This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed477fef-770c-4148-9a17-5b7e04aa2ae0.roa File: ed477fef-770c-4148-9a17-5b7e04aa2ae0.roa (raw, json) Hash identifier: 2cIhcnF7hjRbGPORrmx/gXiy7F79vNPjIFfDz8t0Fqo= Subject key identifier: AA:6B:43:58:FC:3E:08:4A:43:F7:67:DF:FF:0E:9C:50:A1:7E:AD:EE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41456903D1F7A013B13741BB183EF471BB5FFA2B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed477fef-770c-4148-9a17-5b7e04aa2ae0.roa Signing time: Sun 07 Dec 2025 00:00:33 +0000 ROA not before: Sun 07 Dec 2025 00:00:33 +0000 ROA not after: Sat 07 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 43.208.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:45:69:03:d1:f7:a0:13:b1:37:41:bb:18:3e:f4:71:bb:5f:fa:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Dec 7 00:00:33 2025 GMT Not After : Mar 7 23:59:59 2026 GMT Subject: serialNumber=05f558cfd65bca0ae7833a8439a2b6f71b60ed73f4f63e0b8acddc71bd166c9b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:7b:a0:be:36:8f:9c:81:f1:f9:c4:3c:85: b9:bf:5a:1a:16:29:27:50:5e:58:5a:b2:75:43:8b: cf:ba:0b:94:57:58:46:c8:a4:da:e5:ad:54:57:d7: 35:1c:f9:89:78:e7:61:c5:a5:63:ca:75:c8:80:29: 01:3c:41:ad:85:a9:c1:08:3f:0b:ce:38:da:62:7a: 94:49:52:d1:c8:bd:f1:05:d4:c9:55:94:c1:06:b0: 5a:96:3b:c8:f0:ee:ec:a2:2d:27:e9:49:ba:ed:5a: ab:0a:52:19:5d:43:b9:a2:ba:98:14:5f:d3:48:88: eb:f4:5d:1d:3d:b3:79:55:4a:b1:f6:23:b4:81:d9: a3:dc:07:ae:43:d6:3c:92:0a:47:9f:56:a1:36:e2: 81:8f:e3:5d:0c:a0:80:ca:c8:b8:0b:d6:ca:d0:9a: f3:30:de:f1:23:25:07:61:cc:a0:2c:d6:b2:b8:89: 3e:46:fc:15:3c:9b:c2:7d:b1:e4:1c:ec:90:a2:e3: ac:76:d8:2d:3e:c1:29:3c:32:ca:40:68:d0:35:35: 18:63:3d:74:ae:eb:e6:a6:5b:fa:ac:33:ff:b0:20: 86:45:fe:76:15:2f:92:62:17:2f:9f:f4:82:7d:21: ef:1e:d8:cf:1a:ee:61:34:e0:7f:27:12:aa:a7:14: 31:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6B:43:58:FC:3E:08:4A:43:F7:67:DF:FF:0E:9C:50:A1:7E:AD:EE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed477fef-770c-4148-9a17-5b7e04aa2ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.208.76.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:c4:ca:ad:88:96:a0:d0:18:59:c8:1c:84:26:7d:2b:4e:13: dd:25:b0:e6:b3:d9:dd:63:a9:b6:df:ec:af:55:ce:9c:0c:25: 03:e5:08:77:89:9b:86:62:4f:79:af:9a:0a:76:db:9e:f5:cd: b7:a7:93:67:e5:33:07:56:15:70:51:61:9b:7c:48:4f:b3:73: 70:20:5f:70:1d:a4:29:b0:9b:36:d2:88:d7:2d:44:7d:53:ce: 26:c0:b1:89:94:79:94:d4:1f:b6:b0:e4:0d:a8:d5:b9:58:7d: f6:90:2d:1a:a4:5b:e3:1e:fc:54:3a:b5:77:e7:bd:fc:d5:d3: 25:c8:5c:f7:db:e7:5e:d3:fa:4e:b2:5b:f4:31:be:3a:0b:be: 23:37:02:53:c8:fe:1b:56:72:2c:bc:0a:c3:ae:37:ed:ca:c1: 59:96:fc:93:fd:99:3d:d3:45:31:79:5f:08:1b:0f:21:5a:fd: fc:33:fd:0d:6a:74:d1:af:6e:cd:eb:5c:bb:47:6a:d9:81:5e: 5b:cb:6b:34:fa:35:a1:25:89:f4:ae:3d:e0:f7:40:9e:1f:67: 2f:53:7c:0d:27:71:2d:93:8c:da:e8:7e:f4:43:36:37:93:c8: 83:cf:f8:a3:73:bd:3c:b0:0e:ba:53:43:2c:8d:f6:5a:3e:a1: a9:a9:8b:1b -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUQUVpA9H3oBOxN0G7GD70cbtf+iswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTIwNzAwMDAzM1oX DTI2MDMwNzIzNTk1OVowejFJMEcGA1UEBRNAMDVmNTU4Y2ZkNjViY2EwYWU3ODMz YTg0MzlhMmI2ZjcxYjYwZWQ3M2Y0ZjYzZTBiOGFjZGRjNzFiZDE2NmM5YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYV7oL42j5yB8fnEPIW5v1oaFikn UF5YWrJ1Q4vPuguUV1hGyKTa5a1UV9c1HPmJeOdhxaVjynXIgCkBPEGthanBCD8L zjjaYnqUSVLRyL3xBdTJVZTBBrBaljvI8O7soi0n6Um67VqrClIZXUO5orqYFF/T SIjr9F0dPbN5VUqx9iO0gdmj3AeuQ9Y8kgpHn1ahNuKBj+NdDKCAysi4C9bK0Jrz MN7xIyUHYcygLNayuIk+RvwVPJvCfbHkHOyQouOsdtgtPsEpPDLKQGjQNTUYYz10 ruvmplv6rDP/sCCGRf52FS+SYhcvn/SCfSHvHtjPGu5hNOB/JxKqpxQxtwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKprQ1j8PghKQ/dn3/8OnFChfq3uMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VkNDc3ZmVmLTc3MGMtNDE0OC05YTE3LTViN2UwNGFhMmFlMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK9BMMA0GCSqGSIb3DQEBCwUAA4IBAQB9xMqtiJag0BhZyByEJn0r ThPdJbDms9ndY6m23+yvVc6cDCUD5Qh3iZuGYk95r5oKdtue9c23p5Nn5TMHVhVw UWGbfEhPs3NwIF9wHaQpsJs20ojXLUR9U84mwLGJlHmU1B+2sOQNqNW5WH32kC0a pFvjHvxUOrV357381dMlyFz32+de0/pOslv0Mb46C74jNwJTyP4bVnIsvArDrjft ysFZlvyT/Zk900UxeV8IGw8hWv38M/0NanTRr27N61y7R2rZgV5by2s0+jWhJYn0 rj3g90CeH2cvU3wNJ3Etk4za6H70QzY3k8iDz/ijc708sA66U0MsjfZaPqGpqYsb -----END CERTIFICATE-----Generated at Sat Dec 20 16:03:30 2025 by rpki-client