$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa File: b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa (raw, json) Hash identifier: SIBazIGlhVnX5kPaXAN347ullWcBlPOvMzewWHimk38= Subject key identifier: C5:68:4E:F3:37:BD:C3:60:7B:F0:0F:80:94:B5:EB:94:AC:4D:CD:84 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 220FD8CFF4073E4848E7B1AEC682A3150A70FD96 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa Signing time: Mon 21 Apr 2025 15:10:27 +0000 ROA not before: Mon 21 Apr 2025 15:10:27 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0f:d8:cf:f4:07:3e:48:48:e7:b1:ae:c6:82:a3:15:0a:70:fd:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:10:27 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=3da52b087ff8a701bcd9401fab3d7a7d4bc54d5e89395ce57a84daa88ec18ce7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:d9:4d:6c:ca:e5:d0:fc:6d:6c:f1:98:a4: 7e:a6:04:95:ed:7f:10:50:c6:6e:c0:91:27:be:d1: 28:42:ce:0a:de:5e:6b:5f:f3:6a:21:fd:04:d2:f1: fd:5c:ea:12:b6:b4:ae:06:ed:a7:35:d7:ec:7a:25: d8:cb:81:15:71:16:2c:09:bb:64:68:b8:f0:c1:e4: f5:fb:4b:1b:84:a6:1b:92:81:31:e4:40:27:dd:cd: 3c:dd:29:14:72:91:5f:db:ec:c1:c6:17:66:22:d3: 5d:4d:5a:b9:53:73:bf:f9:b9:d4:62:8d:c9:8b:a3: fa:fb:81:82:cd:b6:cc:f4:eb:39:2c:59:18:a5:3a: 2c:60:f4:e6:35:54:83:77:18:81:30:27:91:40:4b: e2:da:a2:cc:9f:4e:f3:42:6d:d5:b0:1f:b9:73:3c: 86:7a:f5:a7:8e:8a:cb:f1:85:e2:c5:ee:2e:55:6f: 6a:95:71:a1:05:3b:61:b2:8b:64:db:fc:71:58:0a: d0:43:eb:8a:99:b6:6f:44:58:e6:f4:9e:97:a1:99: 99:7b:4e:b0:f7:54:26:a0:ac:d6:7a:a2:7a:c3:e7: 53:8d:43:5d:3d:54:db:57:1e:e9:fd:9c:d8:cb:1c: 8e:9e:99:f5:fd:4e:25:3a:d0:39:c2:74:70:80:07: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:68:4E:F3:37:BD:C3:60:7B:F0:0F:80:94:B5:EB:94:AC:4D:CD:84 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2000::/40 Signature Algorithm: sha256WithRSAEncryption 7e:ad:b2:15:78:e8:e4:8f:98:b2:70:c2:91:45:6a:17:81:bd: 29:25:e9:67:35:79:4d:4f:74:ae:7a:aa:81:42:ca:65:e9:cd: 9b:06:f0:2c:76:f2:21:87:ab:3d:13:94:60:19:4c:19:31:1d: d2:71:a2:bc:04:f6:f1:1b:e1:87:68:95:1e:91:f7:41:c4:12: 49:13:92:78:8c:72:e7:f5:86:88:b4:3b:26:e9:66:bf:69:a2: be:65:e2:ae:45:ab:bd:34:70:b6:9b:d5:b6:ca:1c:cd:50:b7: 70:59:ed:1e:b1:99:ae:fe:1e:09:20:df:ca:57:7c:f3:da:70: 92:80:67:ac:2c:2c:4c:c8:44:06:27:5d:08:68:fe:a4:50:97: bf:c9:39:62:25:ac:1e:1d:d3:c8:61:0d:a2:27:75:40:e7:d1: 47:4d:82:7f:f5:5e:e0:ed:e0:84:87:29:29:19:43:c6:65:d3: 20:6a:0e:30:b4:4b:e0:1c:2a:b1:9c:a5:1a:c3:0e:e9:e2:42: 4a:15:6a:d2:4c:27:f3:97:2e:75:d9:d9:3b:d8:f0:1f:32:fc: 44:63:09:5d:3a:ab:65:40:42:07:36:34:54:24:78:62:60:65: 89:9a:78:5a:04:1d:ce:02:19:80:48:c3:7e:76:3b:a2:38:a1: 0f:fc:09:00 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIg/Yz/QHPkhI57GuxoKjFQpw/ZYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MTAyN1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAM2RhNTJiMDg3ZmY4YTcwMWJjZDk0 MDFmYWIzZDdhN2Q0YmM1NGQ1ZTg5Mzk1Y2U1N2E4NGRhYTg4ZWMxOGNlNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSzZTWzK5dD8bWzxmKR+pgSV7X8Q UMZuwJEnvtEoQs4K3l5rX/NqIf0E0vH9XOoStrSuBu2nNdfseiXYy4EVcRYsCbtk aLjwweT1+0sbhKYbkoEx5EAn3c083SkUcpFf2+zBxhdmItNdTVq5U3O/+bnUYo3J i6P6+4GCzbbM9Os5LFkYpTosYPTmNVSDdxiBMCeRQEvi2qLMn07zQm3VsB+5czyG evWnjorL8YXixe4uVW9qlXGhBTthsotk2/xxWArQQ+uKmbZvRFjm9J6XoZmZe06w 91QmoKzWeqJ6w+dTjUNdPVTbVx7p/ZzYyxyOnpn1/U4lOtA5wnRwgAe9PQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMVoTvM3vcNge/APgJS165SsTc2EMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4NjhlMTEyLTJjNjgtNGRjNS1iMjlmLThjNjRjNGUwOWMwNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaACAwDQYJKoZIhvcNAQELBQADggEBAH6tshV46OSPmLJwwpFF aheBvSkl6Wc1eU1PdK56qoFCymXpzZsG8Cx28iGHqz0TlGAZTBkxHdJxorwE9vEb 4YdolR6R90HEEkkTkniMcuf1hoi0OybpZr9por5l4q5Fq700cLab1bbKHM1Qt3BZ 7R6xma7+Hgkg38pXfPPacJKAZ6wsLEzIRAYnXQho/qRQl7/JOWIlrB4d08hhDaIn dUDn0UdNgn/1XuDt4ISHKSkZQ8Zl0yBqDjC0S+AcKrGcpRrDDuniQkoVatJMJ/OX LnXZ2TvY8B8y/ERjCV06q2VAQgc2NFQkeGJgZYmaeFoEHc4CGYBIw352O6I4oQ/8 CQA= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:50 2025 by rpki-client on console.sobornost.net