$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa File: ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa (raw, json) Hash identifier: wT5ZVhEf6yjHU+KhLfOAhlxmXVbqUpyCBvvhUKw6Tj0= Subject key identifier: B7:FB:FB:8F:2D:DC:C2:C2:66:C3:8F:91:1A:D7:F1:CC:8C:BD:A9:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6421E3CB5EEEB9B210D9DA2C104D39952075526F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa Signing time: Mon 21 Apr 2025 16:11:55 +0000 ROA not before: Mon 21 Apr 2025 16:11:55 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:21:e3:cb:5e:ee:b9:b2:10:d9:da:2c:10:4d:39:95:20:75:52:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:11:55 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=3da869df3684786f83e00f2536392c22ba394cb041cfb3ca138914f4783da3ac, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d9:4d:69:6b:04:7c:c9:e0:8e:d0:1e:dc:7a: 41:38:78:f3:1d:51:c6:67:12:81:3c:4e:57:50:b1: 7d:15:46:33:84:50:50:7c:ad:a8:8a:c9:de:4f:e4: 09:7c:9d:c2:d5:1a:c9:68:45:23:5a:9b:48:d5:0b: 88:c4:08:28:31:6a:6d:2c:2e:99:0c:85:0e:73:8f: ac:5e:72:28:02:9d:d4:1b:31:8f:aa:ce:39:58:0a: 76:ad:f5:dd:21:01:33:43:de:50:76:ee:74:a0:15: a4:38:cb:9f:45:8a:ea:13:01:87:48:b0:a0:66:17: 77:79:56:83:96:dd:82:b9:16:4a:27:53:fb:6e:d0: 50:46:4f:66:1d:0d:66:c4:6d:af:6a:98:d9:1e:73: 62:b4:f5:b2:8a:e8:02:67:f5:11:24:50:1b:8c:24: 39:79:29:6b:aa:1d:d4:53:08:87:4e:7e:a7:f7:2d: a2:66:29:5d:cf:60:b4:c1:4c:a4:4d:a7:e3:ac:c8: 11:2a:e1:54:77:06:94:fc:56:7b:89:e1:b9:81:4a: 3c:c0:72:cc:78:32:5d:e4:2a:37:0c:5f:2c:8e:68: c9:4d:2a:77:a2:2f:7b:24:68:84:75:23:a3:28:1b: 98:04:7d:02:9a:19:64:fc:4f:68:9e:24:6c:e6:6c: 91:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FB:FB:8F:2D:DC:C2:C2:66:C3:8F:91:1A:D7:F1:CC:8C:BD:A9:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ba1f6ba7-aecf-4871-a9f2-3e20ff35714b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:2000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:44:68:36:7f:09:a5:5c:d4:de:56:a8:5e:42:c4:e0:fe:b8: b0:5d:90:8d:d7:f9:00:7b:b8:72:46:63:fb:d7:7c:46:c8:28: 5e:0f:1c:80:00:32:c5:71:45:af:97:60:db:1b:d4:78:45:e3: 21:ea:d0:f7:7f:e2:a8:26:85:1f:c1:fc:38:42:2d:88:e4:ae: 34:e9:44:81:55:8c:48:72:51:3e:0c:13:0e:a0:39:eb:72:12: 59:b9:6f:d8:b8:40:16:4c:5a:f3:82:c1:ac:6a:87:8d:4b:97: 4e:80:27:a3:0a:a0:68:03:66:65:4b:d2:2e:cc:34:bd:5d:46: e6:fc:3c:4c:89:01:b4:b9:95:68:c7:2f:83:89:be:24:f6:db: 8c:f1:fd:ac:d1:06:92:c3:7e:e6:3d:15:15:59:7a:e8:f9:ec: a8:1d:f0:51:48:85:e1:7b:5b:e4:9f:05:98:7c:e0:5c:90:9c: 66:1d:20:1a:fb:e7:c8:71:30:6b:c6:ed:bd:15:c5:6d:ae:b7: c4:3f:40:a9:70:48:3a:83:a5:79:d3:89:5a:05:53:1d:02:6e: fd:2a:72:a8:30:a1:4a:e7:e4:39:20:91:1e:14:9a:0e:60:06: f7:eb:c3:1a:48:0a:da:3a:a8:09:7e:78:90:1f:f1:40:6f:29: b4:31:cc:95 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZCHjy17uubIQ2dosEE05lSB1Um8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MTE1NVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAM2RhODY5ZGYzNjg0Nzg2ZjgzZTAw ZjI1MzYzOTJjMjJiYTM5NGNiMDQxY2ZiM2NhMTM4OTE0ZjQ3ODNkYTNhYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudlNaWsEfMngjtAe3HpBOHjzHVHG ZxKBPE5XULF9FUYzhFBQfK2oisneT+QJfJ3C1RrJaEUjWptI1QuIxAgoMWptLC6Z DIUOc4+sXnIoAp3UGzGPqs45WAp2rfXdIQEzQ95Qdu50oBWkOMufRYrqEwGHSLCg Zhd3eVaDlt2CuRZKJ1P7btBQRk9mHQ1mxG2vapjZHnNitPWyiugCZ/URJFAbjCQ5 eSlrqh3UUwiHTn6n9y2iZildz2C0wUykTafjrMgRKuFUdwaU/FZ7ieG5gUo8wHLM eDJd5Co3DF8sjmjJTSp3oi97JGiEdSOjKBuYBH0Cmhlk/E9oniRs5myRGQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLf7+48t3MLCZsOPkRrX8cyMvalBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JhMWY2YmE3LWFlY2YtNDg3MS1hOWYyLTNlMjBmZjM1NzE0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoCAwDQYJKoZIhvcNAQELBQADggEBAFxEaDZ/CaVc1N5WqF5C xOD+uLBdkI3X+QB7uHJGY/vXfEbIKF4PHIAAMsVxRa+XYNsb1HhF4yHq0Pd/4qgm hR/B/DhCLYjkrjTpRIFVjEhyUT4MEw6gOetyElm5b9i4QBZMWvOCwaxqh41Ll06A J6MKoGgDZmVL0i7MNL1dRub8PEyJAbS5lWjHL4OJviT224zx/azRBpLDfuY9FRVZ euj57Kgd8FFIheF7W+SfBZh84FyQnGYdIBr758hxMGvG7b0VxW2ut8Q/QKlwSDqD pXnTiVoFUx0Cbv0qcqgwoUrn5DkgkR4Umg5gBvfrwxpICto6qAl+eJAf8UBvKbQx zJU= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:50 2025 by rpki-client on console.sobornost.net