This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d13b2d76-a2f8-43ce-8976-3dc7df2b46ff.roa
File: d13b2d76-a2f8-43ce-8976-3dc7df2b46ff.roa (raw, json)
Hash identifier: giplIHmGy0sZSLLCoMYyTj+i2iYRyyJOK6kHLdN2hNg=
Subject key identifier: A0:76:42:DA:86:CB:69:CB:46:40:82:BA:32:FA:C4:6B:50:64:81:C0
Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial: 0EADC5E7E1451A0838CEE3765A579AF196F63FDA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d13b2d76-a2f8-43ce-8976-3dc7df2b46ff.roa
Signing time: Wed 03 Dec 2025 00:10:09 +0000
ROA not before: Wed 03 Dec 2025 00:10:09 +0000
ROA not after: Tue 03 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 126.190.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 00:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ad:c5:e7:e1:45:1a:08:38:ce:e3:76:5a:57:9a:f1:96:f6:3f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Validity
Not Before: Dec 3 00:10:09 2025 GMT
Not After : Mar 3 23:59:59 2026 GMT
Subject: serialNumber=a350f6bcea0ba72a13b346afa158a8143f07aeed3430743bbf44028c8acd8fda, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:52:0b:16:0c:c2:96:11:4e:8b:4a:98:3c:
88:16:b2:7f:ed:35:8a:6c:ee:88:85:34:41:ce:c9:
20:11:c9:d7:fb:ee:65:8c:8e:b1:d8:2d:34:8b:dd:
75:53:8b:6b:31:b4:3f:f3:d5:8e:0c:2c:3e:fa:48:
22:21:96:1d:ee:0e:d3:66:e5:7b:7e:d1:01:d3:8c:
b2:e6:d2:52:14:76:2e:1a:1a:64:b0:00:40:5a:4c:
cb:44:60:39:9e:e6:80:29:59:31:22:24:c4:e4:bf:
24:4f:a6:63:18:6f:c0:d8:ab:74:ee:81:c5:1f:41:
4e:c4:b8:cb:f6:d6:b7:89:e1:a1:1e:c0:4e:5c:c1:
6d:6b:04:6f:43:41:ce:40:2d:16:54:ae:10:8a:b7:
04:a6:26:81:62:dc:c8:a4:b0:23:2a:5e:ad:82:66:
be:0d:c5:c1:99:6b:22:b5:6a:7c:d0:df:d1:06:88:
d0:cb:09:60:7e:49:fb:c5:11:6b:7f:50:f8:1c:02:
60:14:a8:9d:7c:e9:a4:65:f0:ed:13:a7:48:38:08:
f3:b0:c9:21:ed:6a:04:2f:f9:a5:81:ae:1f:69:06:
fa:6b:c3:8f:3c:26:99:e0:4c:bf:37:4b:57:81:f7:
2a:2c:54:c0:0c:43:45:60:f0:40:f9:c6:b4:fc:de:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:76:42:DA:86:CB:69:CB:46:40:82:BA:32:FA:C4:6B:50:64:81:C0
X509v3 Authority Key Identifier:
keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d13b2d76-a2f8-43ce-8976-3dc7df2b46ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
126.190.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:01:31:be:7e:1b:78:5d:0d:5c:da:16:a1:f5:92:3e:01:fe:
62:87:23:6d:f3:f2:e6:04:2d:52:67:c1:08:bc:8d:bb:c6:0a:
4d:31:94:c9:43:50:e8:e8:16:54:c6:f6:4c:72:77:d7:05:88:
96:a5:4a:5f:ff:9b:2c:12:fe:fe:d8:b5:8d:a4:b9:e3:68:24:
94:7c:c2:50:46:a4:80:2a:05:53:d1:41:f9:bf:92:43:7c:4c:
02:e9:e7:de:52:51:ce:ba:dc:0d:a9:c3:bf:f3:aa:10:75:43:
41:aa:76:dc:2f:b0:76:c3:e9:11:b3:9f:42:dc:16:d8:42:60:
31:95:6f:76:3b:0d:69:9b:56:95:88:0b:f1:dc:2f:39:ab:5e:
a3:32:21:a7:4f:2f:12:dc:07:8f:4e:7b:c0:60:8b:12:28:d0:
39:51:72:66:9a:bc:7d:45:13:de:2b:ca:88:07:ba:31:3c:46:
fe:41:ab:f0:9d:e5:99:53:05:90:36:83:3d:aa:3b:96:5c:4f:
cc:07:9c:2f:da:a4:22:11:fd:e1:a5:11:4a:38:db:aa:2a:48:
7e:6c:52:af:08:8c:7a:13:44:b9:ca:56:75:c9:6f:c9:a5:b8:
0a:e4:75:4f:3b:dc:7f:07:e0:b4:a4:00:0d:8a:81:66:05:ce:
5c:54:55:03
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUDq3F5+FFGgg4zuN2Wlea8Zb2P9owDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMzAwMTAwOVoX
DTI2MDMwMzIzNTk1OVowejFJMEcGA1UEBRNAYTM1MGY2YmNlYTBiYTcyYTEzYjM0
NmFmYTE1OGE4MTQzZjA3YWVlZDM0MzA3NDNiYmY0NDAyOGM4YWNkOGZkYTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DZSCxYMwpYRTotKmDyIFrJ/7TWK
bO6IhTRBzskgEcnX++5ljI6x2C00i911U4trMbQ/89WODCw++kgiIZYd7g7TZuV7
ftEB04yy5tJSFHYuGhpksABAWkzLRGA5nuaAKVkxIiTE5L8kT6ZjGG/A2Kt07oHF
H0FOxLjL9ta3ieGhHsBOXMFtawRvQ0HOQC0WVK4QircEpiaBYtzIpLAjKl6tgma+
DcXBmWsitWp80N/RBojQywlgfkn7xRFrf1D4HAJgFKidfOmkZfDtE6dIOAjzsMkh
7WoEL/mlga4faQb6a8OPPCaZ4Ey/N0tXgfcqLFTADENFYPBA+ca0/N45zQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFKB2QtqGy2nLRkCCujL6xGtQZIHAMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2QxM2IyZDc2LWEyZjgtNDNjZS04OTc2LTNkYzdkZjJiNDZmZi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAfr4wDQYJKoZIhvcNAQELBQADggEBAHMBMb5+G3hdDVzaFqH1kj4B
/mKHI23z8uYELVJnwQi8jbvGCk0xlMlDUOjoFlTG9kxyd9cFiJalSl//mywS/v7Y
tY2kueNoJJR8wlBGpIAqBVPRQfm/kkN8TALp595SUc663A2pw7/zqhB1Q0Gqdtwv
sHbD6RGzn0LcFthCYDGVb3Y7DWmbVpWIC/HcLzmrXqMyIadPLxLcB49Oe8BgixIo
0DlRcmaavH1FE94ryogHujE8Rv5Bq/Cd5ZlTBZA2gz2qO5ZcT8wHnC/apCIR/eGl
EUo426oqSH5sUq8IjHoTRLnKVnXJb8mluArkdU873H8H4LSkAA2KgWYFzlxUVQM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:04:29 2025 by rpki-client