$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9c913ee-ed05-4815-9620-c3c48eb368a1.roa File: b9c913ee-ed05-4815-9620-c3c48eb368a1.roa (raw, json) Hash identifier: Y4mzy6jZ/5FVPOmqIqQ+BsEH3l+xZhzp2G5e6TX6DVg= Subject key identifier: F1:25:53:F4:F5:CD:16:2A:4D:2B:F8:A8:DC:3D:63:E7:CB:AE:91:34 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 254947BBF0A04291B1AB0341282812B5FF363A4B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9c913ee-ed05-4815-9620-c3c48eb368a1.roa Signing time: Mon 21 Apr 2025 16:00:36 +0000 ROA not before: Mon 21 Apr 2025 16:00:36 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:49:47:bb:f0:a0:42:91:b1:ab:03:41:28:28:12:b5:ff:36:3a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:00:36 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=835847cbbf8ccca957567441a1a7d26a6ea242abeb94cee8d60142234efb1801, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6e:40:e1:b5:8a:f3:9f:67:f7:05:85:e4:9a: 86:f3:27:ca:8c:64:16:6c:f0:c8:6b:b5:99:08:45: 80:ef:0e:94:5b:08:fb:e7:4a:0c:58:1f:1c:e0:df: 09:9a:28:6e:9a:84:b4:e8:32:ce:d8:22:2b:cb:c6: cc:d1:92:6d:80:a3:ff:fe:02:81:e7:5e:fa:c5:e8: d4:f3:0c:03:0b:8a:3c:f0:28:20:35:ee:59:ed:8f: 35:fd:87:05:67:ab:67:96:8e:62:9c:d7:e9:3a:16: 9b:25:94:01:ef:39:0c:97:72:7f:4a:db:02:05:38: f6:8d:0c:16:2f:bb:cd:d1:d8:da:1e:dc:1c:96:1f: 57:dd:99:08:52:b4:c9:cd:5c:93:2d:e8:5a:d0:95: 9d:be:71:9e:24:d7:b0:a1:5d:c9:c4:8e:73:d1:d5: 0e:0e:bc:fc:05:42:c0:d0:6e:21:4c:35:4b:ad:37: 26:eb:26:c8:5f:c7:bb:7e:1a:7d:ea:2d:6b:9b:05: 1e:e1:81:64:80:90:22:5f:23:46:54:d0:80:ac:91: 8a:d8:92:4c:82:48:7b:00:49:38:2b:dd:63:1e:86: 94:0c:0b:b8:c3:93:47:68:21:13:04:a6:76:1f:98: 52:18:ed:0b:59:72:9a:a7:fd:ba:64:cc:5e:8a:94: f7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:25:53:F4:F5:CD:16:2A:4D:2B:F8:A8:DC:3D:63:E7:CB:AE:91:34 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b9c913ee-ed05-4815-9620-c3c48eb368a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:2800::/40 Signature Algorithm: sha256WithRSAEncryption 80:d1:de:46:b3:17:32:32:5a:40:c1:ca:75:6f:b7:50:5e:17: ea:05:7f:f1:61:ce:81:cd:c6:ac:88:27:5f:26:8d:07:b7:a1: de:da:9a:fc:e9:84:d9:0a:bf:88:47:35:0f:8d:04:15:c8:d3: 14:a9:aa:f2:e8:40:c6:1a:5c:fb:a0:91:66:83:24:09:e9:ed: 5b:3a:db:c2:41:0e:89:cc:e1:32:73:30:da:8e:27:2e:e8:86: 46:c8:ec:b2:ab:35:fb:1a:0c:a5:96:ad:29:b5:39:21:71:ee: 1a:50:4d:a8:7c:4e:93:9c:87:2a:68:78:64:93:89:e3:2c:0b: c3:b2:ed:04:a7:e7:59:c1:34:8a:ad:81:4f:25:9c:ea:42:5a: b5:eb:5d:2b:17:f2:7f:1a:4a:d7:ef:f0:49:58:73:c3:11:bd: 11:c6:f6:4f:35:a5:d3:33:18:a9:36:32:8b:94:00:ce:fe:92: a8:6d:69:dc:30:cf:8f:45:21:a4:ad:dd:eb:b8:5e:a0:23:83: 63:bc:16:02:b3:1c:46:96:c7:7d:7d:38:b7:0d:87:7f:69:1a: cc:0f:8b:71:3d:40:a7:64:27:9b:61:7c:c4:fd:49:cf:f3:a8: bc:b7:04:8c:8f:3b:ac:69:69:2e:0f:9d:f4:a2:77:06:0f:80: cc:8c:0c:b6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUJUlHu/CgQpGxqwNBKCgStf82OkswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MDAzNloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAODM1ODQ3Y2JiZjhjY2NhOTU3NTY3 NDQxYTFhN2QyNmE2ZWEyNDJhYmViOTRjZWU4ZDYwMTQyMjM0ZWZiMTgwMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW5A4bWK859n9wWF5JqG8yfKjGQW bPDIa7WZCEWA7w6UWwj750oMWB8c4N8JmihumoS06DLO2CIry8bM0ZJtgKP//gKB 5176xejU8wwDC4o88CggNe5Z7Y81/YcFZ6tnlo5inNfpOhabJZQB7zkMl3J/StsC BTj2jQwWL7vN0djaHtwclh9X3ZkIUrTJzVyTLeha0JWdvnGeJNewoV3JxI5z0dUO Drz8BULA0G4hTDVLrTcm6ybIX8e7fhp96i1rmwUe4YFkgJAiXyNGVNCArJGK2JJM gkh7AEk4K91jHoaUDAu4w5NHaCETBKZ2H5hSGO0LWXKap/26ZMxeipT3dQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPElU/T1zRYqTSv4qNw9Y+fLrpE0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I5YzkxM2VlLWVkMDUtNDgxNS05NjIwLWMzYzQ4ZWIzNjhhMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaSgwDQYJKoZIhvcNAQELBQADggEBAIDR3kazFzIyWkDBynVv t1BeF+oFf/FhzoHNxqyIJ18mjQe3od7amvzphNkKv4hHNQ+NBBXI0xSpqvLoQMYa XPugkWaDJAnp7Vs628JBDonM4TJzMNqOJy7ohkbI7LKrNfsaDKWWrSm1OSFx7hpQ Tah8TpOchypoeGSTieMsC8Oy7QSn51nBNIqtgU8lnOpCWrXrXSsX8n8aStfv8ElY c8MRvRHG9k81pdMzGKk2MouUAM7+kqhtadwwz49FIaSt3eu4XqAjg2O8FgKzHEaW x319OLcNh39pGswPi3E9QKdkJ5thfMT9Sc/zqLy3BIyPO6xpaS4PnfSidwYPgMyM DLY= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:50 2025 by rpki-client on console.sobornost.net