$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/da917d8a-5f87-4b60-9a74-a3a380e8de88.roa File: da917d8a-5f87-4b60-9a74-a3a380e8de88.roa (raw, json) Hash identifier: vCPo54yd6atOo/48N8iLEmRGHFSt8EOdxLVIbSqbPHA= Subject key identifier: 69:5C:34:7A:98:BB:70:2A:12:DE:A0:47:1C:0E:B3:BB:57:15:65:F2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41246B7F8E1E9C545013F65B23BC44E06E6CE6A5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/da917d8a-5f87-4b60-9a74-a3a380e8de88.roa Signing time: Sat 19 Apr 2025 00:21:11 +0000 ROA not before: Sat 19 Apr 2025 00:21:11 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:c020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:24:6b:7f:8e:1e:9c:54:50:13:f6:5b:23:bc:44:e0:6e:6c:e6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:21:11 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=7d5d0658ff26c698e9a7474b98a07c1b3c22e938c69124682911fca41457ce7a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:1d:1e:50:43:bf:fc:4a:be:42:34:c1:18: 2a:d4:57:92:f0:26:28:39:25:e3:e8:7b:c9:a3:b6: ab:09:a8:b2:60:14:93:00:a1:81:67:58:0a:bf:91: 0e:38:a0:4e:29:d2:04:f7:e8:60:2d:19:d9:bb:11: aa:a2:cd:90:be:ed:5c:d3:76:0b:32:7a:ec:92:33: 04:ca:c0:86:68:c7:80:10:06:22:51:0d:e8:bc:51: a9:32:86:09:0e:59:0a:df:5b:05:ed:fb:0a:9a:21: b9:6f:42:21:b8:88:48:65:43:b1:8d:94:ab:46:23: ca:d6:82:21:c8:8b:68:9f:19:8d:db:f2:24:15:7b: 8a:73:03:c4:eb:2e:be:04:97:a5:b3:bc:b6:e1:3b: 13:1e:16:da:fa:7b:b3:13:f6:e5:85:00:ae:22:4a: 2d:a2:07:33:bc:03:2a:93:94:ee:c4:5f:2f:39:e1: 78:64:f2:49:23:18:f4:04:2b:8d:96:e8:c2:59:10: 01:e6:55:b3:7a:1c:f6:1a:5e:e2:1f:a2:c8:31:0f: 15:72:a0:28:39:24:f3:2e:f6:22:b8:5f:e7:73:61: a0:86:ff:cb:83:5b:73:6b:31:50:5d:6e:01:5c:4d: 4c:fa:13:3e:35:3d:d8:05:f3:de:09:82:47:f7:b8: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5C:34:7A:98:BB:70:2A:12:DE:A0:47:1C:0E:B3:BB:57:15:65:F2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/da917d8a-5f87-4b60-9a74-a3a380e8de88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:c020::/48 Signature Algorithm: sha256WithRSAEncryption 4a:c2:ca:2e:83:9a:98:de:df:11:5c:40:8e:00:45:49:f5:24: a7:5e:e1:04:5a:03:1a:07:07:78:05:be:4d:32:f4:3b:8a:21: 45:a0:90:7c:c1:f2:e9:36:a0:fb:df:0e:c5:92:fd:b3:7f:d6: e2:a4:b6:5d:79:f4:71:0c:be:7f:e9:43:6b:7c:ee:14:3a:bd: 7d:ed:fe:d7:c6:fa:45:af:63:a9:51:e6:03:b4:60:cd:a2:5b: fd:90:4b:8a:dc:fb:a6:30:9e:ce:de:e4:54:cc:33:4c:66:fc: bc:c4:76:23:ea:c7:9d:0f:ad:2f:cf:03:93:3d:07:ee:21:2d: 0c:bb:f2:10:b3:05:1f:eb:9b:95:86:fd:e8:ff:4e:9f:81:2e: 17:81:0e:e1:e8:20:1b:23:c7:f3:5a:28:e5:47:76:71:81:d0: b6:c9:5a:03:9a:b4:d2:cb:85:23:32:ca:e3:cd:cc:96:cf:28: e5:56:7a:dd:6d:20:b3:94:5b:58:0b:7c:e0:a2:58:63:71:eb: d4:ab:dd:10:c7:28:ff:2d:8d:34:64:72:95:78:48:17:ff:1d: cb:6a:e4:27:2d:85:bf:5c:62:07:ae:40:36:57:b6:5e:99:99: f3:48:b0:d4:98:2f:ad:ef:d9:4f:ae:d0:25:f6:2d:65:ac:49: 1c:e9:ad:53 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQSRrf44enFRQE/ZbI7xE4G5s5qUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMjExMVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAN2Q1ZDA2NThmZjI2YzY5OGU5YTc0 NzRiOThhMDdjMWIzYzIyZTkzOGM2OTEyNDY4MjkxMWZjYTQxNDU3Y2U3YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowIdHlBDv/xKvkI0wRgq1FeS8CYo OSXj6HvJo7arCaiyYBSTAKGBZ1gKv5EOOKBOKdIE9+hgLRnZuxGqos2Qvu1c03YL MnrskjMEysCGaMeAEAYiUQ3ovFGpMoYJDlkK31sF7fsKmiG5b0IhuIhIZUOxjZSr RiPK1oIhyItonxmN2/IkFXuKcwPE6y6+BJels7y24TsTHhba+nuzE/blhQCuIkot ogczvAMqk5TuxF8vOeF4ZPJJIxj0BCuNlujCWRAB5lWzehz2Gl7iH6LIMQ8VcqAo OSTzLvYiuF/nc2Gghv/Lg1tzazFQXW4BXE1M+hM+NT3YBfPeCYJH97iLnwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGlcNHqYu3AqEt6gRxwOs7tXFWXyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RhOTE3ZDhhLTVmODctNGI2MC05YTc0LWEzYTM4MGU4ZGU4OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/8AgMA0GCSqGSIb3DQEBCwUAA4IBAQBKwsoug5qY3t8RXECO AEVJ9SSnXuEEWgMaBwd4Bb5NMvQ7iiFFoJB8wfLpNqD73w7Fkv2zf9bipLZdefRx DL5/6UNrfO4UOr197f7XxvpFr2OpUeYDtGDNolv9kEuK3PumMJ7O3uRUzDNMZvy8 xHYj6sedD60vzwOTPQfuIS0Mu/IQswUf65uVhv3o/06fgS4XgQ7h6CAbI8fzWijl R3ZxgdC2yVoDmrTSy4UjMsrjzcyWzyjlVnrdbSCzlFtYC3zgolhjcevUq90Qxyj/ LY00ZHKVeEgX/x3LauQnLYW/XGIHrkA2V7ZemZnzSLDUmC+t79lPrtAl9i1lrEkc 6a1T -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:51 2025 by rpki-client on console.sobornost.net