$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa File: df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa (raw, json) Hash identifier: VVrwAa79VRIYnbfnXfLBuJZhAEoFkBkMHCXmNJP5n8w= Subject key identifier: 1A:29:6F:8A:E2:59:D0:CB:BE:19:2F:71:AE:9D:6B:4A:65:19:BF:7C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6B9B0A550EAFDBE4C508FEDE51A277E4AEF4B374 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa Signing time: Tue 22 Apr 2025 00:00:06 +0000 ROA not before: Tue 22 Apr 2025 00:00:06 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daa0:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9b:0a:55:0e:af:db:e4:c5:08:fe:de:51:a2:77:e4:ae:f4:b3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 22 00:00:06 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=61fb934a7abb758030b4d82a490fd73ca10aa42beaf7a7146ed529cf97288f18, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:9a:50:2c:51:b6:15:7a:1f:6c:b3:36:54: 62:f9:91:f5:8e:52:9a:78:37:5a:25:71:e8:0d:76: 89:c5:d4:23:4f:02:6e:27:46:a4:11:58:5e:dd:30: e2:20:d8:75:ae:9e:f5:8a:0f:a1:b4:d5:90:5c:8b: 46:fc:fd:11:36:80:05:74:89:ae:c0:76:22:53:71: a6:f3:5b:4b:1a:61:58:74:d5:49:ca:ac:47:8a:b8: 69:75:4c:bb:b0:64:65:48:2c:e0:77:f2:f9:e6:08: ba:24:96:39:3e:46:06:b3:06:fd:e6:72:db:a1:ba: 73:52:09:33:7a:08:2b:ae:c5:03:23:7f:70:c0:da: 20:5d:24:99:5b:3a:bb:0c:b1:35:1d:e2:0a:99:74: 71:55:66:70:67:96:59:a2:20:d9:2f:bf:44:da:08: 55:cf:14:8d:ad:d2:bd:90:c8:a2:7f:bb:43:f2:9f: ba:bf:38:e4:dd:5f:c1:da:a8:a0:eb:c2:cf:3b:80: 8d:33:0a:db:2f:96:c2:19:38:da:69:d4:bf:77:fa: 02:c6:eb:1f:a3:54:66:07:47:1f:80:c0:fc:b7:c1: ae:5c:c4:2f:75:7f:46:c8:62:52:6b:6a:d3:80:d7: cb:70:05:6f:d3:dc:d8:cf:f7:33:f7:c1:e4:7e:2c: d1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:29:6F:8A:E2:59:D0:CB:BE:19:2F:71:AE:9D:6B:4A:65:19:BF:7C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/df0ea8e5-2d55-4214-9e06-5e6ff385083b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daa0:800::/40 Signature Algorithm: sha256WithRSAEncryption 96:40:de:0a:32:58:c7:42:ae:28:61:f8:39:80:bf:b2:6c:6f: f4:f0:6a:d8:35:9f:69:f3:c5:32:e0:7a:88:d3:60:94:a1:55: 93:05:6b:38:b5:99:cb:74:29:83:fe:6d:c5:c7:3d:33:1c:bd: 98:21:a0:48:9a:ca:99:53:c6:88:b8:fe:a7:76:43:77:41:cd: 6d:ba:90:fd:6c:d2:ea:f6:f1:27:59:18:35:d4:a8:58:bc:3e: df:d4:eb:89:bf:84:5f:f2:04:a3:ad:9c:f3:e4:d4:b7:9a:2a: 4e:eb:a7:90:24:3e:71:57:0f:56:6f:44:59:b9:96:99:ae:92: 3e:36:ca:26:b1:b2:f9:a7:a6:f5:fa:f7:2a:5b:fb:73:8f:9a: fb:56:e5:05:36:07:78:d6:ab:00:49:b0:d0:76:11:29:63:68: 59:78:44:31:26:29:b9:5b:23:f9:2f:06:f7:ac:c9:bc:17:8b: 3b:61:3c:3d:8d:35:f4:8d:37:8c:64:95:57:b5:c8:fb:85:51: 88:2b:66:6d:44:dd:ed:83:7a:06:2f:08:69:62:56:e8:dd:0f: 8b:eb:90:86:23:53:7a:51:36:b7:f2:fa:f2:89:0c:40:ba:3b: 34:4b:28:d0:9b:e8:ed:ee:0a:c9:3e:e9:af:10:03:c0:be:35: c5:c2:e4:d6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUa5sKVQ6v2+TFCP7eUaJ35K70s3QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMjAwMDAwNloX DTI1MDUyNzIzNTk1OVowejFJMEcGA1UEBRNANjFmYjkzNGE3YWJiNzU4MDMwYjRk ODJhNDkwZmQ3M2NhMTBhYTQyYmVhZjdhNzE0NmVkNTI5Y2Y5NzI4OGYxODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVWaUCxRthV6H2yzNlRi+ZH1jlKa eDdaJXHoDXaJxdQjTwJuJ0akEVhe3TDiINh1rp71ig+htNWQXItG/P0RNoAFdImu wHYiU3Gm81tLGmFYdNVJyqxHirhpdUy7sGRlSCzgd/L55gi6JJY5PkYGswb95nLb obpzUgkzeggrrsUDI39wwNogXSSZWzq7DLE1HeIKmXRxVWZwZ5ZZoiDZL79E2ghV zxSNrdK9kMiif7tD8p+6vzjk3V/B2qig68LPO4CNMwrbL5bCGTjaadS/d/oCxusf o1RmB0cfgMD8t8GuXMQvdX9GyGJSa2rTgNfLcAVv09zYz/cz98HkfizR+wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBopb4riWdDLvhkvca6da0plGb98MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RmMGVhOGU1LTJkNTUtNDIxNC05ZTA2LTVlNmZmMzg1MDgzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaoAgwDQYJKoZIhvcNAQELBQADggEBAJZA3goyWMdCrihh+DmA v7Jsb/Twatg1n2nzxTLgeojTYJShVZMFazi1mct0KYP+bcXHPTMcvZghoEiayplT xoi4/qd2Q3dBzW26kP1s0ur28SdZGDXUqFi8Pt/U64m/hF/yBKOtnPPk1LeaKk7r p5AkPnFXD1ZvRFm5lpmukj42yiaxsvmnpvX69ypb+3OPmvtW5QU2B3jWqwBJsNB2 ESljaFl4RDEmKblbI/kvBvesybwXizthPD2NNfSNN4xklVe1yPuFUYgrZm1E3e2D egYvCGliVujdD4vrkIYjU3pRNrfy+vKJDEC6OzRLKNCb6O3uCsk+6a8QA8C+NcXC 5NY= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:52 2025 by rpki-client on console.sobornost.net