$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd94e529-589f-4ac6-9c41-cf42be7e4edd.roa File: dd94e529-589f-4ac6-9c41-cf42be7e4edd.roa (raw, json) Hash identifier: USlVpFM1u+RyCncqY62apyoliDCcceFT8p4KM9mWWh4= Subject key identifier: 62:01:3D:21:D5:78:0A:E8:FB:25:E3:5F:32:AC:35:C9:F8:94:E1:09 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4762D5BA5A221D08E8E6158C1FF356EF2AAF8648 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd94e529-589f-4ac6-9c41-cf42be7e4edd.roa Signing time: Mon 21 Apr 2025 15:01:54 +0000 ROA not before: Mon 21 Apr 2025 15:01:54 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:80c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:62:d5:ba:5a:22:1d:08:e8:e6:15:8c:1f:f3:56:ef:2a:af:86:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:01:54 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=56752387c117d5704ac3d5031c16f106b2fcd50b8a0e4a171d947d33d4638c26, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cd:05:f5:ff:9a:dc:da:ba:4a:9d:6f:06:ad: f4:7d:29:28:a8:7e:48:43:1a:79:71:3a:49:7b:5a: 50:12:9b:da:29:94:f0:fe:38:e4:2d:ff:9f:2a:6a: 1a:4b:bf:9d:09:96:b3:37:79:1c:ac:1b:01:50:53: 88:81:60:5a:d7:f4:00:f1:bd:53:f0:28:f2:35:72: 58:09:61:77:e4:cb:3c:32:7e:6d:7d:52:a3:ef:f2: 50:00:4f:7e:c3:92:11:14:72:ac:12:27:1a:15:72: d6:70:bb:64:97:12:38:c3:63:74:85:9b:33:05:2f: 00:a5:20:f8:e7:95:8a:bd:9f:1d:79:af:2d:61:7c: 43:81:a2:66:b2:b8:d2:84:ef:bb:b3:66:74:22:a0: 3d:05:e1:76:fd:78:12:dd:4a:31:ec:fc:76:5d:c9: 5c:8d:b9:fc:b2:f1:15:5f:a0:d4:8a:dc:dd:3c:f7: d2:7a:5b:26:36:65:b7:10:8f:5b:3e:f7:24:4d:a6: a1:0b:68:0b:80:50:ce:70:e2:48:f1:73:88:11:ba: 41:ec:4c:b9:66:50:ff:96:14:27:fb:cc:2c:2e:68: eb:02:0a:87:d3:0b:ba:f6:24:b6:3b:94:ca:6e:73: ef:7a:6e:ba:b2:a4:5e:f1:c2:5d:bc:bd:d3:c7:12: 89:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:01:3D:21:D5:78:0A:E8:FB:25:E3:5F:32:AC:35:C9:F8:94:E1:09 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd94e529-589f-4ac6-9c41-cf42be7e4edd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:80c0::/46 Signature Algorithm: sha256WithRSAEncryption 80:78:26:8a:cb:8a:3a:37:09:ea:44:62:c9:d5:d2:e8:75:a6: ab:32:d3:bd:c3:97:b6:86:7e:76:d8:e1:04:7a:d3:a2:58:6c: 4a:2d:81:59:85:66:ca:28:23:22:73:9b:18:f6:85:c1:e7:ba: d5:90:e4:ed:73:d5:8d:89:88:5f:8e:c8:35:55:35:97:9b:1e: ba:01:46:2b:45:46:28:c5:9d:85:57:09:d7:7c:c5:f7:9b:17: af:dd:69:5f:bb:e3:27:c6:a6:8b:d5:f9:70:79:be:b3:19:21: 9d:bb:dd:c6:fb:e6:4b:e4:46:24:3d:3b:cb:ce:76:c3:30:99: 0f:1c:40:e2:53:d6:57:aa:e1:c7:1d:e8:93:dd:12:fc:da:4a: 90:3a:59:47:74:22:e2:70:5d:5e:70:32:9f:11:ce:b4:01:a1: 27:25:9c:db:02:c6:df:56:71:68:00:1d:cb:c2:65:74:e6:be: 06:00:70:c4:29:8f:c0:fb:66:46:b9:8e:b8:54:b7:68:5d:3b: 12:1a:5d:17:66:d5:ee:b8:c1:f6:71:2d:55:62:cd:db:39:89: 5b:8e:83:39:3f:5a:e7:a8:10:c7:31:87:1f:99:1e:94:c6:ac: 9d:dd:38:5b:27:0d:e1:23:4f:9b:ac:24:5b:a7:c2:4b:eb:d6: e4:13:5a:b8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUR2LVuloiHQjo5hWMH/NW7yqvhkgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MDE1NFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANTY3NTIzODdjMTE3ZDU3MDRhYzNk NTAzMWMxNmYxMDZiMmZjZDUwYjhhMGU0YTE3MWQ5NDdkMzNkNDYzOGMyNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns0F9f+a3Nq6Sp1vBq30fSkoqH5I Qxp5cTpJe1pQEpvaKZTw/jjkLf+fKmoaS7+dCZazN3kcrBsBUFOIgWBa1/QA8b1T 8CjyNXJYCWF35Ms8Mn5tfVKj7/JQAE9+w5IRFHKsEicaFXLWcLtklxI4w2N0hZsz BS8ApSD455WKvZ8dea8tYXxDgaJmsrjShO+7s2Z0IqA9BeF2/XgS3Uox7Px2Xclc jbn8svEVX6DUitzdPPfSelsmNmW3EI9bPvckTaahC2gLgFDOcOJI8XOIEbpB7Ey5 ZlD/lhQn+8wsLmjrAgqH0wu69iS2O5TKbnPvem66sqRe8cJdvL3TxxKJawIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGIBPSHVeAro+yXjXzKsNcn4lOEJMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkOTRlNTI5LTU4OWYtNGFjNi05YzQxLWNmNDJiZTdlNGVkZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba+4DAMA0GCSqGSIb3DQEBCwUAA4IBAQCAeCaKy4o6NwnqRGLJ 1dLodaarMtO9w5e2hn522OEEetOiWGxKLYFZhWbKKCMic5sY9oXB57rVkOTtc9WN iYhfjsg1VTWXmx66AUYrRUYoxZ2FVwnXfMX3mxev3Wlfu+MnxqaL1flweb6zGSGd u93G++ZL5EYkPTvLznbDMJkPHEDiU9ZXquHHHeiT3RL82kqQOllHdCLicF1ecDKf Ec60AaEnJZzbAsbfVnFoAB3LwmV05r4GAHDEKY/A+2ZGuY64VLdoXTsSGl0XZtXu uMH2cS1VYs3bOYlbjoM5P1rnqBDHMYcfmR6Uxqyd3ThbJw3hI0+brCRbp8JL69bk E1q4 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:52 2025 by rpki-client on console.sobornost.net