$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0276322-5c62-450c-9379-22ba77895050.roa File: c0276322-5c62-450c-9379-22ba77895050.roa (raw, json) Hash identifier: 6SSJ0DaKxPhHBv7RILDVHbB14r/PFVDvQfsGMAamJEc= Subject key identifier: 88:F2:31:C5:A0:58:A3:57:81:D8:EE:4A:C3:1B:2B:14:84:CB:69:21 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 12EAD4BE4EFADF746ECE853F46BBA2CE2E0AB609 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0276322-5c62-450c-9379-22ba77895050.roa Signing time: Mon 21 Apr 2025 16:41:09 +0000 ROA not before: Mon 21 Apr 2025 16:41:09 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da1f::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ea:d4:be:4e:fa:df:74:6e:ce:85:3f:46:bb:a2:ce:2e:0a:b6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:41:09 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=111eba80f5eb6194b2d7e1844bcc3fbd4d438c0aac0fdfaed2a2adfb99d64865, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:80:7d:f2:51:af:5b:74:9b:51:68:25:de: f5:2d:45:34:38:7f:09:2f:82:b7:df:d1:d7:5e:63: c1:92:9d:6b:5a:2b:79:30:0f:f2:df:34:76:1c:a6: 31:63:d4:09:9c:56:8d:80:aa:59:56:c1:df:aa:d5: 7d:21:c0:95:dd:08:2c:f0:1f:7f:c6:47:e8:98:b6: ea:fa:2f:09:6b:ea:dd:13:55:8c:3b:8a:3a:61:c5: b4:a0:ce:0f:c2:f4:e9:0d:2c:cf:d7:36:11:bc:f8: 63:61:a0:c4:64:9a:70:83:52:71:e6:7c:60:ae:e3: 39:03:90:20:ff:f4:43:a8:7e:c2:89:fc:fd:1f:df: 30:70:67:f1:87:d2:db:db:3b:96:df:a3:06:74:9a: 92:f6:c3:12:af:bc:de:f5:c0:a5:c8:11:31:23:cf: 02:e0:44:8b:a0:d7:1d:40:7a:d7:a5:4d:b0:29:a4: cf:8c:eb:55:77:67:c9:93:0b:4f:1b:a2:d1:b1:cd: 0a:9c:6c:9a:82:f8:78:b2:ee:83:43:56:06:7c:86: f3:97:ee:18:7f:ed:1b:9d:24:a4:08:28:ec:0f:d5: 20:7b:f9:f5:c2:9e:75:5f:d7:9a:cc:b1:10:31:c4: 58:a1:b4:e2:54:11:75:18:6d:6a:fd:42:99:0d:31: 15:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F2:31:C5:A0:58:A3:57:81:D8:EE:4A:C3:1B:2B:14:84:CB:69:21 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0276322-5c62-450c-9379-22ba77895050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da1f::/38 Signature Algorithm: sha256WithRSAEncryption 22:52:b0:8f:e4:f4:d7:ad:93:28:63:7f:e1:e1:c6:62:88:ba: c6:e6:46:91:65:4b:11:62:78:e8:1b:5c:79:0c:f3:c0:90:b1: dc:c5:1d:cd:ce:3b:f1:22:76:21:7b:df:e3:0c:83:10:36:40: 5d:0b:6a:e6:0d:36:b1:ec:5e:86:47:7e:aa:12:d0:b6:01:7d: a1:60:c8:b3:c5:9e:e5:2a:d1:5c:23:e0:99:3b:ce:03:6d:58: e3:71:0a:29:f5:ff:79:e5:76:3f:fb:85:12:4e:28:d7:a7:1c: 27:d6:ff:b1:d2:fb:4c:62:33:43:a2:ad:3a:cb:5f:f1:90:fe: cc:8c:13:29:55:3e:7b:84:df:b3:86:53:b6:c1:cd:3b:eb:1f: cc:a0:dd:be:51:c7:84:b9:46:f3:1b:39:eb:91:e8:53:37:f4: df:74:89:33:7c:da:df:b3:6d:f9:d6:86:f2:ec:7e:95:c9:0a: 25:b5:c0:0f:1f:81:54:dd:06:d8:72:0e:e9:a5:ac:57:dc:12: 63:d9:8d:0e:6a:21:0b:37:f2:e7:10:74:ae:7c:89:b7:70:2a: 0c:58:69:64:cd:cf:64:e8:42:e5:25:39:9f:dd:9b:5c:64:8f: af:c7:d3:19:d9:84:d3:88:54:61:dd:49:b4:d4:45:3b:ef:ed: 4e:52:e6:2b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUEurUvk7633RuzoU/Rruizi4KtgkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2NDEwOVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMTExZWJhODBmNWViNjE5NGIyZDdl MTg0NGJjYzNmYmQ0ZDQzOGMwYWFjMGZkZmFlZDJhMmFkZmI5OWQ2NDg2NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNmAffJRr1t0m1FoJd71LUU0OH8J L4K339HXXmPBkp1rWit5MA/y3zR2HKYxY9QJnFaNgKpZVsHfqtV9IcCV3Qgs8B9/ xkfomLbq+i8Ja+rdE1WMO4o6YcW0oM4PwvTpDSzP1zYRvPhjYaDEZJpwg1Jx5nxg ruM5A5Ag//RDqH7Cifz9H98wcGfxh9Lb2zuW36MGdJqS9sMSr7ze9cClyBExI88C 4ESLoNcdQHrXpU2wKaTPjOtVd2fJkwtPG6LRsc0KnGyagvh4su6DQ1YGfIbzl+4Y f+0bnSSkCCjsD9Uge/n1wp51X9eazLEQMcRYobTiVBF1GG1q/UKZDTEVfQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIjyMcWgWKNXgdjuSsMbKxSEy2khMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MwMjc2MzIyLTVjNjItNDUwYy05Mzc5LTIyYmE3Nzg5NTA1MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYCJAbaHwAwDQYJKoZIhvcNAQELBQADggEBACJSsI/k9Netkyhjf+Hh xmKIusbmRpFlSxFieOgbXHkM88CQsdzFHc3OO/EidiF73+MMgxA2QF0LauYNNrHs XoZHfqoS0LYBfaFgyLPFnuUq0Vwj4Jk7zgNtWONxCin1/3nldj/7hRJOKNenHCfW /7HS+0xiM0OirTrLX/GQ/syMEylVPnuE37OGU7bBzTvrH8yg3b5Rx4S5RvMbOeuR 6FM39N90iTN82t+zbfnWhvLsfpXJCiW1wA8fgVTdBthyDumlrFfcEmPZjQ5qIQs3 8ucQdK58ibdwKgxYaWTNz2ToQuUlOZ/dm1xkj6/H0xnZhNOIVGHdSbTURTvv7U5S 5is= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:50 2025 by rpki-client on console.sobornost.net