This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3684e50c-c50f-4ebb-b327-e0759241197e.roa File: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (raw, json) Hash identifier: 2kSCvroZg2jUdhJrRXEd6bpE68S4hIOVSrqhsjKg4Rk= Subject key identifier: 97:45:2E:38:AE:B7:83:89:60:35:CE:5D:E3:E4:72:AD:75:7C:07:3E Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 66FE8FFA54D711920A1881F98A3AA44E54C930F0 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3684e50c-c50f-4ebb-b327-e0759241197e.roa Signing time: Sun 07 Dec 2025 00:00:32 +0000 ROA not before: Sun 07 Dec 2025 00:00:32 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2400:6500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:fe:8f:fa:54:d7:11:92:0a:18:81:f9:8a:3a:a4:4e:54:c9:30:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Dec 7 00:00:32 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=6c01fe9d9cba654b4161a8b33e616a9b43e905632a5ece75def0bc06e3eea370, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:f6:ff:2a:0d:eb:81:d3:8d:13:1e:e6:42: 68:26:a1:8c:95:f0:8c:b6:67:90:7e:09:8f:15:b5: e3:ea:d0:6d:6f:ff:c8:29:b8:f9:41:b3:22:5a:da: 2f:40:d0:dc:10:60:09:ff:43:e8:ee:c0:75:81:2d: 73:42:d2:2e:57:a9:2d:8b:ea:05:d3:b9:ad:c9:46: 8c:fa:80:8d:26:ce:16:66:05:e0:20:3f:e2:0a:ce: aa:89:b8:51:e7:53:9a:2d:27:24:b9:7b:2b:21:6a: 4a:e1:c8:a5:b7:b0:36:e0:08:9b:75:66:ff:0f:92: 79:11:ab:fa:44:92:c1:78:26:36:07:57:36:36:76: bc:07:95:65:48:66:af:29:07:0d:9a:20:39:35:e6: c3:24:9a:83:83:2a:7c:4c:9b:55:bd:66:5b:83:3a: e6:da:3e:94:47:3e:78:e7:c1:76:da:31:4e:4b:88: 7a:19:13:ef:df:b2:14:4b:33:26:6b:5c:06:16:af: a9:d4:56:9a:e1:de:22:31:26:5c:78:04:97:d2:0a: fb:09:76:0b:ae:58:1e:c6:f4:11:69:56:9f:e3:e2: 9c:a2:8f:b0:bd:6b:5f:47:a0:04:c2:04:8d:19:c6: bb:63:9e:dc:58:8d:47:a4:43:97:73:bb:48:28:4f: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:45:2E:38:AE:B7:83:89:60:35:CE:5D:E3:E4:72:AD:75:7C:07:3E X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/3684e50c-c50f-4ebb-b327-e0759241197e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:6500::/48 Signature Algorithm: sha256WithRSAEncryption ae:07:3b:1e:5d:ce:bc:6f:cc:64:3a:1f:3c:3a:53:7b:33:43: e8:55:6a:43:cc:6e:6d:d9:56:91:e3:cc:1a:b3:34:89:c3:fe: 54:10:07:4c:03:6e:57:aa:e4:ac:29:4f:6c:58:3f:5a:82:fd: 62:e4:e6:f9:94:21:26:14:60:f9:53:00:84:0d:fd:b1:2f:cd: 15:5b:19:b4:d9:ae:86:6f:28:bd:fc:e5:a7:a5:85:e3:1c:6a: 36:d5:9e:35:7a:9b:1f:72:16:2b:3a:8b:9f:dc:60:5a:27:2e: cf:a1:56:1e:c6:eb:87:8d:d9:33:2b:37:22:c7:cd:28:38:76: f8:b9:65:2d:cb:e5:f4:33:66:8e:d5:8d:93:74:15:9d:3b:c2: b1:12:ba:1e:42:50:ab:f1:53:e6:1c:ae:de:d1:b3:aa:fc:81: 40:64:a6:15:d8:88:60:c8:21:62:ad:3e:3d:dc:b4:e0:dc:83: 47:7e:51:db:b8:a5:0b:1f:ba:17:8e:1a:51:72:9e:21:3e:6d: 00:be:d4:b0:87:a4:e9:53:cf:cd:a0:cd:c8:0b:b7:e5:12:2c: 1c:4d:3b:15:cc:b1:90:ab:64:6d:88:77:91:93:02:98:a8:f4: 6a:34:2b:2e:72:21:7b:ca:b8:73:00:27:4c:92:23:0f:10:ee: e6:c2:2c:19 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZv6P+lTXEZIKGIH5ijqkTlTJMPAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTIwNzAwMDAzMloX DTI2MDMwNzIzNTk1OVowejFJMEcGA1UEBRNANmMwMWZlOWQ5Y2JhNjU0YjQxNjFh OGIzM2U2MTZhOWI0M2U5MDU2MzJhNWVjZTc1ZGVmMGJjMDZlM2VlYTM3MDEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9z2/yoN64HTjRMe5kJoJqGMlfCM tmeQfgmPFbXj6tBtb//IKbj5QbMiWtovQNDcEGAJ/0Po7sB1gS1zQtIuV6kti+oF 07mtyUaM+oCNJs4WZgXgID/iCs6qibhR51OaLSckuXsrIWpK4cilt7A24AibdWb/ D5J5Eav6RJLBeCY2B1c2Nna8B5VlSGavKQcNmiA5NebDJJqDgyp8TJtVvWZbgzrm 2j6URz5458F22jFOS4h6GRPv37IUSzMma1wGFq+p1Faa4d4iMSZceASX0gr7CXYL rlgexvQRaVaf4+Kcoo+wvWtfR6AEwgSNGca7Y57cWI1HpEOXc7tIKE/wLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJdFLjiut4OJYDXOXePkcq11fAc+MB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 LzM2ODRlNTBjLWM1MGYtNGViYi1iMzI3LWUwNzU5MjQxMTk3ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJABlAAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCuBzseXc68b8xkOh88 OlN7M0PoVWpDzG5t2VaR48waszSJw/5UEAdMA25XquSsKU9sWD9agv1i5Ob5lCEm FGD5UwCEDf2xL80VWxm02a6Gbyi9/OWnpYXjHGo21Z41epsfchYrOouf3GBaJy7P oVYexuuHjdkzKzcix80oOHb4uWUty+X0M2aO1Y2TdBWdO8KxEroeQlCr8VPmHK7e 0bOq/IFAZKYV2IhgyCFirT493LTg3INHflHbuKULH7oXjhpRcp4hPm0AvtSwh6Tp U8/NoM3IC7flEiwcTTsVzLGQq2RtiHeRkwKYqPRqNCsuciF7yrhzACdMkiMPEO7m wiwZ -----END CERTIFICATE-----Generated at Thu Dec 18 23:43:08 2025 by rpki-client