$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ceb0138a-da27-4867-b667-db77092baf0f.roa File: ceb0138a-da27-4867-b667-db77092baf0f.roa (raw, json) Hash identifier: UBdx5qsE/OxC0IALdVztp2UwX5CEKM4ZNYAlV7QtbLE= Subject key identifier: 4B:9A:9F:22:D0:3C:89:A5:7F:E8:B8:35:14:77:A6:00:6D:6C:59:04 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 24518352F5AD531E1D961D42A1FFB944B37C10C5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ceb0138a-da27-4867-b667-db77092baf0f.roa Signing time: Sat 19 Apr 2025 00:20:08 +0000 ROA not before: Sat 19 Apr 2025 00:20:08 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:51:83:52:f5:ad:53:1e:1d:96:1d:42:a1:ff:b9:44:b3:7c:10:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:20:08 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=0dcda3e9e10788732dcdf1ae07e5d9d5285e95d415077715ea59a24fc55f45f1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:27:7a:c4:8b:4a:65:65:c4:a4:56:dc:16: 9d:d7:31:31:d8:36:af:2c:d6:01:03:24:9c:18:78: 31:a0:03:97:4f:7a:61:29:53:77:da:87:28:4a:86: 9c:2d:f4:d4:fe:35:5a:8f:ed:3f:3c:6e:e8:a9:55: 16:ab:ac:69:45:ec:f4:b2:60:1b:4c:e2:2c:f2:d9: 8c:1f:0b:99:79:51:47:d1:a5:13:8e:bf:f0:2b:fb: 3f:41:78:fc:3d:9f:ca:db:e9:e3:8a:37:50:30:7c: ce:00:14:42:7c:50:fe:39:66:49:85:39:13:6a:e2: b1:39:cf:bd:2a:2e:9f:97:83:d1:f4:82:46:39:d3: 5d:28:56:21:7b:03:51:5f:0e:fb:08:67:9f:1d:7f: 11:6a:81:71:7c:8e:dc:ec:c1:a1:a1:7c:59:37:df: a4:ad:95:80:95:0f:b2:86:2c:76:1a:e9:d9:45:7f: f3:78:01:af:d0:07:0a:33:e5:12:8b:0c:19:bc:10: e7:92:99:21:31:3d:0b:c6:60:19:33:01:53:0e:c9: 16:10:8e:71:92:9e:e3:c6:76:9b:20:84:d1:af:a3: c2:bf:5f:ea:66:5a:cf:90:aa:d0:ed:b0:02:1e:ec: 27:d7:ee:c2:fe:14:dc:4b:49:64:a2:cf:43:21:54: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9A:9F:22:D0:3C:89:A5:7F:E8:B8:35:14:77:A6:00:6D:6C:59:04 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ceb0138a-da27-4867-b667-db77092baf0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:2020::/48 Signature Algorithm: sha256WithRSAEncryption a5:18:d2:36:32:97:df:94:a5:2b:b8:2a:02:f8:28:08:c0:9f: 52:02:f5:ae:ef:fe:3e:24:20:7a:56:e5:02:67:67:eb:34:1a: 9a:df:5d:14:46:a1:20:e7:61:5c:4b:a2:8e:4b:ca:5c:50:3a: 17:fc:06:28:bf:df:c9:10:01:f7:68:8f:15:7d:62:ba:06:7f: 1b:1b:06:43:30:e9:0f:62:bf:37:d7:68:a0:1d:88:37:b1:fa: 2d:93:2b:1b:52:5e:82:38:80:62:e9:89:26:8f:21:cd:9c:cd: 55:be:f1:48:e8:19:63:98:82:11:f2:c0:d9:3c:ff:1a:f7:71: 3a:38:24:d1:b8:8c:30:88:bc:ee:b9:de:72:1b:d4:35:a5:8a: d2:a1:a6:71:5a:25:b8:de:61:68:13:c5:41:c3:da:93:4b:05: e8:83:3f:f8:e4:70:2b:7f:08:f7:22:01:26:ba:4e:89:9a:52: 88:ff:9e:d6:38:1f:c3:92:9c:e4:88:27:eb:13:47:1b:0b:e8: 1a:c0:44:ce:d4:b1:fa:62:a4:e4:38:2e:51:f6:48:40:4c:9d: d7:db:e4:d3:d7:62:43:72:1b:0f:95:ee:03:72:fc:84:c3:31: e6:27:b2:2e:e3:04:86:21:83:30:3f:e5:22:06:48:ce:28:3c: 24:3a:b2:d6 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJFGDUvWtUx4dlh1Cof+5RLN8EMUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMjAwOFoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAMGRjZGEzZTllMTA3ODg3MzJkY2Rm MWFlMDdlNWQ5ZDUyODVlOTVkNDE1MDc3NzE1ZWE1OWEyNGZjNTVmNDVmMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLsnesSLSmVlxKRW3Bad1zEx2Dav LNYBAyScGHgxoAOXT3phKVN32ocoSoacLfTU/jVaj+0/PG7oqVUWq6xpRez0smAb TOIs8tmMHwuZeVFH0aUTjr/wK/s/QXj8PZ/K2+njijdQMHzOABRCfFD+OWZJhTkT auKxOc+9Ki6fl4PR9IJGOdNdKFYhewNRXw77CGefHX8RaoFxfI7c7MGhoXxZN9+k rZWAlQ+yhix2GunZRX/zeAGv0AcKM+USiwwZvBDnkpkhMT0LxmAZMwFTDskWEI5x kp7jxnabIITRr6PCv1/qZlrPkKrQ7bACHuwn1+7C/hTcS0lkos9DIVTZPQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFEuanyLQPImlf+i4NRR3pgBtbFkEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NlYjAxMzhhLWRhMjctNDg2Ny1iNjY3LWRiNzcwOTJiYWYwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaACAgMA0GCSqGSIb3DQEBCwUAA4IBAQClGNI2MpfflKUruCoC +CgIwJ9SAvWu7/4+JCB6VuUCZ2frNBqa310URqEg52FcS6KOS8pcUDoX/AYov9/J EAH3aI8VfWK6Bn8bGwZDMOkPYr8312igHYg3sfotkysbUl6COIBi6YkmjyHNnM1V vvFI6BljmIIR8sDZPP8a93E6OCTRuIwwiLzuud5yG9Q1pYrSoaZxWiW43mFoE8VB w9qTSwXogz/45HArfwj3IgEmuk6JmlKI/57WOB/DkpzkiCfrE0cbC+gawETO1LH6 YqTkOC5R9khATJ3X2+TT12JDchsPle4DcvyEwzHmJ7Iu4wSGIYMwP+UiBkjOKDwk OrLW -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:51 2025 by rpki-client on console.sobornost.net