$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/64aa0337-4cf9-42c7-b236-4cd36e69005e.roa File: 64aa0337-4cf9-42c7-b236-4cd36e69005e.roa (raw, json) Hash identifier: 0Zm+zsBbQOiJmKZ1AWMnEKWSzt4a9cW+GB78q3rd8gA= Subject key identifier: 1E:B6:24:40:2E:DD:D3:FA:10:E8:AF:E4:92:97:75:D4:71:F2:85:57 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 2C9CD26E3CC86377CD5F73EB8DF7B98551B6B6BB Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/64aa0337-4cf9-42c7-b236-4cd36e69005e.roa Signing time: Mon 31 Mar 2025 15:00:50 +0000 ROA not before: Mon 31 Mar 2025 15:00:50 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80f1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9c:d2:6e:3c:c8:63:77:cd:5f:73:eb:8d:f7:b9:85:51:b6:b6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Mar 31 15:00:50 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: serialNumber=034efa3b18d935440f22daf326badd6048927ea8d12de5184fef48d8e8ab7dec, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dd:23:03:82:2f:51:38:1a:e4:86:50:7c:29: 4f:9a:b0:47:ca:7a:06:3e:d1:45:e5:88:e2:55:57: 7f:0d:2f:e6:fd:68:b4:35:9c:51:63:e3:63:23:a9: 52:91:fd:9e:46:5d:be:bf:6b:61:4d:8f:4e:10:de: cc:23:7d:c0:91:1c:12:2a:42:af:6b:46:b7:35:37: c3:71:67:6b:38:17:dc:ab:bb:35:b0:ed:ef:08:30: ef:77:c3:ce:e0:a6:21:e6:64:d4:28:2f:fe:df:95: dc:3c:c4:7d:d1:da:88:0e:97:4f:33:1a:e1:d1:b1: 2c:1f:a2:a4:3a:fb:f9:6c:71:5c:3c:9f:c6:ec:d0: b6:ff:e7:24:91:e2:6d:f4:c4:af:8a:0b:55:7f:65: ee:ad:63:35:8d:0b:53:e3:ef:07:33:1b:a1:67:82: b0:cc:af:de:ee:0f:ff:53:65:29:32:d0:c5:21:eb: 42:d6:77:ab:5b:e7:2c:ea:d4:2e:7c:8e:0f:f3:ec: 56:df:91:14:73:64:54:0f:b3:da:c1:cb:7c:c8:0c: 13:95:a5:3d:3b:80:ed:dd:ea:6d:dd:5c:66:48:87: 65:0d:0e:97:72:df:00:8d:49:a3:f3:8d:0f:b2:1d: fa:77:69:ea:00:84:b6:b2:f4:56:cc:95:04:ba:a4: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B6:24:40:2E:DD:D3:FA:10:E8:AF:E4:92:97:75:D4:71:F2:85:57 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/64aa0337-4cf9-42c7-b236-4cd36e69005e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80f1::/32 Signature Algorithm: sha256WithRSAEncryption 7b:4f:f4:9a:96:34:08:68:12:91:58:9a:0a:e3:2e:b0:e5:e0: 30:cb:63:0b:67:48:70:71:54:4a:95:80:92:e2:c7:70:11:7f: e8:c5:6f:3a:13:e7:dc:6d:4a:59:0f:c3:b5:43:bf:a6:79:0e: d2:44:cb:0a:3c:bc:8b:46:9e:df:7c:ab:79:a0:8e:16:8d:d1: 0d:4a:3d:1e:11:64:f5:36:01:54:96:16:8d:45:e3:1d:2c:44: 82:32:2f:62:f2:d0:9e:1f:e8:e1:a5:06:a8:87:d3:44:f7:52: 76:ff:eb:4a:d4:21:92:ba:dc:f8:17:c3:3f:d9:10:16:89:88: af:2f:e3:29:b7:23:1f:28:e1:b6:4a:d1:00:ac:53:05:1c:24: 39:76:dd:76:16:57:3c:b8:53:10:8d:f9:17:94:08:88:b3:8f: 56:20:36:2b:1c:25:b7:a8:d6:d6:7c:72:03:92:2a:14:07:ff: 8d:fc:c4:21:ab:22:ca:b6:ce:dd:76:7b:7f:cc:c1:f0:e3:7e: 6d:7e:9a:3e:f9:af:a5:8e:ec:54:ef:7e:d6:d1:db:60:70:25: 24:84:fd:aa:58:49:48:a9:5d:81:d4:85:0d:73:d1:3b:15:96: 67:cd:65:63:73:5d:29:0c:5d:8c:61:d2:e1:8f:c9:ff:bd:8b: f7:65:24:df -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIULJzSbjzIY3fNX3Prjfe5hVG2trswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDMzMTE1MDA1MFoX DTI1MDUwNTIzNTk1OVowejFJMEcGA1UEBRNAMDM0ZWZhM2IxOGQ5MzU0NDBmMjJk YWYzMjZiYWRkNjA0ODkyN2VhOGQxMmRlNTE4NGZlZjQ4ZDhlOGFiN2RlYzEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN0jA4IvUTga5IZQfClPmrBHynoG PtFF5YjiVVd/DS/m/Wi0NZxRY+NjI6lSkf2eRl2+v2thTY9OEN7MI33AkRwSKkKv a0a3NTfDcWdrOBfcq7s1sO3vCDDvd8PO4KYh5mTUKC/+35XcPMR90dqIDpdPMxrh 0bEsH6KkOvv5bHFcPJ/G7NC2/+ckkeJt9MSvigtVf2XurWM1jQtT4+8HMxuhZ4Kw zK/e7g//U2UpMtDFIetC1nerW+cs6tQufI4P8+xW35EUc2RUD7Pawct8yAwTlaU9 O4Dt3ept3VxmSIdlDQ6Xct8AjUmj840Psh36d2nqAIS2svRWzJUEuqTohwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFB62JEAu3dP6EOiv5JKXddRx8oVXMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzY0YWEwMzM3LTRjZjktNDJjNy1iMjM2LTRjZDM2ZTY5MDA1ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJA+A8TANBgkqhkiG9w0BAQsFAAOCAQEAe0/0mpY0CGgSkViaCuMu sOXgMMtjC2dIcHFUSpWAkuLHcBF/6MVvOhPn3G1KWQ/DtUO/pnkO0kTLCjy8i0ae 33yreaCOFo3RDUo9HhFk9TYBVJYWjUXjHSxEgjIvYvLQnh/o4aUGqIfTRPdSdv/r StQhkrrc+BfDP9kQFomIry/jKbcjHyjhtkrRAKxTBRwkOXbddhZXPLhTEI35F5QI iLOPViA2Kxwlt6jW1nxyA5IqFAf/jfzEIasiyrbO3XZ7f8zB8ON+bX6aPvmvpY7s VO9+1tHbYHAlJIT9qlhJSKldgdSFDXPROxWWZ81lY3NdKQxdjGHS4Y/J/72L92Uk 3w== -----END CERTIFICATE-----Generated at Thu Apr 24 04:33:53 2025 by rpki-client on console.sobornost.net