$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f593232f-0244-4a16-ab0c-ae29ea60c65f.roa File: f593232f-0244-4a16-ab0c-ae29ea60c65f.roa (raw, json) Hash identifier: 73MNVAWdO2MkR9WAxCKs82mfoi7c3DuQtPkRdKCrcMY= Subject key identifier: 3C:88:A4:10:11:5C:92:C5:BA:72:70:97:8E:AB:32:E1:62:26:66:D3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4CA5E6A67C005A2EED4FF5E45216495B6EAB0359 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f593232f-0244-4a16-ab0c-ae29ea60c65f.roa Signing time: Mon 21 Apr 2025 16:20:53 +0000 ROA not before: Mon 21 Apr 2025 16:20:53 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da68:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a5:e6:a6:7c:00:5a:2e:ed:4f:f5:e4:52:16:49:5b:6e:ab:03:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:20:53 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=0a9b10f937a40ecd2a4f42ffc2541c3b4d5c8e52b2ebbc1504e23883a752e736, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:99:46:62:2d:40:e5:e4:8b:fd:82:44:f4: eb:78:16:b0:78:ed:8a:f9:21:e9:d3:d3:1d:45:d0: ce:a8:bd:fe:ad:85:2e:d9:30:ff:87:10:33:dc:fd: 25:7f:73:d8:48:20:0a:bf:9c:de:d7:de:4b:be:a1: c4:db:f7:e9:52:96:85:70:5a:cf:bf:37:76:4d:f1: 82:e8:f3:12:e4:f6:c1:e8:3f:1a:93:7c:b1:a3:ac: 00:a7:10:44:f9:00:68:6c:37:f7:8d:91:78:ad:cb: c6:ba:88:19:1f:d8:17:1f:dc:02:bf:f0:de:f2:07: 51:72:61:5f:40:43:ef:d5:e7:7b:fc:9a:cb:2a:61: 5b:2e:c2:3c:f5:ce:f8:52:80:bc:ee:ba:06:38:ce: 29:7a:49:af:3b:09:93:dc:81:a4:fe:65:02:fd:07: f5:81:7c:d3:5b:57:5e:09:11:32:03:2b:15:bc:21: f9:94:35:5f:93:9f:52:f7:1d:26:8e:03:97:d1:c1: 53:79:65:93:0e:fe:f3:8f:37:6e:cc:09:5b:ab:52: ce:93:cd:c7:f1:27:a1:ff:d7:0e:ec:e0:50:14:42: 6d:65:b8:55:3f:2d:6e:b5:a0:51:4c:d4:0a:69:a4: 5a:46:75:4b:88:cd:b4:3e:27:1b:44:9b:5d:71:f4: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:88:A4:10:11:5C:92:C5:BA:72:70:97:8E:AB:32:E1:62:26:66:D3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f593232f-0244-4a16-ab0c-ae29ea60c65f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da68:f000::/40 Signature Algorithm: sha256WithRSAEncryption 73:e1:d7:39:c5:54:3f:81:6c:bd:0f:ca:2b:83:d4:37:17:84: 0e:81:05:90:9e:49:0a:ed:c3:f5:a0:5d:f6:be:d9:0e:87:f6: 6f:d0:29:b1:2b:f8:b8:c7:09:db:2e:5b:83:19:8d:45:d6:8e: 46:0e:5a:64:f3:06:f1:86:60:f1:29:07:d1:52:d8:f3:7e:31: db:9d:00:50:9d:30:56:50:37:b7:e3:3d:60:09:b9:c6:35:b6: af:d5:67:eb:5d:be:8c:38:b9:52:4a:43:49:fb:5f:d6:4e:ca: ae:54:c0:b1:5a:64:5d:41:27:56:14:48:1c:3d:4e:8b:52:d9: 53:7e:db:f0:b8:5b:e3:47:89:cf:a0:29:39:c0:7d:9e:96:08: 61:12:1e:d3:e6:43:9a:10:4a:0a:7d:ac:0a:cd:bf:cc:73:76: 5f:9d:d3:6f:3e:e4:9b:b0:05:f8:65:35:cb:3e:8f:b3:30:ab: d2:33:65:39:fd:d2:0a:4d:9c:82:f7:cc:9c:5a:13:64:f3:1a: 3e:02:00:9e:0c:32:6b:f0:07:92:96:f6:76:6b:4d:77:dc:bd: 44:db:28:4e:a4:8a:48:aa:81:ef:e4:25:ad:54:94:c8:ff:8a: 22:58:d7:67:bf:6a:bf:41:a8:49:cc:d3:32:49:0b:00:b5:ef: a2:3d:1c:1b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTKXmpnwAWi7tT/XkUhZJW26rA1kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MjA1M1oX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNAMGE5YjEwZjkzN2E0MGVjZDJhNGY0 MmZmYzI1NDFjM2I0ZDVjOGU1MmIyZWJiYzE1MDRlMjM4ODNhNzUyZTczNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOyZRmItQOXki/2CRPTreBaweO2K +SHp09MdRdDOqL3+rYUu2TD/hxAz3P0lf3PYSCAKv5ze195LvqHE2/fpUpaFcFrP vzd2TfGC6PMS5PbB6D8ak3yxo6wApxBE+QBobDf3jZF4rcvGuogZH9gXH9wCv/De 8gdRcmFfQEPv1ed7/JrLKmFbLsI89c74UoC87roGOM4pekmvOwmT3IGk/mUC/Qf1 gXzTW1deCREyAysVvCH5lDVfk59S9x0mjgOX0cFTeWWTDv7zjzduzAlbq1LOk83H 8Seh/9cO7OBQFEJtZbhVPy1utaBRTNQKaaRaRnVLiM20PicbRJtdcfS5IQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFDyIpBARXJLFunJwl46rMuFiJmbTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y1OTMyMzJmLTAyNDQtNGExNi1hYjBjLWFlMjllYTYwYzY1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaaPAwDQYJKoZIhvcNAQELBQADggEBAHPh1znFVD+BbL0PyiuD 1DcXhA6BBZCeSQrtw/WgXfa+2Q6H9m/QKbEr+LjHCdsuW4MZjUXWjkYOWmTzBvGG YPEpB9FS2PN+MdudAFCdMFZQN7fjPWAJucY1tq/VZ+tdvow4uVJKQ0n7X9ZOyq5U wLFaZF1BJ1YUSBw9TotS2VN+2/C4W+NHic+gKTnAfZ6WCGESHtPmQ5oQSgp9rArN v8xzdl+d028+5JuwBfhlNcs+j7Mwq9IzZTn90gpNnIL3zJxaE2TzGj4CAJ4MMmvw B5KW9nZrTXfcvUTbKE6kikiqge/kJa1UlMj/iiJY12e/ar9BqEnM0zJJCwC176I9 HBs= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net