This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa File: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (raw, json) Hash identifier: w+4+bxo/lRwC2hOG9Edn/+79C2GPpMAPhWdMbwG/9JU= Subject key identifier: B2:C9:9E:2F:CD:32:50:40:D8:AD:E6:B3:76:6B:79:F2:E3:36:CD:1F Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 262C992A08E67B9D08709410FEE93588038D831F Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa Signing time: Wed 12 Nov 2025 00:00:07 +0000 ROA not before: Wed 12 Nov 2025 00:00:07 +0000 ROA not after: Wed 17 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2403:b300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:2c:99:2a:08:e6:7b:9d:08:70:94:10:fe:e9:35:88:03:8d:83:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Nov 12 00:00:07 2025 GMT Not After : Dec 17 23:59:59 2025 GMT Subject: serialNumber=a1aa73b2af5d20d78b042957ceb324f7ed13f5a8f708bb3e1159fd3cf93da83e, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:62:2b:67:da:c0:b2:84:f5:86:00:e4:74:ab: 88:62:52:00:e2:38:46:9a:44:31:93:0e:51:e6:89: b2:6a:4f:5b:2a:97:b4:8c:c8:da:5c:d2:dc:cb:be: e4:99:4c:37:d4:cf:c9:9d:20:cf:b8:ca:12:69:7f: 85:fd:81:9f:c7:e1:60:fe:3f:57:f7:38:52:25:b3: c7:d5:5f:72:5b:f6:50:35:8d:74:0f:fe:6e:54:68: f1:f5:f4:af:c8:26:ef:d0:3f:8f:57:0b:6d:9e:5d: e4:20:b1:b5:98:69:8b:1b:c2:43:77:2c:dc:47:8f: 76:fe:d2:4c:b2:de:f3:8b:4f:ff:bc:cd:72:40:86: 70:04:f3:1b:0a:9c:36:b7:8b:8e:cf:73:15:20:6a: c3:f1:c6:9f:95:a9:96:83:42:09:7d:92:fa:ce:47: 48:4a:3e:a9:7a:34:bc:20:21:36:11:0c:8b:70:23: 5c:a1:cb:a8:29:0e:ec:39:ef:57:81:d9:97:1a:90: b6:b0:ab:84:dc:97:7a:fa:2d:60:d8:7b:fe:1d:41: a0:65:85:56:20:a1:b4:81:8a:b4:04:4f:5d:22:90: ad:99:8c:9f:c0:a8:8b:85:ce:89:dd:85:90:ba:e9: ca:37:64:64:25:ad:db:2d:67:97:71:76:72:cd:1a: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C9:9E:2F:CD:32:50:40:D8:AD:E6:B3:76:6B:79:F2:E3:36:CD:1F X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b300::/48 Signature Algorithm: sha256WithRSAEncryption 5f:c7:9c:5c:06:76:be:dc:02:35:70:8f:6d:21:06:cc:22:70: 47:4c:4f:e2:ba:35:58:6c:99:22:c7:d1:5d:d3:66:1d:e5:3b: f9:ca:e3:5c:94:47:4d:80:90:06:9c:2a:7c:f3:e8:43:b3:5f: f1:26:40:36:83:79:d3:1e:6b:f4:c4:f5:77:24:d7:37:07:c9: 9c:6b:1c:67:6b:2d:e3:51:46:10:fc:70:96:be:09:8f:5a:0c: 81:a2:05:e6:67:dd:c3:24:2d:67:62:65:5b:8e:bc:3c:71:b9: d1:99:b5:93:ed:5f:9a:51:c3:9d:78:39:0f:92:c9:e0:c0:e4: c3:62:fd:96:88:50:5e:be:f1:c1:28:86:ce:02:fd:8f:eb:d8: 40:f7:72:e3:82:73:27:c4:a1:5d:76:22:b1:65:53:16:9a:1d: 0d:96:25:0f:15:89:90:39:10:ec:8d:5d:14:96:cb:b1:8f:56: 26:77:ef:b4:22:5d:f3:ca:95:91:49:37:e2:0b:56:2c:e0:7f: e4:dc:07:a4:34:7f:1f:02:96:56:0b:82:d4:3b:5d:dc:4e:a2: 65:8d:ef:da:12:61:5a:59:b7:45:48:84:7c:88:c5:3c:de:51: 14:d7:87:1a:32:a5:8d:83:80:fd:a9:d5:5a:07:85:f2:83:2c: 95:ef:75:8d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJiyZKgjme50IcJQQ/uk1iAONgx8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI1MTExMjAwMDAwN1oX DTI1MTIxNzIzNTk1OVowejFJMEcGA1UEBRNAYTFhYTczYjJhZjVkMjBkNzhiMDQy OTU3Y2ViMzI0ZjdlZDEzZjVhOGY3MDhiYjNlMTE1OWZkM2NmOTNkYTgzZTEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmIrZ9rAsoT1hgDkdKuIYlIA4jhG mkQxkw5R5omyak9bKpe0jMjaXNLcy77kmUw31M/JnSDPuMoSaX+F/YGfx+Fg/j9X 9zhSJbPH1V9yW/ZQNY10D/5uVGjx9fSvyCbv0D+PVwttnl3kILG1mGmLG8JDdyzc R492/tJMst7zi0//vM1yQIZwBPMbCpw2t4uOz3MVIGrD8caflamWg0IJfZL6zkdI Sj6pejS8ICE2EQyLcCNcocuoKQ7sOe9XgdmXGpC2sKuE3Jd6+i1g2Hv+HUGgZYVW IKG0gYq0BE9dIpCtmYyfwKiLhc6J3YWQuunKN2RkJa3bLWeXcXZyzRp0wQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLLJni/NMlBA2K3ms3ZrefLjNs0fMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvNzA4YWFmYWYtMDBiNC00ODViLTg1NGMtMGIzMmNhMzBmNTdi LzM4MWZjNmU2LTVkNDktNDFiYy1iNTg0LWQ5NDM3YzY4ZTNjZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMy Y2EzMGY1N2IvMTJlNTkwMDEtMzVhYy00YWJmLTg1OGYtMzdiOTU1YTI0YjNmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAOzAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBfx5xcBna+3AI1cI9t IQbMInBHTE/iujVYbJkix9Fd02Yd5Tv5yuNclEdNgJAGnCp88+hDs1/xJkA2g3nT Hmv0xPV3JNc3B8mcaxxnay3jUUYQ/HCWvgmPWgyBogXmZ93DJC1nYmVbjrw8cbnR mbWT7V+aUcOdeDkPksngwOTDYv2WiFBevvHBKIbOAv2P69hA93LjgnMnxKFddiKx ZVMWmh0NliUPFYmQORDsjV0Ulsuxj1Ymd++0Il3zypWRSTfiC1Ys4H/k3AekNH8f ApZWC4LUO13cTqJlje/aEmFaWbdFSIR8iMU83lEU14caMqWNg4D9qdVaB4XygyyV 73WN -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:51 2025 by rpki-client