19 Apr 2025 00:01:25 +0000 ROA not before: Sat 19 Apr 2025 00:01:25 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8a:98:4f:2f:86:78:33:ca:3d:8c:fa:24:5a:ce:0e:64:48:1d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:01:25 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=84d558aa7dd63370f3720063b284736aeee1325f0e894ae57ca313ecb514ef44, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:28:ba:6b:e7:5b:92:72:42:83:60:b8:93: 39:65:6e:a2:5e:84:30:47:5d:e1:61:e8:67:ed:c9: c4:2b:37:9c:ba:b8:89:39:6d:4c:a2:16:92:ed:f3: e2:df:5c:ed:84:20:e5:d8:13:10:c3:3b:9e:8d:bf: fc:94:fb:9c:c3:d7:4d:41:2b:6c:ea:c4:ca:16:d4: 0f:54:9a:77:0f:74:b9:0a:83:9d:d6:bb:cb:52:91: 9f:9e:7e:0b:3d:37:fa:88:9f:dd:f1:b0:a2:27:31: 03:e1:34:1a:f2:71:36:5f:f6:14:99:a0:b7:8c:17: 9d:c5:75:8c:5e:bd:43:bd:b8:20:b4:56:ba:8a:27: fa:09:65:95:5b:a0:a4:9f:d4:6d:c3:9d:12:8d:0f: d6:8b:9e:1b:c6:2b:ef:db:79:ba:3b:09:a8:5a:b7: 2e:86:98:a9:87:42:e6:00:4d:51:3d:6b:b6:25:1d: b6:74:b7:4d:a3:29:5e:6c:f3:8e:0b:d2:2d:bb:0e: 85:a4:d2:b9:2d:b9:0b:64:d8:90:55:36:64:a4:03: 13:da:c9:f5:30:73:c2:55:68:d6:8c:3f:02:98:de: 2b:a4:86:e1:4d:5e:25:80:72:e4:57:e4:11:b0:2b: e2:b2:98:58:e3:98:ab:5f:4e:02:eb:b7:ee:ef:c7: d6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:34:7F:4C:4F:B5:63:1F:72:46:7A:C0:FD:90:70:FD:51:2D:96:9C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b7927220-65f6-4672-9bc9-acf8cfe8adf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 3a:01:cc:47:17:96:29:bf:31:3c:b1:3d:8a:ba:eb:ff:a4:09: a7:ae:e0:ee:76:19:b3:1b:74:ba:2b:ae:f4:c7:10:e0:f1:c2: ea:f0:95:b4:7d:7d:25:83:f6:85:09:08:eb:4a:4f:5e:7b:b2: 0e:5e:32:d7:cd:1e:71:c9:db:42:e4:51:58:20:38:fd:97:4f: 8d:a8:b3:e9:0e:d5:63:e1:e0:5a:77:36:c6:24:8c:f8:53:4e: 69:92:f3:ec:7e:8e:66:73:91:97:25:0d:46:f9:4c:58:4f:97: 82:2d:0c:b2:82:cd:48:66:a9:69:bb:ca:94:05:ab:0b:60:3e: 6b:6c:30:36:1a:57:67:32:e5:c7:3a:0e:e4:26:c1:40:45:8e: 6d:85:2c:39:9d:87:84:bc:05:47:b0:6d:2d:99:5b:0c:34:c9: ae:07:8e:60:f6:ab:0d:7d:b6:30:20:1a:61:f9:12:ae:80:24: 65:78:f1:6a:2e:ef:53:cf:2c:62:7f:d4:10:73:2f:67:52:3b: 3f:5d:e1:59:29:45:ff:f5:cd:41:52:73:db:da:f7:9b:1a:17: 21:46:ad:38:6e:98:ed:77:5c:ab:aa:20:f8:37:6e:78:20:6e: 24:37:8e:aa:e2:b4:36:6d:31:04:01:cc:0e:bf:f4:02:12:c3: ea:b4:e9:5a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUf4qYTy+GeDPKPYz6JFrODmRIHbIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMDEyNVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAODRkNTU4YWE3ZGQ2MzM3MGYzNzIw MDYzYjI4NDczNmFlZWUxMzI1ZjBlODk0YWU1N2NhMzEzZWNiNTE0ZWY0NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlwoumvnW5JyQoNguJM5ZW6iXoQw R13hYehn7cnEKzecuriJOW1MohaS7fPi31zthCDl2BMQwzuejb/8lPucw9dNQSts 6sTKFtQPVJp3D3S5CoOd1rvLUpGfnn4LPTf6iJ/d8bCiJzED4TQa8nE2X/YUmaC3 jBedxXWMXr1DvbggtFa6iif6CWWVW6Ckn9Rtw50SjQ/Wi54bxivv23m6OwmoWrcu hpiph0LmAE1RPWu2JR22dLdNoylebPOOC9Ituw6FpNK5LbkLZNiQVTZkpAMT2sn1 MHPCVWjWjD8CmN4rpIbhTV4lgHLkV+QRsCvisphY45irX04C67fu78fWtQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLY0f0xPtWMfckZ6wP2QcP1RLZacMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I3OTI3MjIwLTY1ZjYtNDY3Mi05YmM5LWFjZjhjZmU4YWRmNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAPDAMA0GCSqGSIb3DQEBCwUAA4IBAQA6AcxHF5YpvzE8sT2K uuv/pAmnruDudhmzG3S6K670xxDg8cLq8JW0fX0lg/aFCQjrSk9ee7IOXjLXzR5x ydtC5FFYIDj9l0+NqLPpDtVj4eBadzbGJIz4U05pkvPsfo5mc5GXJQ1G+UxYT5eC LQyygs1IZqlpu8qUBasLYD5rbDA2GldnMuXHOg7kJsFARY5thSw5nYeEvAVHsG0t mVsMNMmuB45g9qsNfbYwIBph+RKugCRlePFqLu9Tzyxif9QQcy9nUjs/XeFZKUX/ 9c1BUnPb2vebGhchRq04bpjtd1yrqiD4N254IG4kN46q4rQ2bTEEAcwOv/QCEsPq tOla -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:50 2025 by rpki-client on console.sobornost.net