$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa File: c8788082-9bee-454b-a32c-e6d016b76179.roa (raw, json) Hash identifier: XpKhhkfY8EBpUl2VHiSvSTwmqVdkPEkJJi47uE95/y0= Subject key identifier: 02:AE:A4:CE:27:83:F9:14:92:68:41:24:48:5E:F3:26:AA:D6:1F:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 34FD6141823E31D1FD78AC3C724A0E5C5373DE5E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa Signing time: Wed 23 Apr 2025 00:00:06 +0000 ROA not before: Wed 23 Apr 2025 00:00:06 +0000 ROA not after: Wed 28 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da20:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fd:61:41:82:3e:31:d1:fd:78:ac:3c:72:4a:0e:5c:53:73:de:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 23 00:00:06 2025 GMT Not After : May 28 23:59:59 2025 GMT Subject: serialNumber=c0a96f2a36d1f674db2bcff6f732b4f0c5714e831f9a14aef23ad83aa657bc02, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:73:15:db:3e:2f:0b:23:30:5d:64:b8:78: fb:93:d9:f2:10:4f:35:07:2b:0e:1f:18:55:e7:17: c4:dc:2d:a7:ec:c1:ca:30:ed:9c:1a:ff:cd:74:50: 23:e6:3a:fd:2e:47:88:b6:2b:74:d1:43:58:f9:f7: 44:15:46:df:b3:db:5a:85:b8:32:14:55:cb:d6:5f: e1:53:8c:4a:ab:f5:0a:b0:44:35:2e:c0:d7:6e:c5: df:3b:6b:ca:0c:14:f5:f0:99:bc:a4:1e:fb:be:ec: a4:06:c2:cc:6f:02:55:90:03:b5:61:6b:73:8c:89: ff:bc:e9:3b:b8:f3:cb:ca:b6:05:bc:d3:e9:5f:ed: 70:33:d4:38:f0:3e:7d:d2:33:63:b7:2d:7f:3a:a5: 8f:43:c6:df:96:18:30:78:f0:54:d4:1c:66:ff:81: d1:9e:cb:80:19:af:01:53:18:3e:6c:3c:35:bf:fd: e2:90:41:bf:87:40:d4:11:a4:de:7a:e0:83:a0:40: 7a:41:52:34:e1:ae:3b:8c:03:17:a7:01:49:14:8b: 9f:18:94:28:1d:c0:39:b9:b0:2a:b5:31:be:89:ef: 78:24:54:46:a9:0a:e2:80:22:65:cb:7b:2c:79:d1: 42:ce:17:2b:17:a7:de:2a:38:e6:b3:64:b3:80:05: 6f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AE:A4:CE:27:83:F9:14:92:68:41:24:48:5E:F3:26:AA:D6:1F:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da20:8000::/36 Signature Algorithm: sha256WithRSAEncryption 8d:38:d2:4f:a4:f2:52:07:44:8f:53:7e:74:f6:a8:5b:c3:67: 3e:af:7b:68:7b:11:c6:cf:17:a2:ea:87:25:27:42:39:ea:f8: d6:b3:d2:5e:ee:5b:2d:56:b8:21:7b:74:77:28:f3:49:af:fe: 12:c7:06:e9:39:dc:f1:4c:d4:b7:a2:97:51:72:62:a6:c4:ef: 04:38:88:fa:9f:f1:70:da:92:d2:f8:c0:dd:11:78:f1:fc:ae: d0:06:0f:47:aa:40:6a:8e:a8:0c:63:cc:a0:64:89:5a:e0:02: 57:b2:fb:6c:88:8c:51:2c:da:19:17:17:a8:9c:40:9a:14:9c: cd:f0:c3:9a:b2:6e:d7:7c:3c:82:c9:e1:3a:9b:c7:ef:05:42: 26:35:b5:8d:6d:58:cb:29:1d:a7:21:f6:7f:b3:ea:bb:27:fd: 86:03:79:f5:98:0d:98:d1:45:33:73:8c:5c:46:da:dc:cd:1e: 82:9d:19:da:dc:15:ee:9e:cf:cb:f0:d7:e1:00:22:9c:67:3c: 86:ee:d0:55:bd:e3:65:08:7f:ae:85:02:96:64:97:9c:4e:f6: 05:13:1f:dd:98:1a:f9:0e:81:d8:80:39:e8:52:49:87:f2:e9: 96:09:46:84:4b:88:f1:f4:4c:8f:81:9c:ad:8e:a8:a9:26:42: 85:11:67:5d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUNP1hQYI+MdH9eKw8ckoOXFNz3l4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMzAwMDAwNloX DTI1MDUyODIzNTk1OVowejFJMEcGA1UEBRNAYzBhOTZmMmEzNmQxZjY3NGRiMmJj ZmY2ZjczMmI0ZjBjNTcxNGU4MzFmOWExNGFlZjIzYWQ4M2FhNjU3YmMwMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y1zFds+LwsjMF1kuHj7k9nyEE81 BysOHxhV5xfE3C2n7MHKMO2cGv/NdFAj5jr9LkeItit00UNY+fdEFUbfs9tahbgy FFXL1l/hU4xKq/UKsEQ1LsDXbsXfO2vKDBT18Jm8pB77vuykBsLMbwJVkAO1YWtz jIn/vOk7uPPLyrYFvNPpX+1wM9Q48D590jNjty1/OqWPQ8bflhgwePBU1Bxm/4HR nsuAGa8BUxg+bDw1v/3ikEG/h0DUEaTeeuCDoEB6QVI04a47jAMXpwFJFIufGJQo HcA5ubAqtTG+ie94JFRGqQrigCJly3ssedFCzhcrF6feKjjms2SzgAVvEQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAKupM4ng/kUkmhBJEhe8yaq1h8BMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M4Nzg4MDgyLTliZWUtNDU0Yi1hMzJjLWU2ZDAxNmI3NjE3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaIIAwDQYJKoZIhvcNAQELBQADggEBAI040k+k8lIHRI9TfnT2 qFvDZz6ve2h7EcbPF6LqhyUnQjnq+Naz0l7uWy1WuCF7dHco80mv/hLHBuk53PFM 1Leil1FyYqbE7wQ4iPqf8XDaktL4wN0RePH8rtAGD0eqQGqOqAxjzKBkiVrgAley +2yIjFEs2hkXF6icQJoUnM3ww5qybtd8PILJ4Tqbx+8FQiY1tY1tWMspHach9n+z 6rsn/YYDefWYDZjRRTNzjFxG2tzNHoKdGdrcFe6ez8vw1+EAIpxnPIbu0FW942UI f66FApZkl5xO9gUTH92YGvkOgdiAOehSSYfy6ZYJRoRLiPH0TI+BnK2OqKkmQoUR Z10= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:50 2025 by rpki-client on console.sobornost.net