$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f30265ee-dfe7-4906-974a-06db74656ac8.roa File: f30265ee-dfe7-4906-974a-06db74656ac8.roa (raw, json) Hash identifier: SqqzGaTWE9t/PvI5UXUwhLbeERlJQiiIyj8arNy1Ous= Subject key identifier: AE:2E:FB:5F:D6:1F:02:D3:3C:D4:BA:50:D8:33:59:A5:E0:73:87:D3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3AB12F15AD2B30805A0B1785E4CFFD18B16FC5CA Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f30265ee-dfe7-4906-974a-06db74656ac8.roa Signing time: Fri 18 Apr 2025 00:11:51 +0000 ROA not before: Fri 18 Apr 2025 00:11:51 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c0a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b1:2f:15:ad:2b:30:80:5a:0b:17:85:e4:cf:fd:18:b1:6f:c5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 18 00:11:51 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=1b7d92b346d48db61b32a1af31b2c44f85e8859b16116f0923af40020de90961, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:d3:c5:5e:86:57:a2:25:77:c9:7c:16:11: 3b:51:91:39:5e:16:55:2b:bb:26:5e:69:2f:db:8f: 68:35:af:07:87:bf:8a:fc:f6:ee:a9:b9:32:14:26: 4c:4a:f6:33:a8:d2:df:59:ad:dc:7d:92:ff:48:29: ce:b1:11:0e:d8:4b:82:7c:65:7b:c3:a4:db:ff:b0: 85:92:a8:c6:6d:17:86:f2:f5:7c:73:96:3a:c8:35: 96:ba:a3:b1:90:39:f6:dd:36:40:58:94:14:a8:50: f7:ac:53:ef:44:db:e7:70:25:01:54:3f:dc:d2:7d: 77:6d:47:0b:ba:ee:14:56:61:c5:90:61:d4:11:9d: 34:68:08:94:26:c9:84:26:cc:23:54:70:9d:39:0b: 42:bf:bf:e4:54:69:b3:e3:b1:9f:e8:9e:8a:56:9c: ae:00:73:18:81:98:28:23:31:c8:fd:28:c7:a2:e2: 63:9c:fa:de:4b:3a:b4:9e:67:4b:9a:76:7d:72:a6: 3e:3a:8f:e7:f1:7b:b6:00:be:63:2f:83:83:b4:59: 2f:a8:7a:8c:9c:48:b7:d7:e6:69:9d:b7:68:11:c4: 05:03:4d:e5:b9:e2:02:97:53:57:d3:0e:ee:00:21: 53:e5:b6:1d:74:37:8e:8b:0b:c4:5c:b6:fb:ea:e1: 04:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2E:FB:5F:D6:1F:02:D3:3C:D4:BA:50:D8:33:59:A5:E0:73:87:D3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f30265ee-dfe7-4906-974a-06db74656ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c0a0::/48 Signature Algorithm: sha256WithRSAEncryption 69:64:3c:f9:94:6a:9c:de:5b:fe:17:ab:83:94:4a:5b:cc:61: 24:ab:1e:4c:45:1e:81:9c:6a:bc:f3:df:09:a9:8d:7c:b2:cd: 8a:ec:b6:8a:78:be:d6:d7:5d:71:4d:e9:d2:ae:49:64:b4:35: 68:52:e0:44:65:2f:ee:45:22:e7:16:31:31:ab:27:cb:82:09: 23:59:80:b7:05:3e:78:77:bc:6d:db:e5:64:84:c3:0f:e0:91: 1f:f5:0c:02:ae:01:55:f6:29:16:10:1f:e2:99:4b:64:cf:cb: fa:ab:dd:b7:70:6a:07:3f:b1:85:34:53:4e:c6:d2:ef:5c:7c: 29:4c:12:8b:3a:d8:65:ad:ce:84:77:43:95:0a:86:94:39:b9: 51:30:ea:27:66:dc:fa:f5:5f:c0:5c:6b:06:71:c4:47:3f:b7: e3:57:f0:f5:18:eb:81:d9:d9:d6:86:9d:70:c3:66:c2:16:27: 11:d5:0f:57:3c:52:f7:3d:eb:11:61:27:3e:c8:f3:fd:f3:25: f7:0f:7b:e4:66:36:b8:cc:4b:22:7d:c3:b0:34:ba:2c:30:7e: 94:26:41:7b:b1:73:cd:7f:fe:34:00:87:dd:3d:58:f7:76:6b: e7:c2:cc:20:34:5e:e5:64:de:3b:53:5e:c3:7c:7a:d0:62:62: 1f:c9:48:06 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOrEvFa0rMIBaCxeF5M/9GLFvxcowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxODAwMTE1MVoX DTI1MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAMWI3ZDkyYjM0NmQ0OGRiNjFiMzJh MWFmMzFiMmM0NGY4NWU4ODU5YjE2MTE2ZjA5MjNhZjQwMDIwZGU5MDk2MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbPTxV6GV6Ild8l8FhE7UZE5XhZV K7smXmkv249oNa8Hh7+K/PbuqbkyFCZMSvYzqNLfWa3cfZL/SCnOsREO2EuCfGV7 w6Tb/7CFkqjGbReG8vV8c5Y6yDWWuqOxkDn23TZAWJQUqFD3rFPvRNvncCUBVD/c 0n13bUcLuu4UVmHFkGHUEZ00aAiUJsmEJswjVHCdOQtCv7/kVGmz47Gf6J6KVpyu AHMYgZgoIzHI/SjHouJjnPreSzq0nmdLmnZ9cqY+Oo/n8Xu2AL5jL4ODtFkvqHqM nEi31+ZpnbdoEcQFA03lueICl1NX0w7uACFT5bYddDeOiwvEXLb76uEEyQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFK4u+1/WHwLTPNS6UNgzWaXgc4fTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YzMDI2NWVlLWRmZTctNDkwNi05NzRhLTA2ZGI3NDY1NmFjOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMCgMA0GCSqGSIb3DQEBCwUAA4IBAQBpZDz5lGqc3lv+F6uD lEpbzGEkqx5MRR6BnGq8898JqY18ss2K7LaKeL7W111xTenSrklktDVoUuBEZS/u RSLnFjExqyfLggkjWYC3BT54d7xt2+VkhMMP4JEf9QwCrgFV9ikWEB/imUtkz8v6 q923cGoHP7GFNFNOxtLvXHwpTBKLOthlrc6Ed0OVCoaUOblRMOonZtz69V/AXGsG ccRHP7fjV/D1GOuB2dnWhp1ww2bCFicR1Q9XPFL3PesRYSc+yPP98yX3D3vkZja4 zEsifcOwNLosMH6UJkF7sXPNf/40AIfdPVj3dmvnwswgNF7lZN47U17DfHrQYmIf yUgG -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net