This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa File: 3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa (raw, json) Hash identifier: BRBFxiT1x8U/rs0xcE9ObEQm27cqFWS13gAxqMnDV5M= Subject key identifier: CF:2D:BC:38:8C:AB:D5:0F:42:A4:6D:C9:BF:01:A9:23:5D:56:5F:04 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3F4B26B8449A802D68F0FD64307C097DF14354E0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa Signing time: Sun 09 Nov 2025 00:30:49 +0000 ROA not before: Sun 09 Nov 2025 00:30:49 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.212.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4b:26:b8:44:9a:80:2d:68:f0:fd:64:30:7c:09:7d:f1:43:54:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:30:49 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=a4864fad988467f0928d32f9964caddf858e71913548d6d42e48a72f81beeccb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:c6:4e:9c:db:1d:31:79:b3:f1:1a:53:3f: 3c:57:d2:1e:54:95:fa:1c:0c:32:e1:24:19:5c:01: 3a:83:f0:09:c0:ba:ce:d1:64:ed:e9:8c:a9:7d:b1: 8d:6d:42:28:da:8f:f9:ff:5c:aa:46:74:b0:8a:62: 94:2e:66:74:da:37:8a:d8:94:3b:b3:1b:c7:e4:d9: e4:82:b7:54:77:4f:d6:a4:a4:a7:63:57:5c:54:10: a9:3e:56:d6:2b:97:be:fe:da:85:90:28:24:00:9a: 9a:2f:42:cf:cd:7c:9e:4b:bb:58:1a:b6:ea:1f:65: 58:0f:1d:08:1d:32:20:4d:e6:4f:f6:99:76:b3:54: ff:d4:58:8e:18:93:9b:f6:bd:10:01:ed:cc:83:5a: 74:e7:46:14:55:8a:03:87:0e:9b:fc:8d:13:0e:3e: 8a:83:c4:1f:dc:ca:08:83:4c:5e:c2:f3:4e:57:7e: ef:ef:66:b9:4d:be:0a:dd:6d:37:03:c7:ec:35:4a: fa:9c:c0:66:60:69:9d:3b:80:7e:c0:59:f8:3b:ff: 70:d3:78:4c:b0:fb:a1:d2:e1:82:e4:88:7d:2a:4b: 5b:56:ce:88:22:e8:74:4a:54:9f:32:97:37:33:76: e8:ff:52:46:dd:61:b5:5b:88:dd:62:72:30:94:9a: bb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2D:BC:38:8C:AB:D5:0F:42:A4:6D:C9:BF:01:A9:23:5D:56:5F:04 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a2bc2cc-9272-41eb-a3e4-20761d1729fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.212.0.0/15 Signature Algorithm: sha256WithRSAEncryption c8:e6:f6:1c:e5:25:32:30:61:c4:1a:7d:e6:d8:73:74:40:36: bf:da:7f:f1:52:d3:fa:70:0d:f1:ef:fe:67:f2:e0:e0:a5:2a: 5f:84:b3:99:72:eb:2a:b5:c5:49:2c:68:ba:d3:ba:c8:f0:68: 8a:79:3b:6b:9e:b1:d1:9e:b8:5b:1e:ea:6b:2f:10:b8:a0:ff: 3f:33:21:19:64:c8:52:ce:15:68:f5:cf:93:22:22:6f:d8:33: 22:b7:c9:56:ba:13:04:3d:a6:c2:a4:5f:6c:59:3e:64:52:3c: 9b:5d:02:64:65:47:79:b6:26:d8:59:0d:76:48:fa:f6:77:20: 39:33:c9:c1:48:f7:7b:52:10:28:a6:19:94:3b:23:fe:c0:03: a3:be:15:ca:82:48:8f:7d:97:9f:41:ac:2b:ca:ba:60:40:33: 08:27:84:44:a8:ca:48:8e:c5:60:82:bd:f2:46:04:73:1b:b4: 99:34:0f:1e:a3:ed:3f:e8:47:c1:c4:24:df:15:33:c1:22:c6: e5:11:c3:30:d0:23:52:54:da:65:fb:b1:1d:63:22:62:61:37: 06:e8:3a:c9:43:e0:95:c9:bf:e6:a5:24:d5:f4:0e:69:52:ee: ef:88:f4:05:e2:44:3e:59:04:89:c1:00:c5:82:9e:f5:1f:3c: 0d:9d:e2:f4 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUP0smuESagC1o8P1kMHwJffFDVOAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwMzA0OVoX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAYTQ4NjRmYWQ5ODg0NjdmMDkyOGQz MmY5OTY0Y2FkZGY4NThlNzE5MTM1NDhkNmQ0MmU0OGE3MmY4MWJlZWNjYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta/GTpzbHTF5s/EaUz88V9IeVJX6 HAwy4SQZXAE6g/AJwLrO0WTt6YypfbGNbUIo2o/5/1yqRnSwimKULmZ02jeK2JQ7 sxvH5NnkgrdUd0/WpKSnY1dcVBCpPlbWK5e+/tqFkCgkAJqaL0LPzXyeS7tYGrbq H2VYDx0IHTIgTeZP9pl2s1T/1FiOGJOb9r0QAe3Mg1p050YUVYoDhw6b/I0TDj6K g8Qf3MoIg0xewvNOV37v72a5Tb4K3W03A8fsNUr6nMBmYGmdO4B+wFn4O/9w03hM sPuh0uGC5Ih9KktbVs6IIuh0SlSfMpc3M3bo/1JG3WG1W4jdYnIwlJq79wIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFM8tvDiMq9UPQqRtyb8BqSNdVl8EMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhMmJjMmNjLTkyNzItNDFlYi1hM2U0LTIwNzYxZDE3MjlmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMBK9QwDQYJKoZIhvcNAQELBQADggEBAMjm9hzlJTIwYcQafebYc3RA Nr/af/FS0/pwDfHv/mfy4OClKl+Es5ly6yq1xUksaLrTusjwaIp5O2uesdGeuFse 6msvELig/z8zIRlkyFLOFWj1z5MiIm/YMyK3yVa6EwQ9psKkX2xZPmRSPJtdAmRl R3m2JthZDXZI+vZ3IDkzycFI93tSECimGZQ7I/7AA6O+FcqCSI99l59BrCvKumBA MwgnhESoykiOxWCCvfJGBHMbtJk0Dx6j7T/oR8HEJN8VM8EixuURwzDQI1JU2mX7 sR1jImJhNwboOslD4JXJv+alJNX0DmlS7u+I9AXiRD5ZBInBAMWCnvUfPA2d4vQ= -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:58 2025 by rpki-client