$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf40bbcd-0211-4289-921c-c7d5e705cbda.roa File: bf40bbcd-0211-4289-921c-c7d5e705cbda.roa (raw, json) Hash identifier: g8VMZ6VDEx1B8kj29C/lrVBMwPEvEVoxXs4xlhVz/V4= Subject key identifier: 09:49:B0:89:06:C4:14:46:E9:A0:71:0D:D0:63:C7:38:E7:5A:50:68 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7182DBC0B6A1C7CC27ADF686DBF0108335C19406 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf40bbcd-0211-4289-921c-c7d5e705cbda.roa Signing time: Mon 21 Apr 2025 16:31:06 +0000 ROA not before: Mon 21 Apr 2025 16:31:06 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:82:db:c0:b6:a1:c7:cc:27:ad:f6:86:db:f0:10:83:35:c1:94:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:31:06 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=ae91e7fd8a55a2dd043a4f33acaf5006e5747ebe3effd4b625f35ac8e6ac7297, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:e4:1c:e2:7c:29:ee:ea:32:31:cc:fe:ed: 63:70:87:57:4a:5f:26:44:ae:ae:a3:02:04:be:ea: b5:e4:17:bc:c0:dd:c8:b7:11:96:55:c3:4b:c5:38: cc:4d:f7:83:4f:e1:b4:bf:1c:d6:09:50:2a:76:fe: bd:c7:5a:e2:db:b0:89:ae:21:b7:4b:7b:4d:e9:2f: 76:2c:74:71:8e:ba:5f:96:68:2d:7b:da:cb:57:36: 2c:97:f8:94:10:e1:60:bb:c5:4c:8d:2f:69:83:c7: f2:4a:a1:e7:ee:9b:d8:19:fb:97:7b:da:bf:06:0c: e4:c2:06:58:a0:2c:7d:a2:27:62:f6:5b:10:b7:46: b4:f2:6e:b5:01:d3:3a:bd:61:3d:c6:ca:d0:bb:87: 45:b1:09:1e:67:23:9c:e6:ed:2a:c1:23:54:5e:43: e8:e5:73:c6:ed:1b:e7:72:58:d5:ea:db:c6:d4:34: d7:15:2c:4d:40:3b:31:54:93:c1:9a:98:1e:35:c5: 65:e0:f5:3f:b1:25:e7:1a:18:ed:15:5f:7b:d8:fe: 42:bb:5d:da:3a:b5:9c:73:73:ab:8c:22:fc:2f:85: e6:8c:13:15:be:86:5f:f3:4c:79:0f:64:1b:9f:0d: 54:db:7e:f0:0b:33:79:bb:20:88:5a:8d:92:23:e1: 3d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:49:B0:89:06:C4:14:46:E9:A0:71:0D:D0:63:C7:38:E7:5A:50:68 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf40bbcd-0211-4289-921c-c7d5e705cbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:f000::/40 Signature Algorithm: sha256WithRSAEncryption 29:88:41:66:9f:42:ad:56:1c:3b:db:f3:65:79:0b:57:f2:e3: e6:92:c0:97:17:4b:97:8b:70:32:1e:61:8d:18:e6:18:cb:65: e9:59:0c:8d:ef:86:66:06:ce:a0:5e:34:8f:ec:75:70:c1:2b: 8b:70:8a:d3:0b:ca:27:fc:16:e9:39:56:29:1e:3a:56:3e:ca: b9:6e:a0:f3:b6:11:bf:3f:3e:b4:da:d5:0a:aa:29:e4:90:f8: 12:e6:0f:fe:86:10:5b:e3:e9:ac:e9:fa:14:56:80:fc:20:bf: ff:73:47:cc:2d:88:28:de:24:6a:f4:fc:1f:27:35:7c:42:c5: 66:d0:ce:7c:34:42:5a:09:49:98:4a:f6:2b:35:16:7d:8e:ff: 05:4e:a9:92:cb:c2:47:71:be:61:bf:54:08:a9:43:7a:eb:e0: ec:12:ec:0e:4e:0e:ac:e5:20:5e:85:81:cc:58:3f:1b:8e:3e: 9d:1b:4a:97:51:d6:fa:f4:f7:d7:27:33:ea:61:09:93:25:ba: 6e:b5:6e:ac:a8:17:42:cc:4d:fc:7e:47:54:36:58:e9:1f:f0: fc:f8:a6:fe:53:7a:0f:f4:19:f3:b9:95:9e:d6:9f:aa:80:7a: a2:4e:61:b5:70:4a:c1:a5:33:f4:06:23:f4:24:e2:19:e7:7b: b4:17:76:f1 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUcYLbwLahx8wnrfaG2/AQgzXBlAYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MzEwNloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYWU5MWU3ZmQ4YTU1YTJkZDA0M2E0 ZjMzYWNhZjUwMDZlNTc0N2ViZTNlZmZkNGI2MjVmMzVhYzhlNmFjNzI5NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx/kHOJ8Ke7qMjHM/u1jcIdXSl8m RK6uowIEvuq15Be8wN3ItxGWVcNLxTjMTfeDT+G0vxzWCVAqdv69x1ri27CJriG3 S3tN6S92LHRxjrpflmgte9rLVzYsl/iUEOFgu8VMjS9pg8fySqHn7pvYGfuXe9q/ BgzkwgZYoCx9oidi9lsQt0a08m61AdM6vWE9xsrQu4dFsQkeZyOc5u0qwSNUXkPo 5XPG7RvncljV6tvG1DTXFSxNQDsxVJPBmpgeNcVl4PU/sSXnGhjtFV972P5Cu13a OrWcc3OrjCL8L4XmjBMVvoZf80x5D2Qbnw1U237wCzN5uyCIWo2SI+E9HQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAlJsIkGxBRG6aBxDdBjxzjnWlBoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2JmNDBiYmNkLTAyMTEtNDI4OS05MjFjLWM3ZDVlNzA1Y2JkYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+PAwDQYJKoZIhvcNAQELBQADggEBACmIQWafQq1WHDvb82V5 C1fy4+aSwJcXS5eLcDIeYY0Y5hjLZelZDI3vhmYGzqBeNI/sdXDBK4twitMLyif8 Fuk5VikeOlY+yrluoPO2Eb8/PrTa1QqqKeSQ+BLmD/6GEFvj6azp+hRWgPwgv/9z R8wtiCjeJGr0/B8nNXxCxWbQznw0QloJSZhK9is1Fn2O/wVOqZLLwkdxvmG/VAip Q3rr4OwS7A5ODqzlIF6FgcxYPxuOPp0bSpdR1vr099cnM+phCZMlum61bqyoF0LM Tfx+R1Q2WOkf8Pz4pv5Teg/0GfO5lZ7Wn6qAeqJOYbVwSsGlM/QGI/Qk4hnne7QX dvE= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:50 2025 by rpki-client on console.sobornost.net