This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72a92468-955c-4942-86f7-be976f5fe4ad.roa File: 72a92468-955c-4942-86f7-be976f5fe4ad.roa (raw, json) Hash identifier: rGcmtgjs3Zhggr8aG3TIDL39X52GLPv3GThWdzK0j5I= Subject key identifier: 14:0E:A8:30:C4:CE:7A:20:6F:E7:C0:2A:C3:EF:5A:B6:C6:16:E1:8E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7BF803413B3344FF598B75B61B164AE006700797 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72a92468-955c-4942-86f7-be976f5fe4ad.roa Signing time: Sun 23 Nov 2025 00:20:05 +0000 ROA not before: Sun 23 Nov 2025 00:20:05 +0000 ROA not after: Sat 21 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:20c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f8:03:41:3b:33:44:ff:59:8b:75:b6:1b:16:4a:e0:06:70:07:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 23 00:20:05 2025 GMT Not After : Feb 21 23:59:59 2026 GMT Subject: serialNumber=0e861faee2e92234ced70c8194d3b1d5688760419d0c0cc6850dd02a8f42ecf6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:a8:a7:bc:57:0d:c3:f6:ca:44:dc:ff:8e: 5a:c8:f4:92:02:23:5c:01:6e:06:3b:0c:ca:67:b3: 14:3e:80:4a:6b:bd:bd:a0:0e:c3:b7:d6:42:2d:18: 8d:7f:7c:8b:5b:2d:99:fa:38:ac:25:7a:4f:18:9e: 3c:74:a0:7a:68:2a:9b:3d:28:47:17:c2:78:00:89: 25:79:dd:bb:33:17:09:50:0e:aa:e3:a1:2a:95:e2: 53:8c:09:21:a1:45:d9:ce:5b:76:fc:94:34:27:fc: f2:13:0f:3a:6b:b0:c6:dd:2b:46:44:8d:b8:c5:b6: 55:55:90:cd:ca:06:37:1e:a0:44:2b:7b:d5:df:7a: f8:b0:8e:9d:cc:86:21:da:88:77:45:66:fc:31:8c: cd:d3:6b:05:de:eb:13:4a:4a:de:c3:10:bd:86:48: 7b:9e:0a:c8:07:fb:6a:39:85:6c:7f:b7:dc:1c:27: 7b:ef:ac:6a:aa:d8:df:bb:e2:35:28:66:11:db:a1: ef:55:91:a7:f7:01:8d:21:e3:a2:71:aa:dc:5e:7a: 51:68:2c:df:c5:86:8f:23:a4:4c:7e:32:46:f2:f5: 8b:63:1f:f5:48:02:52:55:23:67:7d:a3:d9:20:bb: 16:73:dc:a2:86:5c:d6:80:59:dc:d0:5d:00:39:41: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0E:A8:30:C4:CE:7A:20:6F:E7:C0:2A:C3:EF:5A:B6:C6:16:E1:8E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72a92468-955c-4942-86f7-be976f5fe4ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:20c0::/46 Signature Algorithm: sha256WithRSAEncryption 3f:88:30:27:b3:7c:6a:2a:33:0a:54:ef:cc:8e:fd:3f:4e:70: 9c:a7:51:fc:70:84:0d:c9:62:7b:3c:21:ae:59:24:9a:bf:68: bd:54:b9:e4:48:93:17:8d:ef:3e:23:fd:86:b3:29:62:26:88: 99:4d:96:ad:e9:48:37:6c:ff:aa:07:8c:8c:fa:2f:39:12:7a: 80:f8:ad:df:7c:a2:af:79:c1:e1:ca:39:50:20:4b:cc:55:d9: b6:80:67:18:fb:3b:36:82:0f:ae:7f:d8:b0:7b:4c:0b:9e:9f: 63:bc:69:3b:cd:d3:ef:cd:78:d2:21:4c:c8:ea:62:37:6e:82: 50:b5:69:f4:d9:7f:80:b3:ef:83:96:6f:21:7a:b9:76:7e:d9: 1d:da:f6:df:cd:6e:8d:d4:a0:b7:4f:ed:f3:4b:ae:ac:94:0a: 1a:0a:45:db:5f:db:60:b7:a6:4e:19:c6:24:c9:90:87:61:b0: 48:a3:8e:99:15:f4:43:25:d9:cc:a8:46:77:49:ff:16:17:38: 4c:08:e6:d5:68:ec:83:84:e1:9b:f2:fe:a1:f8:17:a6:1e:e7: 1d:7e:4d:b7:38:05:b8:1b:ee:c8:ff:f9:b5:33:4b:c8:c6:e2: 2e:b6:cf:16:3f:92:0b:ff:37:c4:88:1c:03:c7:a6:b2:53:b1: ea:3c:e1:69 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUe/gDQTszRP9Zi3W2GxZK4AZwB5cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEyMzAwMjAwNVoX DTI2MDIyMTIzNTk1OVowejFJMEcGA1UEBRNAMGU4NjFmYWVlMmU5MjIzNGNlZDcw YzgxOTRkM2IxZDU2ODg3NjA0MTlkMGMwY2M2ODUwZGQwMmE4ZjQyZWNmNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3euop7xXDcP2ykTc/45ayPSSAiNc AW4GOwzKZ7MUPoBKa729oA7Dt9ZCLRiNf3yLWy2Z+jisJXpPGJ48dKB6aCqbPShH F8J4AIkled27MxcJUA6q46EqleJTjAkhoUXZzlt2/JQ0J/zyEw86a7DG3StGRI24 xbZVVZDNygY3HqBEK3vV33r4sI6dzIYh2oh3RWb8MYzN02sF3usTSkrewxC9hkh7 ngrIB/tqOYVsf7fcHCd776xqqtjfu+I1KGYR26HvVZGn9wGNIeOicarcXnpRaCzf xYaPI6RMfjJG8vWLYx/1SAJSVSNnfaPZILsWc9yihlzWgFnc0F0AOUH/rwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBQOqDDEznogb+fAKsPvWrbGFuGOMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcyYTkyNDY4LTk1NWMtNDk0Mi04NmY3LWJlOTc2ZjVmZTRhZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8yDAMA0GCSqGSIb3DQEBCwUAA4IBAQA/iDAns3xqKjMKVO/M jv0/TnCcp1H8cIQNyWJ7PCGuWSSav2i9VLnkSJMXje8+I/2GsyliJoiZTZat6Ug3 bP+qB4yM+i85EnqA+K3ffKKvecHhyjlQIEvMVdm2gGcY+zs2gg+uf9iwe0wLnp9j vGk7zdPvzXjSIUzI6mI3boJQtWn02X+As++Dlm8herl2ftkd2vbfzW6N1KC3T+3z S66slAoaCkXbX9tgt6ZOGcYkyZCHYbBIo46ZFfRDJdnMqEZ3Sf8WFzhMCObVaOyD hOGb8v6h+BemHucdfk23OAW4G+7I//m1M0vIxuIuts8WP5IL/zfEiBwDx6ayU7Hq POFp -----END CERTIFICATE-----Generated at Sun Nov 23 05:42:26 2025 by rpki-client