This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa File: f9d49fe9-a284-47e5-8002-41310ce8752e.roa (raw, json) Hash identifier: l6Ievi3KMrX0SXi721ybmVn5cc8iYQ/a3juwcl6ZgLk= Subject key identifier: 7E:E6:3B:69:AF:ED:07:79:B9:10:78:62:20:A5:08:B9:B0:4B:FC:17 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 543382860857BC3D60C4E4AA67D8F6B4E5380A4E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa Signing time: Sun 30 Nov 2025 00:00:09 +0000 ROA not before: Sun 30 Nov 2025 00:00:09 +0000 ROA not after: Sat 28 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:33:82:86:08:57:bc:3d:60:c4:e4:aa:67:d8:f6:b4:e5:38:0a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 30 00:00:09 2025 GMT Not After : Feb 28 23:59:59 2026 GMT Subject: serialNumber=92d5c2f6b318ae7bc9454391d782551b6bffdfc9fb0c8fa6a387aef4b43af315, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:f9:2a:40:81:92:ae:a9:9c:cb:ef:02:3d: 87:51:ac:ad:07:44:ac:ce:d8:a7:85:8c:03:6e:ef: 56:98:6a:f3:54:49:92:95:c9:c9:c8:9d:64:40:8f: 4a:1d:a2:eb:cf:5c:1e:ae:f3:1f:a1:3c:9b:a1:a7: b5:d5:74:1b:4a:24:ab:7a:31:00:8e:b5:1b:76:e0: d5:44:c7:18:b6:ad:f1:5d:67:79:c0:bc:b7:ce:f6: 1a:f1:8c:4c:d2:cc:02:a2:18:8e:36:bd:ea:e8:5e: 50:f2:55:8a:9d:5e:9b:9c:41:c1:42:3f:81:1c:45: 98:7e:c7:60:da:ae:bb:36:28:1a:47:12:20:af:93: d4:2d:c7:e9:73:ae:00:e9:6a:98:ab:86:5d:21:5b: 63:24:ca:bb:35:8b:f3:89:f2:a5:77:94:b1:c9:9e: 0f:9b:33:7d:57:cd:6c:b7:68:1b:d7:81:2b:7f:75: 20:fe:b2:cd:ab:16:2c:27:fc:1e:0b:b7:3e:28:c0: d9:89:ca:e9:56:a6:7d:dd:39:cd:5b:39:83:d9:77: 7d:d6:a5:fe:b1:6a:c3:95:ac:99:89:28:2a:0b:37: 77:72:b9:1b:de:a6:ce:5f:9c:cb:26:38:c8:d6:43: 19:94:11:9b:73:d8:27:d1:d3:cf:8e:8f:bf:85:64: 85:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E6:3B:69:AF:ED:07:79:B9:10:78:62:20:A5:08:B9:B0:4B:FC:17 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:1040::/48 Signature Algorithm: sha256WithRSAEncryption 2c:f9:2e:5e:cc:fc:a5:56:e7:e8:5c:4f:ac:40:69:6a:62:d7: 25:a7:b7:e5:41:08:1a:4c:56:dc:ac:63:c1:67:0b:21:ac:6a: d0:10:92:05:89:19:20:0c:0a:02:11:c8:ee:d7:d0:06:9a:db: 1c:53:12:4f:06:f9:fe:7a:99:32:ad:9e:78:05:95:bf:3e:f1: 53:c6:06:10:98:3d:b3:22:09:68:d6:6a:1c:54:3c:f1:42:9d: 32:60:3c:15:e6:15:31:67:7f:e8:a1:5c:31:e1:f8:da:12:94: 17:87:6f:89:66:9c:f2:90:52:d7:71:78:e5:98:d3:7a:15:08: 29:f2:50:5e:91:e2:10:41:f1:59:ff:ef:69:47:d2:30:20:ef: 3d:11:6a:67:e1:ad:fa:30:a6:5c:6f:9a:6a:d3:ea:a5:ef:73: 61:83:23:66:6e:59:95:57:6e:89:ab:03:e0:35:22:fa:09:b0: 41:b3:39:94:3c:5d:71:63:31:a8:23:24:40:27:f0:ab:8c:67: fe:62:be:88:55:39:74:5b:9e:97:b0:4f:e6:6c:cd:f9:b0:68: c1:0d:85:b1:76:b1:2e:dd:5c:fa:b5:03:cc:72:4c:c2:33:35: af:df:0a:8e:ea:18:13:f1:95:73:b4:89:26:77:24:36:69:c2: 17:84:52:f3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUVDOChghXvD1gxOSqZ9j2tOU4Ck4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEzMDAwMDAwOVoX DTI2MDIyODIzNTk1OVowejFJMEcGA1UEBRNAOTJkNWMyZjZiMzE4YWU3YmM5NDU0 MzkxZDc4MjU1MWI2YmZmZGZjOWZiMGM4ZmE2YTM4N2FlZjRiNDNhZjMxNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfz5KkCBkq6pnMvvAj2HUaytB0Ss ztinhYwDbu9WmGrzVEmSlcnJyJ1kQI9KHaLrz1wervMfoTyboae11XQbSiSrejEA jrUbduDVRMcYtq3xXWd5wLy3zvYa8YxM0swCohiONr3q6F5Q8lWKnV6bnEHBQj+B HEWYfsdg2q67NigaRxIgr5PULcfpc64A6WqYq4ZdIVtjJMq7NYvzifKld5SxyZ4P mzN9V81st2gb14Erf3Ug/rLNqxYsJ/weC7c+KMDZicrpVqZ93TnNWzmD2Xd91qX+ sWrDlayZiSgqCzd3crkb3qbOX5zLJjjI1kMZlBGbc9gn0dPPjo+/hWSFHQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH7mO2mv7Qd5uRB4YiClCLmwS/wXMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y5ZDQ5ZmU5LWEyODQtNDdlNS04MDAyLTQxMzEwY2U4NzUyZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaABBAMA0GCSqGSIb3DQEBCwUAA4IBAQAs+S5ezPylVufoXE+s QGlqYtclp7flQQgaTFbcrGPBZwshrGrQEJIFiRkgDAoCEcju19AGmtscUxJPBvn+ epkyrZ54BZW/PvFTxgYQmD2zIglo1mocVDzxQp0yYDwV5hUxZ3/ooVwx4fjaEpQX h2+JZpzykFLXcXjlmNN6FQgp8lBekeIQQfFZ/+9pR9IwIO89EWpn4a36MKZcb5pq 0+ql73NhgyNmblmVV26JqwPgNSL6CbBBszmUPF1xYzGoIyRAJ/CrjGf+Yr6IVTl0 W56XsE/mbM35sGjBDYWxdrEu3Vz6tQPMckzCMzWv3wqO6hgT8ZVztIkmdyQ2acIX hFLz -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:10 2025 by rpki-client