$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa File: eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa (raw, json) Hash identifier: fsjzQ9YXXV20TtMbMRdcSMTjGGfOqMpAktmCt9+cdmU= Subject key identifier: 29:C6:05:57:00:31:FA:1C:FC:E4:12:AE:C1:2C:14:84:D5:65:52:69 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 73AF1754250F7049D319C7C725E271E2592F9C71 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa Signing time: Mon 21 Apr 2025 16:11:16 +0000 ROA not before: Mon 21 Apr 2025 16:11:16 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:af:17:54:25:0f:70:49:d3:19:c7:c7:25:e2:71:e2:59:2f:9c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:11:16 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=a84e40a980b00f698a9f6a6905d3db21c53b98258ee94cde7e90127fe38fb3cf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:7a:7d:b5:a1:fc:7b:2f:81:86:ea:fc:ff: bf:4e:61:9a:df:c4:99:68:65:2b:d0:d8:a9:f5:b3: dc:cd:1e:09:27:6a:bc:28:f8:df:b7:40:67:85:3c: ba:8a:ee:c1:f2:ed:34:6d:12:ff:f6:60:1a:14:5d: d5:3a:25:90:9c:fc:44:8e:ad:ec:a9:b4:1f:19:08: 5e:58:24:d1:43:78:21:78:8d:47:74:a1:f7:4b:9b: 10:29:4d:65:85:42:68:44:48:3f:fe:b0:f2:1e:9f: 86:c3:7d:ef:3b:2c:7b:3e:06:d3:5c:d1:09:44:89: f0:89:87:9c:fd:bf:b8:29:41:13:8c:62:16:95:24: d5:75:78:45:e3:ba:4d:87:bc:82:01:2d:ab:f3:10: f9:9e:96:a3:b6:66:dc:33:8e:8a:6f:d7:12:15:9a: ce:ab:5b:a6:db:23:e6:bd:6d:5b:f4:d5:20:83:f1: 57:d1:6b:66:eb:d3:64:d2:99:be:ea:2e:04:3a:2e: d7:cd:4e:26:0b:04:b5:d8:23:b1:37:47:6a:9b:5b: e0:ce:66:95:b8:68:86:a2:22:dd:27:9b:67:66:54: 26:26:c1:75:e8:a4:cf:8b:3f:85:cb:88:5d:e1:6d: a5:ab:0d:2c:a8:a7:b0:9d:29:ab:42:db:94:08:5b: e4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C6:05:57:00:31:FA:1C:FC:E4:12:AE:C1:2C:14:84:D5:65:52:69 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:800::/40 Signature Algorithm: sha256WithRSAEncryption 04:15:c9:07:06:ed:c8:f2:59:cc:30:fc:f0:5c:c9:9f:32:a9: 11:78:0b:69:26:a8:47:12:a7:4b:40:bc:5c:f8:10:dd:d2:de: 2a:d6:28:b0:c8:4e:94:10:58:9d:84:60:10:a0:28:85:ff:2f: 59:b3:59:45:70:98:5f:f6:2e:aa:c1:71:af:c4:67:e2:1c:50: 1d:c3:ec:76:fe:da:7e:35:e9:79:d0:b5:03:f2:84:73:05:65: b3:56:f2:94:8f:a1:95:23:f2:6e:36:99:74:42:cd:7d:88:49: c9:7b:e8:00:7f:ce:86:f6:40:06:ce:5f:4f:b0:cd:a9:ec:5d: b7:12:90:55:3a:88:17:73:70:02:3b:6c:75:4f:4d:9f:6e:c7: da:cb:6d:8f:48:47:ed:97:39:b9:34:57:b1:51:42:28:fd:5b: e1:f1:92:e7:b5:20:ac:90:e5:72:d3:ed:1c:60:5a:1b:bb:75: 1b:4a:b5:da:ad:8c:c6:ab:39:23:21:9a:1b:d1:da:96:5a:1e: 20:15:bf:09:fe:00:62:36:6d:4f:79:12:b5:85:54:9c:94:d7: e4:0d:02:77:0a:a5:d4:d8:90:d1:12:8c:ac:14:84:b0:44:fb: 8f:58:49:9a:2b:a8:c7:96:ab:27:fa:33:14:65:3b:f3:20:c9: 13:92:e7:9f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUc68XVCUPcEnTGcfHJeJx4lkvnHEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MTExNloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAYTg0ZTQwYTk4MGIwMGY2OThhOWY2 YTY5MDVkM2RiMjFjNTNiOTgyNThlZTk0Y2RlN2U5MDEyN2ZlMzhmYjNjZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00N6fbWh/HsvgYbq/P+/TmGa38SZ aGUr0Nip9bPczR4JJ2q8KPjft0BnhTy6iu7B8u00bRL/9mAaFF3VOiWQnPxEjq3s qbQfGQheWCTRQ3gheI1HdKH3S5sQKU1lhUJoREg//rDyHp+Gw33vOyx7PgbTXNEJ RInwiYec/b+4KUETjGIWlSTVdXhF47pNh7yCAS2r8xD5npajtmbcM46Kb9cSFZrO q1um2yPmvW1b9NUgg/FX0Wtm69Nk0pm+6i4EOi7XzU4mCwS12COxN0dqm1vgzmaV uGiGoiLdJ5tnZlQmJsF16KTPiz+Fy4hd4W2lqw0sqKewnSmrQtuUCFvkWwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCnGBVcAMfoc/OQSrsEsFITVZVJpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VlYzdhZDVlLWY2NTYtNGViYy04YmUyLWMzYTQyZmQwMDNjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNggwDQYJKoZIhvcNAQELBQADggEBAAQVyQcG7cjyWcww/PBc yZ8yqRF4C2kmqEcSp0tAvFz4EN3S3irWKLDITpQQWJ2EYBCgKIX/L1mzWUVwmF/2 LqrBca/EZ+IcUB3D7Hb+2n416XnQtQPyhHMFZbNW8pSPoZUj8m42mXRCzX2IScl7 6AB/zob2QAbOX0+wzansXbcSkFU6iBdzcAI7bHVPTZ9ux9rLbY9IR+2XObk0V7FR Qij9W+Hxkue1IKyQ5XLT7RxgWhu7dRtKtdqtjMarOSMhmhvR2pZaHiAVvwn+AGI2 bU95ErWFVJyU1+QNAncKpdTYkNESjKwUhLBE+49YSZorqMeWqyf6MxRlO/MgyROS 558= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:52 2025 by rpki-client on console.sobornost.net