$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8565c56-388b-48f4-90b0-4bbd36d0c2fe.roa File: d8565c56-388b-48f4-90b0-4bbd36d0c2fe.roa (raw, json) Hash identifier: BKgGbEDVmmpQKBsoapt9FOol347L3jUuz2Q4caHmkes= Subject key identifier: CE:E2:95:5D:10:2F:8C:1D:E5:DA:CE:8B:3C:91:8C:18:EF:CE:22:61 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 55E32ECBA6F35EDD5106A3D549205386E6E031EA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8565c56-388b-48f4-90b0-4bbd36d0c2fe.roa Signing time: Mon 21 Apr 2025 16:11:48 +0000 ROA not before: Mon 21 Apr 2025 16:11:48 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf8:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e3:2e:cb:a6:f3:5e:dd:51:06:a3:d5:49:20:53:86:e6:e0:31:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:11:48 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=629296791082448da99cd46bbe90f5df08651151187b79376ba423e8a458cb06, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9c:db:ee:55:3d:0a:90:bf:3c:87:63:57:55: b2:6d:ae:9f:a9:e3:87:2d:43:99:5f:63:66:a6:77: 0f:b2:55:ea:be:3d:a4:a4:76:84:9e:4f:93:6f:19: ee:57:45:5c:f2:f1:27:76:03:68:d1:6c:0c:e9:42: e6:c5:52:ea:01:9d:60:3d:d8:96:d8:47:9e:bf:94: b1:e4:a0:56:f0:95:cd:93:c6:08:c8:57:3b:81:7f: 80:51:cb:64:28:c2:a8:0b:11:0c:8d:0b:0c:93:53: 3a:5c:92:93:10:ce:b6:2f:da:a7:b0:08:2b:3a:34: 0a:7f:7c:06:4c:f1:77:08:c2:d6:5c:b4:3e:0c:5a: bc:0f:02:fc:f6:54:9e:c2:65:9c:1b:91:7c:83:2b: 88:f2:a3:66:1f:11:23:f2:21:92:55:8b:0d:63:cd: 6a:5e:81:10:9a:23:e0:f6:e9:b6:89:0b:ed:4b:0d: 6d:c9:34:88:05:5a:9c:91:63:46:2a:60:7d:d9:64: 18:06:35:d2:e3:c1:4b:ec:a0:ec:7a:69:17:ed:b6: 7c:57:ca:45:68:e3:33:59:03:4e:8a:21:39:5e:9e: d2:d1:c2:f3:7c:34:a5:ab:0d:9a:0e:6a:44:ef:66: dc:50:19:0b:12:26:98:2b:75:3a:e1:fc:ab:7a:71: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E2:95:5D:10:2F:8C:1D:E5:DA:CE:8B:3C:91:8C:18:EF:CE:22:61 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8565c56-388b-48f4-90b0-4bbd36d0c2fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf8:a000::/40 Signature Algorithm: sha256WithRSAEncryption 1c:52:6c:07:58:ee:4d:88:9c:38:04:03:dc:8a:02:c0:a3:4c: 37:d2:de:88:12:f9:29:be:7f:9f:8e:fb:e7:5e:54:90:5d:83: 99:a1:40:7e:4c:11:22:8f:aa:da:a9:f0:4b:1d:bf:d0:f4:46: 32:27:4e:71:cb:8d:9a:ee:3b:58:a5:a6:8b:95:c1:52:8b:5a: 6b:a1:ca:9d:ad:10:f5:e4:8a:a3:fa:ff:76:4a:85:d0:ee:54: d5:c3:26:9f:71:9e:4d:f6:44:86:b7:94:fc:40:c6:be:83:aa: d8:9d:18:7b:94:ed:4f:e2:41:19:7f:b6:ad:23:01:f6:25:cc: a6:99:26:12:7d:dd:14:7b:9a:db:ad:b1:56:9f:1b:60:6c:4b: d7:fb:54:c6:5a:50:96:7d:56:03:06:ba:af:87:6c:41:0b:59: 10:5d:d7:d2:31:9c:b1:22:af:55:a5:3e:c6:2f:b6:e0:42:76: 41:82:eb:3a:1d:f2:6f:d2:85:9c:79:9b:f4:cd:84:c3:9a:b3: 1f:0e:10:a1:81:ca:7d:a5:ac:96:5f:b3:d4:87:8d:62:5a:c5: b1:b4:d2:59:7b:e7:77:55:c5:02:d2:94:21:ae:be:a9:75:d6: 14:51:4c:d9:f3:24:7e:7c:36:44:8b:c1:d2:65:00:7f:da:ee: 53:c8:1e:62 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVeMuy6bzXt1RBqPVSSBThubgMeowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MTE0OFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANjI5Mjk2NzkxMDgyNDQ4ZGE5OWNk NDZiYmU5MGY1ZGYwODY1MTE1MTE4N2I3OTM3NmJhNDIzZThhNDU4Y2IwNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpzb7lU9CpC/PIdjV1Wyba6fqeOH LUOZX2NmpncPslXqvj2kpHaEnk+TbxnuV0Vc8vEndgNo0WwM6ULmxVLqAZ1gPdiW 2Eeev5Sx5KBW8JXNk8YIyFc7gX+AUctkKMKoCxEMjQsMk1M6XJKTEM62L9qnsAgr OjQKf3wGTPF3CMLWXLQ+DFq8DwL89lSewmWcG5F8gyuI8qNmHxEj8iGSVYsNY81q XoEQmiPg9um2iQvtSw1tyTSIBVqckWNGKmB92WQYBjXS48FL7KDsemkX7bZ8V8pF aOMzWQNOiiE5Xp7S0cLzfDSlqw2aDmpE72bcUBkLEiaYK3U64fyrenES9wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFM7ilV0QL4wd5drOizyRjBjvziJhMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q4NTY1YzU2LTM4OGItNDhmNC05MGIwLTRiYmQzNmQwYzJmZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+KAwDQYJKoZIhvcNAQELBQADggEBABxSbAdY7k2InDgEA9yK AsCjTDfS3ogS+Sm+f5+O++deVJBdg5mhQH5MESKPqtqp8Esdv9D0RjInTnHLjZru O1ilpouVwVKLWmuhyp2tEPXkiqP6/3ZKhdDuVNXDJp9xnk32RIa3lPxAxr6Dqtid GHuU7U/iQRl/tq0jAfYlzKaZJhJ93RR7mtutsVafG2BsS9f7VMZaUJZ9VgMGuq+H bEELWRBd19IxnLEir1WlPsYvtuBCdkGC6zod8m/ShZx5m/TNhMOasx8OEKGByn2l rJZfs9SHjWJaxbG00ll753dVxQLSlCGuvql11hRRTNnzJH58NkSLwdJlAH/a7lPI HmI= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:51 2025 by rpki-client on console.sobornost.net