$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07de3d6-bd1c-45fc-a092-f2635716b267.roa File: e07de3d6-bd1c-45fc-a092-f2635716b267.roa (raw, json) Hash identifier: jlU1LtSf6yTX8lu4Cwbr+buJqFY+3mp+2sJa2OLH5pc= Subject key identifier: 95:E3:0A:E9:0C:1D:CC:AF:0A:09:5C:B9:DE:95:2B:07:34:9F:DF:7A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6919A46C77C4E011E31A86373DA57D83A3F1F16D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07de3d6-bd1c-45fc-a092-f2635716b267.roa Signing time: Mon 21 Apr 2025 15:31:07 +0000 ROA not before: Mon 21 Apr 2025 15:31:07 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:c080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:19:a4:6c:77:c4:e0:11:e3:1a:86:37:3d:a5:7d:83:a3:f1:f1:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:31:07 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=6ad7b4e6ba150806a3229fa882476b5854b896420ceb6c68480afe9b16d1a5af, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3f:65:47:1f:09:af:66:90:f0:fa:6d:72:6d: 0f:31:6e:ad:81:cf:16:bd:c5:a5:98:2b:fa:e0:c7: 1f:fb:26:37:23:fc:cc:ce:76:47:2f:8e:87:4b:cf: f8:7a:9d:19:ab:ed:d6:14:ba:70:e3:fd:62:dc:67: da:1f:a4:5c:16:b0:1a:36:11:f9:53:e2:fa:d7:c3: fc:ea:f6:59:32:c8:46:1b:ae:45:47:ad:ce:79:3e: 5c:52:e4:53:83:23:52:76:ee:36:5b:bd:7d:14:47: e9:d3:33:62:81:c6:d0:c6:d8:03:5a:c6:4a:bc:05: 4a:8f:80:e2:2e:65:ad:2a:51:26:30:49:15:94:29: 17:d5:09:f4:88:87:12:b3:c9:e5:4d:61:30:73:97: a6:3f:a7:c5:96:52:86:b5:25:41:f5:cb:c2:d4:5e: 83:86:84:1f:c4:38:29:d4:d5:dc:57:d1:e3:c0:4f: 0c:73:6e:53:ac:7e:46:5c:a1:f5:e6:dd:04:9d:4e: 31:da:59:2a:b2:4d:7c:df:ca:9a:c4:f5:9f:f3:29: 11:d2:e7:82:1a:1f:55:d6:9b:98:ab:83:ba:8d:20: d4:85:f9:d1:09:4c:91:06:50:ad:6a:0c:20:71:9f: 07:c2:43:66:7c:5a:e8:5c:b5:bb:8d:53:9c:df:b0: 59:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E3:0A:E9:0C:1D:CC:AF:0A:09:5C:B9:DE:95:2B:07:34:9F:DF:7A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07de3d6-bd1c-45fc-a092-f2635716b267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:c080::/46 Signature Algorithm: sha256WithRSAEncryption 7c:b6:15:e9:20:ca:93:a4:d0:5b:e4:1c:9d:50:69:6c:54:fb: 0d:27:90:7c:0f:e9:44:e4:e2:e6:06:7a:98:a6:be:56:47:a2: 5b:a2:17:fc:6c:7c:5d:00:6b:34:b5:da:67:7f:b2:9f:c5:a5: cc:22:e7:bf:a0:11:26:1d:df:9d:50:f6:ca:07:00:7e:be:b7: 03:78:8f:6d:e4:8d:e0:40:ae:5b:87:58:b0:af:91:0f:81:aa: ef:74:37:cc:79:5c:3d:54:10:97:4a:d6:4b:03:bd:02:de:ca: ed:bc:d4:c2:e5:82:b7:fb:34:5b:75:22:f9:ed:29:7f:f0:2f: cb:25:71:45:b6:90:43:9f:3d:51:05:73:a1:1d:b6:d3:af:fb: 8c:ef:95:10:10:2b:41:e9:90:0e:84:8e:82:c3:22:4a:83:a3: 59:a3:5d:22:f1:24:c1:b8:f1:06:b2:ac:25:c9:cd:d1:6b:62: 12:51:8d:3c:b9:b1:9a:a6:a6:1f:8d:90:a5:62:0d:2e:e6:02: 5a:58:bd:4a:5d:82:91:8f:35:af:7e:47:1e:fc:36:85:bd:0e: d8:08:55:d9:78:65:3e:ee:8e:19:5d:79:1d:16:28:a7:92:fa: 49:72:5a:0b:a3:9c:a3:3e:fd:96:91:0d:81:0c:b1:e5:15:5e: c5:44:82:d7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaRmkbHfE4BHjGoY3PaV9g6Px8W0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MzEwN1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANmFkN2I0ZTZiYTE1MDgwNmEzMjI5 ZmE4ODI0NzZiNTg1NGI4OTY0MjBjZWI2YzY4NDgwYWZlOWIxNmQxYTVhZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7D9lRx8Jr2aQ8Pptcm0PMW6tgc8W vcWlmCv64Mcf+yY3I/zMznZHL46HS8/4ep0Zq+3WFLpw4/1i3GfaH6RcFrAaNhH5 U+L618P86vZZMshGG65FR63OeT5cUuRTgyNSdu42W719FEfp0zNigcbQxtgDWsZK vAVKj4DiLmWtKlEmMEkVlCkX1Qn0iIcSs8nlTWEwc5emP6fFllKGtSVB9cvC1F6D hoQfxDgp1NXcV9HjwE8Mc25TrH5GXKH15t0EnU4x2lkqsk1838qaxPWf8ykR0ueC Gh9V1puYq4O6jSDUhfnRCUyRBlCtagwgcZ8HwkNmfFroXLW7jVOc37BZrwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJXjCukMHcyvCglcud6VKwc0n996MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UwN2RlM2Q2LWJkMWMtNDVmYy1hMDkyLWYyNjM1NzE2YjI2Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba98CAMA0GCSqGSIb3DQEBCwUAA4IBAQB8thXpIMqTpNBb5Byd UGlsVPsNJ5B8D+lE5OLmBnqYpr5WR6Jbohf8bHxdAGs0tdpnf7KfxaXMIue/oBEm Hd+dUPbKBwB+vrcDeI9t5I3gQK5bh1iwr5EPgarvdDfMeVw9VBCXStZLA70C3srt vNTC5YK3+zRbdSL57Sl/8C/LJXFFtpBDnz1RBXOhHbbTr/uM75UQECtB6ZAOhI6C wyJKg6NZo10i8STBuPEGsqwlyc3Ra2ISUY08ubGapqYfjZClYg0u5gJaWL1KXYKR jzWvfkce/DaFvQ7YCFXZeGU+7o4ZXXkdFiinkvpJcloLo5yjPv2WkQ2BDLHlFV7F RILX -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:52 2025 by rpki-client on console.sobornost.net