$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1567509-f31d-4739-a7a6-ed24530c598b.roa File: e1567509-f31d-4739-a7a6-ed24530c598b.roa (raw, json) Hash identifier: r5Tmzs6g927e2cV2UAnappzkoGuflnuvgNQ/n5/dudo= Subject key identifier: 80:9B:28:7E:63:E4:1A:19:6C:74:8A:7B:50:6B:E9:89:7C:20:68:75 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77B371B6B99E853803A4BE1FE38EA4399ED63C58 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1567509-f31d-4739-a7a6-ed24530c598b.roa Signing time: Sat 12 Apr 2025 00:01:03 +0000 ROA not before: Sat 12 Apr 2025 00:01:03 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf5:c000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:b3:71:b6:b9:9e:85:38:03:a4:be:1f:e3:8e:a4:39:9e:d6:3c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 12 00:01:03 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=606a954914c5b49576d38eabec67ab6a2287d646fa37da9dc6bac6fea8ff27ae, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e3:03:59:63:ea:75:82:a8:75:83:dd:d4:72: f1:a7:a0:d6:de:94:d8:12:4c:f6:c4:eb:1c:3c:06: ba:a4:4f:1b:aa:4e:fe:bf:7f:68:e4:df:ce:7a:4c: 13:ce:d9:f8:c1:4e:fc:48:b9:f1:71:45:9e:fd:2c: 5a:5b:81:79:9b:de:60:9d:4d:9e:b8:26:88:d8:a1: b5:8f:31:28:15:93:51:87:98:ac:20:72:15:6a:e7: 86:3a:cd:22:c2:36:63:2f:f9:ea:86:83:e0:31:c9: 52:26:71:b6:26:d3:ee:a3:47:9a:91:a6:24:f0:d9: 2c:4b:0d:77:0a:ec:39:ec:ba:62:a4:29:4a:50:36: 32:19:01:db:a0:9d:37:e1:33:5b:c7:f0:4f:5f:fb: c3:30:b1:89:6b:e1:08:b6:3a:b1:e0:20:69:3c:b7: ed:ba:0b:f2:e6:e1:72:25:60:c7:73:72:8a:18:ad: 9f:e5:13:43:10:35:05:26:9d:bd:86:c8:f9:05:1b: 9b:9b:50:dc:af:28:81:4e:f1:aa:e7:fd:f2:34:ec: fe:f7:19:e0:56:66:e7:1f:71:12:51:8a:71:89:eb: 18:4b:52:1f:59:a6:e2:22:cf:9a:bc:e4:65:b9:9b: fb:90:a5:8a:dd:78:99:dd:74:bb:71:4f:e2:9f:92: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9B:28:7E:63:E4:1A:19:6C:74:8A:7B:50:6B:E9:89:7C:20:68:75 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e1567509-f31d-4739-a7a6-ed24530c598b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf5:c000::/40 Signature Algorithm: sha256WithRSAEncryption 65:c1:29:71:75:5f:76:f3:90:9c:8d:b8:df:d2:fb:f4:4a:e2: d4:f2:e5:87:b4:ba:22:b6:f2:83:c4:cc:82:e6:92:69:45:b5: a8:5f:a0:2b:99:9e:de:fc:34:b7:d7:9a:ea:dc:a5:75:3a:b4: 04:78:2b:e2:9d:44:ba:08:1f:35:1a:3c:e9:7a:a2:0d:f6:5d: ab:70:39:d3:1b:59:6e:3e:84:f2:37:40:bf:5f:83:16:65:dd: 5d:c5:b4:3b:a5:21:ca:7f:76:c0:70:67:51:8c:73:3c:e3:66: d5:39:3e:40:d0:57:fe:20:43:9d:e8:7e:d9:44:a3:3a:77:6a: 44:45:f0:cd:ab:9d:ab:77:b6:81:5b:a1:e4:cc:d9:8e:b3:a7: f6:05:1b:22:3c:1b:1c:9c:dd:84:ff:cb:26:ac:f1:8a:05:f2: 90:49:7d:77:0b:3e:bf:c8:5a:64:99:42:31:a4:74:b1:b6:e9: 6e:3b:27:99:75:90:b3:74:59:64:e9:04:1f:62:a5:a0:b5:b9: 43:26:3e:a7:2e:de:89:48:41:c4:9e:0a:27:42:08:ac:ad:9d: 78:97:ff:09:86:29:a2:c3:10:42:18:08:49:68:0c:06:32:4f: 8f:36:ca:7c:42:3a:73:b9:2f:0e:b7:60:15:06:75:23:f2:b9: 3a:db:37:49 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUd7NxtrmehTgDpL4f446kOZ7WPFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxMjAwMDEwM1oX DTI1MDUxNzIzNTk1OVowejFJMEcGA1UEBRNANjA2YTk1NDkxNGM1YjQ5NTc2ZDM4 ZWFiZWM2N2FiNmEyMjg3ZDY0NmZhMzdkYTlkYzZiYWM2ZmVhOGZmMjdhZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOMDWWPqdYKodYPd1HLxp6DW3pTY Ekz2xOscPAa6pE8bqk7+v39o5N/OekwTztn4wU78SLnxcUWe/SxaW4F5m95gnU2e uCaI2KG1jzEoFZNRh5isIHIVaueGOs0iwjZjL/nqhoPgMclSJnG2JtPuo0eakaYk 8NksSw13Cuw57LpipClKUDYyGQHboJ034TNbx/BPX/vDMLGJa+EItjqx4CBpPLft ugvy5uFyJWDHc3KKGK2f5RNDEDUFJp29hsj5BRubm1DcryiBTvGq5/3yNOz+9xng VmbnH3ESUYpxiesYS1IfWabiIs+avORluZv7kKWK3XiZ3XS7cU/in5LNUQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFICbKH5j5BoZbHSKe1Br6Yl8IGh1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UxNTY3NTA5LWYzMWQtNDczOS1hN2E2LWVkMjQ1MzBjNTk4Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9cAwDQYJKoZIhvcNAQELBQADggEBAGXBKXF1X3bzkJyNuN/S +/RK4tTy5Ye0uiK28oPEzILmkmlFtahfoCuZnt78NLfXmurcpXU6tAR4K+KdRLoI HzUaPOl6og32XatwOdMbWW4+hPI3QL9fgxZl3V3FtDulIcp/dsBwZ1GMczzjZtU5 PkDQV/4gQ53oftlEozp3akRF8M2rnat3toFboeTM2Y6zp/YFGyI8Gxyc3YT/yyas 8YoF8pBJfXcLPr/IWmSZQjGkdLG26W47J5l1kLN0WWTpBB9ipaC1uUMmPqcu3olI QcSeCidCCKytnXiX/wmGKaLDEEIYCEloDAYyT482ynxCOnO5Lw63YBUGdSPyuTrb N0k= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:52 2025 by rpki-client on console.sobornost.net