$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa File: d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa (raw, json) Hash identifier: Qg1QbXXV4aSfzGdlEh2FCoIW6ipP0R85Yrwu9JF66U8= Subject key identifier: 80:81:EB:A5:C2:53:20:76:ED:7D:C6:39:F8:E5:88:07:F1:F6:39:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5D0A783715C0717F1133781401EB5F2240961311 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa Signing time: Wed 02 Apr 2025 00:00:52 +0000 ROA not before: Wed 02 Apr 2025 00:00:52 +0000 ROA not after: Wed 07 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0a:78:37:15:c0:71:7f:11:33:78:14:01:eb:5f:22:40:96:13:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 2 00:00:52 2025 GMT Not After : May 7 23:59:59 2025 GMT Subject: serialNumber=9e3990a7deb859f14a387a2ac0e94001862a109675ab8475b1d467f453fa682a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:15:73:ce:17:46:90:d4:92:b2:2f:aa:06: 62:72:04:0f:e1:24:2a:e2:42:2f:7c:da:90:49:ed: ca:b8:3e:c0:ca:e9:24:0f:81:ae:a9:f3:ee:b2:95: 8f:4c:54:f1:40:fe:71:0c:80:15:dd:f7:71:2c:e2: b7:db:68:c0:26:1e:3b:43:70:3d:82:bc:59:07:cd: 9a:db:96:c9:25:bb:04:60:be:5e:d3:df:95:01:ee: fa:03:7c:57:12:74:ae:fe:9e:b4:56:d3:88:59:f4: 77:e8:15:a3:4f:bc:80:8f:30:ae:23:ed:b7:f3:35: 5c:d3:13:28:b0:57:aa:59:02:ec:b6:05:a4:f1:41: e2:73:dc:e6:ec:07:ec:8c:1c:db:7a:f6:30:db:c3: 6a:9a:79:8f:52:a8:52:bb:04:26:84:6d:23:72:55: 86:d3:d4:3a:85:cc:d4:f8:dc:94:64:4e:3e:39:96: cb:60:30:0e:c7:77:69:40:7c:dd:d6:f1:30:e5:b9: 83:7f:1d:7b:94:69:7e:e2:d5:17:13:11:04:db:19: 6d:8a:13:8f:05:e9:cf:ae:62:a1:19:51:45:2b:20: ce:b0:a5:22:d1:f6:37:b6:2f:8e:5c:0f:40:84:aa: a5:72:4e:ff:0e:4c:b8:7b:a3:b7:0e:68:a8:c5:76: 6b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:81:EB:A5:C2:53:20:76:ED:7D:C6:39:F8:E5:88:07:F1:F6:39:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d43a2e56-2d58-4c7d-8ee2-0ca6ac8a6275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:2800::/40 Signature Algorithm: sha256WithRSAEncryption 16:f4:2f:7a:05:73:ad:0a:be:b0:6b:72:b0:7e:2e:c5:6a:01: c9:21:a1:91:c4:fa:bd:d3:1a:08:88:2e:d3:4f:dc:60:81:1c: 04:5e:dc:63:08:2a:3f:7d:9f:0f:99:02:79:6d:5e:2b:4b:66: 27:20:68:59:c1:df:0f:53:92:7a:c5:0e:af:db:e8:91:85:53: d1:47:fa:a0:7e:4d:4a:82:77:f2:d3:c4:93:7b:f2:cb:42:b0: 97:be:e1:86:0d:69:5c:32:9e:85:63:c5:a3:90:89:c2:cf:f6: c5:28:87:8a:cf:d0:8e:bd:c1:f4:01:0c:3b:53:ca:78:4e:06: e2:c3:c6:c8:93:b5:d0:e8:08:b5:bd:96:09:3e:75:27:1a:44: 0d:de:f7:15:85:e5:23:f9:e1:eb:8a:41:19:46:f5:ca:f0:4b: ab:61:53:48:32:2b:4d:1f:e3:ed:26:49:fc:55:90:cd:71:a4: 4f:f8:a0:45:7e:95:e6:98:3d:92:b0:02:6e:f7:a8:a7:dd:55: 15:b9:6f:c6:d9:fc:42:9c:00:2e:ec:7f:f2:b7:1a:31:53:d0: ef:40:e1:06:ba:97:7b:f8:d8:27:ef:14:4c:07:0c:57:a3:0f: cf:b1:7f:a3:58:a9:dc:4f:66:e0:3c:be:ea:b7:b3:1a:c9:75: 1a:3a:46:0d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXQp4NxXAcX8RM3gUAetfIkCWExEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQwMjAwMDA1MloX DTI1MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAOWUzOTkwYTdkZWI4NTlmMTRhMzg3 YTJhYzBlOTQwMDE4NjJhMTA5Njc1YWI4NDc1YjFkNDY3ZjQ1M2ZhNjgyYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR4Vc84XRpDUkrIvqgZicgQP4SQq 4kIvfNqQSe3KuD7AyukkD4GuqfPuspWPTFTxQP5xDIAV3fdxLOK322jAJh47Q3A9 grxZB82a25bJJbsEYL5e09+VAe76A3xXEnSu/p60VtOIWfR36BWjT7yAjzCuI+23 8zVc0xMosFeqWQLstgWk8UHic9zm7AfsjBzbevYw28NqmnmPUqhSuwQmhG0jclWG 09Q6hczU+NyUZE4+OZbLYDAOx3dpQHzd1vEw5bmDfx17lGl+4tUXExEE2xltihOP BenPrmKhGVFFKyDOsKUi0fY3ti+OXA9AhKqlck7/Dky4e6O3DmioxXZr6QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFICB66XCUyB27X3GOfjliAfx9jnKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q0M2EyZTU2LTJkNTgtNGM3ZC04ZWUyLTBjYTZhYzhhNjI3NS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7ygwDQYJKoZIhvcNAQELBQADggEBABb0L3oFc60KvrBrcrB+ LsVqAckhoZHE+r3TGgiILtNP3GCBHARe3GMIKj99nw+ZAnltXitLZicgaFnB3w9T knrFDq/b6JGFU9FH+qB+TUqCd/LTxJN78stCsJe+4YYNaVwynoVjxaOQicLP9sUo h4rP0I69wfQBDDtTynhOBuLDxsiTtdDoCLW9lgk+dScaRA3e9xWF5SP54euKQRlG 9crwS6thU0gyK00f4+0mSfxVkM1xpE/4oEV+leaYPZKwAm73qKfdVRW5b8bZ/EKc AC7sf/K3GjFT0O9A4Qa6l3v42CfvFEwHDFejD8+xf6NYqdxPZuA8vuq3sxrJdRo6 Rg0= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:51 2025 by rpki-client on console.sobornost.net