$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbc222e6-116f-4448-906c-f1f4faecf1a2.roa File: bbc222e6-116f-4448-906c-f1f4faecf1a2.roa (raw, json) Hash identifier: LoQ+8SKPJNPzKr7HnSE51s7gK7wsbVoNhWfyB0Bbwfc= Subject key identifier: 43:62:AF:A0:C6:B1:BF:DC:53:30:A3:E8:16:23:42:55:44:CE:E8:4F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1DCFECF2ED9A361B53E1AD5C0877F15B7BEA966F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbc222e6-116f-4448-906c-f1f4faecf1a2.roa Signing time: Mon 21 Apr 2025 15:21:18 +0000 ROA not before: Mon 21 Apr 2025 15:21:18 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:80c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:cf:ec:f2:ed:9a:36:1b:53:e1:ad:5c:08:77:f1:5b:7b:ea:96:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:21:18 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=df95048ce90c6fbeb69f952bcec60160cec6b6f0fcbf7169665689836b00e545, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:17:36:91:8b:6a:b7:f4:f1:f9:2d:3e:48: 7b:78:e9:bc:9e:81:d6:14:fb:8a:46:c0:d9:34:2a: c5:17:a3:db:86:ef:71:c2:71:50:f9:50:d3:56:66: 86:3d:1b:90:5d:0e:ea:79:b8:76:3f:71:64:8c:16: 3b:9d:35:cf:51:1e:59:c4:c3:90:88:4c:0b:aa:98: d4:39:7e:c7:63:5a:a7:36:e5:b7:12:31:7c:e2:01: c8:d7:9b:41:35:a7:fc:9a:7e:1c:f5:1d:b9:0e:69: 72:b3:53:d2:08:48:bb:e9:af:bd:ba:aa:b5:85:07: 12:62:05:92:2d:5c:52:c0:85:78:5f:2e:41:3b:40: 25:5b:a1:11:99:d3:fa:90:8f:ad:b9:eb:e5:f9:5a: c8:e7:04:06:b9:4e:81:89:d4:8e:4a:4f:f4:bf:ee: e2:f5:48:90:66:7e:9f:cd:5f:17:43:0c:e2:de:4c: 2b:74:31:9b:f5:43:be:02:e4:ce:f2:63:6b:72:93: 83:96:e4:be:e3:a4:c9:82:ac:3a:fd:a0:f5:1b:33: 79:05:66:3c:c7:e6:82:1e:2e:7f:21:7a:39:30:f5: 4e:6a:b5:fb:40:96:60:0f:51:08:9d:e6:d6:f6:62: 91:a3:2e:d2:f7:23:bd:d9:1a:c4:e0:2f:e8:e3:48: ab:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:62:AF:A0:C6:B1:BF:DC:53:30:A3:E8:16:23:42:55:44:CE:E8:4F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bbc222e6-116f-4448-906c-f1f4faecf1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:80c0::/46 Signature Algorithm: sha256WithRSAEncryption 2c:40:d0:27:bd:54:e9:3c:95:98:48:db:8c:1a:c9:5b:a1:17: 36:75:6c:7e:23:4b:63:b9:3f:c6:25:6d:23:fb:00:e2:95:8e: aa:1d:6e:44:df:67:b9:0d:b4:9e:89:51:2b:ad:8c:c7:8b:30: 06:07:72:cd:dc:64:9f:6d:16:3f:91:f2:90:39:42:28:48:08: d7:41:46:09:18:4e:9e:39:19:3b:b3:20:98:b6:63:4a:fc:19: c2:c5:b7:b8:2d:5f:47:69:c4:02:7a:4d:d4:49:50:62:e5:ca: 7d:45:ee:56:6d:c7:96:c8:81:13:ee:98:55:e5:a5:dd:ef:85: 3f:e3:39:48:ca:c4:a8:f0:aa:f7:4b:0e:18:70:83:c6:87:e1: d3:2d:a0:04:bf:2d:c7:10:c1:64:a6:9e:9b:42:44:8e:03:1d: a4:e0:a3:d4:1b:0d:d0:d3:79:72:62:04:cb:f9:f4:a3:e9:69: 93:12:e0:fe:88:d5:88:cc:97:02:a0:4b:e2:68:1e:dd:58:28: 17:da:9d:6b:80:c1:0e:42:5b:0e:45:15:f9:63:0c:fb:0d:a6: 16:d5:a6:24:3f:b3:e0:2a:71:47:23:dc:ce:dd:3c:56:7b:21: 7b:6a:54:e7:40:dc:af:c3:f9:20:60:11:68:ea:51:03:6f:89: 1a:ec:dc:a3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHc/s8u2aNhtT4a1cCHfxW3vqlm8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MjExOFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAZGY5NTA0OGNlOTBjNmZiZWI2OWY5 NTJiY2VjNjAxNjBjZWM2YjZmMGZjYmY3MTY5NjY1Njg5ODM2YjAwZTU0NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt14XNpGLarf08fktPkh7eOm8noHW FPuKRsDZNCrFF6Pbhu9xwnFQ+VDTVmaGPRuQXQ7qebh2P3FkjBY7nTXPUR5ZxMOQ iEwLqpjUOX7HY1qnNuW3EjF84gHI15tBNaf8mn4c9R25Dmlys1PSCEi76a+9uqq1 hQcSYgWSLVxSwIV4Xy5BO0AlW6ERmdP6kI+tuevl+VrI5wQGuU6BidSOSk/0v+7i 9UiQZn6fzV8XQwzi3kwrdDGb9UO+AuTO8mNrcpODluS+46TJgqw6/aD1GzN5BWY8 x+aCHi5/IXo5MPVOarX7QJZgD1EInebW9mKRoy7S9yO92RrE4C/o40irKQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFENir6DGsb/cUzCj6BYjQlVEzuhPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JiYzIyMmU2LTExNmYtNDQ0OC05MDZjLWYxZjRmYWVjZjFhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaYDAMA0GCSqGSIb3DQEBCwUAA4IBAQAsQNAnvVTpPJWYSNuM GslboRc2dWx+I0tjuT/GJW0j+wDilY6qHW5E32e5DbSeiVErrYzHizAGB3LN3GSf bRY/kfKQOUIoSAjXQUYJGE6eORk7syCYtmNK/BnCxbe4LV9HacQCek3USVBi5cp9 Re5WbceWyIET7phV5aXd74U/4zlIysSo8Kr3Sw4YcIPGh+HTLaAEvy3HEMFkpp6b QkSOAx2k4KPUGw3Q03lyYgTL+fSj6WmTEuD+iNWIzJcCoEviaB7dWCgX2p1rgMEO QlsORRX5Ywz7DaYW1aYkP7PgKnFHI9zO3TxWeyF7alTnQNyvw/kgYBFo6lEDb4ka 7Nyj -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:50 2025 by rpki-client on console.sobornost.net