$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e516b28b-c549-41c8-a3c8-97331669f493.roa File: e516b28b-c549-41c8-a3c8-97331669f493.roa (raw, json) Hash identifier: tbE4vcfxhBwWClSzLVdnYTKXFfVZ11PeT82q+mLDIcA= Subject key identifier: 04:13:5F:3A:03:E0:66:09:F1:74:37:91:92:11:CC:12:76:30:5C:BC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 61015D34DF99903A28DEA7515BC020BDA306D5FE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e516b28b-c549-41c8-a3c8-97331669f493.roa Signing time: Sat 19 Apr 2025 00:50:17 +0000 ROA not before: Sat 19 Apr 2025 00:50:17 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:01:5d:34:df:99:90:3a:28:de:a7:51:5b:c0:20:bd:a3:06:d5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:50:17 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=bd0094361b8f59d1750bb430873faf51106d93b74feb703a0bdd260cb5527272, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:73:3a:36:8b:2b:fe:3d:34:a8:5e:d2:03: b8:30:ac:e5:2f:b0:e2:1c:9f:8e:31:36:cf:21:b6: ad:ed:cb:84:92:4f:ec:59:ca:ff:89:6d:fc:5b:1c: b9:92:f8:12:90:90:6c:20:e3:0f:e0:72:65:66:0a: b1:01:ae:b1:9c:9e:6b:94:ed:69:dd:2a:25:97:24: d4:c1:82:21:28:36:97:c4:0a:cf:3b:24:90:8c:7e: 66:9d:58:b4:28:61:c7:19:ad:c9:c7:ca:a6:5d:68: 50:76:f2:7e:7c:94:71:34:9f:6f:cd:7e:23:f9:db: 00:0f:7f:0f:ab:cf:0b:ba:c7:5a:02:c0:3e:b6:a1: ed:72:32:b0:72:08:74:bd:85:79:11:5a:33:ae:be: 78:e0:f7:ce:ad:dc:f7:e4:22:09:07:b7:28:84:05: 55:75:9c:dd:0e:ec:93:d0:d5:e6:3c:e5:16:fd:b9: 83:97:10:13:7e:be:52:8b:f6:f9:d9:e6:21:b7:50: e4:4a:05:13:a6:f0:ee:39:62:7a:9e:bb:80:9a:6c: 1e:7d:a3:84:14:18:2e:1a:19:43:31:4c:e8:b1:0e: b0:1b:59:95:01:a1:38:86:7e:82:b0:82:78:9c:c4: 0c:3e:5d:ae:78:9e:ab:1b:3c:8b:66:df:45:44:13: ec:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:13:5F:3A:03:E0:66:09:F1:74:37:91:92:11:CC:12:76:30:5C:BC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e516b28b-c549-41c8-a3c8-97331669f493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:c800::/40 Signature Algorithm: sha256WithRSAEncryption 14:5d:84:03:0d:d2:76:e9:5e:b0:6c:44:d5:2f:94:76:61:73: 5e:70:32:21:e1:92:0e:31:8f:c9:6d:44:57:68:41:8f:1e:0c: a5:c4:b6:0b:ec:02:c6:25:1f:ff:82:79:04:b7:2e:dd:3f:3c: 3a:1e:22:cd:e7:cf:84:da:af:8d:d7:52:96:f1:d9:bc:94:26: 21:79:f9:3f:d0:4c:46:51:4e:42:b8:9c:ac:58:21:e3:b6:7b: aa:a4:15:a9:2e:d8:98:48:7a:0e:e9:67:b5:db:80:9c:d8:92: 8f:a4:ba:c8:b1:39:c6:93:4f:c6:0a:17:9b:26:50:e3:05:34: f0:e3:01:80:bb:ac:9e:ae:cb:9e:3d:51:c0:54:c7:61:2a:d0: 1d:3b:e2:42:76:43:f3:6e:19:de:6a:30:9a:cc:2c:47:3b:f9: 50:94:6d:1c:5e:10:3a:0e:ad:49:29:ea:74:c3:f0:4e:22:28: 60:ce:e7:b7:85:86:c0:af:72:9e:8a:51:60:5f:c6:88:e8:f7: 38:95:ec:b0:18:17:a9:66:30:4b:10:fa:34:f7:8b:c2:2e:98: 15:58:65:37:a0:17:73:74:68:c3:05:5b:8c:8b:69:e2:90:89: 1e:3e:4c:7c:0f:8a:bd:34:0a:ea:8f:e6:45:56:73:47:ef:0a: a3:af:14:70 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYQFdNN+ZkDoo3qdRW8AgvaMG1f4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwNTAxN1oX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAYmQwMDk0MzYxYjhmNTlkMTc1MGJi NDMwODczZmFmNTExMDZkOTNiNzRmZWI3MDNhMGJkZDI2MGNiNTUyNzI3MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRFzOjaLK/49NKhe0gO4MKzlL7Di HJ+OMTbPIbat7cuEkk/sWcr/iW38Wxy5kvgSkJBsIOMP4HJlZgqxAa6xnJ5rlO1p 3SollyTUwYIhKDaXxArPOySQjH5mnVi0KGHHGa3Jx8qmXWhQdvJ+fJRxNJ9vzX4j +dsAD38Pq88LusdaAsA+tqHtcjKwcgh0vYV5EVozrr544PfOrdz35CIJB7cohAVV dZzdDuyT0NXmPOUW/bmDlxATfr5Si/b52eYht1DkSgUTpvDuOWJ6nruAmmwefaOE FBguGhlDMUzosQ6wG1mVAaE4hn6CsIJ4nMQMPl2ueJ6rGzyLZt9FRBPsKQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAQTXzoD4GYJ8XQ3kZIRzBJ2MFy8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1MTZiMjhiLWM1NDktNDFjOC1hM2M4LTk3MzMxNjY5ZjQ5My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8sgwDQYJKoZIhvcNAQELBQADggEBABRdhAMN0nbpXrBsRNUv lHZhc15wMiHhkg4xj8ltRFdoQY8eDKXEtgvsAsYlH/+CeQS3Lt0/PDoeIs3nz4Ta r43XUpbx2byUJiF5+T/QTEZRTkK4nKxYIeO2e6qkFaku2JhIeg7pZ7XbgJzYko+k usixOcaTT8YKF5smUOMFNPDjAYC7rJ6uy549UcBUx2Eq0B074kJ2Q/NuGd5qMJrM LEc7+VCUbRxeEDoOrUkp6nTD8E4iKGDO57eFhsCvcp6KUWBfxojo9ziV7LAYF6lm MEsQ+jT3i8IumBVYZTegF3N0aMMFW4yLaeKQiR4+THwPir00CuqP5kVWc0fvCqOv FHA= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:52 2025 by rpki-client on console.sobornost.net