This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21f525e8-dbad-41ae-a8f0-380e644cd76d.roa File: 21f525e8-dbad-41ae-a8f0-380e644cd76d.roa (raw, json) Hash identifier: DtOzg10hasDzf8wR4Voxe39bQK8BoIqM8TpuegyxOoY= Subject key identifier: FD:A8:FD:E8:A9:89:21:51:1A:05:37:78:41:ED:A4:CD:5B:FC:97:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4086342050B14AAD16A7063F55ACDE0D41A277F2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21f525e8-dbad-41ae-a8f0-380e644cd76d.roa Signing time: Sun 23 Nov 2025 00:20:34 +0000 ROA not before: Sun 23 Nov 2025 00:20:34 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:4020::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:86:34:20:50:b1:4a:ad:16:a7:06:3f:55:ac:de:0d:41:a2:77:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:20:34 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=12330115f17e15f733d83f4b2442999d8842df045537f09d716d59b864c24949, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8b:82:23:99:37:2e:6d:47:37:0b:aa:1a:20: 6f:33:0f:a5:f3:9e:ed:74:b3:d3:db:2a:09:1a:1d: f5:4b:e5:f6:f3:e4:2d:c6:78:e5:87:3a:3a:af:06: 9e:7f:b8:c5:57:41:a5:93:93:3a:81:34:11:cf:76: 51:5f:c4:73:a5:60:da:ec:f9:1b:aa:29:0b:9a:c3: 07:40:fb:9f:32:33:8a:cd:a0:92:42:70:a9:7c:3b: 85:f1:3c:19:27:24:02:8b:4b:6e:8e:06:33:59:7f: 55:cc:31:43:7e:6c:39:07:db:77:84:e1:1e:30:a1: 57:65:93:b8:c2:e1:58:58:2a:2a:16:e9:52:a4:f0: b1:4c:9a:b3:9c:50:4e:4a:64:01:e6:90:73:a8:65: c3:6a:da:66:73:d0:6f:36:61:50:1e:af:39:52:4f: 05:91:01:ad:7e:91:d2:db:7f:da:49:97:3f:01:91: b7:be:3e:8e:f9:46:18:e9:f8:7d:3a:b8:1f:64:48: 10:b7:15:a4:0b:2e:aa:52:c1:d8:dd:d3:c1:7b:f7: 2d:75:e2:8f:7e:49:a4:06:50:09:9b:66:1b:c8:83: 40:84:63:31:f4:e6:bc:b5:1b:94:78:c5:42:85:84: ac:75:52:15:15:7c:87:8a:2b:b2:4a:44:e7:5c:8e: 3a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A8:FD:E8:A9:89:21:51:1A:05:37:78:41:ED:A4:CD:5B:FC:97:E7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/21f525e8-dbad-41ae-a8f0-380e644cd76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:4020::/46 Signature Algorithm: sha256WithRSAEncryption a6:25:88:b6:28:33:5d:45:93:7e:2c:0f:6c:dc:3e:4a:9f:44: 94:13:9c:80:2c:02:38:88:27:3d:cc:25:96:36:13:79:aa:62: d8:19:98:e0:6c:f4:39:66:83:67:d5:09:c9:78:b5:a9:e5:cf: 7c:4f:11:e6:97:72:92:c6:3e:84:d7:8b:66:6f:9f:47:44:02: 2c:e0:1e:39:a2:2a:0e:5e:e3:40:14:27:69:b3:9b:ec:1c:5c: e7:f4:00:97:e6:49:7d:fc:0e:a8:1e:05:60:f5:68:e3:8f:0a: 40:82:40:08:4f:d1:da:0f:d8:c3:93:ad:2d:ac:31:44:9a:0c: 60:5f:e8:00:ce:d3:54:30:34:9e:e8:32:89:af:71:3b:67:24: 2e:3a:3f:7d:55:7e:e3:5c:84:7b:13:ed:1c:fc:8c:7a:50:d7: f2:bd:ee:64:eb:94:de:f2:d5:da:c9:06:88:b8:ce:d5:42:0b: 70:a5:8e:86:4d:f9:01:2b:c4:f1:4a:90:9c:5c:e1:ee:37:e5: 40:4b:24:e2:ca:08:0e:22:69:db:8a:a9:2e:27:47:5a:33:01: 5f:e6:d8:6b:ff:2e:f4:4a:e2:f1:60:92:6c:2a:9d:b1:3c:14: 7a:f6:a5:94:b2:d6:00:69:d3:e3:5c:bc:18:f8:11:a8:c6:11: 36:d1:16:e9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQIY0IFCxSq0WpwY/VazeDUGid/IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMjAzNFoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAMTIzMzAxMTVmMTdlMTVmNzMzZDgz ZjRiMjQ0Mjk5OWQ4ODQyZGYwNDU1MzdmMDlkNzE2ZDU5Yjg2NGMyNDk0OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YuCI5k3Lm1HNwuqGiBvMw+l857t dLPT2yoJGh31S+X28+Qtxnjlhzo6rwaef7jFV0Glk5M6gTQRz3ZRX8RzpWDa7Pkb qikLmsMHQPufMjOKzaCSQnCpfDuF8TwZJyQCi0tujgYzWX9VzDFDfmw5B9t3hOEe MKFXZZO4wuFYWCoqFulSpPCxTJqznFBOSmQB5pBzqGXDatpmc9BvNmFQHq85Uk8F kQGtfpHS23/aSZc/AZG3vj6O+UYY6fh9OrgfZEgQtxWkCy6qUsHY3dPBe/ctdeKP fkmkBlAJm2YbyINAhGMx9Oa8tRuUeMVChYSsdVIVFXyHiiuySkTnXI463wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP2o/eipiSFRGgU3eEHtpM1b/JfnMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzIxZjUyNWU4LWRiYWQtNDFhZS1hOGYwLTM4MGU2NDRjZDc2ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba80AgMA0GCSqGSIb3DQEBCwUAA4IBAQCmJYi2KDNdRZN+LA9s 3D5Kn0SUE5yALAI4iCc9zCWWNhN5qmLYGZjgbPQ5ZoNn1QnJeLWp5c98TxHml3KS xj6E14tmb59HRAIs4B45oioOXuNAFCdps5vsHFzn9ACX5kl9/A6oHgVg9WjjjwpA gkAIT9HaD9jDk60trDFEmgxgX+gAztNUMDSe6DKJr3E7ZyQuOj99VX7jXIR7E+0c /Ix6UNfyve5k65Te8tXayQaIuM7VQgtwpY6GTfkBK8TxSpCcXOHuN+VASyTiyggO ImnbiqkuJ0daMwFf5thr/y70SuLxYJJsKp2xPBR69qWUstYAadPjXLwY+BGoxhE2 0Rbp -----END CERTIFICATE-----Generated at Sun Nov 23 05:41:30 2025 by rpki-client