$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d2fd8734-3950-4090-9359-e2baa68e90e6.roa File: d2fd8734-3950-4090-9359-e2baa68e90e6.roa (raw, json) Hash identifier: NLbcctsOxlZ/si4eRTDa8WH3g8X+cSyIqkiiTtaz7rE= Subject key identifier: D5:7A:44:31:B8:EB:A2:2E:69:26:47:DB:DC:A0:C2:6C:C4:58:56:00 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 084AB8832C92EC2D157492ED3CC8EFC1363B5363 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d2fd8734-3950-4090-9359-e2baa68e90e6.roa Signing time: Mon 21 Apr 2025 15:50:11 +0000 ROA not before: Mon 21 Apr 2025 15:50:11 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:4840::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4a:b8:83:2c:92:ec:2d:15:74:92:ed:3c:c8:ef:c1:36:3b:53:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:50:11 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=0b63d2c55596f4822cc1c4a1e484e76bba0a65179e132b9cff140fb72c192746, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:63:71:1b:ee:3e:86:65:21:ef:92:6a:16:30: 03:ad:eb:52:1e:94:82:3c:ef:81:a7:52:94:49:ec: 42:cf:b9:ce:61:a5:8f:91:23:83:a1:16:fb:8a:d5: fb:bb:0a:8b:1e:22:3b:a1:02:92:c0:dd:e8:65:58: e6:4a:b0:43:d6:d5:5a:88:e6:4c:73:df:ca:49:e1: ed:0e:5e:c0:66:31:82:4a:70:bf:79:c6:bb:ad:56: 74:16:eb:6e:23:82:c6:f0:2e:1d:18:21:7b:2d:72: 52:d4:05:92:93:7e:09:2a:a2:42:6b:69:58:f6:38: 4d:33:c2:86:c9:64:a1:a6:24:c7:2b:0f:49:d3:9a: 74:ce:9e:b6:ad:e0:5b:16:3f:27:f3:e5:a5:68:20: 19:d2:7e:68:b0:56:f7:35:f5:ed:8b:5e:82:d7:60: 0c:56:50:c2:51:b8:56:14:c3:26:0c:f8:9e:82:a3: 43:b3:1d:86:12:f9:fe:fc:e6:1d:a2:78:ad:0d:76: a1:e1:4a:3a:a5:dc:22:4e:41:97:14:7d:57:62:8d: 17:52:67:a4:33:91:12:54:bf:a1:4f:6c:98:4e:98: 20:d5:e5:0a:d7:c9:b5:b4:fe:cf:87:8b:25:97:f6: 1d:87:ac:ba:f5:9f:2e:8c:01:46:bc:ef:91:16:f4: 35:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7A:44:31:B8:EB:A2:2E:69:26:47:DB:DC:A0:C2:6C:C4:58:56:00 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d2fd8734-3950-4090-9359-e2baa68e90e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:4840::/46 Signature Algorithm: sha256WithRSAEncryption 4f:fb:ba:99:85:d7:bc:90:63:71:2e:8c:0e:25:f2:72:20:0d: 4f:44:58:89:d1:05:b6:b7:22:37:5c:51:a9:26:65:f5:ac:a9: 2b:ff:3e:21:03:46:4a:9c:d0:02:1b:03:8f:ad:1f:47:79:32: 3a:ff:48:a7:6d:d3:45:de:5c:c2:0b:df:6c:0e:4d:0d:fb:c6: 3c:19:21:94:90:0a:a2:8b:8a:f6:d7:f6:ab:e7:79:6a:6d:d0: 88:0b:da:10:b8:4e:c8:80:d1:a9:af:f8:5f:af:65:2b:c6:4f: d5:92:d7:58:77:9b:68:d8:3d:2d:4c:21:3a:e6:45:b9:f5:41: 5b:92:ed:db:19:3e:20:60:41:88:f3:4f:98:71:df:57:04:3c: 88:63:e8:e0:77:aa:a5:de:2f:54:6d:1e:fa:36:70:07:45:a0: 50:20:83:e0:09:bb:5f:67:e2:2d:ca:00:c2:70:48:b2:b7:82: 97:be:4f:1a:c1:d2:65:fb:48:3f:b1:ab:5c:d8:8d:3d:b6:bd: 01:32:5c:c4:94:11:b8:07:44:97:e9:f4:bf:c5:4e:6d:34:8b: f0:26:52:0f:cb:52:27:7a:e0:a5:06:cc:87:66:97:24:bd:79: a8:4d:75:9e:e8:4e:7f:4a:55:05:a1:47:ed:99:7d:19:55:62: bb:20:1c:43 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUCEq4gyyS7C0VdJLtPMjvwTY7U2MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NTAxMVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMGI2M2QyYzU1NTk2ZjQ4MjJjYzFj NGExZTQ4NGU3NmJiYTBhNjUxNzllMTMyYjljZmYxNDBmYjcyYzE5Mjc0NjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GNxG+4+hmUh75JqFjADretSHpSC PO+Bp1KUSexCz7nOYaWPkSODoRb7itX7uwqLHiI7oQKSwN3oZVjmSrBD1tVaiOZM c9/KSeHtDl7AZjGCSnC/eca7rVZ0FutuI4LG8C4dGCF7LXJS1AWSk34JKqJCa2lY 9jhNM8KGyWShpiTHKw9J05p0zp62reBbFj8n8+WlaCAZ0n5osFb3NfXti16C12AM VlDCUbhWFMMmDPiegqNDsx2GEvn+/OYdonitDXah4Uo6pdwiTkGXFH1XYo0XUmek M5ESVL+hT2yYTpgg1eUK18m1tP7Ph4sll/Ydh6y69Z8ujAFGvO+RFvQ1VwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNV6RDG466IuaSZH29ygwmzEWFYAMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QyZmQ4NzM0LTM5NTAtNDA5MC05MzU5LWUyYmFhNjhlOTBlNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+0hAMA0GCSqGSIb3DQEBCwUAA4IBAQBP+7qZhde8kGNxLowO JfJyIA1PRFiJ0QW2tyI3XFGpJmX1rKkr/z4hA0ZKnNACGwOPrR9HeTI6/0inbdNF 3lzCC99sDk0N+8Y8GSGUkAqii4r21/ar53lqbdCIC9oQuE7IgNGpr/hfr2Urxk/V ktdYd5to2D0tTCE65kW59UFbku3bGT4gYEGI80+Ycd9XBDyIY+jgd6ql3i9UbR76 NnAHRaBQIIPgCbtfZ+ItygDCcEiyt4KXvk8awdJl+0g/satc2I09tr0BMlzElBG4 B0SX6fS/xU5tNIvwJlIPy1IneuClBsyHZpckvXmoTXWe6E5/SlUFoUftmX0ZVWK7 IBxD -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:51 2025 by rpki-client on console.sobornost.net