$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3bae790-01d7-4b6e-a0f0-9305bcbd4a37.roa File: d3bae790-01d7-4b6e-a0f0-9305bcbd4a37.roa (raw, json) Hash identifier: DsX0uaogjadWT3YgcK2Ia//d4/Pj41I4VOAxgYvbJto= Subject key identifier: 83:DC:66:AC:FE:62:AB:99:87:7E:C5:F4:8D:9C:C9:4F:55:0A:85:CF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 086DD945474B37DEBEB7393C1F5D597B9239DB07 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3bae790-01d7-4b6e-a0f0-9305bcbd4a37.roa Signing time: Mon 21 Apr 2025 15:01:05 +0000 ROA not before: Mon 21 Apr 2025 15:01:05 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:6d:d9:45:47:4b:37:de:be:b7:39:3c:1f:5d:59:7b:92:39:db:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:01:05 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=1e190ee0ba9aa9e7b0e8cf5f624549bde886cb3aee32f80bc539abbf8455f472, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:35:1b:97:c1:f2:b4:fa:f6:87:86:bb:99:cb: 27:3c:b6:a2:b3:1d:e3:36:42:fd:14:f6:b9:78:70: 49:26:3a:c7:f3:4f:31:80:d0:60:32:46:5c:bc:9d: 21:95:08:99:8d:4f:ed:2c:12:7a:3d:37:37:2a:c0: d2:56:45:94:4f:48:28:9e:0d:e5:ba:cb:f0:aa:39: 6c:ee:ab:66:a4:09:4a:d0:2f:2b:19:ba:d3:e8:fc: 81:e2:8c:62:70:5e:a7:e5:5e:83:5e:1d:10:b5:3a: a5:ca:b4:20:6c:72:be:35:a5:f6:b2:fe:79:41:0d: 2f:f7:ed:07:09:eb:7b:b3:ee:3a:03:e3:8d:8c:a3: 35:d2:1e:4a:ff:da:e6:00:cd:e1:b2:7a:0f:c7:35: eb:dd:0f:4c:39:bc:8e:cb:13:b2:71:76:3e:02:ef: 85:65:7c:d5:d3:f0:77:f6:84:7e:67:b9:ae:fe:d3: c6:7a:26:84:24:92:7f:e5:b2:27:30:7c:a0:e6:cd: d9:1d:2b:30:43:fc:59:fb:1d:70:da:b0:b9:d9:24: 1b:de:9c:74:53:2f:c3:20:c5:df:5b:cd:a5:b9:2e: a3:34:2f:02:51:9b:72:a5:f2:03:97:37:2e:d4:fc: bd:74:3a:14:e7:75:17:35:a7:b6:60:33:c7:b7:92: 9b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DC:66:AC:FE:62:AB:99:87:7E:C5:F4:8D:9C:C9:4F:55:0A:85:CF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3bae790-01d7-4b6e-a0f0-9305bcbd4a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:4000::/40 Signature Algorithm: sha256WithRSAEncryption 0a:49:46:70:e4:24:99:1b:fe:8e:8e:3a:35:dc:9f:01:8d:09: fc:ca:91:fd:45:5a:df:13:7a:aa:35:96:f3:23:3f:48:e9:d9: ea:3d:11:60:a6:72:bc:a3:3f:c3:9e:fc:68:2e:aa:a9:17:ef: 2e:f1:46:c4:26:a9:c9:b4:ef:f9:21:84:d8:4e:fb:29:b1:66: e9:41:c9:73:ab:67:c9:da:b3:60:95:2e:72:03:c1:be:c7:9c: ce:b0:96:1d:1c:59:7d:66:3a:0c:1f:23:44:dc:e7:10:dc:65: 82:23:31:0d:82:92:1a:6e:fa:dc:22:61:e9:37:4a:ba:f5:42: 75:c0:ad:71:e0:70:69:b0:fb:2e:55:1a:e4:1b:e9:0c:73:13: 60:c3:d5:d6:92:ea:df:c9:52:ad:83:ef:2b:40:b7:24:0a:25: cb:e0:06:15:bd:14:b0:52:94:3a:f0:da:23:c1:c5:36:e3:56: 9f:bc:8b:8b:99:9f:cc:db:20:a1:56:e5:a8:cf:a8:ae:e3:a4: 90:18:5a:98:92:10:96:5b:ac:23:0f:44:4a:4d:80:1f:5f:72: 1a:a4:b9:9a:69:55:dc:e2:48:05:3d:fa:78:d6:d4:77:02:9b: 11:d2:55:c7:3a:2c:31:a7:70:5f:14:cf:dc:cf:dc:e5:2d:6d: dc:df:82:bb -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCG3ZRUdLN96+tzk8H11Ze5I52wcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MDEwNVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMWUxOTBlZTBiYTlhYTllN2IwZThj ZjVmNjI0NTQ5YmRlODg2Y2IzYWVlMzJmODBiYzUzOWFiYmY4NDU1ZjQ3MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DUbl8HytPr2h4a7mcsnPLaisx3j NkL9FPa5eHBJJjrH808xgNBgMkZcvJ0hlQiZjU/tLBJ6PTc3KsDSVkWUT0gong3l usvwqjls7qtmpAlK0C8rGbrT6PyB4oxicF6n5V6DXh0QtTqlyrQgbHK+NaX2sv55 QQ0v9+0HCet7s+46A+ONjKM10h5K/9rmAM3hsnoPxzXr3Q9MObyOyxOycXY+Au+F ZXzV0/B39oR+Z7mu/tPGeiaEJJJ/5bInMHyg5s3ZHSswQ/xZ+x1w2rC52SQb3px0 Uy/DIMXfW82luS6jNC8CUZtypfIDlzcu1Py9dDoU53UXNae2YDPHt5KbgQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIPcZqz+YquZh37F9I2cyU9VCoXPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzYmFlNzkwLTAxZDctNGI2ZS1hMGYwLTkzMDViY2JkNGEzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAEAwDQYJKoZIhvcNAQELBQADggEBAApJRnDkJJkb/o6OOjXc nwGNCfzKkf1FWt8Teqo1lvMjP0jp2eo9EWCmcryjP8Oe/GguqqkX7y7xRsQmqcm0 7/khhNhO+ymxZulByXOrZ8nas2CVLnIDwb7HnM6wlh0cWX1mOgwfI0Tc5xDcZYIj MQ2Ckhpu+twiYek3Srr1QnXArXHgcGmw+y5VGuQb6QxzE2DD1daS6t/JUq2D7ytA tyQKJcvgBhW9FLBSlDrw2iPBxTbjVp+8i4uZn8zbIKFW5ajPqK7jpJAYWpiSEJZb rCMPREpNgB9fchqkuZppVdziSAU9+njW1HcCmxHSVcc6LDGncF8Uz9zP3OUtbdzf grs= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:51 2025 by rpki-client on console.sobornost.net