$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce7f13e7-1cae-47ba-9006-841a4d4d9e51.roa File: ce7f13e7-1cae-47ba-9006-841a4d4d9e51.roa (raw, json) Hash identifier: cfG5eNu3M0LZ3xHE357G85k1DxmzkJM9yMmisLYOZrA= Subject key identifier: DA:F6:DE:14:19:EB:1F:DC:25:E8:25:D6:B7:F7:6C:0E:E1:0B:CF:E1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 083BCB0FE29A121340FCB1DFEC87EB2BDA83599B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce7f13e7-1cae-47ba-9006-841a4d4d9e51.roa Signing time: Mon 21 Apr 2025 15:11:09 +0000 ROA not before: Mon 21 Apr 2025 15:11:09 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:9040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:3b:cb:0f:e2:9a:12:13:40:fc:b1:df:ec:87:eb:2b:da:83:59:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:11:09 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=e2198bf112272b0a2e04e58c200cc91f0ca35cbb081e5a7bd81fc52435e77a49, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:99:44:22:25:8c:78:26:74:8b:62:28:7f:f6: 03:c3:32:11:e8:12:b1:9a:d0:45:97:18:56:5f:7a: b8:ca:0e:19:6f:50:52:d0:fc:f9:14:c3:29:f2:71: 6b:24:da:4a:a5:60:f0:04:5e:52:67:74:b0:e4:6c: 51:17:e4:29:ec:7f:25:1c:d9:fb:d0:aa:84:72:81: 65:92:fd:63:d7:39:50:78:c8:56:d3:b4:bf:25:81: 13:ae:40:86:75:3a:11:82:c2:fd:9b:6d:aa:8d:3d: 68:45:bf:92:c2:62:92:cd:6b:a0:82:c1:40:8a:fc: 05:ed:5c:06:58:0b:59:5f:8c:4a:a6:dd:45:c3:b8: d8:3a:91:77:42:3c:c8:6c:a5:33:c6:c9:eb:d3:ec: ac:84:39:2f:9d:11:0e:9b:83:a6:cc:1c:50:36:47: cb:a0:e5:0d:06:08:d1:d2:d9:1d:12:05:11:31:a2: a3:a6:2f:01:d6:ce:7b:87:fe:d3:05:e9:ee:1d:76: c3:6a:3e:58:41:1b:19:84:dc:47:bb:e7:30:c7:f1: 86:56:7c:06:2d:a0:8b:dc:bc:e9:89:cd:25:9e:89: b6:0d:dc:15:74:7d:98:80:d3:24:01:89:05:d9:6c: 94:c0:ae:26:86:94:84:7a:17:a8:a7:d1:57:41:6e: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F6:DE:14:19:EB:1F:DC:25:E8:25:D6:B7:F7:6C:0E:E1:0B:CF:E1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ce7f13e7-1cae-47ba-9006-841a4d4d9e51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:9040::/46 Signature Algorithm: sha256WithRSAEncryption 2c:c9:b9:c3:15:8e:68:04:f0:a0:7f:02:d9:db:5c:78:83:d1: 31:5a:41:cf:e1:b4:09:a2:7f:93:4c:cb:8b:b0:42:2c:4c:27: 01:b3:85:d9:d9:fc:7e:25:e6:fa:92:f4:ba:a8:97:3a:74:d0: e1:3e:ea:6d:9a:66:5b:81:9c:6c:de:0e:63:45:9e:ad:ce:2f: a0:2e:b9:8f:74:a7:8e:9f:b9:6e:a5:9f:35:66:18:3c:4b:27: a8:64:de:bb:5b:b9:84:91:11:65:00:b0:53:b4:14:c3:d3:b1: 1e:1e:2b:85:bc:92:ac:cb:5d:ee:e2:80:f0:ed:2c:46:30:d3: 0e:be:19:ed:a9:e2:3b:e8:78:1d:17:86:98:13:c4:66:8a:10: 33:74:92:4e:f6:01:3b:e6:90:1f:94:d8:d5:31:8e:ad:87:c5: 42:ae:c4:2d:99:ad:09:15:8b:5d:ed:2e:b8:36:d6:95:ec:aa: 73:d3:72:79:54:ef:5d:f3:06:3b:26:51:42:7a:a6:fd:a0:1d: 11:f1:d0:3a:80:49:09:50:10:78:a9:ce:8a:f1:9d:fc:07:95: 37:4f:80:c7:3c:72:2e:0f:10:dd:49:84:92:f1:77:91:bc:bc: 40:af:56:81:6b:21:1a:de:f0:15:bc:ac:90:82:c1:09:4d:9c: 31:15:15:f6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCDvLD+KaEhNA/LHf7IfrK9qDWZswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MTEwOVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAZTIxOThiZjExMjI3MmIwYTJlMDRl NThjMjAwY2M5MWYwY2EzNWNiYjA4MWU1YTdiZDgxZmM1MjQzNWU3N2E0OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJlEIiWMeCZ0i2Iof/YDwzIR6BKx mtBFlxhWX3q4yg4Zb1BS0Pz5FMMp8nFrJNpKpWDwBF5SZ3Sw5GxRF+Qp7H8lHNn7 0KqEcoFlkv1j1zlQeMhW07S/JYETrkCGdToRgsL9m22qjT1oRb+SwmKSzWuggsFA ivwF7VwGWAtZX4xKpt1Fw7jYOpF3QjzIbKUzxsnr0+yshDkvnREOm4OmzBxQNkfL oOUNBgjR0tkdEgURMaKjpi8B1s57h/7TBenuHXbDaj5YQRsZhNxHu+cwx/GGVnwG LaCL3Lzpic0lnom2DdwVdH2YgNMkAYkF2WyUwK4mhpSEeheop9FXQW7ieQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNr23hQZ6x/cJegl1rf3bA7hC8/hMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NlN2YxM2U3LTFjYWUtNDdiYS05MDA2LTg0MWE0ZDRkOWU1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaZBAMA0GCSqGSIb3DQEBCwUAA4IBAQAsybnDFY5oBPCgfwLZ 21x4g9ExWkHP4bQJon+TTMuLsEIsTCcBs4XZ2fx+Jeb6kvS6qJc6dNDhPuptmmZb gZxs3g5jRZ6tzi+gLrmPdKeOn7lupZ81Zhg8SyeoZN67W7mEkRFlALBTtBTD07Ee HiuFvJKsy13u4oDw7SxGMNMOvhntqeI76HgdF4aYE8RmihAzdJJO9gE75pAflNjV MY6th8VCrsQtma0JFYtd7S64NtaV7Kpz03J5VO9d8wY7JlFCeqb9oB0R8dA6gEkJ UBB4qc6K8Z38B5U3T4DHPHIuDxDdSYSS8XeRvLxAr1aBayEa3vAVvKyQgsEJTZwx FRX2 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:51 2025 by rpki-client on console.sobornost.net