This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa File: 8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa (raw, json) Hash identifier: A3oyOw7VX4N9oyl+uWqau/fOki1znd+q5B+ysYdahSk= Subject key identifier: A5:7F:70:CC:5C:4D:2F:99:F1:32:65:00:00:7B:82:A4:B6:AF:B2:CA Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A3DCE5FE776D8182DA698624B8135765ED4DA25 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa Signing time: Tue 11 Nov 2025 00:00:12 +0000 ROA not before: Tue 11 Nov 2025 00:00:12 +0000 ROA not after: Tue 16 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 43.216.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:3d:ce:5f:e7:76:d8:18:2d:a6:98:62:4b:81:35:76:5e:d4:da:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 11 00:00:12 2025 GMT Not After : Dec 16 23:59:59 2025 GMT Subject: serialNumber=969e43891e0a5bcf4a7cc3857b5f3a2970539406c074c8d992d940b679eff5ab, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2b:1d:76:10:01:3d:16:3c:6c:cf:06:6d:62: 01:8d:c0:27:18:d3:b9:72:e6:e6:98:0b:de:ff:d2: 5f:7b:70:a8:cc:52:42:87:d0:8d:17:9e:04:e8:7e: b3:d4:cc:fb:5c:37:c1:36:c0:81:b5:d2:77:e6:bb: 08:1f:84:48:df:20:82:87:b3:9e:4c:dc:be:52:34: 96:14:76:61:74:d8:59:a2:82:2d:0b:72:10:f6:54: 92:fe:88:49:b3:a7:d1:17:78:9b:25:11:2f:13:c0: 59:37:bc:e3:1b:c6:ac:b1:f4:48:ec:46:59:34:e5: 1b:04:57:92:0d:7e:03:a8:8a:5e:3a:45:5d:a1:75: 30:3c:7b:23:2e:42:0f:05:1b:94:bc:51:2b:d7:2d: 98:5a:57:5f:8a:3d:b3:09:c7:f8:d2:70:24:a5:d2: b5:7d:89:3d:72:dc:fb:6d:53:bc:59:c3:49:ac:2f: 6d:6a:d9:bf:b0:ba:21:a2:51:3c:d2:7a:f5:8c:4c: fd:65:8c:ff:8c:73:95:64:c8:fa:cb:57:79:8f:73: d8:7b:b7:cb:9a:21:8c:ee:a1:0f:ad:e0:f0:fb:ad: 7e:0d:25:8f:35:7e:5b:07:fb:0d:85:8d:46:48:31: 88:15:7a:75:5b:0e:a6:7d:f0:bc:ac:0c:1a:5c:50: 54:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7F:70:CC:5C:4D:2F:99:F1:32:65:00:00:7B:82:A4:B6:AF:B2:CA X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8187d7a1-ec4e-4cab-a8c7-921a7492e89c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.216.65.0/24 Signature Algorithm: sha256WithRSAEncryption 28:5e:8d:7f:d0:1c:af:94:ae:e7:72:3a:26:c2:ac:6e:e4:94: 53:1c:74:54:c1:63:95:7d:9d:2b:33:e5:11:44:2a:63:0e:21: b1:c1:fd:f8:b7:0b:3e:d3:38:17:9b:df:18:b8:37:9c:70:3f: 79:1c:01:1b:c9:51:5d:b9:42:e7:13:fa:b8:79:42:b3:b0:d3: 3f:31:cb:90:bd:ec:46:c3:9e:98:71:26:d3:11:01:59:80:f4: 1f:2c:a4:17:44:49:8e:3f:8e:02:cb:35:7f:50:fe:99:bd:3b: f0:d0:10:c6:41:04:30:cf:6f:22:66:28:09:7a:c2:ee:6d:4f: 94:58:cd:37:a2:06:75:33:1b:4a:8e:48:47:53:ca:9e:2c:b5: 56:57:d7:48:62:39:98:15:d7:46:a8:df:95:42:06:6c:e7:6b: 52:a6:f2:82:ec:2f:fa:f8:18:1d:99:78:7c:ba:01:d8:15:bf: 57:e4:9f:e0:26:17:e7:1c:32:b7:f5:ec:06:84:fd:03:be:c3: 78:97:2e:05:7b:3e:f1:e1:10:ae:b7:0a:4a:b0:1a:52:0a:99: 8c:d9:fe:ea:35:94:30:f0:6f:34:24:d3:cb:23:11:01:af:07: b9:62:fe:ec:f7:7a:3c:4a:03:4f:35:9f:ab:f5:42:37:16:7f: bf:22:6c:a2 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUej3OX+d22BgtpphiS4E1dl7U2iUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTExMTAwMDAxMloX DTI1MTIxNjIzNTk1OVowejFJMEcGA1UEBRNAOTY5ZTQzODkxZTBhNWJjZjRhN2Nj Mzg1N2I1ZjNhMjk3MDUzOTQwNmMwNzRjOGQ5OTJkOTQwYjY3OWVmZjVhYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CsddhABPRY8bM8GbWIBjcAnGNO5 cubmmAve/9Jfe3CozFJCh9CNF54E6H6z1Mz7XDfBNsCBtdJ35rsIH4RI3yCCh7Oe TNy+UjSWFHZhdNhZooItC3IQ9lSS/ohJs6fRF3ibJREvE8BZN7zjG8assfRI7EZZ NOUbBFeSDX4DqIpeOkVdoXUwPHsjLkIPBRuUvFEr1y2YWldfij2zCcf40nAkpdK1 fYk9ctz7bVO8WcNJrC9tatm/sLoholE80nr1jEz9ZYz/jHOVZMj6y1d5j3PYe7fL miGM7qEPreDw+61+DSWPNX5bB/sNhY1GSDGIFXp1Ww6mffC8rAwaXFBUZQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFKV/cMxcTS+Z8TJlAAB7gqS2r7LKMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgxODdkN2ExLWVjNGUtNGNhYi1hOGM3LTkyMWE3NDkyZTg5Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK9hBMA0GCSqGSIb3DQEBCwUAA4IBAQAoXo1/0ByvlK7ncjomwqxu 5JRTHHRUwWOVfZ0rM+URRCpjDiGxwf34tws+0zgXm98YuDeccD95HAEbyVFduULn E/q4eUKzsNM/McuQvexGw56YcSbTEQFZgPQfLKQXREmOP44CyzV/UP6ZvTvw0BDG QQQwz28iZigJesLubU+UWM03ogZ1MxtKjkhHU8qeLLVWV9dIYjmYFddGqN+VQgZs 52tSpvKC7C/6+BgdmXh8ugHYFb9X5J/gJhfnHDK39ewGhP0DvsN4ly4Fez7x4RCu twpKsBpSCpmM2f7qNZQw8G80JNPLIxEBrwe5Yv7s93o8SgNPNZ+r9UI3Fn+/Imyi -----END CERTIFICATE-----Generated at Tue Nov 18 13:10:44 2025 by rpki-client