This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa File: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (raw, json) Hash identifier: Q0oMp8ZPk9UZcsIR9g6UcmJjZKdMd1/UNJTA2+LxKxw= Subject key identifier: D7:BB:01:0A:6E:59:7C:F5:0B:F1:64:38:1F:4D:F9:CF:C2:34:2F:BF Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 51409A4ED68BBB010B6E65F36BF5393FFF8EB75F Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa Signing time: Sat 06 Dec 2025 00:00:06 +0000 ROA not before: Sat 06 Dec 2025 00:00:06 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 122.248.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:40:9a:4e:d6:8b:bb:01:0b:6e:65:f3:6b:f5:39:3f:ff:8e:b7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Dec 6 00:00:06 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=7987242d80e7d47d7c4e2108803f6b38a1520bec39333bc5fa00577e676f0ef0, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:b9:af:61:c6:0e:7e:15:52:e7:ca:8a:02: aa:91:fa:74:d6:6d:63:d9:81:ab:a5:04:3d:b8:57: 5f:df:a1:23:3f:a0:b6:62:c3:bd:4e:f9:fb:a8:24: 17:7b:c6:60:01:77:16:31:fb:0e:47:59:ee:9d:c3: d5:c3:ae:f4:d4:db:2f:c4:9b:2e:67:df:dc:fd:09: 0f:08:24:87:7e:d6:9b:12:3a:d1:3a:e7:5a:1d:cf: 92:7d:13:22:e7:5c:2b:07:74:a5:b2:bc:04:a6:22: 30:02:a6:f8:74:9f:7c:4a:28:d5:50:48:06:5d:f2: 50:d1:cf:ef:c6:46:c4:b5:ce:84:e9:16:8e:39:eb: c1:f9:22:ae:97:58:1d:cf:69:fe:dd:53:c1:84:51: 90:92:fa:e3:c0:c8:5c:59:29:6b:90:5f:b1:c3:ee: 06:e0:a9:a5:9f:1e:5b:ae:90:60:a2:db:83:ff:85: 1e:42:52:3d:d8:63:f8:d6:69:ba:0d:7c:1e:da:a0: 22:4c:49:81:64:8b:8e:a4:28:42:2f:8a:33:81:b9: a5:67:d3:63:36:d1:54:8d:9b:84:3a:16:71:66:c8: 8d:a5:18:e0:aa:73:6f:5b:71:3b:b8:a4:ef:a8:bc: 0a:ed:8c:7b:24:e9:f4:26:70:8c:23:e4:ae:fc:a5: 28:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BB:01:0A:6E:59:7C:F5:0B:F1:64:38:1F:4D:F9:CF:C2:34:2F:BF X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.192.0/19 Signature Algorithm: sha256WithRSAEncryption 4c:de:46:73:ac:d6:c0:01:4c:e2:e4:e5:13:06:16:99:a4:e5: f8:bf:b7:97:70:0e:58:61:df:c0:f1:e9:bd:65:39:03:68:a0: ca:ae:df:10:61:72:de:ac:bc:f0:1f:38:67:f2:e6:ae:8d:57: 06:ed:8d:3e:f7:8a:fb:90:5a:db:c2:65:63:27:93:a6:af:82: 62:3f:f5:a1:de:4c:83:af:83:5e:00:d9:f9:f7:64:c1:bd:41: e5:1c:c1:cf:1a:96:8c:74:7d:8c:4c:67:cc:48:18:1d:a9:f6: 02:24:1e:d6:1c:c3:df:98:8d:4e:27:9e:c2:1a:15:55:75:45: 68:f4:e4:de:74:4b:16:bd:65:e2:a3:4d:6c:0d:67:86:dd:09: 35:44:38:a4:22:03:2a:1d:fb:fb:cd:e4:e3:de:79:fc:1f:af: ec:33:de:c8:87:71:72:9a:c8:ff:6e:a1:b6:4f:5a:19:3b:89: 46:8d:eb:98:30:4f:3d:6d:a6:64:69:fa:07:87:53:b4:3c:66: 68:04:f4:d3:89:69:4e:b8:25:de:25:14:e5:0f:88:7a:04:5c: 1f:7d:bc:1a:2d:94:af:95:94:cd:0b:b2:4f:49:66:97:a1:a5: 01:dd:ff:14:c2:43:cd:fd:b5:ff:95:6a:31:e3:f5:fa:6c:ad: 77:a5:2d:97 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUUUCaTtaLuwELbmXza/U5P/+Ot18wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTIwNjAwMDAwNloX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNANzk4NzI0MmQ4MGU3ZDQ3ZDdjNGUy MTA4ODAzZjZiMzhhMTUyMGJlYzM5MzMzYmM1ZmEwMDU3N2U2NzZmMGVmMDEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrW5r2HGDn4VUufKigKqkfp01m1j 2YGrpQQ9uFdf36EjP6C2YsO9Tvn7qCQXe8ZgAXcWMfsOR1nuncPVw6701NsvxJsu Z9/c/QkPCCSHftabEjrROudaHc+SfRMi51wrB3SlsrwEpiIwAqb4dJ98SijVUEgG XfJQ0c/vxkbEtc6E6RaOOevB+SKul1gdz2n+3VPBhFGQkvrjwMhcWSlrkF+xw+4G 4Kmlnx5brpBgotuD/4UeQlI92GP41mm6DXwe2qAiTEmBZIuOpChCL4ozgbmlZ9Nj NtFUjZuEOhZxZsiNpRjgqnNvW3E7uKTvqLwK7Yx7JOn0JnCMI+Su/KUo+QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFNe7AQpuWXz1C/FkOB9N+c/CNC+/MB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzI0NWZhNGViLTZkMGQtNGRmNy05ZTJkLTI5YTdkMzlhZGNiOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFevjAMA0GCSqGSIb3DQEBCwUAA4IBAQBM3kZzrNbAAUzi5OUTBhaZ pOX4v7eXcA5YYd/A8em9ZTkDaKDKrt8QYXLerLzwHzhn8uaujVcG7Y0+94r7kFrb wmVjJ5Omr4JiP/Wh3kyDr4NeANn592TBvUHlHMHPGpaMdH2MTGfMSBgdqfYCJB7W HMPfmI1OJ57CGhVVdUVo9OTedEsWvWXio01sDWeG3Qk1RDikIgMqHfv7zeTj3nn8 H6/sM97Ih3Fymsj/bqG2T1oZO4lGjeuYME89baZkafoHh1O0PGZoBPTTiWlOuCXe JRTlD4h6BFwffbwaLZSvlZTNC7JPSWaXoaUB3f8UwkPN/bX/lWox4/X6bK13pS2X -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:03 2025 by rpki-client