This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa File: 9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa (raw, json) Hash identifier: HRWGsMMdLdz9N5SChevmLY+/DhESwWhUlfLoJLOdG2Q= Subject key identifier: 97:03:32:2B:B0:AE:05:B7:98:A5:D3:9D:81:08:D9:0E:16:D2:3B:71 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 725E2E927302DE935EEBA62DC3603BF0BF6D6925 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa Signing time: Tue 02 Dec 2025 00:01:28 +0000 ROA not before: Tue 02 Dec 2025 00:01:28 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 103.246.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:5e:2e:92:73:02:de:93:5e:eb:a6:2d:c3:60:3b:f0:bf:6d:69:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:01:28 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=2187a04cd262460326c3c86d9ba45c013be4a536787927081ce745f02eb0f264, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b0:3b:46:95:b4:ae:d0:9f:37:fd:05:00:8c: 08:9e:0d:c6:dd:29:b0:56:af:94:c8:6c:2f:b8:1a: c9:12:2b:3d:cc:81:5d:d9:29:0d:b8:53:6b:ce:a2: 36:5d:2a:ef:9d:00:bc:ed:08:eb:43:74:64:e2:4d: 0b:c1:af:7c:87:8d:12:ba:af:93:6f:ce:ba:1d:d3: 6c:dd:3a:1e:46:5f:95:37:fb:e4:4b:53:5b:42:a3: 6a:cd:0a:62:8b:ce:f2:76:f8:30:80:3d:20:b7:8f: cb:81:9c:cf:17:0d:3a:6a:61:7a:c1:52:89:66:3a: 8f:84:0f:e1:22:ba:a0:49:09:89:d1:7c:bb:35:9d: 64:41:04:a6:ee:8c:f4:f4:29:ea:6c:8d:6a:88:51: aa:70:29:1e:5c:98:2f:9e:5e:a7:aa:8b:25:f8:93: aa:52:f4:14:cc:a0:d3:a5:88:94:01:b4:1b:09:b9: eb:28:29:c5:2a:77:aa:0f:42:e6:28:3b:51:a4:7e: a2:61:ea:51:cf:5a:ad:54:a0:8e:c1:0c:b4:57:28: f2:a0:a1:af:4c:c9:d0:3e:90:e5:4c:3e:85:fb:1f: e1:2d:54:e8:ba:72:53:91:67:37:c7:35:a5:30:85: f5:87:af:47:3f:43:fd:08:5b:ea:07:e9:dc:a3:77: 2a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:03:32:2B:B0:AE:05:B7:98:A5:D3:9D:81:08:D9:0E:16:D2:3B:71 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9e22e8ea-542f-4e00-9946-45b52a3a47c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.246.148.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:6e:0f:9e:6a:c8:b1:b2:22:8c:79:08:8e:57:49:91:e9:4d: c0:4d:69:af:6e:db:ac:c5:f5:ae:a8:e8:25:05:b5:01:32:1b: 4c:bd:fd:92:ff:cb:e3:b3:54:11:e8:84:83:b9:9c:ef:35:0a: c9:8a:b6:fd:bc:33:0b:e1:7d:78:b4:e4:61:67:5b:13:fa:6f: cb:f1:f6:bb:62:b7:a2:25:42:00:73:38:4c:c6:d9:a2:a7:81: 2e:16:77:1f:4b:03:4b:a8:79:d5:14:45:6d:91:8b:5e:c0:9c: f8:89:82:a7:4b:6c:f9:9b:3d:45:0a:e8:07:6e:a0:7e:e5:12: 59:e7:a7:6f:7d:24:ad:5f:b3:5c:7e:77:f8:f9:98:97:42:c0: 6d:a6:45:ee:61:36:d1:5e:b0:9a:b1:a6:bd:d4:24:c3:42:95: d5:96:d2:af:99:a9:f0:3c:19:74:c5:c7:92:1f:88:7b:7c:e4: 15:ae:89:0c:53:b0:1d:e1:7a:e9:c3:f5:7a:62:e0:6d:23:69: b1:0a:09:df:e6:c4:6e:01:dd:2b:ce:5b:c7:af:5c:f2:56:a8: 72:88:61:42:2a:49:7e:4a:09:c1:ed:41:46:25:50:36:ad:8b: 47:99:12:c5:3b:41:3a:95:16:51:0c:d4:23:0d:ab:6a:02:0e: 45:65:d4:72 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUcl4uknMC3pNe66Ytw2A78L9taSUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMDEyOFoX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNAMjE4N2EwNGNkMjYyNDYwMzI2YzNj ODZkOWJhNDVjMDEzYmU0YTUzNjc4NzkyNzA4MWNlNzQ1ZjAyZWIwZjI2NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77A7RpW0rtCfN/0FAIwIng3G3Smw Vq+UyGwvuBrJEis9zIFd2SkNuFNrzqI2XSrvnQC87QjrQ3Rk4k0Lwa98h40Suq+T b866HdNs3ToeRl+VN/vkS1NbQqNqzQpii87ydvgwgD0gt4/LgZzPFw06amF6wVKJ ZjqPhA/hIrqgSQmJ0Xy7NZ1kQQSm7oz09CnqbI1qiFGqcCkeXJgvnl6nqosl+JOq UvQUzKDTpYiUAbQbCbnrKCnFKneqD0LmKDtRpH6iYepRz1qtVKCOwQy0VyjyoKGv TMnQPpDlTD6F+x/hLVTounJTkWc3xzWlMIX1h69HP0P9CFvqB+nco3cqewIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJcDMiuwrgW3mKXTnYEI2Q4W0jtxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzllMjJlOGVhLTU0MmYtNGUwMC05OTQ2LTQ1YjUyYTNhNDdjNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/aUMA0GCSqGSIb3DQEBCwUAA4IBAQAvbg+easixsiKMeQiOV0mR 6U3ATWmvbtusxfWuqOglBbUBMhtMvf2S/8vjs1QR6ISDuZzvNQrJirb9vDML4X14 tORhZ1sT+m/L8fa7YreiJUIAczhMxtmip4EuFncfSwNLqHnVFEVtkYtewJz4iYKn S2z5mz1FCugHbqB+5RJZ56dvfSStX7Ncfnf4+ZiXQsBtpkXuYTbRXrCasaa91CTD QpXVltKvmanwPBl0xceSH4h7fOQVrokMU7Ad4Xrpw/V6YuBtI2mxCgnf5sRuAd0r zlvHr1zyVqhyiGFCKkl+SgnB7UFGJVA2rYtHmRLFO0E6lRZRDNQjDatqAg5FZdRy -----END CERTIFICATE-----Generated at Sat Dec 6 10:58:54 2025 by rpki-client