$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6380258-f2e2-4e11-a03e-5d303ceea0d2.roa File: f6380258-f2e2-4e11-a03e-5d303ceea0d2.roa (raw, json) Hash identifier: 87bu1JVgxvIGjgjS41Qjrlaao+fy73oWQlPTqBaBzO4= Subject key identifier: 94:C9:74:B2:E1:28:09:E0:33:72:A5:AE:EC:DA:81:62:7D:96:26:32 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 62918FF18A80D8740BFDA70489BE91BDD6B91487 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6380258-f2e2-4e11-a03e-5d303ceea0d2.roa Signing time: Mon 21 Apr 2025 16:30:08 +0000 ROA not before: Mon 21 Apr 2025 16:30:08 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:e000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:91:8f:f1:8a:80:d8:74:0b:fd:a7:04:89:be:91:bd:d6:b9:14:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 21 16:30:08 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=5a39a901265948933357921155f4b5a2ec3e3fc36b3c474df3731580b6866d55, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:b0:1b:19:3a:26:66:c8:ba:0a:32:06:6d: 93:d9:8b:a8:0c:e7:42:25:bb:f6:c5:d0:30:a6:bc: c7:76:1e:3f:07:18:b3:a3:3d:a9:27:3d:ce:0a:81: ea:c1:5b:73:9b:9e:71:b0:1c:3e:c2:96:27:c9:2c: 68:39:44:90:a6:a4:2a:0d:cb:f5:8d:bd:a6:a8:8e: 77:9e:84:a2:5a:81:48:7a:8d:9c:1e:b1:77:e2:73: f4:dd:5d:5c:1d:30:b7:ed:c6:3f:ba:96:98:cd:5f: 47:2d:50:32:e6:7b:4f:a8:c4:0a:4b:b8:49:85:8c: 27:39:04:0a:7e:77:da:83:2b:3a:c7:c6:14:ea:ae: 23:54:a4:ba:4e:05:5a:17:fb:41:ef:f0:d0:87:53: b9:9b:f6:59:d2:5f:1f:6b:ef:fd:31:da:59:90:6c: a3:c0:00:26:c1:54:0d:f3:ee:28:49:e0:38:9e:23: 40:38:06:53:56:b3:4b:52:52:48:b4:5f:4e:2b:9a: f7:d1:e9:a1:78:96:81:d2:df:2d:2a:51:7c:f9:33: f1:c5:72:d6:af:77:05:94:9a:1d:c7:2d:95:d0:50: cc:73:4f:b0:be:20:b3:95:34:57:5d:4b:4a:95:29: 47:f0:b5:2d:c9:3e:44:a8:94:3f:df:e4:11:8b:c8: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C9:74:B2:E1:28:09:E0:33:72:A5:AE:EC:DA:81:62:7D:96:26:32 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6380258-f2e2-4e11-a03e-5d303ceea0d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:e000::/40 Signature Algorithm: sha256WithRSAEncryption 4d:95:fb:84:d8:50:31:ba:49:5c:d1:41:76:54:5b:75:ce:8d: d0:52:63:fa:2f:cf:5c:9e:04:7a:42:30:29:54:4d:77:6d:73: 12:c9:39:50:42:ee:f3:10:65:83:85:ee:cb:6c:fb:ca:49:57: ab:18:af:46:54:e1:e1:93:5e:6f:8b:c1:20:5b:10:e9:ed:64: 87:e9:2b:18:3f:36:97:f1:b1:69:39:ae:65:85:0f:b0:8f:ff: 55:78:f3:95:f8:28:53:c4:c5:84:08:4b:46:ea:ed:5b:92:8b: a7:f3:7d:af:04:8b:90:21:94:9a:39:fa:f9:0a:ff:f9:17:25: fc:d0:d5:23:5d:cc:27:b4:d8:cf:a4:96:66:e0:d1:8e:01:71: a8:7c:66:bc:3e:70:a9:16:ff:be:b0:d7:28:30:83:4d:53:3a: eb:d7:17:f5:12:35:a0:72:5f:84:b1:83:50:71:48:ed:4a:b7: 0a:1c:fd:d2:1f:8f:ae:35:6f:52:13:b8:8e:8b:61:46:ab:a2: 1e:0e:28:a6:89:c6:9e:7e:02:36:65:38:ab:63:69:30:cf:cb: 7c:79:ba:f5:f8:17:db:79:bc:4e:d3:b2:96:4c:71:29:46:2f: 8b:95:e2:d6:37:dc:fe:a2:29:f6:50:d5:b5:97:5e:0d:de:73: 58:e4:ba:c0 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYpGP8YqA2HQL/acEib6Rvda5FIcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQyMTE2MzAwOFoX DTI1MDUyNjIzNTk1OVowejFJMEcGA1UEBRNANWEzOWE5MDEyNjU5NDg5MzMzNTc5 MjExNTVmNGI1YTJlYzNlM2ZjMzZiM2M0NzRkZjM3MzE1ODBiNjg2NmQ1NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0ywGxk6JmbIugoyBm2T2YuoDOdC Jbv2xdAwprzHdh4/Bxizoz2pJz3OCoHqwVtzm55xsBw+wpYnySxoOUSQpqQqDcv1 jb2mqI53noSiWoFIeo2cHrF34nP03V1cHTC37cY/upaYzV9HLVAy5ntPqMQKS7hJ hYwnOQQKfnfagys6x8YU6q4jVKS6TgVaF/tB7/DQh1O5m/ZZ0l8fa+/9MdpZkGyj wAAmwVQN8+4oSeA4niNAOAZTVrNLUlJItF9OK5r30emheJaB0t8tKlF8+TPxxXLW r3cFlJodxy2V0FDMc0+wviCzlTRXXUtKlSlH8LUtyT5EqJQ/3+QRi8g1TwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJTJdLLhKAngM3KlruzagWJ9liYyMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y2MzgwMjU4LWYyZTItNGUxMS1hMDNlLTVkMzAzY2VlYTBkMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaueAwDQYJKoZIhvcNAQELBQADggEBAE2V+4TYUDG6SVzRQXZU W3XOjdBSY/ovz1yeBHpCMClUTXdtcxLJOVBC7vMQZYOF7sts+8pJV6sYr0ZU4eGT Xm+LwSBbEOntZIfpKxg/NpfxsWk5rmWFD7CP/1V485X4KFPExYQIS0bq7VuSi6fz fa8Ei5AhlJo5+vkK//kXJfzQ1SNdzCe02M+klmbg0Y4Bcah8Zrw+cKkW/76w1ygw g01TOuvXF/USNaByX4Sxg1BxSO1Ktwoc/dIfj641b1ITuI6LYUaroh4OKKaJxp5+ AjZlOKtjaTDPy3x5uvX4F9t5vE7TspZMcSlGL4uV4tY33P6iKfZQ1bWXXg3ec1jk usA= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net