This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d37466f9-113c-4e27-8583-6fd9673994b8.roa File: d37466f9-113c-4e27-8583-6fd9673994b8.roa (raw, json) Hash identifier: Iau9cQ/RfAR1QbtrMmW17nWCkWyNjblndX58vWRhn8Q= Subject key identifier: 90:04:09:1D:99:4C:1A:05:F3:12:91:3F:8E:E9:B7:42:50:4C:BE:91 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 366121AD6BEACEC01905CF11A01FB936FB6B8C51 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d37466f9-113c-4e27-8583-6fd9673994b8.roa Signing time: Tue 02 Dec 2025 00:10:47 +0000 ROA not before: Tue 02 Dec 2025 00:10:47 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:61:21:ad:6b:ea:ce:c0:19:05:cf:11:a0:1f:b9:36:fb:6b:8c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 2 00:10:47 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=4e7885d571dd9fcc6f604f888be131a4a0c417a32ae98f5b90b789df5bdf9de1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:73:dc:a4:3d:36:15:69:46:0f:77:75:4d: 92:c0:0d:3a:50:b8:9d:0b:c9:fd:aa:e4:d1:08:87: e2:0a:f6:62:91:f0:e9:fd:35:ae:63:cb:ac:f5:2e: ed:d3:cb:63:2c:3d:f3:c4:4e:a4:cd:d7:d1:87:ba: ad:98:3d:de:a0:de:f6:a6:04:61:fd:34:8e:be:78: 58:7f:67:37:3a:92:7b:fc:7a:54:62:2f:fb:29:07: 20:ca:75:d2:70:ca:eb:25:43:7a:0c:99:12:5b:8f: 23:2f:27:df:ef:f6:48:92:13:22:1f:a5:f6:ff:0e: 23:31:e3:79:94:73:70:a0:eb:fa:93:1a:47:52:41: ff:ef:cf:79:1e:48:91:d2:c5:4c:36:ab:f2:dc:32: 4e:88:bf:71:1a:79:02:c6:7d:25:74:c0:fa:bc:d0: b3:dd:7a:3f:dc:30:cb:70:dc:d2:a1:55:17:9b:23: 6b:62:63:da:01:19:5d:00:62:78:33:b5:68:7f:ab: 22:0e:86:66:a9:1e:07:15:4c:1c:77:c1:fc:4b:b7: 7e:36:de:06:51:55:45:32:eb:18:78:92:8c:e4:92: cf:47:a2:09:6f:8f:6f:f9:b9:a3:8a:b9:e1:28:f6: 42:ef:01:03:eb:db:04:ee:9d:20:00:3c:b5:82:a5: 74:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:04:09:1D:99:4C:1A:05:F3:12:91:3F:8E:E9:B7:42:50:4C:BE:91 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d37466f9-113c-4e27-8583-6fd9673994b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c080::/48 Signature Algorithm: sha256WithRSAEncryption c0:b8:9a:5c:02:75:55:56:79:9d:b3:27:04:ac:f2:92:e2:28: 2c:43:0b:0c:d2:3f:ef:e8:b1:fb:f7:4b:ab:48:8b:e0:3d:a3: 28:e3:f7:cf:0d:7a:20:0b:c9:64:e2:55:05:de:52:73:d4:f4: 6a:8d:33:62:ab:42:48:fa:14:e1:33:a5:ec:d1:82:ff:05:4c: f3:54:f2:be:19:ba:ae:c5:3f:a2:8f:6f:61:64:7c:26:a3:05: 80:e1:65:1b:18:3f:f8:8a:66:e2:ba:3f:31:d0:7e:9f:cc:33: cc:ad:a9:32:4f:be:28:9d:de:6b:35:cd:98:79:88:2b:ef:9e: cd:94:40:a0:34:09:fc:8a:fe:6f:33:4b:3d:ee:22:41:8f:bc: ca:17:1c:f4:79:c3:52:97:15:45:00:ae:d7:e0:3e:ff:8a:36: aa:35:52:07:17:3b:7e:a2:08:80:04:27:39:d0:ed:50:9f:bc: cb:22:55:4b:13:62:da:3d:07:81:09:d5:20:df:0f:43:31:c5: 1f:50:bc:94:a2:08:55:c7:84:3c:73:83:08:34:47:d9:d6:24: 0c:bc:4a:2a:85:89:ca:43:8a:5f:9f:97:c4:b7:04:6b:d2:eb: e0:11:21:56:33:c0:7a:80:39:28:cc:e3:47:5c:1a:8b:25:58: b2:d7:f1:c1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNmEhrWvqzsAZBc8RoB+5NvtrjFEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwMjAwMTA0N1oX DTI2MDMwMjIzNTk1OVowejFJMEcGA1UEBRNANGU3ODg1ZDU3MWRkOWZjYzZmNjA0 Zjg4OGJlMTMxYTRhMGM0MTdhMzJhZTk4ZjViOTBiNzg5ZGY1YmRmOWRlMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03tz3KQ9NhVpRg93dU2SwA06ULid C8n9quTRCIfiCvZikfDp/TWuY8us9S7t08tjLD3zxE6kzdfRh7qtmD3eoN72pgRh /TSOvnhYf2c3OpJ7/HpUYi/7KQcgynXScMrrJUN6DJkSW48jLyff7/ZIkhMiH6X2 /w4jMeN5lHNwoOv6kxpHUkH/7895HkiR0sVMNqvy3DJOiL9xGnkCxn0ldMD6vNCz 3Xo/3DDLcNzSoVUXmyNrYmPaARldAGJ4M7Vof6siDoZmqR4HFUwcd8H8S7d+Nt4G UVVFMusYeJKM5JLPR6IJb49v+bmjirnhKPZC7wED69sE7p0gADy1gqV0bwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJAECR2ZTBoF8xKRP47pt0JQTL6RMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzNzQ2NmY5LTExM2MtNGUyNy04NTgzLTZmZDk2NzM5OTRiOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMCAMA0GCSqGSIb3DQEBCwUAA4IBAQDAuJpcAnVVVnmdsycE rPKS4igsQwsM0j/v6LH790urSIvgPaMo4/fPDXogC8lk4lUF3lJz1PRqjTNiq0JI +hThM6Xs0YL/BUzzVPK+GbquxT+ij29hZHwmowWA4WUbGD/4imbiuj8x0H6fzDPM rakyT74ond5rNc2YeYgr757NlECgNAn8iv5vM0s97iJBj7zKFxz0ecNSlxVFAK7X 4D7/ijaqNVIHFzt+ogiABCc50O1Qn7zLIlVLE2LaPQeBCdUg3w9DMcUfULyUoghV x4Q8c4MINEfZ1iQMvEoqhYnKQ4pfn5fEtwRr0uvgESFWM8B6gDkozONHXBqLJViy 1/HB -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:15 2025 by rpki-client