$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e367cdb8-10a5-4756-a6e9-aa59c5e35e2b.roa File: e367cdb8-10a5-4756-a6e9-aa59c5e35e2b.roa (raw, json) Hash identifier: 2csKPAD1q0x2jPyiq9uQBXK+/XiHSye+QWbNpML3zj4= Subject key identifier: C6:37:E6:03:08:A1:F9:88:61:05:26:45:60:9A:9E:EA:40:47:B8:8F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2527BC93F83A36709D16F21C3BE9969627962793 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e367cdb8-10a5-4756-a6e9-aa59c5e35e2b.roa Signing time: Mon 21 Apr 2025 15:50:19 +0000 ROA not before: Mon 21 Apr 2025 15:50:19 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:9080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:27:bc:93:f8:3a:36:70:9d:16:f2:1c:3b:e9:96:96:27:96:27:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:50:19 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=a80b8f5b9ecd340b0ac3526320b1f66385fee59198fbe897950cf83021afcbe0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:d4:62:94:f4:92:42:27:2b:04:f0:2c:48: 71:c9:f2:2d:d7:e1:c1:fd:c1:c0:20:db:6d:79:19: a1:6c:cd:9e:6d:41:5d:9b:ad:08:8c:5a:34:1a:ec: b2:ee:c5:d7:c9:d6:9a:49:85:48:f9:1f:29:ea:d6: ab:9f:44:87:de:d3:23:8e:1c:5e:82:2b:01:9d:51: d0:89:17:24:0d:0f:58:3d:e6:43:bb:4e:06:98:5f: 34:fd:20:48:89:03:88:7c:38:1a:6d:f8:1d:f0:15: 00:ee:70:bd:55:69:54:af:d4:0d:2d:6b:f4:95:00: 0c:79:fe:77:42:13:6a:eb:95:dc:dc:c6:85:ae:97: 46:63:ad:8b:6c:41:54:1b:79:11:8a:52:32:20:26: d5:0e:1d:0b:33:9f:83:06:c8:ec:4e:88:fd:de:46: 49:1e:38:06:e1:58:36:c0:3a:fb:8f:52:0a:21:ee: ae:c7:0f:01:30:00:a3:05:3b:03:55:31:a3:4a:f8: 70:a4:0d:72:38:85:e4:ce:65:d8:26:a1:aa:b9:7d: 6b:4d:3f:86:e7:6f:ef:6e:04:b1:43:83:ff:5c:44: 98:2d:87:60:e1:c5:f9:57:ca:94:e3:d0:e0:d9:06: 2d:1a:e8:7d:e2:a7:ad:20:7a:8d:77:ab:89:4f:ab: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:37:E6:03:08:A1:F9:88:61:05:26:45:60:9A:9E:EA:40:47:B8:8F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e367cdb8-10a5-4756-a6e9-aa59c5e35e2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:9080::/46 Signature Algorithm: sha256WithRSAEncryption 85:5e:15:1f:27:b5:bd:77:89:2d:27:74:c7:86:3f:87:a0:ec: cb:b4:3e:44:7b:d6:3b:7e:15:70:d2:82:eb:11:4e:98:a4:b1: 99:e3:c7:7f:06:48:ce:4a:b0:9b:fd:48:7f:01:c4:ce:28:eb: 80:40:9f:fc:83:1b:f1:aa:0f:04:f7:cf:0c:42:bd:1a:df:bf: 5f:8b:57:2e:af:6d:2d:1c:65:62:d3:b5:af:a5:59:5b:16:a5: 88:fd:44:53:1e:45:1c:61:d5:59:17:88:99:8b:51:c2:69:09: 77:06:26:72:5d:c9:81:0e:6a:59:f3:05:8a:06:b0:c3:aa:1a: 19:42:24:bf:1b:1d:c4:b6:2c:d6:4b:f6:10:d4:b8:e7:16:8c: 0c:8f:02:47:c5:69:2e:e8:a0:c1:c3:1e:92:c0:40:2e:5f:f5: 8c:68:71:bf:45:98:6e:27:6e:6d:82:4c:22:7f:2b:0b:42:6d: 53:f5:99:5f:d6:a5:ff:1d:3c:65:e9:db:00:3c:a4:cc:83:89: 2f:fa:56:23:f1:21:f2:ad:7d:45:26:c7:31:15:64:21:5d:16: d4:b3:a8:8b:a5:7c:6d:6d:b4:79:97:e3:19:0c:02:8b:89:84: 3c:ed:4d:83:9c:95:58:70:0b:e4:c7:66:ae:a2:58:40:56:cf: 7c:a3:bb:82 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJSe8k/g6NnCdFvIcO+mWlieWJ5MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1NTAxOVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYTgwYjhmNWI5ZWNkMzQwYjBhYzM1 MjYzMjBiMWY2NjM4NWZlZTU5MTk4ZmJlODk3OTUwY2Y4MzAyMWFmY2JlMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUjUYpT0kkInKwTwLEhxyfIt1+HB /cHAINtteRmhbM2ebUFdm60IjFo0Guyy7sXXydaaSYVI+R8p6tarn0SH3tMjjhxe gisBnVHQiRckDQ9YPeZDu04GmF80/SBIiQOIfDgabfgd8BUA7nC9VWlUr9QNLWv0 lQAMef53QhNq65Xc3MaFrpdGY62LbEFUG3kRilIyICbVDh0LM5+DBsjsToj93kZJ HjgG4Vg2wDr7j1IKIe6uxw8BMACjBTsDVTGjSvhwpA1yOIXkzmXYJqGquX1rTT+G 52/vbgSxQ4P/XESYLYdg4cX5V8qU49Dg2QYtGuh94qetIHqNd6uJT6v3FQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMY35gMIofmIYQUmRWCanupAR7iPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzNjdjZGI4LTEwYTUtNDc1Ni1hNmU5LWFhNTljNWUzNWUyYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba95CAMA0GCSqGSIb3DQEBCwUAA4IBAQCFXhUfJ7W9d4ktJ3TH hj+HoOzLtD5Ee9Y7fhVw0oLrEU6YpLGZ48d/BkjOSrCb/Uh/AcTOKOuAQJ/8gxvx qg8E988MQr0a379fi1cur20tHGVi07WvpVlbFqWI/URTHkUcYdVZF4iZi1HCaQl3 BiZyXcmBDmpZ8wWKBrDDqhoZQiS/Gx3EtizWS/YQ1LjnFowMjwJHxWku6KDBwx6S wEAuX/WMaHG/RZhuJ25tgkwifysLQm1T9Zlf1qX/HTxl6dsAPKTMg4kv+lYj8SHy rX1FJscxFWQhXRbUs6iLpXxtbbR5l+MZDAKLiYQ87U2DnJVYcAvkx2auolhAVs98 o7uC -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:52 2025 by rpki-client on console.sobornost.net