$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7ec8552-7ddb-4978-bb8c-fc97d0625b4c.roa File: f7ec8552-7ddb-4978-bb8c-fc97d0625b4c.roa (raw, json) Hash identifier: QI9bHscapt6+Mn25UID6o32Sss4uKuT4agka2hZoeqA= Subject key identifier: CE:E6:46:9B:90:AF:66:FB:F2:BF:FB:83:F7:F5:49:C9:39:B4:02:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 674AACAB8CEB31EFDCC96DE2010746B0B9B366A2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7ec8552-7ddb-4978-bb8c-fc97d0625b4c.roa Signing time: Fri 18 Apr 2025 00:21:29 +0000 ROA not before: Fri 18 Apr 2025 00:21:29 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4a:ac:ab:8c:eb:31:ef:dc:c9:6d:e2:01:07:46:b0:b9:b3:66:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 18 00:21:29 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=1377e359657f9aaf277f2667e437255a843cdbea8bb94a005c61bc0cfa1126a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:aa:8c:03:c5:08:73:25:00:66:e0:55:f0:82: 6f:88:c9:f2:6e:d6:c1:ae:5b:e2:18:00:19:40:e2: 96:f6:a6:27:3e:a2:84:ba:0b:6e:8a:c2:47:14:3d: b0:87:1e:82:13:f5:14:e2:0d:49:b3:29:09:4f:6b: 9c:18:90:e3:e2:25:af:22:af:fc:25:df:19:ce:53: a7:cf:1f:28:14:70:1c:45:5a:18:bc:de:cf:6f:3b: a3:40:7b:b5:7b:db:b6:49:1e:d4:28:6f:46:52:de: 5a:c7:93:39:39:ff:33:1b:aa:93:29:c1:2e:47:58: 94:38:2a:53:70:5c:2c:54:a9:e1:e0:0d:f6:aa:f2: 61:20:af:a1:c7:2d:3a:01:c4:4a:06:4b:83:54:a3: 26:49:f5:89:34:92:94:43:75:5c:0f:9c:0c:2b:60: 12:71:37:a5:f6:33:40:fd:7c:c3:93:f9:95:c3:bc: 92:b2:d6:46:2b:ca:1d:1d:f4:56:eb:da:a0:6d:47: ca:9f:70:49:a4:e5:90:57:86:92:f0:47:ad:49:d4: 6d:e5:92:78:ae:0b:59:76:14:49:0f:ba:7b:16:88: d4:0d:28:c4:73:b6:02:f1:13:1a:8d:d4:85:9e:c7: 78:3c:0f:b2:02:58:f4:e9:66:9c:98:70:99:6c:7a: 1d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E6:46:9B:90:AF:66:FB:F2:BF:FB:83:F7:F5:49:C9:39:B4:02:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f7ec8552-7ddb-4978-bb8c-fc97d0625b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:4020::/48 Signature Algorithm: sha256WithRSAEncryption 92:84:24:f9:78:b3:e1:3d:88:25:22:59:63:f9:8c:0b:a7:57: 0a:dc:16:dc:15:ad:8a:30:ab:ca:52:98:fd:23:b7:03:80:8f: d1:c4:4d:ca:c0:8f:e2:b3:1d:66:09:8b:8b:39:3f:66:47:bd: 2d:9a:7a:74:4e:be:de:5b:44:3e:ee:3e:2a:85:e3:68:a9:c4: 39:1d:33:80:73:9f:c2:11:be:99:cb:d1:7f:f8:f7:07:db:67: 7b:cf:01:ae:04:5c:88:7d:e3:48:b3:d8:2d:2c:03:1b:eb:90: f9:52:d0:44:28:63:14:a7:20:8f:4f:30:40:d3:83:9d:77:58: 4c:bf:46:dd:be:9e:f8:87:8c:58:c9:d2:46:a7:a6:b6:b7:11: e2:4a:0a:78:64:01:da:a5:04:1b:67:9a:bc:4e:91:15:6e:57: 0c:ef:6e:9d:f8:7d:87:02:fc:d4:c8:f4:38:07:e3:5e:f7:1c: 47:df:41:4a:5a:99:8a:98:3a:06:c7:fb:89:b4:39:53:49:fc: 86:9c:d5:46:3c:9e:40:da:5f:71:24:d5:b8:24:64:d9:ab:1e: c1:3b:df:5c:16:54:79:e0:fd:e6:2f:3c:3c:75:c6:bd:9e:50: 6b:02:84:b8:e4:5f:41:78:dc:ca:cc:b1:20:e5:e8:4f:67:df: 22:9e:a6:aa -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZ0qsq4zrMe/cyW3iAQdGsLmzZqIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxODAwMjEyOVoX DTI1MDUyMzIzNTk1OVowejFJMEcGA1UEBRNAMTM3N2UzNTk2NTdmOWFhZjI3N2Yy NjY3ZTQzNzI1NWE4NDNjZGJlYThiYjk0YTAwNWM2MWJjMGNmYTExMjZhNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aqMA8UIcyUAZuBV8IJviMnybtbB rlviGAAZQOKW9qYnPqKEugtuisJHFD2whx6CE/UU4g1JsykJT2ucGJDj4iWvIq/8 Jd8ZzlOnzx8oFHAcRVoYvN7PbzujQHu1e9u2SR7UKG9GUt5ax5M5Of8zG6qTKcEu R1iUOCpTcFwsVKnh4A32qvJhIK+hxy06AcRKBkuDVKMmSfWJNJKUQ3VcD5wMK2AS cTel9jNA/XzDk/mVw7ySstZGK8odHfRW69qgbUfKn3BJpOWQV4aS8EetSdRt5ZJ4 rgtZdhRJD7p7FojUDSjEc7YC8RMajdSFnsd4PA+yAlj06WacmHCZbHodLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFM7mRpuQr2b78r/7g/f1Sck5tALrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y3ZWM4NTUyLTdkZGItNDk3OC1iYjhjLWZjOTdkMDYyNWI0Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEAgMA0GCSqGSIb3DQEBCwUAA4IBAQCShCT5eLPhPYglIllj +YwLp1cK3BbcFa2KMKvKUpj9I7cDgI/RxE3KwI/isx1mCYuLOT9mR70tmnp0Tr7e W0Q+7j4qheNoqcQ5HTOAc5/CEb6Zy9F/+PcH22d7zwGuBFyIfeNIs9gtLAMb65D5 UtBEKGMUpyCPTzBA04Odd1hMv0bdvp74h4xYydJGp6a2txHiSgp4ZAHapQQbZ5q8 TpEVblcM726d+H2HAvzUyPQ4B+Ne9xxH30FKWpmKmDoGx/uJtDlTSfyGnNVGPJ5A 2l9xJNW4JGTZqx7BO99cFlR54P3mLzw8dca9nlBrAoS45F9BeNzKzLEg5ehPZ98i nqaq -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net