$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0ec1fe9-74da-4c07-adb2-ac7446de3891.roa File: c0ec1fe9-74da-4c07-adb2-ac7446de3891.roa (raw, json) Hash identifier: 509leiMpf23nCtU9UkU1hTmx72xGDX/GKjIQAyo+4E0= Subject key identifier: 3A:AE:DF:42:E7:97:D7:51:10:B0:CC:1C:6B:33:53:D4:CA:05:02:68 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1ECA3898908450F851281827E582EB727296FEFF Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0ec1fe9-74da-4c07-adb2-ac7446de3891.roa Signing time: Mon 21 Apr 2025 15:41:53 +0000 ROA not before: Mon 21 Apr 2025 15:41:53 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:e0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ca:38:98:90:84:50:f8:51:28:18:27:e5:82:eb:72:72:96:fe:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:41:53 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=2b9e8db75f9886d7146be6bfabc7736bb805e003a5ce92754d67b81818ee73fb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:44:66:a2:d5:01:8a:25:5c:a9:d2:01:24:fc: 91:c4:42:8f:f9:46:87:11:6f:ca:75:64:53:c0:bf: d2:84:5d:03:f3:5d:44:ac:e1:ae:52:21:5d:43:70: 55:c9:6f:be:7f:0a:35:96:12:9b:a0:02:13:3f:2b: 54:b5:8e:a0:10:0d:fb:2f:d5:ee:7d:0e:39:ca:49: 7e:53:e7:ec:45:bd:74:14:38:74:ce:e5:98:cd:23: bf:10:e8:d5:0f:ce:e3:eb:94:a7:27:87:ed:4e:2c: ca:3e:8b:f6:46:11:57:b3:f5:9d:5a:ad:f0:85:c5: 63:ef:2e:7c:4c:bf:18:14:28:7c:f2:8d:86:38:ef: 9e:ec:42:b0:f1:0f:0f:3f:99:a1:55:40:a8:97:da: 17:3b:0d:80:5c:d7:09:e9:b6:db:fa:ee:7f:d3:0a: 31:7d:9f:b6:14:b9:68:7f:92:1e:e9:ba:c0:56:22: d6:8d:94:b8:68:ae:22:c3:d9:53:79:b9:de:9f:f7: a9:ae:1b:c3:5c:fb:41:eb:2d:8d:99:15:27:42:55: e8:de:fd:c3:9f:f9:3e:fe:fc:96:08:24:67:f7:cf: 09:d7:57:ee:3b:d8:af:0b:3d:9c:aa:32:60:ff:d5: 84:6b:43:00:ce:8b:6e:e9:c6:cc:c6:75:5a:bd:c4: 06:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AE:DF:42:E7:97:D7:51:10:B0:CC:1C:6B:33:53:D4:CA:05:02:68 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0ec1fe9-74da-4c07-adb2-ac7446de3891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:e0c0::/46 Signature Algorithm: sha256WithRSAEncryption c7:a2:a5:8b:96:15:68:e5:29:f7:e1:15:9b:fd:46:e9:e6:86: 02:1d:66:33:f2:27:30:9e:86:c5:2f:1a:17:5d:34:fd:a8:f2: cc:2b:18:bb:4d:bb:c7:7e:7e:bd:85:b8:d9:3c:34:24:01:ac: 0f:56:37:e2:23:88:c9:fd:ff:8d:89:2b:24:29:9f:a2:9f:a5: 85:c7:e6:37:8d:83:85:d2:10:7d:b7:53:3f:1d:23:bb:6c:23: 27:fa:fc:37:25:ea:2b:99:60:8e:3e:e9:aa:f4:a4:1d:7d:e7: b1:7d:3d:01:df:a4:37:94:8a:8b:fe:6d:46:cb:2d:37:f1:58: 3e:ea:3c:b5:35:14:c7:35:f9:4b:ae:d5:14:c4:4f:d6:86:ae: 83:16:39:47:eb:bb:7c:a8:57:5f:c6:a5:1b:f0:a3:ee:ec:be: 2c:40:3f:40:cc:1c:eb:91:4c:d2:7c:df:5c:68:f4:cf:45:bd: a3:fb:4c:a2:83:c4:c4:06:32:b0:26:51:ca:ff:80:95:b8:1c: fc:aa:67:8f:c9:09:20:b7:17:17:f9:c4:81:81:42:c6:f5:49: 5c:ac:b3:7c:40:c3:2f:d0:2f:9f:48:32:2c:c2:c8:95:4c:e4: a4:ca:61:0d:bd:b1:31:08:46:fd:e3:1b:9a:28:95:c2:89:d8: 4a:e6:45:95 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHso4mJCEUPhRKBgn5YLrcnKW/v8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NDE1M1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMmI5ZThkYjc1Zjk4ODZkNzE0NmJl NmJmYWJjNzczNmJiODA1ZTAwM2E1Y2U5Mjc1NGQ2N2I4MTgxOGVlNzNmYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ERmotUBiiVcqdIBJPyRxEKP+UaH EW/KdWRTwL/ShF0D811ErOGuUiFdQ3BVyW++fwo1lhKboAITPytUtY6gEA37L9Xu fQ45ykl+U+fsRb10FDh0zuWYzSO/EOjVD87j65SnJ4ftTizKPov2RhFXs/WdWq3w hcVj7y58TL8YFCh88o2GOO+e7EKw8Q8PP5mhVUCol9oXOw2AXNcJ6bbb+u5/0wox fZ+2FLlof5Ie6brAViLWjZS4aK4iw9lTebnen/eprhvDXPtB6y2NmRUnQlXo3v3D n/k+/vyWCCRn988J11fuO9ivCz2cqjJg/9WEa0MAzotu6cbMxnVavcQGiQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDqu30Lnl9dRELDMHGszU9TKBQJoMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MwZWMxZmU5LTc0ZGEtNGMwNy1hZGIyLWFjNzQ0NmRlMzg5MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba++DAMA0GCSqGSIb3DQEBCwUAA4IBAQDHoqWLlhVo5Sn34RWb /Ubp5oYCHWYz8icwnobFLxoXXTT9qPLMKxi7TbvHfn69hbjZPDQkAawPVjfiI4jJ /f+NiSskKZ+in6WFx+Y3jYOF0hB9t1M/HSO7bCMn+vw3JeormWCOPumq9KQdfeex fT0B36Q3lIqL/m1Gyy038Vg+6jy1NRTHNflLrtUUxE/Whq6DFjlH67t8qFdfxqUb 8KPu7L4sQD9AzBzrkUzSfN9caPTPRb2j+0yig8TEBjKwJlHK/4CVuBz8qmePyQkg txcX+cSBgULG9UlcrLN8QMMv0C+fSDIswsiVTOSkymENvbExCEb94xuaKJXCidhK 5kWV -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:50 2025 by rpki-client on console.sobornost.net