$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa File: f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa (raw, json) Hash identifier: 1hn2uA15oBUxUc4QMTXO6MlG+QQoZiCuWoiPBE54RB4= Subject key identifier: 7C:20:55:CF:60:5C:34:AC:F4:DB:F9:1F:AB:2B:D7:24:5E:A4:F7:EF Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3C9EF807358C271321395BBACEEA4D65312A0828 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa Signing time: Sat 19 Apr 2025 00:51:01 +0000 ROA not before: Sat 19 Apr 2025 00:51:01 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf7:7080::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9e:f8:07:35:8c:27:13:21:39:5b:ba:ce:ea:4d:65:31:2a:08:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:51:01 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=2b62865098152b063d503cc4f5c82b995060e775c2c3e83f84c41e487160e2fb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:b1:dd:e4:3f:7c:fa:63:62:97:ca:02:9e: f0:75:ff:f1:63:9a:39:0f:cc:f4:a2:69:3a:10:9a: 3d:50:5b:a4:55:9a:91:b0:ef:78:93:4e:2a:eb:da: 2c:6e:fd:57:32:47:de:37:d7:d6:93:c1:0d:d0:e6: b4:35:d9:62:ec:e5:f2:8e:25:5d:29:34:e6:73:19: a2:8c:cd:f8:0c:71:8d:8e:10:3c:82:7a:d6:0c:c5: 65:c1:04:1f:2d:82:7c:ef:d9:85:bf:64:e7:b0:5d: 14:98:ea:89:63:e6:7a:82:fa:fd:7e:33:7b:85:f6: 38:31:cf:0b:f9:60:75:0d:88:0c:3b:b3:d7:70:bd: a4:53:b2:6e:4f:2c:55:1d:d1:67:8b:81:ab:4b:8c: 7c:28:66:be:b6:d6:ca:a3:2d:03:1e:a1:a0:45:f4: e4:04:4f:d6:27:6f:d1:c9:18:20:8d:d7:59:6f:1b: 64:0d:48:90:83:83:5e:16:85:ea:ba:df:40:ee:99: d1:98:6d:d7:19:ea:56:ab:97:ed:3a:d2:50:7c:68: eb:f0:aa:30:27:03:5f:f0:d1:ed:2b:e7:80:05:1c: 14:2d:2d:6e:2f:ae:fa:bf:d3:53:4b:68:ee:9f:ce: 87:6e:bd:e0:26:55:6a:ca:bc:ea:52:5f:b5:6b:13: f6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:20:55:CF:60:5C:34:AC:F4:DB:F9:1F:AB:2B:D7:24:5E:A4:F7:EF X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf7:7080::/46 Signature Algorithm: sha256WithRSAEncryption 60:cb:c3:90:07:1f:b2:a6:a4:b0:c4:21:d3:b2:ab:b4:31:12: 93:10:c4:45:10:af:44:06:9f:ba:2e:40:6b:25:41:a1:41:d5: 4c:41:11:3e:f7:92:f0:8f:ff:d4:f7:26:e9:a4:7b:db:eb:fd: b9:e7:6f:16:ac:71:30:03:f0:53:57:e0:f4:98:5c:67:1d:c6: 51:b1:46:e4:37:7c:5f:f6:b8:88:56:dd:16:bc:25:c7:82:94: 4e:03:f3:34:24:e9:58:d5:2a:26:36:63:a9:d1:ae:7e:ae:ce: 9d:ae:5e:1a:5a:b8:e9:cc:86:56:79:ce:b7:12:61:98:3f:15: d8:6d:6b:f9:12:27:84:7e:ac:ad:cf:c0:ad:30:49:70:37:e5: 4c:82:2e:4a:c4:a2:18:be:ca:4f:56:5d:bc:67:26:6a:95:92: 30:50:10:c9:5a:84:0a:e2:59:5c:2f:c2:ea:2b:a9:1d:87:a7: 24:28:6d:5f:bf:37:8d:7f:17:31:22:a7:db:99:f0:1b:fb:e5: 1d:f1:7b:b3:7c:94:7b:15:b1:af:ff:46:0f:f9:3d:27:c4:d1: c0:de:17:80:39:57:ae:28:83:bc:eb:9e:d0:11:17:f5:69:97: bf:46:59:8c:9d:56:9f:42:72:f7:ee:51:8a:04:be:d3:cb:ca: 9e:3a:a5:6f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPJ74BzWMJxMhOVu6zupNZTEqCCgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwNTEwMVoX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNAMmI2Mjg2NTA5ODE1MmIwNjNkNTAz Y2M0ZjVjODJiOTk1MDYwZTc3NWMyYzNlODNmODRjNDFlNDg3MTYwZTJmYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/+x3eQ/fPpjYpfKAp7wdf/xY5o5 D8z0omk6EJo9UFukVZqRsO94k04q69osbv1XMkfeN9fWk8EN0Oa0Ndli7OXyjiVd KTTmcxmijM34DHGNjhA8gnrWDMVlwQQfLYJ879mFv2TnsF0UmOqJY+Z6gvr9fjN7 hfY4Mc8L+WB1DYgMO7PXcL2kU7JuTyxVHdFni4GrS4x8KGa+ttbKoy0DHqGgRfTk BE/WJ2/RyRggjddZbxtkDUiQg4NeFoXqut9A7pnRmG3XGepWq5ftOtJQfGjr8Kow JwNf8NHtK+eABRwULS1uL676v9NTS2jun86Hbr3gJlVqyrzqUl+1axP2NwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHwgVc9gXDSs9Nv5H6sr1yRepPfvMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2MDI4ODc1LTJmZTMtNGRkZi05NTc3LWFhM2NjODNkZmM3Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba93CAMA0GCSqGSIb3DQEBCwUAA4IBAQBgy8OQBx+ypqSwxCHT squ0MRKTEMRFEK9EBp+6LkBrJUGhQdVMQRE+95Lwj//U9ybppHvb6/25528WrHEw A/BTV+D0mFxnHcZRsUbkN3xf9riIVt0WvCXHgpROA/M0JOlY1SomNmOp0a5+rs6d rl4aWrjpzIZWec63EmGYPxXYbWv5EieEfqytz8CtMElwN+VMgi5KxKIYvspPVl28 ZyZqlZIwUBDJWoQK4llcL8LqK6kdh6ckKG1fvzeNfxcxIqfbmfAb++Ud8XuzfJR7 FbGv/0YP+T0nxNHA3heAOVeuKIO8657QERf1aZe/RlmMnVafQnL37lGKBL7Ty8qe OqVv -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net