$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa File: c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa (raw, json) Hash identifier: ZEiWCTtNoICnBcDkiD6PnduJ91Bojo+4BCQckqi7w9Q= Subject key identifier: C4:F5:D6:8C:E9:66:D3:DD:FA:D1:D9:96:F2:9B:2F:89:FF:8E:5E:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0FC8E1DEC78C4170CD027F64CD5644D5484C0ECE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa Signing time: Mon 21 Apr 2025 16:10:17 +0000 ROA not before: Mon 21 Apr 2025 16:10:17 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c8:e1:de:c7:8c:41:70:cd:02:7f:64:cd:56:44:d5:48:4c:0e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:10:17 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=aa78bb55909953206c48a7ff1951eedc584efc26634f308b3c9588fb341ff717, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:be:08:5b:20:01:98:dc:b0:63:0b:24:c3: 04:ee:28:d6:ee:8f:ab:57:56:f6:98:2e:f5:13:da: ff:14:8d:df:37:e6:c5:a5:ed:e0:d5:74:bd:9f:89: a9:98:e8:5c:e2:a2:d2:dd:26:d9:20:31:1a:ee:da: 49:70:ba:9d:8c:92:61:b9:9d:3a:d4:03:8f:8f:4f: 5d:25:c0:16:a9:b3:22:62:98:b6:af:57:11:84:e9: 57:d2:ad:8e:b7:f3:d7:5a:9a:d7:b9:5c:df:30:01: 47:0b:1f:47:36:80:2f:d5:01:cf:79:5d:4a:74:30: cb:b3:7c:80:1f:2e:81:73:70:12:75:44:35:8f:1a: 66:9e:9b:50:37:80:8a:68:6a:f7:63:14:f2:a7:15: cd:8f:7c:76:0f:c0:81:7e:a8:aa:f4:18:e9:40:60: ee:c5:44:68:80:5e:a0:0c:4d:46:2b:53:89:ce:3c: 13:10:76:a3:2a:6d:d8:6a:90:65:fb:8b:af:8b:ed: c1:8e:ba:d6:06:54:a7:14:14:57:b3:3e:72:d1:73: 06:be:6c:47:b6:bd:a1:69:7b:02:07:82:4a:06:c5: d0:f1:6d:08:38:69:8b:3f:4a:cd:63:1e:b5:07:a7: 83:08:77:79:11:ca:37:2b:0d:73:0c:59:f6:e8:4c: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F5:D6:8C:E9:66:D3:DD:FA:D1:D9:96:F2:9B:2F:89:FF:8E:5E:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:c800::/40 Signature Algorithm: sha256WithRSAEncryption 78:31:15:c3:5d:d9:d3:ce:b1:be:3e:b1:db:92:a3:09:39:fc: b4:46:6a:c4:20:e6:0f:2a:90:8f:80:e1:b0:4f:ff:60:d9:58: f8:b7:3e:41:3d:0f:eb:63:d6:b1:28:6f:2e:5c:b6:6e:0f:9f: 4b:fa:2f:a2:4f:0a:6e:5e:e4:3b:73:d8:22:17:8b:22:d3:88: 4a:3a:77:36:b0:47:8f:c0:4f:fd:ce:5b:9f:1b:81:62:4f:35: b5:db:6e:d1:36:4b:8f:f8:4c:13:93:74:00:29:0b:00:0b:61: 0e:ab:29:e9:3b:49:ad:73:b0:94:69:d6:92:d1:bb:6b:ae:95: 69:4e:fb:52:67:18:79:d6:8e:13:1c:36:1e:08:a5:6c:4d:4e: af:7d:f6:cf:00:c2:7c:25:74:1f:3e:d8:aa:d9:61:6d:fd:1b: cc:b6:a0:90:a4:c5:14:b2:23:c3:cf:2f:55:5e:f4:01:37:bb: 38:61:a8:83:9b:62:9d:d1:57:99:29:db:8c:b6:47:e0:bf:fb: f8:f2:de:d8:6f:df:22:52:29:a0:03:c2:33:71:92:23:25:1a: db:92:e6:33:72:e1:38:5b:0b:24:50:a1:b4:b5:7e:a7:17:f9: 04:ba:3a:12:74:2e:c6:52:8a:5d:d9:63:f7:ac:6f:b2:fd:de: c5:67:f3:a2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUD8jh3seMQXDNAn9kzVZE1UhMDs4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MTAxN1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYWE3OGJiNTU5MDk5NTMyMDZjNDhh N2ZmMTk1MWVlZGM1ODRlZmMyNjYzNGYzMDhiM2M5NTg4ZmIzNDFmZjcxNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqG+CFsgAZjcsGMLJMME7ijW7o+r V1b2mC71E9r/FI3fN+bFpe3g1XS9n4mpmOhc4qLS3SbZIDEa7tpJcLqdjJJhuZ06 1AOPj09dJcAWqbMiYpi2r1cRhOlX0q2Ot/PXWprXuVzfMAFHCx9HNoAv1QHPeV1K dDDLs3yAHy6Bc3ASdUQ1jxpmnptQN4CKaGr3YxTypxXNj3x2D8CBfqiq9BjpQGDu xURogF6gDE1GK1OJzjwTEHajKm3YapBl+4uvi+3BjrrWBlSnFBRXsz5y0XMGvmxH tr2haXsCB4JKBsXQ8W0IOGmLP0rNYx61B6eDCHd5Eco3Kw1zDFn26Ey0wQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMT11ozpZtPd+tHZlvKbL4n/jl7KMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M5YmM5NzZhLTliYmItNDAxZC05YTU4LWJjZmE2ZGM3ODE3MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9sgwDQYJKoZIhvcNAQELBQADggEBAHgxFcNd2dPOsb4+sduS owk5/LRGasQg5g8qkI+A4bBP/2DZWPi3PkE9D+tj1rEoby5ctm4Pn0v6L6JPCm5e 5Dtz2CIXiyLTiEo6dzawR4/AT/3OW58bgWJPNbXbbtE2S4/4TBOTdAApCwALYQ6r Kek7Sa1zsJRp1pLRu2uulWlO+1JnGHnWjhMcNh4IpWxNTq999s8AwnwldB8+2KrZ YW39G8y2oJCkxRSyI8PPL1Ve9AE3uzhhqIObYp3RV5kp24y2R+C/+/jy3thv3yJS KaADwjNxkiMlGtuS5jNy4ThbCyRQobS1fqcX+QS6OhJ0LsZSil3ZY/esb7L93sVn 86I= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:50 2025 by rpki-client on console.sobornost.net