$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5b22d77-3182-4224-8e47-32ca7c3d3373.roa File: e5b22d77-3182-4224-8e47-32ca7c3d3373.roa (raw, json) Hash identifier: 0ZOeONAEZvXTI2+PgsIF2L/qq68+RJaDbd245ZyMIKk= Subject key identifier: 1C:EE:1D:2B:97:E6:87:D3:BA:2F:EF:02:4A:B9:49:EF:09:DF:DF:D8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7D609F8A2A71920677D851F342345C04657858B0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5b22d77-3182-4224-8e47-32ca7c3d3373.roa Signing time: Sat 19 Apr 2025 00:20:14 +0000 ROA not before: Sat 19 Apr 2025 00:20:14 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:60:9f:8a:2a:71:92:06:77:d8:51:f3:42:34:5c:04:65:78:58:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:20:14 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=f1e8dbed0bb3fb26258e7eb1be66f076b7f07ba4183d81109a14cbeeeef9de2d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:63:c8:4f:fb:d9:13:cf:18:db:b3:c5:67: 72:c6:37:1b:22:ec:49:c4:93:29:aa:f2:c8:8f:a9: 19:87:18:d8:ac:d6:ec:34:10:09:8a:c0:c9:21:a4: 3c:38:cf:55:e1:88:98:0c:56:4a:67:e5:c2:f2:7e: 94:7a:09:98:f5:1b:6c:26:49:3e:4e:72:d4:43:be: 0b:b1:73:a5:cd:1b:d0:4b:36:5e:56:b2:56:bc:7a: b1:61:da:71:98:bb:21:e0:af:0c:6f:07:8c:ac:df: 3f:42:2e:00:44:0d:29:2a:d8:ca:23:5b:fb:09:8a: cf:64:ac:44:ae:90:96:ad:21:1a:2c:29:6e:35:6e: 1f:66:23:4d:0f:66:9f:ad:e6:4c:f0:48:88:53:07: a3:63:bf:6d:43:db:fe:f5:3a:b4:2c:b6:62:75:8f: 0c:ce:34:5c:9b:8b:b5:5c:a9:40:60:67:10:f5:90: 02:87:3c:0b:5d:17:c8:56:c1:c1:56:39:ec:ee:cc: ea:08:f2:81:cd:64:2a:a7:33:32:f7:a1:bb:7a:3c: 50:04:ef:47:25:dc:d4:ea:ac:b2:8e:69:cc:82:f4: 09:16:b9:2f:4c:5c:1f:60:c9:40:58:9f:5f:19:8a: c1:f6:47:6d:e7:ea:f6:cf:32:67:0b:38:90:d3:d6: 2c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:1D:2B:97:E6:87:D3:BA:2F:EF:02:4A:B9:49:EF:09:DF:DF:D8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5b22d77-3182-4224-8e47-32ca7c3d3373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption ac:f3:7e:f5:d0:71:7b:ac:04:dc:8c:d5:50:4c:42:ff:57:ae: 3e:65:bf:3c:bf:cd:69:a2:63:05:ac:51:ed:f5:24:37:bc:5b: 10:d5:6d:22:b7:f0:d6:74:59:9e:21:9b:d0:34:bd:bd:ec:f4: 90:d7:55:9a:a2:e6:39:4e:4a:88:a2:a7:0a:e0:89:d9:64:a4: 0e:eb:34:4f:09:da:71:13:30:7e:4e:dd:a5:02:7c:f0:99:cc: be:9f:e7:d5:14:23:17:d0:e4:b4:94:5f:6f:f8:68:6e:ba:b7: 06:c3:bc:0b:36:73:18:57:e6:e3:ad:f1:6d:e5:a4:f7:d5:2c: 5d:fa:a2:08:08:af:53:9a:cf:eb:da:c1:5a:0f:a7:c4:b2:1d: d0:98:43:d7:92:85:2d:23:6a:40:e7:73:fd:b7:18:67:9e:35: b6:15:44:05:6a:3b:57:bb:39:3f:51:67:46:4b:fb:97:8b:9c: 45:83:54:4a:a2:61:5e:1b:8c:68:c1:8e:36:a8:b0:02:2c:10: 7f:6d:a5:5f:17:a7:e0:74:e5:6a:2f:0d:cb:7c:0e:27:51:08: 20:85:53:72:6b:64:47:b9:34:b8:0c:cb:46:46:79:38:12:03: 4d:d7:cd:5e:9b:95:df:90:36:62:61:cf:7c:2f:5c:1a:60:08: a0:33:05:69 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfWCfiipxkgZ32FHzQjRcBGV4WLAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMjAxNFoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAZjFlOGRiZWQwYmIzZmIyNjI1OGU3 ZWIxYmU2NmYwNzZiN2YwN2JhNDE4M2Q4MTEwOWExNGNiZWVlZWY5ZGUyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx35jyE/72RPPGNuzxWdyxjcbIuxJ xJMpqvLIj6kZhxjYrNbsNBAJisDJIaQ8OM9V4YiYDFZKZ+XC8n6UegmY9RtsJkk+ TnLUQ74LsXOlzRvQSzZeVrJWvHqxYdpxmLsh4K8MbweMrN8/Qi4ARA0pKtjKI1v7 CYrPZKxErpCWrSEaLCluNW4fZiNND2afreZM8EiIUwejY79tQ9v+9Tq0LLZidY8M zjRcm4u1XKlAYGcQ9ZAChzwLXRfIVsHBVjns7szqCPKBzWQqpzMy96G7ejxQBO9H JdzU6qyyjmnMgvQJFrkvTFwfYMlAWJ9fGYrB9kdt5+r2zzJnCziQ09YsGQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBzuHSuX5ofTui/vAkq5Se8J39/YMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1YjIyZDc3LTMxODItNDIyNC04ZTQ3LTMyY2E3YzNkMzM3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8vDAMA0GCSqGSIb3DQEBCwUAA4IBAQCs83710HF7rATcjNVQ TEL/V64+Zb88v81pomMFrFHt9SQ3vFsQ1W0it/DWdFmeIZvQNL297PSQ11WaouY5 TkqIoqcK4InZZKQO6zRPCdpxEzB+Tt2lAnzwmcy+n+fVFCMX0OS0lF9v+GhuurcG w7wLNnMYV+bjrfFt5aT31Sxd+qIICK9Tms/r2sFaD6fEsh3QmEPXkoUtI2pA53P9 txhnnjW2FUQFajtXuzk/UWdGS/uXi5xFg1RKomFeG4xowY42qLACLBB/baVfF6fg dOVqLw3LfA4nUQgghVNya2RHuTS4DMtGRnk4EgNN181em5XfkDZiYc98L1waYAig MwVp -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:52 2025 by rpki-client on console.sobornost.net