$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/da22e8df-40cd-402b-b04f-8b5954d0b173.roa File: da22e8df-40cd-402b-b04f-8b5954d0b173.roa (raw, json) Hash identifier: +Cn9YOy0V0dhnFrwtITnhC7hY0avUxw0VoGSZnfRT7U= Subject key identifier: 3C:64:92:E6:D4:8A:8A:CA:F9:3B:4E:1C:11:80:5A:22:B9:98:21:16 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0CFE5E8AA687FF145BA1DE300B238C4CE128DF67 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/da22e8df-40cd-402b-b04f-8b5954d0b173.roa Signing time: Mon 21 Apr 2025 15:21:15 +0000 ROA not before: Mon 21 Apr 2025 15:21:15 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:a040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:fe:5e:8a:a6:87:ff:14:5b:a1:de:30:0b:23:8c:4c:e1:28:df:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:21:15 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=f5386e2b61b14d2b0054dbd4c930d475bcb38dd933dbc8e6c6bcc812443a7e1a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:ed:cb:78:a0:73:0e:f4:a3:9e:f4:56:e6: 94:93:2f:e7:a5:0a:75:07:e1:ba:2e:6b:81:12:2d: 04:db:36:b6:59:88:6e:60:5e:7a:3c:ae:2d:a1:f4: b7:e2:22:f2:5c:0a:ae:39:28:74:49:3e:5b:0e:cd: df:65:bb:af:e4:0b:0a:4f:f2:bf:e0:e4:7d:a1:ee: 57:c0:76:75:3f:72:b8:a3:1a:4f:24:6f:38:68:b3: dd:29:0c:87:88:3d:08:4e:78:e1:6d:60:c4:39:cc: c1:a3:df:ef:0f:c5:da:fd:38:a0:68:a2:53:dd:76: ab:59:31:74:6f:42:43:9d:a1:e6:8c:1a:f9:24:b6: 27:12:d0:42:6e:74:e9:43:7b:cc:2f:39:3c:e2:32: 36:a0:15:4e:ea:ca:fd:d6:59:57:b3:47:a4:ea:c6: 4e:ed:65:81:de:68:fc:04:43:0d:de:20:2d:47:e1: 24:de:57:0f:c0:28:f0:48:7e:43:10:5d:2b:c9:db: 1c:14:51:d1:2a:ae:fa:b3:3b:37:ea:74:1e:41:49: a1:a4:e5:98:92:a1:0b:e4:b4:ce:67:6d:46:62:b6: f7:6b:ee:3a:ff:28:df:d7:ac:8b:e5:9b:a5:f3:8e: a8:8b:99:81:23:2a:e7:e6:80:92:24:2b:3f:bb:2c: 21:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:64:92:E6:D4:8A:8A:CA:F9:3B:4E:1C:11:80:5A:22:B9:98:21:16 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/da22e8df-40cd-402b-b04f-8b5954d0b173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:a040::/46 Signature Algorithm: sha256WithRSAEncryption 38:36:f2:10:f6:05:5a:4a:84:25:e8:6e:79:56:92:b9:96:dd: 24:82:48:99:cd:0d:f9:47:d7:f7:f0:a5:5e:79:27:0d:18:f2: 06:20:a0:eb:89:b1:e0:64:52:ec:2f:4b:6f:d7:16:6b:d1:ee: e8:4c:c8:04:d1:3d:ea:38:ff:22:77:b1:d9:35:1e:aa:fa:e9: 39:88:69:70:b7:09:fe:2b:a6:1e:a7:a3:5e:d4:15:ad:cb:bc: c3:ff:b2:30:0b:8a:03:b6:0e:f2:f3:2d:d9:db:b2:23:45:7f: 70:8d:ae:ec:65:57:c8:dd:97:4f:45:d5:15:0d:50:b0:d9:8d: e8:e9:5c:f9:91:75:84:2a:06:c5:c8:12:f4:c0:a8:74:d3:25: ee:dd:f8:76:fd:72:e6:f3:3c:3e:d6:28:4a:f6:a9:ed:87:bd: 97:ed:09:99:bb:08:56:5b:82:34:6f:74:a5:56:a7:8f:4f:99: e4:27:b1:37:4e:50:63:15:96:fb:b4:3b:35:e6:1d:b1:53:e8: 0e:2b:45:32:cb:bd:dc:e6:b0:b7:f9:b1:78:b5:77:d4:ca:25: 65:7a:3c:ab:30:8d:0e:13:46:a0:e4:86:47:74:c5:a8:e8:66: 31:a5:cc:cb:6d:9c:4a:2b:ff:8b:75:0a:09:03:1e:21:16:6f: ac:a8:bc:39 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUDP5eiqaH/xRbod4wCyOMTOEo32cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MjExNVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAZjUzODZlMmI2MWIxNGQyYjAwNTRk YmQ0YzkzMGQ0NzViY2IzOGRkOTMzZGJjOGU2YzZiY2M4MTI0NDNhN2UxYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGzty3igcw70o570VuaUky/npQp1 B+G6LmuBEi0E2za2WYhuYF56PK4tofS34iLyXAquOSh0ST5bDs3fZbuv5AsKT/K/ 4OR9oe5XwHZ1P3K4oxpPJG84aLPdKQyHiD0ITnjhbWDEOczBo9/vD8Xa/TigaKJT 3XarWTF0b0JDnaHmjBr5JLYnEtBCbnTpQ3vMLzk84jI2oBVO6sr91llXs0ek6sZO 7WWB3mj8BEMN3iAtR+Ek3lcPwCjwSH5DEF0rydscFFHRKq76szs36nQeQUmhpOWY kqEL5LTOZ21GYrb3a+46/yjf16yL5Zul846oi5mBIyrn5oCSJCs/uywhCwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDxkkubUiorK+TtOHBGAWiK5mCEWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RhMjJlOGRmLTQwY2QtNDAyYi1iMDRmLThiNTk1NGQwYjE3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+6BAMA0GCSqGSIb3DQEBCwUAA4IBAQA4NvIQ9gVaSoQl6G55 VpK5lt0kgkiZzQ35R9f38KVeeScNGPIGIKDribHgZFLsL0tv1xZr0e7oTMgE0T3q OP8id7HZNR6q+uk5iGlwtwn+K6Yep6Ne1BWty7zD/7IwC4oDtg7y8y3Z27IjRX9w ja7sZVfI3ZdPRdUVDVCw2Y3o6Vz5kXWEKgbFyBL0wKh00yXu3fh2/XLm8zw+1ihK 9qnth72X7QmZuwhWW4I0b3SlVqePT5nkJ7E3TlBjFZb7tDs15h2xU+gOK0Uyy73c 5rC3+bF4tXfUyiVlejyrMI0OE0ag5IZHdMWo6GYxpczLbZxKK/+LdQoJAx4hFm+s qLw5 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:51 2025 by rpki-client on console.sobornost.net