This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0354404d-5bd3-455b-9059-7c313b673651.roa File: 0354404d-5bd3-455b-9059-7c313b673651.roa (raw, json) Hash identifier: dVQjuBU8Ks7xvmVGSp7CAH5T9b8aWGLUX/S85T37hcM= Subject key identifier: 4B:D7:C5:B0:D5:0D:EE:AB:46:BA:DA:EA:B3:8E:32:1F:81:E1:68:6B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 51CE2B825C558CC13FB42DA22C87B302630C7DA3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0354404d-5bd3-455b-9059-7c313b673651.roa Signing time: Wed 10 Dec 2025 00:00:31 +0000 ROA not before: Wed 10 Dec 2025 00:00:31 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.213.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ce:2b:82:5c:55:8c:c1:3f:b4:2d:a2:2c:87:b3:02:63:0c:7d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 10 00:00:31 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=c3f6236157ed664b317c087f075615ae815ae41c85e7fce10fd640f6ccf7f091, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:dc:97:49:fd:ba:4d:ae:a6:7d:68:28:24: e3:81:2a:18:d9:6e:39:e7:6a:d0:fd:dc:65:9e:55: 1c:88:d5:7e:b1:a8:7e:ce:4d:57:07:df:ae:d2:b9: 23:f2:15:60:6d:94:c6:0f:27:dd:2d:6a:65:de:73: 63:15:ee:8a:21:4f:11:40:07:eb:fc:39:66:e8:0a: 97:53:25:f6:8c:78:45:75:b1:b3:e6:c2:b5:58:65: 42:0a:10:b9:90:13:e8:e5:9b:3b:2e:79:8d:b8:11: ef:ed:af:f5:af:b3:40:f9:16:8c:9a:59:b2:b4:56: 06:e2:40:75:82:96:6d:f3:46:b3:57:13:8e:2c:3f: 8d:83:95:ee:d6:dd:b7:8f:c1:0d:e6:51:16:cf:d0: 9e:32:0e:51:41:8a:24:a1:02:d6:09:23:88:55:73: 3f:ba:48:6a:a6:ad:b7:b1:42:d4:76:cb:67:b5:16: 4e:23:eb:e0:12:2a:02:87:20:6f:35:bc:f7:ad:98: b9:24:52:45:04:08:38:5c:c8:70:90:5c:78:6e:83: 81:e0:b6:6c:d9:52:60:88:09:65:8f:94:c8:f4:1e: 63:c1:d9:fe:7d:ce:13:b2:16:88:50:75:89:a9:59: fc:7e:ba:ad:e1:78:63:17:5b:ec:1e:f7:8c:08:ee: ec:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D7:C5:B0:D5:0D:EE:AB:46:BA:DA:EA:B3:8E:32:1F:81:E1:68:6B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0354404d-5bd3-455b-9059-7c313b673651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.213.135.0/24 Signature Algorithm: sha256WithRSAEncryption 41:52:6d:bb:02:62:9f:d5:06:e3:f3:67:10:b4:ad:57:34:c2: 57:a5:6d:99:52:73:33:80:d0:aa:12:b7:30:93:47:2d:83:f8: 17:6a:10:45:7c:76:a3:f9:41:72:e5:d3:d1:ef:1b:43:43:54: 9e:2c:89:fc:e9:b8:58:82:64:dc:d4:57:fd:d9:94:32:8c:27: 7f:35:95:66:fd:5b:d8:14:0e:7d:b0:3f:da:7a:f0:ad:5d:2d: 76:5a:7a:b3:31:d2:a9:19:e3:65:08:58:9e:69:37:91:c7:0c: 6e:5c:22:d0:58:8e:33:c7:61:f6:51:f6:ae:4f:ee:a8:6e:67: 4d:13:90:5e:b4:8f:6e:e1:cd:a2:26:ef:4c:f2:87:9f:ef:03: cb:c5:e7:5a:33:8c:4e:85:d3:d3:2f:34:53:ef:5b:4e:ef:d6: e7:8f:0f:29:d0:74:18:84:0d:42:53:53:0f:9f:65:6d:4f:58: 59:d7:59:bb:a3:a3:dc:7b:83:e6:2e:9f:2c:40:a6:42:90:da: 3c:35:2b:13:df:0c:29:fb:2b:55:18:4d:d5:33:8a:de:e9:e9: 4b:7f:d0:3d:22:c4:70:fa:86:9d:36:f5:39:b2:fa:2f:a1:64: 9d:ae:3e:76:aa:ce:1b:61:3c:fe:75:a4:c6:e2:09:86:70:84: 84:05:09:bd -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUUc4rglxVjME/tC2iLIezAmMMfaMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIxMDAwMDAzMVoX DTI2MDMxMDIzNTk1OVowejFJMEcGA1UEBRNAYzNmNjIzNjE1N2VkNjY0YjMxN2Mw ODdmMDc1NjE1YWU4MTVhZTQxYzg1ZTdmY2UxMGZkNjQwZjZjY2Y3ZjA5MTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsezcl0n9uk2upn1oKCTjgSoY2W45 52rQ/dxlnlUciNV+sah+zk1XB9+u0rkj8hVgbZTGDyfdLWpl3nNjFe6KIU8RQAfr /Dlm6AqXUyX2jHhFdbGz5sK1WGVCChC5kBPo5Zs7LnmNuBHv7a/1r7NA+RaMmlmy tFYG4kB1gpZt80azVxOOLD+Ng5Xu1t23j8EN5lEWz9CeMg5RQYokoQLWCSOIVXM/ ukhqpq23sULUdstntRZOI+vgEioChyBvNbz3rZi5JFJFBAg4XMhwkFx4boOB4LZs 2VJgiAllj5TI9B5jwdn+fc4TshaIUHWJqVn8frqt4XhjF1vsHveMCO7sYQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFEvXxbDVDe6rRrra6rOOMh+B4WhrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzAzNTQ0MDRkLTViZDMtNDU1Yi05MDU5LTdjMzEzYjY3MzY1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9WHMA0GCSqGSIb3DQEBCwUAA4IBAQBBUm27AmKf1Qbj82cQtK1X NMJXpW2ZUnMzgNCqErcwk0ctg/gXahBFfHaj+UFy5dPR7xtDQ1SeLIn86bhYgmTc 1Ff92ZQyjCd/NZVm/VvYFA59sD/aevCtXS12WnqzMdKpGeNlCFieaTeRxwxuXCLQ WI4zx2H2UfauT+6obmdNE5BetI9u4c2iJu9M8oef7wPLxedaM4xOhdPTLzRT71tO 79bnjw8p0HQYhA1CU1MPn2VtT1hZ11m7o6Pce4PmLp8sQKZCkNo8NSsT3wwp+ytV GE3VM4re6elLf9A9IsRw+oadNvU5svovoWSdrj52qs4bYTz+daTG4gmGcISEBQm9 -----END CERTIFICATE-----Generated at Sat Dec 20 16:01:48 2025 by rpki-client