$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f3ba3251-a502-4cf8-9bc5-449b1376be0f.roa File: f3ba3251-a502-4cf8-9bc5-449b1376be0f.roa (raw, json) Hash identifier: gn0XKkdE1XscvL56oDG5tal5oJjyXMPqFzLN1JWGlfg= Subject key identifier: 1E:94:B4:B5:42:18:6A:BE:FF:EF:BA:43:C9:B5:1C:8B:CD:BD:FB:9C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 326E97D2604C7969691C066C21306011155B5DBE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f3ba3251-a502-4cf8-9bc5-449b1376be0f.roa Signing time: Sat 19 Apr 2025 00:32:13 +0000 ROA not before: Sat 19 Apr 2025 00:32:13 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6e:97:d2:60:4c:79:69:69:1c:06:6c:21:30:60:11:15:5b:5d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:32:13 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=d0d83be7cc8842a5809360f84c6c31db28ab6545db92c4cc4b7d71a8dca1b20d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:1a:c6:da:e8:4d:4f:92:98:5a:2d:78:60: 09:f3:8f:97:df:58:40:5a:55:e9:df:4d:b7:bd:1d: 90:00:11:42:ef:b3:af:96:c0:65:a7:8a:9d:a8:eb: 4b:86:2e:01:77:dd:5f:28:38:29:e8:ee:bb:69:05: 38:24:54:8c:f3:37:8d:15:fb:35:24:0a:6c:63:3c: f9:23:0d:19:a5:5b:a5:69:e4:0a:13:1d:c9:ca:dc: 28:9c:73:c3:5e:37:2d:60:46:bf:1b:18:e4:f8:ea: 3f:49:72:bc:33:96:82:0f:ac:03:a0:fd:f6:aa:d2: a3:c1:e1:18:0c:b7:28:82:21:6c:30:d3:93:c6:1c: 0e:aa:c2:ae:36:98:bd:64:00:a5:62:31:1c:21:a1: 7a:69:bb:1e:b7:c9:1e:f5:d5:30:e1:aa:54:0a:ea: 2d:20:52:77:3e:d2:82:11:3c:92:bb:aa:02:1a:00: 86:af:f4:40:a3:53:4b:d9:ef:35:08:2b:6b:7f:7a: 97:61:fa:3f:cd:78:1a:be:90:4b:cd:4d:05:1b:09: dc:ae:4c:d5:ba:c5:8d:79:81:46:7a:c5:67:25:84: 4b:2f:d4:77:64:1b:e2:36:d8:e7:4f:ad:72:cc:62: b5:77:69:b8:f3:db:cf:ca:6a:69:8a:0d:bf:42:9d: 0e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:94:B4:B5:42:18:6A:BE:FF:EF:BA:43:C9:B5:1C:8B:CD:BD:FB:9C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f3ba3251-a502-4cf8-9bc5-449b1376be0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:2020::/48 Signature Algorithm: sha256WithRSAEncryption 94:0e:40:91:49:50:99:00:71:2d:73:c4:56:35:28:6f:b9:77: de:34:cd:da:07:cd:58:c2:71:eb:09:bf:ea:84:e5:70:75:17: 06:72:cc:61:7c:0b:0c:36:cd:9a:eb:eb:5c:cb:15:34:3c:f4: 35:52:a3:85:e4:93:55:d9:71:09:27:5c:45:8b:51:bc:7a:16: e8:87:11:f9:9f:ce:9a:f6:33:8d:2a:2c:c5:52:a4:cb:a8:c4: eb:d0:4f:98:41:d0:bc:21:07:a4:93:0b:46:5f:02:a5:dc:87: b6:1f:7a:0d:80:d0:0e:61:0e:eb:ae:28:f0:71:55:b4:61:4a: af:fc:c2:c0:ba:69:ae:72:87:bc:e7:0a:dd:11:20:55:73:79: a0:32:11:88:0f:3e:95:d7:d1:7b:15:72:49:45:32:d7:c0:79: a0:f9:5f:b5:c4:9d:3a:63:b8:12:52:ba:97:85:19:eb:74:d7: 62:a9:40:30:b1:04:3f:cb:27:dc:28:07:ae:5e:c1:20:53:77: 65:ff:39:ff:f3:42:26:fb:61:e6:89:4c:55:07:84:69:0f:be: cf:3c:ee:15:63:dd:51:67:a7:69:28:b5:a0:41:0e:ec:d9:f1: 3b:16:26:22:41:a6:40:5a:d0:3c:0e:9b:ec:f9:8d:2d:dc:dd: 66:b3:fe:a3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUMm6X0mBMeWlpHAZsITBgERVbXb4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwMzIxM1oX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAZDBkODNiZTdjYzg4NDJhNTgwOTM2 MGY4NGM2YzMxZGIyOGFiNjU0NWRiOTJjNGNjNGI3ZDcxYThkY2ExYjIwZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV0axtroTU+SmFoteGAJ84+X31hA WlXp3023vR2QABFC77OvlsBlp4qdqOtLhi4Bd91fKDgp6O67aQU4JFSM8zeNFfs1 JApsYzz5Iw0ZpVulaeQKEx3JytwonHPDXjctYEa/Gxjk+Oo/SXK8M5aCD6wDoP32 qtKjweEYDLcogiFsMNOTxhwOqsKuNpi9ZAClYjEcIaF6abset8ke9dUw4apUCuot IFJ3PtKCETySu6oCGgCGr/RAo1NL2e81CCtrf3qXYfo/zXgavpBLzU0FGwncrkzV usWNeYFGesVnJYRLL9R3ZBviNtjnT61yzGK1d2m489vPymppig2/Qp0OSwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFB6UtLVCGGq+/++6Q8m1HIvNvfucMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2YzYmEzMjUxLWE1MDItNGNmOC05YmM1LTQ0OWIxMzc2YmUwZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYSAgMA0GCSqGSIb3DQEBCwUAA4IBAQCUDkCRSVCZAHEtc8RW NShvuXfeNM3aB81YwnHrCb/qhOVwdRcGcsxhfAsMNs2a6+tcyxU0PPQ1UqOF5JNV 2XEJJ1xFi1G8ehbohxH5n86a9jONKizFUqTLqMTr0E+YQdC8IQekkwtGXwKl3Ie2 H3oNgNAOYQ7rrijwcVW0YUqv/MLAummucoe85wrdESBVc3mgMhGIDz6V19F7FXJJ RTLXwHmg+V+1xJ06Y7gSUrqXhRnrdNdiqUAwsQQ/yyfcKAeuXsEgU3dl/zn/80Im +2HmiUxVB4RpD77PPO4VY91RZ6dpKLWgQQ7s2fE7FiYiQaZAWtA8Dpvs+Y0t3N1m s/6j -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net