This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15f0df98-8d36-4eb8-8d73-6075251475ae.roa File: 15f0df98-8d36-4eb8-8d73-6075251475ae.roa (raw, json) Hash identifier: +gW8Z4DyRFXQRUdXtj4IaGRLmAj2PZEhxHRV2RJiKoQ= Subject key identifier: 3C:7D:D7:26:CB:38:F4:3F:65:77:55:6C:70:10:FA:6B:82:CA:C0:B4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4378298936F8127C14068AA00A4746C0D1BC9596 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15f0df98-8d36-4eb8-8d73-6075251475ae.roa Signing time: Thu 04 Dec 2025 00:21:15 +0000 ROA not before: Thu 04 Dec 2025 00:21:15 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.220.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:78:29:89:36:f8:12:7c:14:06:8a:a0:0a:47:46:c0:d1:bc:95:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:21:15 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=48d86a10a39bd6564aee71c8440448de6ff9672852933aafadceda2b1d7daf18, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:8c:85:8f:28:d1:53:73:2d:c2:f7:08:78: af:5c:21:db:18:46:74:80:e4:b7:56:4b:a3:b2:da: 37:a5:ff:74:3b:4a:25:29:99:13:f3:c6:74:4a:04: fd:05:10:80:c0:96:fb:25:cf:d4:db:18:91:7e:b9: 4f:e6:02:24:c2:32:7a:91:ed:67:3c:ac:f2:04:d8: a4:c9:8c:73:25:71:54:9c:0b:94:1b:88:d5:10:77: 19:d0:e6:84:5f:6f:20:58:75:63:c7:63:ca:3b:31: 0a:07:7f:cd:45:d2:90:58:51:a8:dc:9c:1b:f5:3a: 42:b9:eb:c2:4d:77:62:f1:31:90:64:6e:8f:59:b6: 9e:56:8c:1e:5c:1f:d5:30:f8:ab:3e:ed:d6:bb:94: 9e:0e:53:38:23:1f:0c:70:f1:3d:a7:60:07:e1:51: 2a:d3:cc:1a:5e:e3:e3:e9:9d:9a:c0:b4:49:54:86: 91:0e:be:05:da:e4:2b:8f:96:d1:c0:16:08:f0:0f: f7:de:4b:f2:5e:20:90:05:8a:ef:b5:91:bb:59:fd: b6:94:8e:b6:e1:57:fe:4f:3e:0c:bf:0d:6d:57:63: 00:e5:de:8c:f5:45:35:52:9a:73:96:58:34:00:2b: 33:15:25:f7:fc:05:3f:2b:cd:fa:96:16:f1:dd:54: 85:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7D:D7:26:CB:38:F4:3F:65:77:55:6C:70:10:FA:6B:82:CA:C0:B4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15f0df98-8d36-4eb8-8d73-6075251475ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.220.0.0/15 Signature Algorithm: sha256WithRSAEncryption 9b:fa:35:20:4c:b7:f9:dd:5a:b9:2f:f3:c2:af:99:54:aa:ec: 74:94:d3:8e:0b:9f:bd:65:a2:f1:9d:12:9e:99:f0:10:d2:40: 6d:21:51:ae:43:e2:63:5f:fa:6f:04:78:b7:ef:b9:cf:dd:42: 8a:7f:82:ab:d4:ce:1b:1c:0b:8b:7d:58:35:e8:7c:6b:f9:97: 15:c5:f5:4e:ef:56:1d:22:69:82:12:8b:94:f2:5c:63:14:33: 20:b2:2a:8e:5d:2d:c2:34:03:3c:61:68:e6:c9:37:36:79:72: 5a:19:b3:77:2b:dc:08:2c:ad:7d:67:64:0e:8e:f6:a3:87:41: a1:58:58:39:a2:2e:46:9b:e1:e0:90:01:b1:ac:00:4f:44:15: ce:21:03:63:dd:68:09:77:98:8c:ee:67:8f:6a:b9:9c:1c:0d: d0:9c:43:1c:37:5a:24:0c:55:aa:5a:d8:c1:85:1d:44:4d:e5: 13:aa:55:c8:a6:32:44:84:75:e2:9c:d2:da:20:7f:e7:87:ca: c4:e4:6e:c0:7c:3d:52:19:01:69:aa:81:30:fb:5b:b1:39:55: 7d:13:87:00:af:d9:9e:da:10:ff:b7:fc:95:0a:bc:cc:fb:de: 0d:79:4e:da:5b:f2:1f:96:63:6f:14:fc:98:b0:a0:4e:70:28: da:12:04:86 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUQ3gpiTb4EnwUBoqgCkdGwNG8lZYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMjExNVoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNANDhkODZhMTBhMzliZDY1NjRhZWU3 MWM4NDQwNDQ4ZGU2ZmY5NjcyODUyOTMzYWFmYWRjZWRhMmIxZDdkYWYxODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHqMhY8o0VNzLcL3CHivXCHbGEZ0 gOS3Vkujsto3pf90O0olKZkT88Z0SgT9BRCAwJb7Jc/U2xiRfrlP5gIkwjJ6ke1n PKzyBNikyYxzJXFUnAuUG4jVEHcZ0OaEX28gWHVjx2PKOzEKB3/NRdKQWFGo3Jwb 9TpCuevCTXdi8TGQZG6PWbaeVoweXB/VMPirPu3Wu5SeDlM4Ix8McPE9p2AH4VEq 08waXuPj6Z2awLRJVIaRDr4F2uQrj5bRwBYI8A/33kvyXiCQBYrvtZG7Wf22lI62 4Vf+Tz4Mvw1tV2MA5d6M9UU1Uppzllg0ACszFSX3/AU/K836lhbx3VSFzQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFDx91ybLOPQ/ZXdVbHAQ+muCysC0MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1ZjBkZjk4LThkMzYtNGViOC04ZDczLTYwNzUyNTE0NzVhZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9wwDQYJKoZIhvcNAQELBQADggEBAJv6NSBMt/ndWrkv88KvmVSq 7HSU044Ln71lovGdEp6Z8BDSQG0hUa5D4mNf+m8EeLfvuc/dQop/gqvUzhscC4t9 WDXofGv5lxXF9U7vVh0iaYISi5TyXGMUMyCyKo5dLcI0AzxhaObJNzZ5cloZs3cr 3AgsrX1nZA6O9qOHQaFYWDmiLkab4eCQAbGsAE9EFc4hA2PdaAl3mIzuZ49quZwc DdCcQxw3WiQMVapa2MGFHURN5ROqVcimMkSEdeKc0togf+eHysTkbsB8PVIZAWmq gTD7W7E5VX0ThwCv2Z7aEP+3/JUKvMz73g15Ttpb8h+WY28U/JiwoE5wKNoSBIY= -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:44 2025 by rpki-client