This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa File: 77b66450-4698-44c5-9f99-8e8f76945e37.roa (raw, json) Hash identifier: MB3FfYj4rs2wriagNxAI1esScvk8Tilsh7KZEj/2ihY= Subject key identifier: 08:95:54:8A:3E:29:CF:6A:75:BE:F6:1D:B8:F2:84:75:82:1C:14:AE Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 39AD8DEDCA373E8DECD197EEF2A84510D0078383 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa Signing time: Sat 08 Nov 2025 00:10:06 +0000 ROA not before: Sat 08 Nov 2025 00:10:06 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:1000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ad:8d:ed:ca:37:3e:8d:ec:d1:97:ee:f2:a8:45:10:d0:07:83:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:10:06 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=9e7fd8cff57309d9af75a88efe40e10fbcc3a1e9d7e13cf3fe0757059259f9cb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:b9:57:dc:3c:32:1e:9f:ac:96:76:fd:cf: 9e:d0:44:85:4c:60:a5:3c:ef:6c:45:db:8f:72:28: c7:d5:87:57:6d:92:bb:8f:fe:c6:70:00:15:36:ef: e6:14:02:d3:56:90:20:08:96:39:0e:3b:c7:4a:c6: 53:27:47:df:e0:92:84:fd:99:c0:c9:b1:b3:2e:85: 98:76:71:a1:1e:1a:39:f5:05:26:5e:ee:c9:9e:d1: 1e:e8:ae:1b:74:1c:df:12:71:d4:59:6a:95:c9:75: e6:fb:a9:79:cf:e5:56:64:3f:d7:54:23:6b:f6:88: 0a:3d:38:2a:81:42:d8:05:b0:66:88:cf:00:21:cb: 91:dc:d1:3a:68:34:2c:60:e8:6a:55:a1:6a:da:46: 40:2f:eb:71:81:39:18:f0:00:2b:38:5f:a0:6d:cd: 76:18:d4:ea:f4:09:0d:a1:d2:6d:0e:b5:01:3b:a1: ff:18:62:09:1c:df:7c:eb:5c:bb:28:8a:8b:7e:4d: 7f:56:fd:2e:65:a4:52:9d:f2:fc:1f:98:30:f6:63: fb:54:09:9e:97:5b:31:08:58:82:2f:2a:47:ea:20: b9:b1:5d:48:9f:ad:16:55:5e:22:0c:08:2e:47:eb: 4b:74:53:77:f4:41:eb:42:26:cc:16:fe:25:44:5f: f5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:95:54:8A:3E:29:CF:6A:75:BE:F6:1D:B8:F2:84:75:82:1C:14:AE X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/77b66450-4698-44c5-9f99-8e8f76945e37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:1000::/40 Signature Algorithm: sha256WithRSAEncryption 40:ab:30:64:db:26:67:9a:b4:91:59:be:66:2f:9d:eb:4d:76: fd:92:10:9c:b3:fc:87:68:7b:9d:c9:23:83:f6:94:b3:4b:e8: 73:50:3f:3f:a9:c8:58:e9:93:50:5b:27:cb:f8:32:76:93:09: f7:b0:4f:e7:16:6c:12:ff:99:9d:d2:34:83:55:21:c6:dd:40: f8:bc:2e:1c:66:a1:e6:95:cd:44:c7:7a:01:71:ed:91:a1:e1: 14:56:15:93:0c:6b:c8:2e:3d:82:9c:77:e0:28:3f:15:be:c5: 1d:c0:d1:6a:4f:dc:c5:e0:d4:36:fc:90:3f:80:96:cf:db:30: fd:bc:9d:05:01:fc:4d:a7:0b:aa:e2:26:f8:7c:59:6d:cc:9d: 0c:51:ca:fb:05:bd:a5:5c:af:8d:c3:03:e9:ce:c6:65:8c:e6: da:72:2f:2a:db:6b:a9:6e:1e:a6:0d:66:94:63:25:a3:d6:7a: 1c:6a:38:d9:b7:f5:ca:80:0b:99:88:1e:ca:8d:cb:ce:4c:40: 02:34:42:f9:e9:68:b4:be:02:14:79:f3:c1:e3:6b:7d:c9:3b: d3:f8:e9:8a:e4:15:44:c8:ad:ad:03:14:fb:0c:93:9c:0c:f2: f8:66:db:0c:cd:39:7c:f9:6f:c0:b0:ff:31:78:53:31:81:52: c7:32:86:55 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOa2N7co3Po3s0Zfu8qhFENAHg4MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMTAwNloX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNAOWU3ZmQ4Y2ZmNTczMDlkOWFmNzVh ODhlZmU0MGUxMGZiY2MzYTFlOWQ3ZTEzY2YzZmUwNzU3MDU5MjU5ZjljYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTK5V9w8Mh6frJZ2/c+e0ESFTGCl PO9sRduPcijH1YdXbZK7j/7GcAAVNu/mFALTVpAgCJY5DjvHSsZTJ0ff4JKE/ZnA ybGzLoWYdnGhHho59QUmXu7JntEe6K4bdBzfEnHUWWqVyXXm+6l5z+VWZD/XVCNr 9ogKPTgqgULYBbBmiM8AIcuR3NE6aDQsYOhqVaFq2kZAL+txgTkY8AArOF+gbc12 GNTq9AkNodJtDrUBO6H/GGIJHN9861y7KIqLfk1/Vv0uZaRSnfL8H5gw9mP7VAme l1sxCFiCLypH6iC5sV1In60WVV4iDAguR+tLdFN39EHrQibMFv4lRF/1VwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAiVVIo+Kc9qdb72HbjyhHWCHBSuMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc3YjY2NDUwLTQ2OTgtNDRjNS05Zjk5LThlOGY3Njk0NWUzNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+xAwDQYJKoZIhvcNAQELBQADggEBAECrMGTbJmeatJFZvmYv netNdv2SEJyz/Idoe53JI4P2lLNL6HNQPz+pyFjpk1BbJ8v4MnaTCfewT+cWbBL/ mZ3SNINVIcbdQPi8LhxmoeaVzUTHegFx7ZGh4RRWFZMMa8guPYKcd+AoPxW+xR3A 0WpP3MXg1Db8kD+Als/bMP28nQUB/E2nC6riJvh8WW3MnQxRyvsFvaVcr43DA+nO xmWM5tpyLyrba6luHqYNZpRjJaPWehxqONm39cqAC5mIHsqNy85MQAI0QvnpaLS+ AhR588Hja33JO9P46YrkFUTIra0DFPsMk5wM8vhm2wzNOXz5b8Cw/zF4UzGBUscy hlU= -----END CERTIFICATE-----Generated at Sun Nov 23 05:42:56 2025 by rpki-client