This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46dcea48-6573-4080-ba63-ede25e0eafc1.roa File: 46dcea48-6573-4080-ba63-ede25e0eafc1.roa (raw, json) Hash identifier: J0JL9MDd5TTSFWRn6hX2+5ns31D37juSzlt8uMmmKBo= Subject key identifier: 31:83:6A:20:44:47:AA:C6:82:C5:5C:11:F9:51:76:93:2F:B5:25:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7C8CDA40F973685B3BF494966CE34A476B11BDA0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46dcea48-6573-4080-ba63-ede25e0eafc1.roa Signing time: Sun 23 Nov 2025 00:10:55 +0000 ROA not before: Sun 23 Nov 2025 00:10:55 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:7040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8c:da:40:f9:73:68:5b:3b:f4:94:96:6c:e3:4a:47:6b:11:bd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:10:55 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=db28dccd90d594d0ffb713b95e77e0b3c555422aec7c1c25758e9f6db0a9f912, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:bb:ac:11:07:9b:83:b9:a6:2e:e4:da:e7: c0:bd:c0:84:df:ab:20:53:ea:46:88:21:82:9c:29: 09:68:14:aa:40:5f:8b:7e:4e:eb:6d:f6:8a:27:e2: 50:96:8b:93:b7:8a:d8:36:c6:7b:0b:26:a2:af:e4: cf:cf:1b:98:39:a6:a8:20:0c:60:21:4d:e5:fa:d0: 94:29:cf:dd:cc:5a:e3:76:c0:9d:4e:a6:a0:42:bf: 0e:56:ca:d2:4a:b6:42:cb:86:d1:b8:ed:32:b7:cb: 97:1b:74:bb:6e:e9:09:3f:9e:ea:d2:35:75:20:f5: 98:45:9b:81:27:49:96:4e:53:47:d2:af:ea:13:c9: ce:4a:44:76:db:e2:ae:d3:6d:17:2b:96:01:46:f1: eb:16:a7:a0:d7:e1:cf:ad:cb:cb:e1:d0:1c:a7:4b: 64:da:6a:b5:4a:6e:02:2e:8d:be:22:cd:8c:4a:24: ff:56:0e:f4:58:b8:85:7b:74:96:f8:57:30:e2:74: f3:fd:e1:6e:c0:b2:1e:81:bb:78:7f:79:b9:5b:22: 74:c1:68:60:6a:63:d9:5f:a1:7a:dc:b4:97:a8:7f: 46:d2:1a:13:24:74:76:7e:b8:25:e3:1a:5e:ce:f1: 95:2c:51:5a:5b:0a:e4:c3:63:d0:be:7f:4b:ae:89: 6f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:83:6A:20:44:47:AA:C6:82:C5:5C:11:F9:51:76:93:2F:B5:25:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46dcea48-6573-4080-ba63-ede25e0eafc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:7040::/46 Signature Algorithm: sha256WithRSAEncryption 04:74:32:89:af:59:dd:7b:02:8d:0c:93:89:d1:75:63:87:31: d8:cb:bb:c0:e7:82:17:a8:57:42:50:0d:2d:6b:cd:31:9e:88: 15:94:95:17:7e:e0:87:9d:86:d6:34:bb:af:bf:72:0e:00:b4: 7b:bd:1e:41:0e:2b:4b:7b:eb:bc:66:76:f7:50:f6:6a:ec:5a: 7f:14:59:b2:9e:0d:9e:6b:ed:8b:61:db:eb:11:c2:d6:40:30: ca:84:aa:cc:a1:eb:e8:a6:d0:05:63:18:bd:02:f5:a2:b0:52: cc:0c:7b:dc:69:8a:35:a5:83:3a:21:62:3f:59:b1:a1:14:ab: 46:de:3c:92:5d:59:10:e6:dd:ba:78:1c:a9:61:1a:71:9a:2b: 4a:ea:5c:f6:34:e2:dd:ab:47:ba:86:d2:ff:f2:df:7b:fc:3b: ad:73:aa:ed:6f:5b:8e:0a:48:cf:90:5d:8b:a5:74:69:04:9a: b3:91:c3:e7:59:de:e3:c7:f4:e2:02:3d:9e:ab:38:00:2d:75: e4:a7:55:a7:8e:db:e2:13:42:d9:d2:49:fb:c6:69:ae:7f:3b: 60:fc:0f:72:ef:27:33:5b:29:7f:e7:4d:eb:d8:2a:44:2b:ee: b9:46:e5:ae:22:95:09:98:87:e1:50:fa:b2:4c:96:86:55:f1: 64:5b:3c:a3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfIzaQPlzaFs79JSWbONKR2sRvaAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMTA1NVoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAZGIyOGRjY2Q5MGQ1OTRkMGZmYjcx M2I5NWU3N2UwYjNjNTU1NDIyYWVjN2MxYzI1NzU4ZTlmNmRiMGE5ZjkxMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSC7rBEHm4O5pi7k2ufAvcCE36sg U+pGiCGCnCkJaBSqQF+Lfk7rbfaKJ+JQlouTt4rYNsZ7Cyair+TPzxuYOaaoIAxg IU3l+tCUKc/dzFrjdsCdTqagQr8OVsrSSrZCy4bRuO0yt8uXG3S7bukJP57q0jV1 IPWYRZuBJ0mWTlNH0q/qE8nOSkR22+Ku020XK5YBRvHrFqeg1+HPrcvL4dAcp0tk 2mq1Sm4CLo2+Is2MSiT/Vg70WLiFe3SW+Fcw4nTz/eFuwLIegbt4f3m5WyJ0wWhg amPZX6F63LSXqH9G0hoTJHR2frgl4xpezvGVLFFaWwrkw2PQvn9LrolvgwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDGDaiBER6rGgsVcEflRdpMvtSVYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ2ZGNlYTQ4LTY1NzMtNDA4MC1iYTYzLWVkZTI1ZTBlYWZjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba83BAMA0GCSqGSIb3DQEBCwUAA4IBAQAEdDKJr1ndewKNDJOJ 0XVjhzHYy7vA54IXqFdCUA0ta80xnogVlJUXfuCHnYbWNLuvv3IOALR7vR5BDitL e+u8Znb3UPZq7Fp/FFmyng2ea+2LYdvrEcLWQDDKhKrMoevoptAFYxi9AvWisFLM DHvcaYo1pYM6IWI/WbGhFKtG3jySXVkQ5t26eBypYRpxmitK6lz2NOLdq0e6htL/ 8t97/Dutc6rtb1uOCkjPkF2LpXRpBJqzkcPnWd7jx/TiAj2eqzgALXXkp1Wnjtvi E0LZ0kn7xmmufztg/A9y7yczWyl/503r2CpEK+65RuWuIpUJmIfhUPqyTJaGVfFk Wzyj -----END CERTIFICATE-----Generated at Sun Nov 23 05:44:58 2025 by rpki-client