$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d74980db-a60d-487c-9253-3e131534d8d4.roa File: d74980db-a60d-487c-9253-3e131534d8d4.roa (raw, json) Hash identifier: wbJEOl1r47HzEfKcU5kGXyccoG63jJMgpeRPtj7ZwMw= Subject key identifier: A1:54:DE:DD:C5:08:D6:EA:80:39:BD:8B:1D:7C:B5:0E:62:3E:6F:CF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4B1FC6D4BD70EA02606D993082B4C4725EEF9F9C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d74980db-a60d-487c-9253-3e131534d8d4.roa Signing time: Mon 21 Apr 2025 16:31:38 +0000 ROA not before: Mon 21 Apr 2025 16:31:38 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1f:c6:d4:bd:70:ea:02:60:6d:99:30:82:b4:c4:72:5e:ef:9f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:31:38 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=aa8f9243ef3e5cca2604edd7309ef95f8e84f969ebf009495133d53c3c5352a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:7f:11:cb:e9:0d:13:30:d6:dc:0d:64:af: cf:2d:48:fd:0d:38:9a:89:2d:2c:d1:58:98:a3:ea: ef:90:1d:b3:b5:eb:84:89:28:d5:17:cb:e9:ff:75: 21:af:d8:26:cc:44:ee:52:0c:13:3b:7a:32:87:87: 9c:50:a1:18:51:ea:d6:9c:f3:04:f1:15:06:ec:3e: 7f:85:b8:2f:2f:cc:03:31:b4:94:54:33:e0:34:ac: a8:ce:14:b5:dd:1a:4c:89:3c:bc:65:33:c0:da:eb: a2:f3:7b:b5:5e:47:e9:ca:e9:c4:19:88:b7:b0:30: a0:4b:bc:8b:29:35:2b:04:4d:79:d9:e4:7f:07:15: d5:c4:62:cf:48:02:e9:ae:7d:bd:bf:11:be:b6:60: a8:01:dd:46:a7:2c:ea:1a:5b:90:6f:24:19:9c:8e: 6f:ef:59:f0:65:ee:46:b2:37:a8:bf:28:63:67:2b: 3d:a2:66:c4:8b:2f:aa:fb:04:1b:12:19:8a:1d:56: c8:3b:76:2d:a0:e3:fa:36:48:87:b7:81:1e:24:20: f6:a6:57:78:3e:07:ea:65:ec:c7:6e:75:ed:ca:a4: 0d:9f:dd:31:4b:a7:b2:cc:6d:5d:a8:7d:18:33:44: db:40:c0:39:33:61:17:ca:9b:8d:2e:8c:f8:da:da: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:54:DE:DD:C5:08:D6:EA:80:39:BD:8B:1D:7C:B5:0E:62:3E:6F:CF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d74980db-a60d-487c-9253-3e131534d8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:f000::/40 Signature Algorithm: sha256WithRSAEncryption 95:d3:fe:5f:a2:ca:17:49:a0:6f:7f:cd:6c:55:d2:e6:15:3d: 8a:b3:f1:61:3f:de:2f:2a:d6:8f:a1:ee:37:0c:b8:e1:20:1c: 94:b9:9e:c0:86:7e:a9:2f:f6:36:6a:98:2e:df:d4:e1:77:5c: ae:d8:08:c9:17:39:48:06:ef:b3:24:ad:d4:39:09:cc:2a:60: 20:5c:6c:32:e9:8b:6e:13:da:2e:70:1a:1f:7d:16:ab:20:82: 0c:73:15:fb:cf:06:c0:14:b6:86:8e:73:27:0d:a6:5c:0d:99: 28:70:e0:47:55:00:19:f8:cc:7b:a4:34:ad:1b:42:e6:cd:5d: 56:d0:15:95:8b:3d:95:20:54:a1:54:c1:d0:f4:0e:79:75:15: 5d:4c:8a:a8:ca:c9:06:03:44:e1:3d:63:74:25:00:a0:6c:5e: 65:b3:41:14:c6:ed:43:34:e0:03:26:fb:e4:85:96:17:dc:67: f1:5f:dd:25:45:b5:e1:c6:70:90:eb:4f:12:a4:41:75:8f:c0: 68:5a:c6:d4:a6:6b:70:57:92:4c:67:60:f3:be:69:1d:55:c1: ed:37:fc:df:1a:59:7b:51:4a:82:07:c1:11:3f:fa:91:6e:f1: 9a:81:98:f4:e4:69:46:55:1e:4b:d7:a7:bc:4c:15:d9:31:52: 48:f1:21:80 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSx/G1L1w6gJgbZkwgrTEcl7vn5wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MzEzOFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYWE4ZjkyNDNlZjNlNWNjYTI2MDRl ZGQ3MzA5ZWY5NWY4ZTg0Zjk2OWViZjAwOTQ5NTEzM2Q1M2MzYzUzNTJhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdJ/EcvpDRMw1twNZK/PLUj9DTia iS0s0ViYo+rvkB2zteuEiSjVF8vp/3Uhr9gmzETuUgwTO3oyh4ecUKEYUerWnPME 8RUG7D5/hbgvL8wDMbSUVDPgNKyozhS13RpMiTy8ZTPA2uui83u1XkfpyunEGYi3 sDCgS7yLKTUrBE152eR/BxXVxGLPSALprn29vxG+tmCoAd1GpyzqGluQbyQZnI5v 71nwZe5GsjeovyhjZys9ombEiy+q+wQbEhmKHVbIO3YtoOP6NkiHt4EeJCD2pld4 PgfqZezHbnXtyqQNn90xS6eyzG1dqH0YM0TbQMA5M2EXypuNLoz42to+CwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKFU3t3FCNbqgDm9ix18tQ5iPm/PMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q3NDk4MGRiLWE2MGQtNDg3Yy05MjUzLTNlMTMxNTM0ZDhkNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaufAwDQYJKoZIhvcNAQELBQADggEBAJXT/l+iyhdJoG9/zWxV 0uYVPYqz8WE/3i8q1o+h7jcMuOEgHJS5nsCGfqkv9jZqmC7f1OF3XK7YCMkXOUgG 77MkrdQ5CcwqYCBcbDLpi24T2i5wGh99FqsgggxzFfvPBsAUtoaOcycNplwNmShw 4EdVABn4zHukNK0bQubNXVbQFZWLPZUgVKFUwdD0Dnl1FV1MiqjKyQYDROE9Y3Ql AKBsXmWzQRTG7UM04AMm++SFlhfcZ/Ff3SVFteHGcJDrTxKkQXWPwGhaxtSma3BX kkxnYPO+aR1Vwe03/N8aWXtRSoIHwRE/+pFu8ZqBmPTkaUZVHkvXp7xMFdkxUkjx IYA= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:51 2025 by rpki-client on console.sobornost.net