$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f872164c-416d-44ed-81ce-172f02efdfbf.roa File: f872164c-416d-44ed-81ce-172f02efdfbf.roa (raw, json) Hash identifier: SmCSDEmSAu4KkIPwEjKdb7a9zsTra5ixvbYi8irdRE4= Subject key identifier: 2D:68:39:6A:F4:6F:8C:67:C7:C0:A0:A7:EA:6C:6D:07:11:DF:4A:53 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F0D7B6B39C22D0F6E379B9F03BD0F923CFE319B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f872164c-416d-44ed-81ce-172f02efdfbf.roa Signing time: Sat 12 Apr 2025 00:01:18 +0000 ROA not before: Sat 12 Apr 2025 00:01:18 +0000 ROA not after: Sat 17 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da26::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0d:7b:6b:39:c2:2d:0f:6e:37:9b:9f:03:bd:0f:92:3c:fe:31:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 12 00:01:18 2025 GMT Not After : May 17 23:59:59 2025 GMT Subject: serialNumber=157590f0ae67d819ebd5eea43f5f6cce51c814a3ca7fb35c06156c7889516ac9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:9c:39:c1:c1:66:40:4f:af:75:55:13:59: bb:d3:5a:3d:d9:dd:ae:d0:ad:68:dd:f4:77:f5:6c: 89:ac:c8:6e:f8:e6:7b:e2:e0:b6:a3:8c:5d:6d:9d: a5:e2:9f:06:d1:b2:b2:90:ee:fd:dc:92:df:b6:29: 14:fc:01:0a:17:64:7b:3f:86:2e:71:8e:1f:66:ed: c0:29:97:3e:21:a7:e9:1e:c5:70:53:9f:d6:e9:93: 86:ef:4e:a7:8c:75:61:70:c4:46:be:83:1d:fd:99: 65:9a:f6:b6:b0:73:7c:ee:ce:a8:2b:a2:33:92:b4: a8:14:31:80:6e:29:63:b5:3f:ef:a9:0a:37:14:3e: 50:bf:84:d0:82:95:bc:54:15:48:78:b7:fb:85:6d: a0:48:50:28:b4:04:44:94:b6:2b:ff:8d:5e:08:8c: 7c:ee:9e:10:9d:b7:4c:14:80:85:f7:0d:a3:67:86: 79:95:4a:6e:eb:64:15:f8:ea:68:4e:a9:69:03:3d: 79:5c:92:8e:a4:2d:19:0e:b9:f8:79:96:2b:81:b6: 48:2a:87:04:ee:b8:18:54:19:5d:fc:d9:54:db:e3: 20:67:b2:d9:cd:b2:5c:7e:38:ed:21:7a:42:2a:f8: 34:a3:8e:b0:63:82:6b:35:0e:b7:69:3f:b3:8d:3d: 7d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:68:39:6A:F4:6F:8C:67:C7:C0:A0:A7:EA:6C:6D:07:11:DF:4A:53 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f872164c-416d-44ed-81ce-172f02efdfbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da26::/36 Signature Algorithm: sha256WithRSAEncryption cb:61:21:aa:ef:94:22:e0:2a:d4:6b:0e:f8:74:ee:34:71:b0: 2c:e4:d7:62:f0:3e:20:4e:68:1a:4a:4d:79:40:75:a7:83:8f: 7b:1e:98:c5:ac:a1:74:bd:dd:46:d0:8d:21:94:40:5b:6c:64: a6:cc:03:a3:30:ab:56:60:21:08:75:b0:c9:87:f4:ac:5e:49: 65:17:0e:75:7c:95:e7:bf:33:bd:40:10:bd:13:d3:74:98:d5: 26:0b:39:6f:a9:49:9b:6b:9c:3d:69:29:d8:86:89:ae:05:f3: 6a:a9:93:3b:32:82:01:59:ca:c1:d6:84:87:6d:4d:1d:35:b8: 13:4a:6b:3d:6c:ec:51:2b:a7:6d:70:cb:31:f5:06:41:1d:fa: 90:bb:43:74:a9:01:65:53:b8:9d:19:c0:7a:db:67:be:c9:8c: eb:fd:54:ca:90:29:4b:22:aa:e1:87:24:fb:cb:5a:81:1d:e9: 93:2b:44:bf:13:94:5d:76:97:55:90:0d:ab:47:d8:fe:2c:2e: 97:38:30:c1:c7:6a:74:a0:b1:31:fe:14:72:c5:66:1c:b2:ba: cd:c3:40:e3:1b:37:b4:f1:e7:7a:24:99:86:a8:78:b7:e0:19: 00:a6:e5:39:2b:af:13:4b:95:ee:2e:24:3e:bc:57:e1:f6:fe: 3f:3c:b5:ba -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUfw17aznCLQ9uN5ufA70Pkjz+MZswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxMjAwMDExOFoX DTI1MDUxNzIzNTk1OVowejFJMEcGA1UEBRNAMTU3NTkwZjBhZTY3ZDgxOWViZDVl ZWE0M2Y1ZjZjY2U1MWM4MTRhM2NhN2ZiMzVjMDYxNTZjNzg4OTUxNmFjOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JmcOcHBZkBPr3VVE1m701o92d2u 0K1o3fR39WyJrMhu+OZ74uC2o4xdbZ2l4p8G0bKykO793JLftikU/AEKF2R7P4Yu cY4fZu3AKZc+IafpHsVwU5/W6ZOG706njHVhcMRGvoMd/Zllmva2sHN87s6oK6Iz krSoFDGAbiljtT/vqQo3FD5Qv4TQgpW8VBVIeLf7hW2gSFAotARElLYr/41eCIx8 7p4QnbdMFICF9w2jZ4Z5lUpu62QV+OpoTqlpAz15XJKOpC0ZDrn4eZYrgbZIKocE 7rgYVBld/NlU2+MgZ7LZzbJcfjjtIXpCKvg0o46wY4JrNQ63aT+zjT19QwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFC1oOWr0b4xnx8Cgp+psbQcR30pTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y4NzIxNjRjLTQxNmQtNDRlZC04MWNlLTE3MmYwMmVmZGZiZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaJgAwDQYJKoZIhvcNAQELBQADggEBAMthIarvlCLgKtRrDvh0 7jRxsCzk12LwPiBOaBpKTXlAdaeDj3semMWsoXS93UbQjSGUQFtsZKbMA6Mwq1Zg IQh1sMmH9KxeSWUXDnV8lee/M71AEL0T03SY1SYLOW+pSZtrnD1pKdiGia4F82qp kzsyggFZysHWhIdtTR01uBNKaz1s7FErp21wyzH1BkEd+pC7Q3SpAWVTuJ0ZwHrb Z77JjOv9VMqQKUsiquGHJPvLWoEd6ZMrRL8TlF12l1WQDatH2P4sLpc4MMHHanSg sTH+FHLFZhyyus3DQOMbN7Tx53okmYaoeLfgGQCm5TkrrxNLle4uJD68V+H2/j88 tbo= -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net