$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca60f0d8-b8b0-46a0-b18c-364b59f290a2.roa File: ca60f0d8-b8b0-46a0-b18c-364b59f290a2.roa (raw, json) Hash identifier: Fa3fd0Y5YrzQcO3lT582PQdGy/UJd0L2Oc7yiNYXMeg= Subject key identifier: 20:AF:84:0D:08:9D:7A:0B:E0:BB:6B:79:66:04:2E:55:FB:4A:68:A7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 10B1D9FC701AA6A16B7A889FCD4A5AA202DBBD13 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca60f0d8-b8b0-46a0-b18c-364b59f290a2.roa Signing time: Mon 21 Apr 2025 15:41:01 +0000 ROA not before: Mon 21 Apr 2025 15:41:01 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:2840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b1:d9:fc:70:1a:a6:a1:6b:7a:88:9f:cd:4a:5a:a2:02:db:bd:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:41:01 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=5c60f79c3f6ed52dccf9878e3e60c4d2a484f8e8269d5f540ec8e5ad27809071, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:42:53:3c:2f:a1:a9:c2:9a:5b:02:c4:02: bc:5f:e1:fc:08:9d:78:d0:c7:2f:c6:b7:bc:0e:7d: dc:8e:7b:c2:08:7d:74:d8:bb:3f:1f:7d:05:7f:20: ce:21:05:1a:4c:1d:ab:04:4e:ab:2e:6b:46:20:97: a9:4a:62:69:19:16:81:ab:45:68:0c:12:da:22:8d: 96:3c:7f:44:67:38:b2:73:3c:de:c1:8a:f9:8b:4b: f4:9e:42:bb:4a:ce:99:1c:b7:66:eb:29:a7:49:52: 30:dc:50:53:e3:ed:7d:90:ed:fd:32:fa:f4:2f:1b: 3b:05:a9:f5:04:ef:cd:74:28:b7:5c:f9:b9:41:8e: 0d:0f:56:53:86:dc:6c:8b:f4:d3:ba:c4:ea:b4:b6: c3:89:eb:cd:7a:e8:f4:7c:ad:04:4d:c5:16:f0:1f: f0:e6:76:36:07:4b:1a:d2:9e:16:23:2a:17:e1:18: 6c:b0:9c:c7:2a:48:aa:1d:66:50:eb:1a:75:a8:8a: 08:99:50:cb:f7:62:5c:fc:69:75:f5:f5:d3:f5:18: f4:b6:c8:3a:e9:03:a8:51:67:7f:83:33:9f:05:85: 75:23:65:d2:70:2a:f7:17:c1:4e:fc:57:76:29:9d: 7a:40:41:65:f0:71:52:7f:40:d2:68:30:db:cb:5b: c1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AF:84:0D:08:9D:7A:0B:E0:BB:6B:79:66:04:2E:55:FB:4A:68:A7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca60f0d8-b8b0-46a0-b18c-364b59f290a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:2840::/46 Signature Algorithm: sha256WithRSAEncryption 9a:1c:23:33:f2:73:7a:04:cd:71:43:e9:6f:eb:af:7d:3b:e4: f9:32:e9:5f:03:ef:5a:2f:97:66:dc:8d:f0:8a:d6:f2:d1:bc: 53:c3:ea:85:52:4a:15:0d:3c:3e:c4:ac:d3:4a:a0:fa:eb:28: 06:e4:3d:c3:ab:4a:07:3f:e2:32:a3:89:58:a5:ad:72:cc:74: 77:89:91:fc:2c:05:97:fb:61:84:15:c4:04:cb:6c:15:f5:0b: a0:74:8a:a6:0b:c2:7a:99:92:4f:1f:30:93:42:d3:71:a4:b9: d0:06:d6:7b:7c:89:18:e0:a9:64:c8:3e:9d:de:01:44:18:b3: 22:55:f2:67:d4:b1:4f:00:b3:07:9a:4d:74:2d:fc:54:7a:ba: 25:2e:17:29:4b:6c:8e:b2:19:0b:47:66:39:68:02:87:8c:a3: e0:40:16:6e:c5:6c:be:eb:e7:50:cb:90:40:b4:87:a6:a5:0d: 2e:38:37:b3:2e:e4:f5:e2:8b:37:d7:23:92:57:20:d1:03:67: a9:3d:e6:c3:0b:34:91:99:25:2a:ca:01:a8:39:0f:48:4f:91: c7:56:4a:cc:61:b3:fd:23:73:be:70:82:e1:34:d6:04:2b:c4: 0e:ed:2a:3e:70:73:fb:9b:5f:75:8a:77:eb:c5:c4:4d:8b:3a: 00:a0:c2:96 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUELHZ/HAapqFreoifzUpaogLbvRMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NDEwMVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANWM2MGY3OWMzZjZlZDUyZGNjZjk4 NzhlM2U2MGM0ZDJhNDg0ZjhlODI2OWQ1ZjU0MGVjOGU1YWQyNzgwOTA3MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFVCUzwvoanCmlsCxAK8X+H8CJ14 0Mcvxre8Dn3cjnvCCH102Ls/H30FfyDOIQUaTB2rBE6rLmtGIJepSmJpGRaBq0Vo DBLaIo2WPH9EZziyczzewYr5i0v0nkK7Ss6ZHLdm6ymnSVIw3FBT4+19kO39Mvr0 Lxs7Ban1BO/NdCi3XPm5QY4ND1ZThtxsi/TTusTqtLbDievNeuj0fK0ETcUW8B/w 5nY2B0sa0p4WIyoX4RhssJzHKkiqHWZQ6xp1qIoImVDL92Jc/Gl19fXT9Rj0tsg6 6QOoUWd/gzOfBYV1I2XScCr3F8FO/Fd2KZ16QEFl8HFSf0DSaDDby1vBFwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCCvhA0InXoL4LtreWYELlX7SminMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NhNjBmMGQ4LWI4YjAtNDZhMC1iMThjLTM2NGI1OWYyOTBhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba9yhAMA0GCSqGSIb3DQEBCwUAA4IBAQCaHCMz8nN6BM1xQ+lv 6699O+T5MulfA+9aL5dm3I3witby0bxTw+qFUkoVDTw+xKzTSqD66ygG5D3Dq0oH P+Iyo4lYpa1yzHR3iZH8LAWX+2GEFcQEy2wV9QugdIqmC8J6mZJPHzCTQtNxpLnQ BtZ7fIkY4KlkyD6d3gFEGLMiVfJn1LFPALMHmk10LfxUerolLhcpS2yOshkLR2Y5 aAKHjKPgQBZuxWy+6+dQy5BAtIempQ0uODezLuT14os31yOSVyDRA2epPebDCzSR mSUqygGoOQ9IT5HHVkrMYbP9I3O+cILhNNYEK8QO7So+cHP7m191infrxcRNizoA oMKW -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:50 2025 by rpki-client on console.sobornost.net