$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6d439a9-d0b0-44a2-b326-95d1592e6156.roa File: d6d439a9-d0b0-44a2-b326-95d1592e6156.roa (raw, json) Hash identifier: YQJkG4aCryGMeBJS490fqt1KTTTNguH2KdHlldGf4XI= Subject key identifier: 7E:C9:F1:2D:F3:58:2E:10:C8:A8:62:59:54:89:9D:53:DD:F7:19:2E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6ED65D9E4FB0D4F6E0AEF6151320F267425B5251 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6d439a9-d0b0-44a2-b326-95d1592e6156.roa Signing time: Tue 15 Apr 2025 00:00:52 +0000 ROA not before: Tue 15 Apr 2025 00:00:52 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d6:5d:9e:4f:b0:d4:f6:e0:ae:f6:15:13:20:f2:67:42:5b:52:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 15 00:00:52 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=aad3e11244630a3d7c6ed609a7669897a4eac3c18f11d6a2558a082d89b4b9de, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:ec:29:e0:17:aa:2a:ec:ee:90:51:12:c2: 39:91:f1:f9:6b:42:e2:6c:90:a0:a9:ea:26:96:e2: c0:a4:fa:a2:94:22:29:f0:70:c9:14:5b:eb:ea:c8: 27:a3:9e:4e:f8:8f:27:13:87:0b:7d:32:32:b2:f3: 76:63:85:36:17:55:79:27:34:fa:fe:dd:11:4a:67: 54:df:c2:61:f7:10:ea:0b:81:0f:e5:1c:e5:e4:1a: 7b:b9:6b:bf:c0:93:9a:c1:3b:0e:2d:0d:44:7a:34: 03:7b:f7:1d:25:ab:db:9e:e2:38:3d:71:f0:40:49: 24:7d:d6:76:39:50:e5:d4:3b:39:5e:e6:6f:c6:3b: ee:31:e0:f0:89:9e:4e:8c:6f:c4:fe:cd:b3:66:40: 36:6d:2c:47:88:78:c4:01:36:2e:58:83:da:06:ac: 6c:ca:56:f7:2a:cd:ed:07:a5:fd:a8:76:58:81:6d: 85:2c:4e:9d:73:15:60:45:55:91:be:42:59:89:4b: ed:74:51:c3:cf:ad:7e:2c:e2:2a:d4:6f:d5:cd:10: b0:3d:7a:dd:12:46:49:bb:05:01:4d:7a:28:c2:42: a8:b9:51:e4:e5:83:c7:ce:fd:c9:f4:91:92:d7:4c: 30:84:79:68:a9:b1:ae:6a:8a:08:47:be:27:8a:6a: f9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C9:F1:2D:F3:58:2E:10:C8:A8:62:59:54:89:9D:53:DD:F7:19:2E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d6d439a9-d0b0-44a2-b326-95d1592e6156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:e000::/40 Signature Algorithm: sha256WithRSAEncryption 9b:ae:cc:e5:e5:8d:a0:30:67:c0:b2:fc:a4:68:5e:f2:26:30: c0:44:94:1c:ec:31:25:9b:a1:2c:ce:e8:21:fc:f2:d5:3e:17: fc:53:2e:dd:1a:1a:e5:87:3a:ea:1d:e4:59:d9:5e:a2:1f:81: 67:74:1f:ff:e8:e0:db:5f:66:e3:67:25:ea:7a:11:5d:7f:b9: 1e:f9:4a:e9:45:57:fd:7a:e3:0e:7c:79:81:fd:66:e3:11:14: e6:19:d8:44:c3:27:a4:23:25:c9:45:28:25:8a:d0:6c:d7:5b: 71:d6:f1:5e:b1:02:35:60:f7:1c:26:a8:c3:9a:31:a9:75:fb: 93:9d:21:7e:9f:c7:d3:4e:25:c1:27:6e:96:f2:7f:8f:2b:50: b5:c9:70:d3:c7:8f:13:87:ce:cc:53:0c:3c:66:77:68:a7:64: 3c:4d:21:c7:2b:f5:a7:ef:e8:b6:c1:5c:68:5d:77:11:9d:9a: 16:c6:fb:2c:64:6c:dd:2b:7c:e9:a8:a7:58:56:41:6e:7a:e3: c4:bc:59:7e:39:1b:07:fe:72:de:77:06:ee:8b:4a:5a:21:09: 9e:a5:4e:c0:8f:9a:d8:e5:76:3d:36:5a:d6:4b:cf:f6:53:0f: 83:8d:5d:81:2e:db:0e:16:00:a5:bb:40:15:a8:4b:85:2c:25: 3b:4a:64:0e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUbtZdnk+w1PbgrvYVEyDyZ0JbUlEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxNTAwMDA1MloX DTI1MDUyMDIzNTk1OVowejFJMEcGA1UEBRNAYWFkM2UxMTI0NDYzMGEzZDdjNmVk NjA5YTc2Njk4OTdhNGVhYzNjMThmMTFkNmEyNTU4YTA4MmQ4OWI0YjlkZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jHsKeAXqirs7pBREsI5kfH5a0Li bJCgqeomluLApPqilCIp8HDJFFvr6sgno55O+I8nE4cLfTIysvN2Y4U2F1V5JzT6 /t0RSmdU38Jh9xDqC4EP5Rzl5Bp7uWu/wJOawTsOLQ1EejQDe/cdJavbnuI4PXHw QEkkfdZ2OVDl1Ds5XuZvxjvuMeDwiZ5OjG/E/s2zZkA2bSxHiHjEATYuWIPaBqxs ylb3Ks3tB6X9qHZYgW2FLE6dcxVgRVWRvkJZiUvtdFHDz61+LOIq1G/VzRCwPXrd EkZJuwUBTXoowkKouVHk5YPHzv3J9JGS10wwhHloqbGuaooIR74nimr56QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH7J8S3zWC4QyKhiWVSJnVPd9xkuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q2ZDQzOWE5LWQwYjAtNDRhMi1iMzI2LTk1ZDE1OTJlNjE1Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYOAwDQYJKoZIhvcNAQELBQADggEBAJuuzOXljaAwZ8Cy/KRo XvImMMBElBzsMSWboSzO6CH88tU+F/xTLt0aGuWHOuod5FnZXqIfgWd0H//o4Ntf ZuNnJep6EV1/uR75SulFV/164w58eYH9ZuMRFOYZ2ETDJ6QjJclFKCWK0GzXW3HW 8V6xAjVg9xwmqMOaMal1+5OdIX6fx9NOJcEnbpbyf48rULXJcNPHjxOHzsxTDDxm d2inZDxNIccr9afv6LbBXGhddxGdmhbG+yxkbN0rfOmop1hWQW5648S8WX45Gwf+ ct53Bu6LSlohCZ6lTsCPmtjldj02WtZLz/ZTD4ONXYEu2w4WAKW7QBWoS4UsJTtK ZA4= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:51 2025 by rpki-client on console.sobornost.net