$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce6343d9-4647-4201-b1a6-8ca7ee4cc6b4.roa File: ce6343d9-4647-4201-b1a6-8ca7ee4cc6b4.roa (raw, json) Hash identifier: WQnyfbKKlAuF/eDkAV0agtmiYpEywkHrvW987Pjvb0o= Subject key identifier: C1:1B:6D:A3:E9:B7:32:54:78:11:1D:06:43:12:C8:22:81:86:9B:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2366399CAAF802753B92B388B3811A84A15AB64F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce6343d9-4647-4201-b1a6-8ca7ee4cc6b4.roa Signing time: Wed 16 Apr 2025 00:00:48 +0000 ROA not before: Wed 16 Apr 2025 00:00:48 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:66:39:9c:aa:f8:02:75:3b:92:b3:88:b3:81:1a:84:a1:5a:b6:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 16 00:00:48 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=4badbce6cdb7e72f8c2f858881bdbad74e534514c7e6d22aacc7b598a1ce4465, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:72:c7:cf:1f:95:aa:7e:8c:3f:af:b2:c1: 1b:c6:5f:92:ef:c9:94:ce:b8:b1:aa:2c:31:c0:db: 58:45:f2:2c:be:c0:77:20:5c:49:f4:39:e6:ba:7d: 04:8a:a8:2a:0f:27:62:f0:79:5f:bc:87:dd:6c:c0: 96:3c:d1:90:d3:97:21:b4:b9:6c:e1:47:fe:1d:36: a7:6b:be:b9:1e:58:12:15:57:50:7c:e5:51:19:e0: 81:46:a8:b4:b3:32:dd:fc:c8:a5:bd:1b:9b:06:b5: 8d:1c:d1:87:37:ba:d5:04:75:9a:d1:94:15:8e:19: cb:31:a9:c1:77:0c:2b:2f:45:c4:14:55:5c:c2:eb: 95:29:a4:f1:11:61:a5:95:21:2b:4e:1e:dc:21:3e: d9:e5:83:b3:84:f1:e3:3c:a3:be:e7:03:4d:2b:94: 64:6a:08:01:91:6e:bc:78:7b:84:5b:56:61:c8:66: f9:df:61:31:1f:49:03:a2:70:5d:ef:f3:cc:ad:5a: e1:bd:ad:98:9f:5e:6c:e3:a9:f6:fc:26:33:a5:9c: e1:73:a8:ce:fd:e5:c6:8a:d2:d6:69:7d:cb:46:8a: 06:a2:6c:41:c6:36:7b:6d:d3:64:ed:3a:ef:a7:7a: f9:4d:60:eb:df:d6:2e:4d:1a:c5:d4:27:bd:1c:bd: f9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1B:6D:A3:E9:B7:32:54:78:11:1D:06:43:12:C8:22:81:86:9B:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce6343d9-4647-4201-b1a6-8ca7ee4cc6b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:f000::/48 Signature Algorithm: sha256WithRSAEncryption 53:6d:ac:66:dc:f0:09:b7:48:4b:ab:93:1b:03:a4:38:93:ef: 2f:23:9f:4b:c4:6d:4b:48:7f:d8:25:29:8c:99:81:88:e9:a6: eb:a5:89:68:4c:c6:36:e3:c0:57:54:00:49:33:84:4f:59:d4: a9:51:c8:8b:8f:ef:87:4c:49:df:a2:2e:b6:39:cf:44:64:4b: 6b:72:5b:68:f3:c4:5e:af:33:53:a2:eb:73:87:c5:34:16:0e: 08:90:c5:52:ec:15:64:0c:4d:47:55:cf:75:27:57:fa:e1:d4: ea:86:0c:a8:48:61:46:71:5e:b6:a9:9c:7e:de:9d:ba:e7:16: 58:fa:89:7e:6e:a5:f8:fd:bd:37:e3:0a:cd:6a:f0:bf:ff:70: 8e:3b:f9:b0:99:93:09:5a:4a:80:46:0d:94:d7:f9:4f:a8:90: ac:f2:d4:57:31:1b:34:73:95:3b:86:1b:e9:38:b2:ad:b9:3b: c0:a2:6f:2f:89:11:ba:04:29:b5:f5:2f:fd:d1:3f:d2:41:28: d2:3a:bf:7e:02:8f:23:a8:c8:27:db:96:27:ba:46:0b:84:ed: 16:8c:09:8b:4a:ae:14:7e:af:9d:eb:c6:19:ca:d5:e9:9a:c0: 71:a0:0a:53:c3:58:9b:7a:95:e8:6d:02:ab:fd:93:d5:04:c8: 87:2a:ce:01 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUI2Y5nKr4AnU7krOIs4EahKFatk8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNjAwMDA0OFoX DTI1MDUyMTIzNTk1OVowejFJMEcGA1UEBRNANGJhZGJjZTZjZGI3ZTcyZjhjMmY4 NTg4ODFiZGJhZDc0ZTUzNDUxNGM3ZTZkMjJhYWNjN2I1OThhMWNlNDQ2NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFlyx88flap+jD+vssEbxl+S78mU zrixqiwxwNtYRfIsvsB3IFxJ9Dnmun0EiqgqDydi8HlfvIfdbMCWPNGQ05chtLls 4Uf+HTana765HlgSFVdQfOVRGeCBRqi0szLd/MilvRubBrWNHNGHN7rVBHWa0ZQV jhnLManBdwwrL0XEFFVcwuuVKaTxEWGllSErTh7cIT7Z5YOzhPHjPKO+5wNNK5Rk aggBkW68eHuEW1ZhyGb532ExH0kDonBd7/PMrVrhva2Yn15s46n2/CYzpZzhc6jO /eXGitLWaX3LRooGomxBxjZ7bdNk7Trvp3r5TWDr39YuTRrF1Ce9HL35qQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMEbbaPptzJUeBEdBkMSyCKBhpsXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NlNjM0M2Q5LTQ2NDctNDIwMS1iMWE2LThjYTdlZTRjYzZiNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9vAAMA0GCSqGSIb3DQEBCwUAA4IBAQBTbaxm3PAJt0hLq5Mb A6Q4k+8vI59LxG1LSH/YJSmMmYGI6abrpYloTMY248BXVABJM4RPWdSpUciLj++H TEnfoi62Oc9EZEtrclto88RerzNToutzh8U0Fg4IkMVS7BVkDE1HVc91J1f64dTq hgyoSGFGcV62qZx+3p265xZY+ol+bqX4/b034wrNavC//3COO/mwmZMJWkqARg2U 1/lPqJCs8tRXMRs0c5U7hhvpOLKtuTvAom8viRG6BCm19S/90T/SQSjSOr9+Ao8j qMgn25YnukYLhO0WjAmLSq4Ufq+d68YZytXpmsBxoApTw1ibepXobQKr/ZPVBMiH Ks4B -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:51 2025 by rpki-client on console.sobornost.net