$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f11193c8-37cb-42c1-9803-825500063384.roa File: f11193c8-37cb-42c1-9803-825500063384.roa (raw, json) Hash identifier: VEDej6utDZtiyAkwt7ASS3+RtETmx3SSIVEopm2w/g8= Subject key identifier: C3:22:4B:6C:77:00:19:12:18:F7:B6:9D:36:12:CA:BD:22:A6:38:90 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 13F4B32DD1DDF80BB5F05ED20AD1DABFF2D67CF2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f11193c8-37cb-42c1-9803-825500063384.roa Signing time: Mon 21 Apr 2025 15:30:35 +0000 ROA not before: Mon 21 Apr 2025 15:30:35 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:c0c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f4:b3:2d:d1:dd:f8:0b:b5:f0:5e:d2:0a:d1:da:bf:f2:d6:7c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:30:35 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=28ed7da80b2a901210ad61599569594335ee6c4b0059a030ec59ebd11587d6b7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ff:43:93:9b:f4:78:e0:d9:6d:38:cb:55:50: 88:42:4b:de:08:68:05:0d:aa:a5:d4:3e:9f:be:8b: 8c:39:ad:d0:72:aa:e5:1e:85:b3:a0:a7:14:d8:cc: 7b:7a:19:a7:20:27:91:f5:30:bc:a5:c8:c1:6f:0b: 62:d6:3a:d1:8e:38:67:1c:da:fc:60:4d:87:d3:e6: 39:d8:e9:c7:c3:4a:3e:1a:9d:fc:d1:3d:07:8b:7e: 52:2c:ff:f4:2a:b1:db:ff:49:dc:1e:bb:83:fa:dd: f8:ad:91:1b:94:12:6e:31:63:7f:6b:2c:f5:53:6e: 9b:78:e7:68:b6:3e:1e:9c:a8:cc:19:95:d3:10:c0: be:bf:11:2d:f3:36:de:47:42:4f:22:7b:89:7c:6a: 00:c0:32:86:76:8f:70:b7:39:47:d3:b4:0a:91:95: a9:b3:4a:6e:8a:f7:ae:ed:3d:52:04:69:da:e5:78: 85:29:31:35:e9:4f:a6:e4:82:a1:41:f0:17:d6:7b: 90:3b:ec:8c:d4:2d:da:a1:0e:27:e5:13:21:55:98: 77:c6:a3:e2:06:2a:25:3e:30:9a:5e:dc:a5:78:4e: 20:be:29:5e:e7:1b:b7:0e:57:fd:30:e3:55:7b:78: 58:58:8c:04:ad:4b:7c:16:5a:05:b8:0d:34:d8:21: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:22:4B:6C:77:00:19:12:18:F7:B6:9D:36:12:CA:BD:22:A6:38:90 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f11193c8-37cb-42c1-9803-825500063384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:c0c0::/46 Signature Algorithm: sha256WithRSAEncryption 43:28:b6:a8:39:b8:8a:c8:dc:71:0e:68:08:a2:69:03:6a:a5: be:29:3b:6a:f6:c2:b0:b0:cb:ad:5f:7d:79:45:40:b3:0f:27: 32:f7:d9:e1:25:3d:51:15:8a:c1:a7:29:f7:97:f5:13:79:9c: d3:e1:dc:11:d8:2d:e0:ec:7e:63:14:dd:bb:1e:d2:e2:e3:fa: 19:c7:40:9c:b9:5e:b1:8b:08:09:90:37:49:72:32:bf:29:01: b0:16:ee:3e:e0:d9:62:9d:98:a5:34:04:7f:f1:8d:60:77:9a: 0f:2a:07:5b:3e:f4:58:db:38:4b:a0:2b:4f:b6:f8:e9:0a:9b: 25:54:2f:df:16:d4:22:28:dd:fb:e7:f8:c2:dd:ef:2f:3b:42: ed:88:c2:35:9f:be:a3:1a:9c:bd:a6:b5:e5:d9:75:e4:19:8f: 83:60:7e:56:da:a9:5a:94:25:3c:d3:76:57:f5:20:ba:26:5f: 5c:bc:3a:f4:0f:3f:63:fc:70:ea:b8:4e:6e:32:42:30:d5:6a: 5f:7d:1b:7e:67:26:17:c9:77:7d:fa:94:58:42:5f:0f:10:5b: 9d:52:6d:29:11:c0:f8:ca:5f:6a:dc:e3:36:6c:9d:0b:e1:60: 3b:2a:ee:f1:af:4c:88:f1:da:f3:22:27:72:94:7d:85:14:07: 7e:a1:4d:78 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUE/SzLdHd+Au18F7SCtHav/LWfPIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MzAzNVoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMjhlZDdkYTgwYjJhOTAxMjEwYWQ2 MTU5OTU2OTU5NDMzNWVlNmM0YjAwNTlhMDMwZWM1OWViZDExNTg3ZDZiNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv9Dk5v0eODZbTjLVVCIQkveCGgF Daql1D6fvouMOa3QcqrlHoWzoKcU2Mx7ehmnICeR9TC8pcjBbwti1jrRjjhnHNr8 YE2H0+Y52OnHw0o+Gp380T0Hi35SLP/0KrHb/0ncHruD+t34rZEblBJuMWN/ayz1 U26beOdotj4enKjMGZXTEMC+vxEt8zbeR0JPInuJfGoAwDKGdo9wtzlH07QKkZWp s0puiveu7T1SBGna5XiFKTE16U+m5IKhQfAX1nuQO+yM1C3aoQ4n5RMhVZh3xqPi BiolPjCaXtyleE4gvile5xu3Dlf9MONVe3hYWIwErUt8FloFuA002CHehwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMMiS2x3ABkSGPe2nTYSyr0ipjiQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YxMTE5M2M4LTM3Y2ItNDJjMS05ODAzLTgyNTUwMDA2MzM4NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaacDAMA0GCSqGSIb3DQEBCwUAA4IBAQBDKLaoObiKyNxxDmgI omkDaqW+KTtq9sKwsMutX315RUCzDycy99nhJT1RFYrBpyn3l/UTeZzT4dwR2C3g 7H5jFN27HtLi4/oZx0CcuV6xiwgJkDdJcjK/KQGwFu4+4NlinZilNAR/8Y1gd5oP KgdbPvRY2zhLoCtPtvjpCpslVC/fFtQiKN375/jC3e8vO0LtiMI1n76jGpy9prXl 2XXkGY+DYH5W2qlalCU803ZX9SC6Jl9cvDr0Dz9j/HDquE5uMkIw1WpffRt+ZyYX yXd9+pRYQl8PEFudUm0pEcD4yl9q3OM2bJ0L4WA7Ku7xr0yI8drzIidylH2FFAd+ oU14 -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net