This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57b64146-2dfe-4666-822a-d00679884d52.roa File: 57b64146-2dfe-4666-822a-d00679884d52.roa (raw, json) Hash identifier: N5N2lYKQO74fESvjn1YERL3F469h7jhW9bueErSq0xA= Subject key identifier: 11:7C:A6:79:9D:C0:29:8F:9F:89:3A:70:36:83:3A:9F:C2:C0:B7:1E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3DF7903C3DC95EF24937BBCA1A6320C009B64D3F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57b64146-2dfe-4666-822a-d00679884d52.roa Signing time: Sun 23 Nov 2025 00:10:57 +0000 ROA not before: Sun 23 Nov 2025 00:10:57 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:c8c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f7:90:3c:3d:c9:5e:f2:49:37:bb:ca:1a:63:20:c0:09:b6:4d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:10:57 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=3d466b4ad49df81e712c0a58305db07d5ce51f1c7f8a24f4a629240a6e0468d0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8b:ec:64:c7:bf:88:f3:3a:c5:3f:5b:58:3c: 29:a1:32:ab:8b:9b:fe:59:2c:9c:60:fd:c1:f4:eb: ec:f0:77:51:7b:08:47:f5:a2:18:8a:60:29:b0:14: d6:57:08:5b:db:23:ba:2f:08:78:83:62:f5:91:42: 6d:6b:7b:46:da:7a:6a:4d:29:c5:fe:8e:36:94:08: f9:b6:5d:c5:54:ad:e2:22:c0:2c:88:e6:19:2d:87: c4:0f:fb:8f:42:92:d7:2a:04:15:82:98:d5:30:ca: 8e:2b:05:86:5d:fb:b2:8b:d5:1f:c9:8a:18:e4:2e: 07:a2:88:73:9f:18:ac:5f:ea:5f:00:ee:6c:70:6b: c1:e8:9f:51:c9:72:a7:1c:7a:f1:83:fe:ab:c6:0c: d0:bd:4e:a6:05:21:72:54:c6:e4:94:e1:3d:6d:28: 38:d5:78:ae:1d:37:f3:cd:51:a1:d9:4d:21:ea:fc: d6:2b:5b:bb:cb:00:cb:3a:52:a6:bb:cf:f7:8e:b0: 84:27:3b:c7:59:90:be:ad:65:66:d2:a9:b3:25:17: 9c:1f:93:d8:5a:6e:1d:88:5a:2e:7c:e1:5b:9f:62: ff:c7:17:30:4e:ec:fb:fd:91:20:54:d8:11:70:70: 1a:4f:e9:b4:77:6c:9e:3c:58:e2:5e:60:f7:4f:28: 41:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7C:A6:79:9D:C0:29:8F:9F:89:3A:70:36:83:3A:9F:C2:C0:B7:1E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/57b64146-2dfe-4666-822a-d00679884d52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:c8c0::/46 Signature Algorithm: sha256WithRSAEncryption 96:78:24:04:36:34:9f:6b:90:a7:b1:79:b6:e2:78:4e:18:3b: d8:43:3b:6d:a1:b7:7e:2d:19:d4:89:07:2e:0d:c0:2d:db:28: b8:58:ea:69:24:83:f1:f5:7a:37:6d:d8:b4:c0:1e:dd:9d:23: 2d:72:1b:c1:1b:31:d4:1e:5f:1b:d4:39:98:f1:cc:71:cf:c0: 44:04:3b:bb:d4:3c:9d:ac:22:20:b7:a2:b3:55:d4:c9:00:82: 1e:98:df:00:b5:36:ae:a9:00:b2:1d:4c:fa:61:2f:20:a7:42: 66:85:8b:71:1f:6e:aa:d8:79:f9:97:2f:e4:d3:70:98:90:c4: ed:46:cc:d8:bb:a6:30:1d:e7:3e:88:ad:c6:78:cc:8d:68:9b: a5:d7:65:aa:6c:e7:b2:8a:5f:5c:2e:d4:12:c6:18:11:2e:5b: e1:90:c0:c6:8a:22:a7:06:a5:3e:75:7b:52:4b:7e:90:26:e6: 44:6f:b8:9a:e9:86:2c:de:4c:dd:f0:cc:e1:8d:b0:c7:1f:00: cc:14:60:4f:1b:75:7e:90:da:bc:b8:04:d4:77:58:72:d4:65: 7b:78:2e:9e:b9:49:a8:23:be:90:9d:a9:36:ab:3a:bd:59:7e: cf:1b:3b:41:e8:f6:a8:fd:5d:60:97:01:05:ed:91:5f:17:77: e7:67:a4:5a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPfeQPD3JXvJJN7vKGmMgwAm2TT8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMTA1N1oX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAM2Q0NjZiNGFkNDlkZjgxZTcxMmMw YTU4MzA1ZGIwN2Q1Y2U1MWYxYzdmOGEyNGY0YTYyOTI0MGE2ZTA0NjhkMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiovsZMe/iPM6xT9bWDwpoTKri5v+ WSycYP3B9Ovs8HdRewhH9aIYimApsBTWVwhb2yO6Lwh4g2L1kUJta3tG2npqTSnF /o42lAj5tl3FVK3iIsAsiOYZLYfED/uPQpLXKgQVgpjVMMqOKwWGXfuyi9UfyYoY 5C4HoohznxisX+pfAO5scGvB6J9RyXKnHHrxg/6rxgzQvU6mBSFyVMbklOE9bSg4 1XiuHTfzzVGh2U0h6vzWK1u7ywDLOlKmu8/3jrCEJzvHWZC+rWVm0qmzJRecH5PY Wm4diFoufOFbn2L/xxcwTuz7/ZEgVNgRcHAaT+m0d2yePFjiXmD3TyhBZwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBF8pnmdwCmPn4k6cDaDOp/CwLceMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU3YjY0MTQ2LTJkZmUtNDY2Ni04MjJhLWQwMDY3OTg4NGQ1Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba88jAMA0GCSqGSIb3DQEBCwUAA4IBAQCWeCQENjSfa5CnsXm2 4nhOGDvYQzttobd+LRnUiQcuDcAt2yi4WOppJIPx9Xo3bdi0wB7dnSMtchvBGzHU Hl8b1DmY8cxxz8BEBDu71DydrCIgt6KzVdTJAIIemN8AtTauqQCyHUz6YS8gp0Jm hYtxH26q2Hn5ly/k03CYkMTtRszYu6YwHec+iK3GeMyNaJul12WqbOeyil9cLtQS xhgRLlvhkMDGiiKnBqU+dXtSS36QJuZEb7ia6YYs3kzd8MzhjbDHHwDMFGBPG3V+ kNq8uATUd1hy1GV7eC6euUmoI76Qnak2qzq9WX7PGztB6Pao/V1glwEF7ZFfF3fn Z6Ra -----END CERTIFICATE-----Generated at Sun Nov 23 05:44:38 2025 by rpki-client