$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa File: f28ef137-0acd-4efd-b9ee-b352810a3e96.roa (raw, json) Hash identifier: XFsspMx+2/EN2VTlxS+HLJxwPlkPxMtHQ+SAmw7vVCo= Subject key identifier: 3E:5E:1B:19:46:CB:8C:53:3B:17:FB:CA:1C:D1:8D:6E:B5:01:1E:CC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5A0EF0F552714E1B049757105C9A0C5AD5ABFAB7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa Signing time: Mon 21 Apr 2025 15:01:22 +0000 ROA not before: Mon 21 Apr 2025 15:01:22 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da69:e080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0e:f0:f5:52:71:4e:1b:04:97:57:10:5c:9a:0c:5a:d5:ab:fa:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 15:01:22 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=d737a2374c5e4fdc64a2b42d5650dc28105a2d5f97b7c4d4d242c056f681bc3a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c2:ed:4f:0c:98:63:cb:7c:5f:e9:0b:a9:d1: fc:7d:35:24:c6:35:68:60:b8:fb:3b:92:67:a6:98: 2f:c0:d6:5f:5d:ba:7f:73:32:ab:91:35:5d:b8:73: bb:de:6c:0e:ff:5f:c6:68:f2:db:49:5b:70:8b:8b: cc:24:53:ab:be:ff:80:aa:17:11:d6:a4:90:a5:92: bf:90:2f:ce:50:dc:ec:74:c4:a0:4f:ae:f8:ff:02: da:06:dc:57:e2:e4:40:1b:52:54:ef:92:9d:a5:1c: 9b:8d:db:c4:90:85:cf:90:8c:14:8e:6a:b5:37:e7: 92:9e:76:39:55:e5:77:b7:bb:af:10:41:47:dd:dc: 88:26:8a:06:2f:41:03:43:a3:6f:7b:e8:09:49:9f: 63:b9:41:17:b2:87:91:78:29:56:b7:0f:38:e9:0a: 17:81:19:4c:cd:1f:95:98:99:c1:98:04:7e:30:a0: ad:30:51:f1:8e:ad:0d:d5:81:e9:65:1c:2f:37:a9: 98:6d:35:9a:1d:69:8b:c3:5f:47:af:6e:43:ce:e9: e8:01:50:64:fc:8c:f8:0a:45:dd:b8:4b:2f:d9:b7: e1:41:cc:cb:42:73:f8:7f:70:ca:7f:ca:28:79:85: d6:8f:eb:39:b3:e6:54:2d:a0:6e:a1:8b:96:69:6f: f5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5E:1B:19:46:CB:8C:53:3B:17:FB:CA:1C:D1:8D:6E:B5:01:1E:CC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da69:e080::/46 Signature Algorithm: sha256WithRSAEncryption 91:34:c3:96:e2:1f:a5:41:c7:3b:f4:be:c6:a8:7a:ed:06:ff: 11:df:e5:da:2c:8d:10:d6:84:59:59:b3:d4:78:fb:6e:8e:34: 5b:6b:42:3d:75:bf:b7:23:0b:c3:ce:56:d1:b8:c4:b9:d9:c0: 8d:53:40:be:aa:bd:36:28:60:2f:b1:7a:e7:e0:94:1a:7f:a6: 3d:26:8e:79:55:30:61:0b:56:56:89:08:08:29:aa:d3:98:cc: 98:e4:26:d9:14:98:24:cc:1c:44:62:95:bf:63:68:f4:eb:89: d7:96:3b:cc:c4:3e:76:5e:68:5a:21:45:bc:b1:49:8d:c0:67: 1d:2e:c2:eb:63:2b:40:7a:47:89:01:ea:de:35:92:f5:54:d4: 49:04:91:19:df:5a:64:8d:76:7b:4e:20:f8:b6:34:e4:9c:51: 96:78:e9:23:1e:a8:a5:d2:e6:8f:72:0a:a5:5b:6a:02:de:78: 0c:62:dc:46:23:c0:11:1f:de:42:4f:23:b2:26:11:58:4d:91: 29:13:7b:4e:d3:14:e6:d5:ad:6e:fe:09:a8:e1:7f:c8:2e:10: cc:94:45:97:32:eb:ed:ef:04:15:e5:c7:ef:c2:ce:a1:6a:33: 66:fe:e0:99:fb:a4:0e:33:9c:15:77:e4:b1:f8:32:51:3b:5a: 27:98:6d:12 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUWg7w9VJxThsEl1cQXJoMWtWr+rcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE1MDEyMloX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAZDczN2EyMzc0YzVlNGZkYzY0YTJi NDJkNTY1MGRjMjgxMDVhMmQ1Zjk3YjdjNGQ0ZDI0MmMwNTZmNjgxYmMzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcLtTwyYY8t8X+kLqdH8fTUkxjVo YLj7O5JnppgvwNZfXbp/czKrkTVduHO73mwO/1/GaPLbSVtwi4vMJFOrvv+AqhcR 1qSQpZK/kC/OUNzsdMSgT674/wLaBtxX4uRAG1JU75KdpRybjdvEkIXPkIwUjmq1 N+eSnnY5VeV3t7uvEEFH3dyIJooGL0EDQ6Nve+gJSZ9juUEXsoeReClWtw846QoX gRlMzR+VmJnBmAR+MKCtMFHxjq0N1YHpZRwvN6mYbTWaHWmLw19Hr25DzunoAVBk /Iz4CkXduEsv2bfhQczLQnP4f3DKf8ooeYXWj+s5s+ZULaBuoYuWaW/18wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFD5eGxlGy4xTOxf7yhzRjW61AR7MMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YyOGVmMTM3LTBhY2QtNGVmZC1iOWVlLWIzNTI4MTBhM2U5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAbaaeCAMA0GCSqGSIb3DQEBCwUAA4IBAQCRNMOW4h+lQcc79L7G qHrtBv8R3+XaLI0Q1oRZWbPUePtujjRba0I9db+3IwvDzlbRuMS52cCNU0C+qr02 KGAvsXrn4JQaf6Y9Jo55VTBhC1ZWiQgIKarTmMyY5CbZFJgkzBxEYpW/Y2j064nX ljvMxD52XmhaIUW8sUmNwGcdLsLrYytAekeJAereNZL1VNRJBJEZ31pkjXZ7TiD4 tjTknFGWeOkjHqil0uaPcgqlW2oC3ngMYtxGI8ARH95CTyOyJhFYTZEpE3tO0xTm 1a1u/gmo4X/ILhDMlEWXMuvt7wQV5cfvws6hajNm/uCZ+6QOM5wVd+Sx+DJRO1on mG0S -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net