$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3647b30-15b8-4dd3-8527-ddb9634cb404.roa File: e3647b30-15b8-4dd3-8527-ddb9634cb404.roa (raw, json) Hash identifier: OaeSaaes7qCS/l5YAC7QDRpNtaUKZV4gaM2eK1gMweg= Subject key identifier: D9:05:43:09:67:A0:0E:7E:2C:BB:CC:7E:E9:5F:4F:1B:2C:06:1C:30 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 0BBC1578F1A202D5C309424AFCB9503D0B072282 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3647b30-15b8-4dd3-8527-ddb9634cb404.roa Signing time: Sat 19 Apr 2025 00:31:26 +0000 ROA not before: Sat 19 Apr 2025 00:31:26 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:c840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:bc:15:78:f1:a2:02:d5:c3:09:42:4a:fc:b9:50:3d:0b:07:22:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:31:26 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=e2a1a3ae071440a819e43357f0f3ed6831ce6df66273e61db6489c8e4ee02f5d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:b9:a1:48:22:b7:5c:99:81:2c:05:71:7a: d7:8e:23:ed:7c:97:e8:b8:b9:0b:3a:f2:1f:64:27: 73:4b:cf:6c:28:89:f8:ec:53:b4:76:24:26:fe:ed: 20:ad:fd:25:8a:42:77:bd:06:cb:f8:62:e5:af:2f: 66:5b:69:fe:61:7a:49:42:e3:2d:d3:89:34:be:b4: 4a:25:e8:c4:ae:3a:33:ab:54:0c:d0:c4:cb:bf:c4: 51:75:39:d8:f1:a7:18:70:cb:53:b9:d7:3f:82:e8: 89:4f:18:f2:93:c2:f1:55:68:fd:11:d5:f0:11:71: 24:7e:da:54:04:a5:d2:d3:ce:94:4b:48:76:58:5e: 3b:f2:27:a0:eb:b9:84:32:4b:90:f1:b7:15:3f:5a: bb:d2:10:5b:d6:19:79:4b:b8:02:c8:e5:fa:70:7f: 27:34:e8:b2:f5:b8:88:2f:0d:cd:91:f7:5b:1f:7a: 43:e1:b9:0a:fc:83:64:b8:27:62:fb:35:e0:37:87: a1:c7:12:92:36:1a:52:c2:68:ee:7d:de:4f:01:4f: 1a:ce:17:0b:d9:b1:36:b9:e5:e2:8d:41:44:b4:f5: 2e:25:ee:ff:5e:30:47:46:10:dd:77:9e:8e:47:9f: 4c:87:ff:65:13:da:cf:f6:90:71:20:16:4c:a6:14: a3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:05:43:09:67:A0:0E:7E:2C:BB:CC:7E:E9:5F:4F:1B:2C:06:1C:30 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3647b30-15b8-4dd3-8527-ddb9634cb404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:c840::/48 Signature Algorithm: sha256WithRSAEncryption 1a:f4:9b:ce:c3:e8:62:7b:aa:db:43:eb:3b:9c:b5:1c:5c:20: e8:0c:cb:00:b6:65:b4:60:3f:62:a5:a1:4d:7c:94:3c:bb:4a: 30:5b:8c:d7:aa:c7:4b:ad:30:42:86:c0:84:bc:83:93:9f:1b: 41:fb:71:ad:25:a5:37:ee:db:ca:67:21:38:e6:c6:8f:92:1c: 9d:29:89:c2:aa:30:d0:ba:d3:36:9b:fa:0f:5b:c5:f6:fb:c2: be:0c:13:2e:92:ba:5c:0c:fd:d5:9d:f5:ea:14:bf:3f:04:6e: fa:07:b3:bb:9f:88:c6:d0:61:61:90:b2:aa:16:18:f7:07:4f: ba:4c:1b:c6:32:d0:2a:a4:e3:b0:96:1f:e2:e6:6b:01:cb:6c: 66:26:1e:ee:2e:9a:92:0b:04:bd:16:8d:3e:26:aa:ef:53:3f: d7:fb:f2:d7:e6:8c:bb:8a:11:6a:1c:e3:34:19:64:05:be:9b: a8:c8:da:c0:68:97:38:87:a3:76:88:7e:b9:94:8f:74:28:0c: 8f:3c:59:48:3e:36:02:f8:ab:4b:66:09:51:96:6d:48:fc:27: 45:1d:6f:36:33:2b:fa:0d:52:8d:59:32:ff:8a:5b:a9:1b:7d: 93:c8:13:3d:7f:d1:56:81:ec:7a:0f:c1:03:18:cb:d6:da:cc: d6:f2:c8:6e -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUC7wVePGiAtXDCUJK/LlQPQsHIoIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMzEyNloX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAZTJhMWEzYWUwNzE0NDBhODE5ZTQz MzU3ZjBmM2VkNjgzMWNlNmRmNjYyNzNlNjFkYjY0ODljOGU0ZWUwMmY1ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrq5oUgit1yZgSwFcXrXjiPtfJfo uLkLOvIfZCdzS89sKIn47FO0diQm/u0grf0likJ3vQbL+GLlry9mW2n+YXpJQuMt 04k0vrRKJejErjozq1QM0MTLv8RRdTnY8acYcMtTudc/guiJTxjyk8LxVWj9EdXw EXEkftpUBKXS086US0h2WF478ieg67mEMkuQ8bcVP1q70hBb1hl5S7gCyOX6cH8n NOiy9biILw3NkfdbH3pD4bkK/INkuCdi+zXgN4ehxxKSNhpSwmjufd5PAU8azhcL 2bE2ueXijUFEtPUuJe7/XjBHRhDdd56OR59Mh/9lE9rP9pBxIBZMphSjJwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNkFQwlnoA5+LLvMfulfTxssBhwwMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzNjQ3YjMwLTE1YjgtNGRkMy04NTI3LWRkYjk2MzRjYjQwNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOMhAMA0GCSqGSIb3DQEBCwUAA4IBAQAa9JvOw+hie6rbQ+s7 nLUcXCDoDMsAtmW0YD9ipaFNfJQ8u0owW4zXqsdLrTBChsCEvIOTnxtB+3GtJaU3 7tvKZyE45saPkhydKYnCqjDQutM2m/oPW8X2+8K+DBMukrpcDP3VnfXqFL8/BG76 B7O7n4jG0GFhkLKqFhj3B0+6TBvGMtAqpOOwlh/i5msBy2xmJh7uLpqSCwS9Fo0+ JqrvUz/X+/LX5oy7ihFqHOM0GWQFvpuoyNrAaJc4h6N2iH65lI90KAyPPFlIPjYC +KtLZglRlm1I/CdFHW82Myv6DVKNWTL/ilupG32TyBM9f9FWgex6D8EDGMvW2szW 8shu -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:52 2025 by rpki-client on console.sobornost.net