This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/653a4574-339b-4bb5-9b34-5450c0c7e304.roa File: 653a4574-339b-4bb5-9b34-5450c0c7e304.roa (raw, json) Hash identifier: evKw6ca0rj7WxwJvlXXTAQRO8WvSrcEir3cs1Pz80MQ= Subject key identifier: 84:73:A6:AA:6E:2C:20:FD:32:E3:61:D8:95:5D:B9:15:3B:86:97:33 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 56FD69839C8C49573788665DA3EAE6A9A191DE01 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/653a4574-339b-4bb5-9b34-5450c0c7e304.roa Signing time: Sun 07 Dec 2025 00:00:29 +0000 ROA not before: Sun 07 Dec 2025 00:00:29 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:fd:69:83:9c:8c:49:57:37:88:66:5d:a3:ea:e6:a9:a1:91:de:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 7 00:00:29 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=945830675e2fceedd8888e3b43f2795cea0eaac0056ed8fd8dba879637a419ec, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:64:b9:d9:9c:a7:22:69:e1:2a:56:65:d1: f2:45:fe:93:de:26:2b:04:b1:21:0c:e6:cf:d5:b3: d7:b9:52:e3:03:33:ac:c2:36:92:63:5a:8e:15:14: 37:4c:5d:e2:40:97:eb:c5:64:60:e2:b7:f2:35:f3: 71:34:cb:3d:cd:d4:c2:38:ab:84:d2:5d:3b:e0:8e: bf:11:4c:5a:12:86:4e:7d:b3:13:c1:e4:a8:0f:cf: 1a:e5:04:68:17:6b:c7:36:54:29:7f:52:70:cc:4c: 9a:52:11:b9:57:94:a1:14:c2:ae:18:61:30:45:15: 53:98:cf:3d:e1:0b:7d:58:ee:0d:a5:1d:51:58:f5: 0c:ed:03:7f:d9:8a:94:eb:6d:84:b2:88:71:28:d8: 67:b7:3d:34:8a:1a:07:94:df:57:8c:89:aa:8b:85: ca:72:d5:b5:1f:16:bb:4b:c3:e0:6f:5a:5a:19:d5: 6e:ba:d4:fd:0c:d8:41:d4:7d:43:d6:36:79:21:5a: 41:34:ab:53:88:7f:b0:4e:fc:2a:57:37:49:d5:04: b6:06:b2:67:40:8b:86:11:dc:6f:e2:52:d4:d5:ff: 26:8c:20:1b:50:bf:61:07:dc:69:03:3e:90:38:76: b0:df:83:9f:0b:c5:1a:c0:3f:27:ea:95:61:91:5d: d6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:73:A6:AA:6E:2C:20:FD:32:E3:61:D8:95:5D:B9:15:3B:86:97:33 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/653a4574-339b-4bb5-9b34-5450c0c7e304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.54.0/24 Signature Algorithm: sha256WithRSAEncryption c1:63:91:56:22:19:2e:9e:42:92:43:93:6a:29:a6:b3:fd:d6: 48:c2:e5:16:c1:10:31:be:a8:dc:72:de:b4:8d:e0:1c:31:55: 6f:40:85:0b:ef:23:cb:3c:bb:fe:a1:f4:c4:d0:59:49:4d:b0: 1b:60:c6:62:5a:d7:31:4f:57:62:09:be:ec:10:2c:19:7c:f3: 8d:d3:3b:59:c9:4b:81:28:58:0d:fa:b3:11:2d:5b:c0:8d:af: 7e:a7:26:97:ec:32:4a:f6:46:4e:35:1f:f4:77:50:9b:06:6f: 8a:04:b4:0d:b6:e6:1d:4b:c6:a4:48:9d:7b:fc:90:21:08:36: 4d:2d:87:50:76:aa:5b:96:4e:c2:5b:e2:dd:f4:87:e4:a9:65: 41:e7:bc:b3:43:36:8e:f1:67:02:bf:39:fa:3c:cf:d0:38:1d: b4:1f:a7:da:fc:a1:ad:b0:4b:e0:e7:d2:5b:a7:c9:ef:bf:e2: bb:79:9a:db:04:29:8a:46:f9:3a:7e:01:06:58:e7:02:5d:03: 9d:37:aa:88:3c:f1:40:87:57:91:3a:d9:40:63:83:93:c4:cb: 21:d5:f5:fa:7d:93:4a:b7:80:91:c9:72:d7:7d:68:25:01:32: 22:a1:08:e2:2a:89:ec:34:7a:f9:8b:b4:e1:bf:85:09:93:4f: 28:56:e2:63 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUVv1pg5yMSVc3iGZdo+rmqaGR3gEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNzAwMDAyOVoX DTI2MDMwNzIzNTk1OVowejFJMEcGA1UEBRNAOTQ1ODMwNjc1ZTJmY2VlZGQ4ODg4 ZTNiNDNmMjc5NWNlYTBlYWFjMDA1NmVkOGZkOGRiYTg3OTYzN2E0MTllYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzepkudmcpyJp4SpWZdHyRf6T3iYr BLEhDObP1bPXuVLjAzOswjaSY1qOFRQ3TF3iQJfrxWRg4rfyNfNxNMs9zdTCOKuE 0l074I6/EUxaEoZOfbMTweSoD88a5QRoF2vHNlQpf1JwzEyaUhG5V5ShFMKuGGEw RRVTmM894Qt9WO4NpR1RWPUM7QN/2YqU622EsohxKNhntz00ihoHlN9XjImqi4XK ctW1Hxa7S8Pgb1paGdVuutT9DNhB1H1D1jZ5IVpBNKtTiH+wTvwqVzdJ1QS2BrJn QIuGEdxv4lLU1f8mjCAbUL9hB9xpAz6QOHaw34OfC8UawD8n6pVhkV3WQwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFIRzpqpuLCD9MuNh2JVduRU7hpczMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzY1M2E0NTc0LTMzOWItNGJiNS05YjM0LTU0NTBjMGM3ZTMwNC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9A2MA0GCSqGSIb3DQEBCwUAA4IBAQDBY5FWIhkunkKSQ5NqKaaz /dZIwuUWwRAxvqjcct60jeAcMVVvQIUL7yPLPLv+ofTE0FlJTbAbYMZiWtcxT1di Cb7sECwZfPON0ztZyUuBKFgN+rMRLVvAja9+pyaX7DJK9kZONR/0d1CbBm+KBLQN tuYdS8akSJ17/JAhCDZNLYdQdqpblk7CW+Ld9IfkqWVB57yzQzaO8WcCvzn6PM/Q OB20H6fa/KGtsEvg59Jbp8nvv+K7eZrbBCmKRvk6fgEGWOcCXQOdN6qIPPFAh1eR OtlAY4OTxMsh1fX6fZNKt4CRyXLXfWglATIioQjiKonsNHr5i7Thv4UJk08oVuJj -----END CERTIFICATE-----Generated at Sat Dec 20 16:01:36 2025 by rpki-client