This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/d953b731-7921-47dd-abf3-b7b8cc367900.roa File: d953b731-7921-47dd-abf3-b7b8cc367900.roa (raw, json) Hash identifier: 5cTt1+vhncnDYsyS0iAO+sczddXxNbUExaXXLGjcsik= Subject key identifier: 9B:B9:FA:8B:BF:1C:2E:4F:8A:9F:E3:D3:8E:5E:BE:D5:BD:A0:08:30 Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 1B81E21D4E52FF1B73E2CD4C20455CC2A6BDCD9D Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/d953b731-7921-47dd-abf3-b7b8cc367900.roa Signing time: Sat 06 Dec 2025 00:00:04 +0000 ROA not before: Sat 06 Dec 2025 00:00:04 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 122.248.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:81:e2:1d:4e:52:ff:1b:73:e2:cd:4c:20:45:5c:c2:a6:bd:cd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Dec 6 00:00:04 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=5a4d339bd38f94f0669453d61d92331c87595034715327255cb8e5a19157b705, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:66:dc:bc:13:91:fb:3b:e9:5f:44:2f:a1: 6d:16:87:18:7e:95:3c:7a:26:84:42:90:9b:ed:36: 8d:df:5c:19:23:b2:cc:cd:99:b8:19:97:93:6a:d6: 71:90:48:46:fc:48:14:98:79:d8:39:eb:e1:e0:f3: 5f:cf:f5:ff:06:ab:69:93:31:28:ec:20:e7:bf:7c: 29:7c:32:ad:4f:7f:59:5f:b2:28:5d:20:0e:84:39: 91:82:54:03:05:89:09:ea:7d:34:67:61:f9:c8:48: e9:0b:8a:42:2b:19:3b:a2:8b:b9:8c:39:31:d2:0a: ee:dd:b1:b7:c8:a6:36:1d:d0:72:45:cc:9c:57:15: ff:70:0c:8b:bb:4d:54:72:ef:38:ab:4a:86:05:9f: 59:e3:d6:66:bf:94:14:a6:7d:8b:83:f8:29:fd:44: c2:d1:f3:2d:41:2c:10:e6:20:ca:ec:5c:04:1e:50: cc:b4:81:78:72:9d:42:9a:c5:8e:1c:20:f7:93:5e: 03:e2:31:32:87:34:a0:33:5a:fc:42:ff:72:b5:e9: 9a:46:cc:c3:70:b2:ab:34:a6:b6:cf:51:e3:b2:97: 71:c7:47:bc:2f:8e:69:f4:49:b2:b1:e1:5a:4a:27: 19:24:18:2b:60:2b:7c:9e:f1:1f:d0:11:31:d9:0f: 53:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B9:FA:8B:BF:1C:2E:4F:8A:9F:E3:D3:8E:5E:BE:D5:BD:A0:08:30 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/d953b731-7921-47dd-abf3-b7b8cc367900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.192.0/18 Signature Algorithm: sha256WithRSAEncryption 91:7b:86:cb:a1:3c:4a:9a:a1:06:39:5e:8d:99:86:78:fa:c7: eb:ee:22:f7:db:a0:94:9b:fe:8f:84:2a:06:9c:ac:d2:79:c3: 4b:15:b1:13:0d:26:ff:33:36:1a:67:bf:22:84:8c:0a:94:0f: 91:6e:58:9f:97:bd:cd:ef:63:33:97:5c:bb:25:8f:49:aa:fb: f4:bb:31:3d:bc:cb:ba:d7:b4:b5:59:97:fd:ff:0d:ae:72:9c: 5c:c1:e3:07:87:5e:b5:aa:4c:86:f1:f5:18:ea:25:de:b5:36: 87:19:a6:a6:44:54:cc:85:6c:20:a4:5f:f7:29:8b:88:66:d3: 03:d0:60:3f:5f:86:2d:e0:0e:cf:53:aa:8e:9b:ab:41:1a:ca: bd:af:48:d8:20:ac:f2:47:11:58:6a:a9:02:d7:a9:1a:e6:01: 28:86:c2:76:92:13:e1:66:1f:a8:40:22:21:73:4c:21:9b:36: 8b:ed:b7:14:3d:5b:a4:a4:1f:c3:ac:d0:98:bb:7d:4a:6e:df: 33:54:17:ee:65:64:7c:d6:bd:0c:b1:4c:9a:29:73:01:96:ee: 52:a1:2d:bb:90:f6:b2:c8:70:6c:8a:dc:c3:27:fb:f5:5d:20: fe:4a:ea:d5:0c:cc:e8:5c:33:21:f6:9f:50:23:3a:1d:ef:6b: 9e:39:2f:ce -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUG4HiHU5S/xtz4s1MIEVcwqa9zZ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTIwNjAwMDAwNFoX DTI2MDMwNjIzNTk1OVowejFJMEcGA1UEBRNANWE0ZDMzOWJkMzhmOTRmMDY2OTQ1 M2Q2MWQ5MjMzMWM4NzU5NTAzNDcxNTMyNzI1NWNiOGU1YTE5MTU3YjcwNTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlixm3LwTkfs76V9EL6FtFocYfpU8 eiaEQpCb7TaN31wZI7LMzZm4GZeTatZxkEhG/EgUmHnYOevh4PNfz/X/BqtpkzEo 7CDnv3wpfDKtT39ZX7IoXSAOhDmRglQDBYkJ6n00Z2H5yEjpC4pCKxk7oou5jDkx 0gru3bG3yKY2HdByRcycVxX/cAyLu01Ucu84q0qGBZ9Z49Zmv5QUpn2Lg/gp/UTC 0fMtQSwQ5iDK7FwEHlDMtIF4cp1CmsWOHCD3k14D4jEyhzSgM1r8Qv9ytemaRszD cLKrNKa2z1Hjspdxx0e8L45p9EmyseFaSicZJBgrYCt8nvEf0BEx2Q9TgQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFJu5+ou/HC5Pip/j045evtW9oAgwMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0 L2Q5NTNiNzMxLTc5MjEtNDdkZC1hYmYzLWI3YjhjYzM2NzkwMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2 Yjk2ODEzZTQvMjIwY2VlMGMtNjAwMi00MDlhLTgxOTQtMzhlMjE2YzAwOTZjLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQGevjAMA0GCSqGSIb3DQEBCwUAA4IBAQCRe4bLoTxKmqEGOV6NmYZ4 +sfr7iL326CUm/6PhCoGnKzSecNLFbETDSb/MzYaZ78ihIwKlA+Rblifl73N72Mz l1y7JY9Jqvv0uzE9vMu617S1WZf9/w2ucpxcweMHh161qkyG8fUY6iXetTaHGaam RFTMhWwgpF/3KYuIZtMD0GA/X4Yt4A7PU6qOm6tBGsq9r0jYIKzyRxFYaqkC16ka 5gEohsJ2khPhZh+oQCIhc0whmzaL7bcUPVukpB/DrNCYu31Kbt8zVBfuZWR81r0M sUyaKXMBlu5SoS27kPayyHBsitzDJ/v1XSD+SurVDMzoXDMh9p9QIzod72ueOS/O -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:38 2025 by rpki-client