This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa File: 245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa (raw, json) Hash identifier: aFteUaWnhGIfg9weSKzUquwKl2QZx1VFaw4X3HqsMds= Subject key identifier: BF:DD:AD:B0:34:1F:07:03:61:36:6A:4E:42:0F:CF:6B:EB:94:B0:46 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2FC820042B8773858ABDD16A63525AEDABF9A67C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa Signing time: Thu 04 Dec 2025 00:10:08 +0000 ROA not before: Thu 04 Dec 2025 00:10:08 +0000 ROA not after: Wed 04 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.249.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c8:20:04:2b:87:73:85:8a:bd:d1:6a:63:52:5a:ed:ab:f9:a6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 4 00:10:08 2025 GMT Not After : Mar 4 23:59:59 2026 GMT Subject: serialNumber=7de0d57e64925a2762095a871322ed98d735c46c65a714cf960441911b009593, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:a3:f0:6a:3b:17:19:57:12:5a:60:95:88: 41:06:f8:83:0e:35:cf:40:bf:e4:83:35:36:ab:45: fc:d4:e9:8c:55:0d:7f:92:30:59:55:55:8f:07:f2: 57:03:d3:cb:a7:ff:06:5b:91:b2:fa:b1:1a:e4:be: 41:d3:37:8a:64:bd:a8:9c:48:56:b1:0e:07:e5:d6: 98:f8:8e:bb:09:39:3a:82:e0:e6:a8:a9:4f:ed:d0: 33:5c:85:7a:56:d7:03:72:64:fb:8c:e6:0b:0b:c3: 9b:3b:a9:29:c6:3a:29:28:12:8d:30:73:79:1d:41: 30:b3:ed:49:fa:de:4c:ea:8c:ae:c1:db:14:06:9d: d7:0b:b3:29:07:7e:35:95:6b:c8:78:27:01:f5:a7: d1:02:6e:37:28:40:91:4c:0f:7d:38:68:75:08:0b: 2a:93:58:64:39:64:81:42:7a:94:a4:3e:d5:e9:86: 5a:a5:f6:f6:64:02:ad:d2:2b:b2:f3:30:0c:14:65: 2d:dc:74:fd:93:d5:9e:11:a3:a8:52:85:ef:c0:71: 12:ea:a6:c0:a7:37:35:a1:18:9b:8c:d6:e8:c4:71: a1:ef:6b:85:d6:68:ad:30:76:3f:2d:21:fb:19:f2: ef:6f:58:1f:d7:2c:5e:8c:63:a9:75:66:47:07:c4: 6e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DD:AD:B0:34:1F:07:03:61:36:6A:4E:42:0F:CF:6B:EB:94:B0:46 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/245a65bb-591c-47bc-8a8c-6c86b093fd8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.44.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:9f:9c:1a:2b:8e:7a:ee:99:da:e2:df:5a:28:5f:20:22:b7: a6:ab:ad:b2:a4:06:8a:50:cb:44:e9:11:ab:ba:57:b3:25:00: 61:6f:12:65:ae:df:ce:6e:44:29:5a:6a:44:50:0b:8c:e9:0f: 74:60:7f:42:81:57:54:c9:64:b6:d3:b0:4a:2c:c2:00:4f:76: 65:ed:9e:d7:22:6a:2a:30:e9:d9:38:3e:08:77:26:87:14:9f: 2b:dc:53:55:46:f5:bc:42:90:46:ec:68:e8:d9:cd:8e:a8:87: a9:17:29:c0:ac:1a:3e:67:d6:b0:3a:94:39:87:52:05:18:2f: 63:07:9d:b6:76:6e:65:b1:8f:4a:11:1c:d4:81:14:3a:17:bb: 26:ed:6f:06:a6:c7:c9:27:db:08:8a:d3:b7:3d:28:4a:cd:39: c9:a0:6d:e6:59:37:fb:bd:2f:b8:e0:4d:5d:d4:78:6f:ea:35: b6:d3:ca:d4:77:cc:24:1e:6f:8d:c6:18:14:8e:1f:e1:17:3f: 2c:31:46:d9:b1:2c:c1:d5:c9:d8:66:35:38:f4:f0:08:76:7a: 10:a3:aa:a9:55:fe:66:cb:d8:3e:b5:d9:ae:cc:fc:bb:cb:61: 69:75:b2:f8:a3:92:dc:21:38:b5:04:10:c5:83:3d:2f:09:75: fd:86:93:91 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUL8ggBCuHc4WKvdFqY1Ja7av5pnwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNDAwMTAwOFoX DTI2MDMwNDIzNTk1OVowejFJMEcGA1UEBRNAN2RlMGQ1N2U2NDkyNWEyNzYyMDk1 YTg3MTMyMmVkOThkNzM1YzQ2YzY1YTcxNGNmOTYwNDQxOTExYjAwOTU5MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0ej8Go7FxlXElpglYhBBviDDjXP QL/kgzU2q0X81OmMVQ1/kjBZVVWPB/JXA9PLp/8GW5Gy+rEa5L5B0zeKZL2onEhW sQ4H5daY+I67CTk6guDmqKlP7dAzXIV6VtcDcmT7jOYLC8ObO6kpxjopKBKNMHN5 HUEws+1J+t5M6oyuwdsUBp3XC7MpB341lWvIeCcB9afRAm43KECRTA99OGh1CAsq k1hkOWSBQnqUpD7V6YZapfb2ZAKt0iuy8zAMFGUt3HT9k9WeEaOoUoXvwHES6qbA pzc1oRibjNboxHGh72uF1mitMHY/LSH7GfLvb1gf1yxejGOpdWZHB8RutwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFL/drbA0HwcDYTZqTkIPz2vrlLBGMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI0NWE2NWJiLTU5MWMtNDdiYy04YThjLTZjODZiMDkzZmQ4Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCK/ksMA0GCSqGSIb3DQEBCwUAA4IBAQBNn5waK4567pna4t9aKF8g Iremq62ypAaKUMtE6RGrulezJQBhbxJlrt/ObkQpWmpEUAuM6Q90YH9CgVdUyWS2 07BKLMIAT3Zl7Z7XImoqMOnZOD4IdyaHFJ8r3FNVRvW8QpBG7Gjo2c2OqIepFynA rBo+Z9awOpQ5h1IFGC9jB522dm5lsY9KERzUgRQ6F7sm7W8GpsfJJ9sIitO3PShK zTnJoG3mWTf7vS+44E1d1Hhv6jW208rUd8wkHm+NxhgUjh/hFz8sMUbZsSzB1cnY ZjU49PAIdnoQo6qpVf5my9g+tdmuzPy7y2FpdbL4o5LcITi1BBDFgz0vCXX9hpOR -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:31 2025 by rpki-client