$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/edb40068-fd10-40a0-8d8f-84f481389d4b.roa File: edb40068-fd10-40a0-8d8f-84f481389d4b.roa (raw, json) Hash identifier: hhV5me8NRDSV3fIn+ASRC5Nn06OtThG5G8eJRkfGRC8= Subject key identifier: 15:19:DE:9F:EE:D8:12:5A:3D:57:07:8E:C8:D4:85:E2:B3:2D:15:94 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 55E98C3CDCB2EB06CA17CB8D7333B21B5967D2B4 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/edb40068-fd10-40a0-8d8f-84f481389d4b.roa Signing time: Mon 21 Apr 2025 16:00:10 +0000 ROA not before: Mon 21 Apr 2025 16:00:10 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e9:8c:3c:dc:b2:eb:06:ca:17:cb:8d:73:33:b2:1b:59:67:d2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:00:10 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=af391878c002804fcc20092ecc77f297aab358f9a1310599d200773d860aa241, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:85:30:16:28:af:f6:d9:08:e9:f6:9d:d6: b2:c5:45:1a:db:3f:56:8b:ab:f3:44:2c:d2:01:70: f3:a4:c6:38:43:6d:79:32:9e:89:00:1d:4e:3b:19: 48:bd:9d:af:f0:23:91:06:08:ea:e4:cf:4c:94:30: a5:dd:92:b4:33:ec:ea:fa:33:3d:f6:fb:33:c3:8d: 6c:e0:a4:34:5b:d4:34:bd:15:14:01:4f:84:47:56: 4c:5b:4d:ce:01:f3:60:d6:ae:ca:f0:a6:e9:4c:80: 57:e5:a5:6b:47:01:28:f4:31:2a:48:4d:b1:37:82: 6e:56:53:a4:a2:a7:5d:8b:3d:6f:4e:d6:3c:1e:dc: 52:9c:29:3c:2f:2e:70:4d:d3:7f:51:ac:e3:8b:81: 88:47:82:9c:fc:f0:5e:99:6e:91:fb:a0:d6:6d:9d: df:09:f4:b7:66:22:b1:01:e4:33:83:30:cb:40:7d: bd:24:84:8f:a9:93:12:fc:01:6d:18:02:1a:95:fa: cb:c4:43:8f:60:88:fe:06:80:f2:19:25:4c:0c:45: 28:03:9d:4a:d8:67:59:81:3f:a8:93:f3:37:c2:67: 45:87:26:8e:00:36:ec:f6:07:d5:bd:af:eb:71:be: 05:81:d7:47:56:ca:46:76:c4:a7:25:53:19:db:f0: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:19:DE:9F:EE:D8:12:5A:3D:57:07:8E:C8:D4:85:E2:B3:2D:15:94 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/edb40068-fd10-40a0-8d8f-84f481389d4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:8000::/40 Signature Algorithm: sha256WithRSAEncryption 17:55:ac:d6:81:0b:09:ab:9c:68:47:07:8d:b6:96:ad:0b:e3: c3:df:d1:b4:df:21:c9:52:7e:9e:0b:eb:90:07:40:f2:b0:4c: b4:a9:38:77:09:09:61:ad:81:bd:98:24:fa:c9:ae:60:41:4e: 9c:5b:d0:fa:9d:15:88:d2:fa:ec:66:30:21:38:93:5a:c6:ea: 08:ca:81:fe:ac:a6:b5:6a:82:c7:83:70:8e:6b:13:ff:ca:e1: b5:94:e2:d7:e7:5b:75:06:eb:c1:ce:9c:6a:67:6b:3c:05:43: 9c:9c:a6:d9:de:aa:7e:58:1a:4a:73:8d:d9:ec:a2:8c:cc:d1: 74:f8:0d:80:5c:86:fd:5b:c8:74:b6:4f:33:c6:e3:2c:fe:cf: cf:14:a7:95:89:21:c2:ca:33:3e:d0:c9:cb:1b:6b:68:25:47: ed:cc:70:41:4e:b0:65:c6:79:d8:72:43:f6:07:71:80:a7:84: 71:a2:5f:e1:7b:61:ba:fa:60:e5:87:0e:fe:36:b6:03:d0:66: c1:9b:34:75:03:86:58:89:68:ad:fc:75:08:42:1d:43:bf:b5: 59:eb:ba:03:81:f0:56:76:1f:ec:c4:55:e8:c5:ca:34:19:b4: e0:63:11:0f:04:ab:c5:46:5c:b6:f1:f3:3d:2d:5f:64:f1:42: 72:fb:e2:32 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUVemMPNyy6wbKF8uNczOyG1ln0rQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MDAxMFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYWYzOTE4NzhjMDAyODA0ZmNjMjAw OTJlY2M3N2YyOTdhYWIzNThmOWExMzEwNTk5ZDIwMDc3M2Q4NjBhYTI0MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiyFMBYor/bZCOn2ndayxUUa2z9W i6vzRCzSAXDzpMY4Q215Mp6JAB1OOxlIvZ2v8CORBgjq5M9MlDCl3ZK0M+zq+jM9 9vszw41s4KQ0W9Q0vRUUAU+ER1ZMW03OAfNg1q7K8KbpTIBX5aVrRwEo9DEqSE2x N4JuVlOkoqddiz1vTtY8HtxSnCk8Ly5wTdN/Uazji4GIR4Kc/PBemW6R+6DWbZ3f CfS3ZiKxAeQzgzDLQH29JISPqZMS/AFtGAIalfrLxEOPYIj+BoDyGSVMDEUoA51K 2GdZgT+ok/M3wmdFhyaOADbs9gfVva/rcb4FgddHVspGdsSnJVMZ2/CeXQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBUZ3p/u2BJaPVcHjsjUheKzLRWUMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VkYjQwMDY4LWZkMTAtNDBhMC04ZDhmLTg0ZjQ4MTM4OWQ0Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauYAwDQYJKoZIhvcNAQELBQADggEBABdVrNaBCwmrnGhHB422 lq0L48Pf0bTfIclSfp4L65AHQPKwTLSpOHcJCWGtgb2YJPrJrmBBTpxb0PqdFYjS +uxmMCE4k1rG6gjKgf6sprVqgseDcI5rE//K4bWU4tfnW3UG68HOnGpnazwFQ5yc ptneqn5YGkpzjdnsoozM0XT4DYBchv1byHS2TzPG4yz+z88Up5WJIcLKMz7Qycsb a2glR+3McEFOsGXGedhyQ/YHcYCnhHGiX+F7Ybr6YOWHDv42tgPQZsGbNHUDhliJ aK38dQhCHUO/tVnrugOB8FZ2H+zEVejFyjQZtOBjEQ8Eq8VGXLbx8z0tX2TxQnL7 4jI= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:52 2025 by rpki-client on console.sobornost.net