$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cd395f07-1ca9-4847-a2a3-e6798dc4b0e9.roa File: cd395f07-1ca9-4847-a2a3-e6798dc4b0e9.roa (raw, json) Hash identifier: f6sqEw1Fgu2Me3VhVbES+H9MEuYj7Y8IRAgDyK5509w= Subject key identifier: 16:CF:24:6A:21:4A:5F:86:55:60:C4:DB:A2:63:3C:BE:A5:41:62:D7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7D5CE75BCD74CB127C51253FE9278F65E654AFFA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cd395f07-1ca9-4847-a2a3-e6798dc4b0e9.roa Signing time: Wed 02 Apr 2025 00:00:10 +0000 ROA not before: Wed 02 Apr 2025 00:00:10 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daef:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5c:e7:5b:cd:74:cb:12:7c:51:25:3f:e9:27:8f:65:e6:54:af:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 2 00:00:10 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: serialNumber=02364f53fd0be532a5f0a098ef3e121a9ca4c8c443b35d14b6498c721a4110e2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:2f:ee:a6:51:52:75:7d:51:b9:dd:a6:ea: 3d:39:49:55:c6:b0:88:b7:47:a4:0c:d4:05:63:43: 44:9f:5d:e5:05:4e:ea:bd:85:b7:ef:6d:3c:67:4c: ca:c2:f0:ec:5f:8e:79:e2:fe:d5:0e:32:43:08:5d: 67:96:b2:d0:ab:43:28:1a:72:b9:07:cd:0a:80:d1: 09:63:f6:31:b1:b5:0a:a7:b7:9e:d2:00:d9:10:2e: fe:fa:50:8e:d1:14:06:6e:2b:37:80:f0:3f:b6:49: b6:4c:ee:ef:35:bd:df:0e:f9:e2:22:5d:84:6f:08: 69:5a:fa:3a:3f:95:e5:e2:6c:3f:4d:7c:fb:fa:14: 2f:1f:f1:83:d4:32:0e:ca:7f:2b:63:60:d1:7c:c2: fb:da:f3:a4:19:a0:e8:a1:7b:75:6f:07:c5:84:0d: c3:6e:ce:78:8f:5c:73:d8:9d:3b:3b:22:53:de:a3: 48:51:b1:61:8c:14:c0:f6:2b:24:54:a6:ff:d6:38: 48:5d:88:f2:e2:38:f7:5e:2c:28:fb:d4:ff:19:ac: 5d:ab:b8:db:f7:31:48:47:22:90:d3:25:04:c5:ff: 63:c1:c0:cc:56:55:45:93:3a:c7:ed:83:af:7b:d5: 8a:71:49:f4:11:b6:63:64:fd:35:bc:6d:3b:24:46: 8c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CF:24:6A:21:4A:5F:86:55:60:C4:DB:A2:63:3C:BE:A5:41:62:D7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cd395f07-1ca9-4847-a2a3-e6798dc4b0e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:e000::/40 Signature Algorithm: sha256WithRSAEncryption 13:34:93:cf:dc:eb:3e:24:12:9a:ff:ef:d8:03:37:38:7b:96: 01:c2:ec:b8:ff:93:6d:ff:e4:64:29:18:2b:50:57:11:ae:63: 6e:96:58:23:a0:c6:bb:01:ed:bf:35:11:4d:3b:af:82:07:e8: 3c:0c:14:43:cc:17:fc:99:8b:d8:75:19:84:d4:4d:d5:bf:58: 33:8a:7b:f6:87:4c:e4:1d:5a:88:a0:2e:f6:9b:7d:5c:1e:54: b2:b3:89:22:a8:69:32:58:23:2b:2e:b2:9a:e8:14:8e:ef:60: cd:8f:d0:e3:46:8d:dd:d2:23:d5:24:c0:11:82:cc:9a:59:c1: 21:1d:78:5e:c9:2b:08:a1:0a:9e:41:b3:63:8f:99:8c:fa:51: 93:9a:3f:80:53:76:9b:c6:97:4f:48:84:8d:b3:b0:b5:b3:62: 9f:5a:7c:ab:09:88:4c:04:d3:1f:41:45:69:27:3a:2b:2e:9f: 0c:9d:c1:00:23:f1:c2:0b:2b:29:ea:2d:13:ef:62:c9:f3:cd: 14:17:40:b1:29:1a:42:70:d6:c3:12:ae:1e:e7:1e:be:43:d0: 8f:57:3d:04:a6:d6:db:a8:39:30:3f:93:ba:72:5b:4c:2f:a4: dc:fe:7b:96:31:af:93:09:0c:47:87:50:0b:a1:05:3e:a8:f0: 9a:43:55:f8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfVznW810yxJ8USU/6SePZeZUr/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwMjAwMDAxMFoX DTI1MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAMDIzNjRmNTNmZDBiZTUzMmE1ZjBh MDk4ZWYzZTEyMWE5Y2E0YzhjNDQzYjM1ZDE0YjY0OThjNzIxYTQxMTBlMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVAv7qZRUnV9Ubndpuo9OUlVxrCI t0ekDNQFY0NEn13lBU7qvYW37208Z0zKwvDsX4554v7VDjJDCF1nlrLQq0MoGnK5 B80KgNEJY/YxsbUKp7ee0gDZEC7++lCO0RQGbis3gPA/tkm2TO7vNb3fDvniIl2E bwhpWvo6P5Xl4mw/TXz7+hQvH/GD1DIOyn8rY2DRfML72vOkGaDooXt1bwfFhA3D bs54j1xz2J07OyJT3qNIUbFhjBTA9iskVKb/1jhIXYjy4jj3Xiwo+9T/Gaxdq7jb 9zFIRyKQ0yUExf9jwcDMVlVFkzrH7YOve9WKcUn0EbZjZP01vG07JEaMLwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBbPJGohSl+GVWDE26JjPL6lQWLXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NkMzk1ZjA3LTFjYTktNDg0Ny1hMmEzLWU2Nzk4ZGM0YjBlOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7+AwDQYJKoZIhvcNAQELBQADggEBABM0k8/c6z4kEpr/79gD Nzh7lgHC7Lj/k23/5GQpGCtQVxGuY26WWCOgxrsB7b81EU07r4IH6DwMFEPMF/yZ i9h1GYTUTdW/WDOKe/aHTOQdWoigLvabfVweVLKziSKoaTJYIysusproFI7vYM2P 0ONGjd3SI9UkwBGCzJpZwSEdeF7JKwihCp5Bs2OPmYz6UZOaP4BTdpvGl09IhI2z sLWzYp9afKsJiEwE0x9BRWknOisunwydwQAj8cILKynqLRPvYsnzzRQXQLEpGkJw 1sMSrh7nHr5D0I9XPQSm1tuoOTA/k7pyW0wvpNz+e5Yxr5MJDEeHUAuhBT6o8JpD Vfg= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:51 2025 by rpki-client on console.sobornost.net