This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a78e1a16-4d56-431c-87c0-735d09420996.roa File: a78e1a16-4d56-431c-87c0-735d09420996.roa (raw, json) Hash identifier: 5pYR5muoXNE+NTeBRsXHz+sfrEjHgLdRJEY/FfqDwHQ= Subject key identifier: F6:51:7A:7B:C7:41:3E:AD:13:E4:B3:83:0A:0B:E0:42:D4:DF:E6:9A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F7EF7F0B4D02B84AD8BD27AFCFCA4D41E16FEFD Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a78e1a16-4d56-431c-87c0-735d09420996.roa Signing time: Sat 08 Nov 2025 00:00:41 +0000 ROA not before: Sat 08 Nov 2025 00:00:41 +0000 ROA not after: Sat 13 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 126.228.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:7e:f7:f0:b4:d0:2b:84:ad:8b:d2:7a:fc:fc:a4:d4:1e:16:fe:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 8 00:00:41 2025 GMT Not After : Dec 13 23:59:59 2025 GMT Subject: serialNumber=79f2b334b08c97eed873687ba64f6ff5e92ead3176db6d0e1367f075cadd15a9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:09:65:f3:52:b0:15:26:4e:43:73:e4:e3:cf: 0d:32:6a:66:e5:1d:cd:a5:82:97:e4:05:fb:9c:32: 92:97:c6:31:9a:ac:99:ed:5d:ce:9f:2e:ee:dc:4d: 66:72:91:69:a1:4d:10:63:98:92:64:a5:ec:b0:eb: 83:b8:28:c6:5a:6d:fa:58:a5:7c:92:fe:f2:03:ec: a4:ca:1e:e8:7e:76:13:ba:e1:61:8a:9e:89:fb:d5: 17:05:23:f3:14:0e:bf:71:7b:06:e1:e9:f8:af:39: a1:c1:43:b2:8e:19:a9:ed:0e:ff:81:60:44:d1:42: 97:32:ca:98:14:18:27:f9:2c:9e:02:65:1d:fb:ce: ce:5b:76:8c:47:2b:cc:e7:b8:a3:9c:53:17:55:05: 2b:02:41:eb:10:f5:57:06:21:7b:32:2a:65:2e:35: c5:64:31:87:9e:a2:4b:00:15:6f:ed:de:ce:21:f9: 37:12:e8:01:82:91:51:06:3e:f8:8b:e3:73:e7:b5: 01:dc:22:a7:c7:b4:62:5a:cc:fb:c4:73:ea:b7:ee: bc:cd:75:d0:18:77:62:0a:78:f7:e7:72:57:70:bd: fb:5d:b8:ba:5a:74:e4:86:14:ed:79:55:6d:69:83: ca:59:ca:4e:91:23:91:69:96:4e:19:9a:f9:86:89: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:51:7A:7B:C7:41:3E:AD:13:E4:B3:83:0A:0B:E0:42:D4:DF:E6:9A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a78e1a16-4d56-431c-87c0-735d09420996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 126.228.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5c:6a:db:7f:29:8d:7a:fd:3c:43:c1:ef:57:61:0c:8a:0e:36: 4e:d9:0c:be:cf:df:1f:92:99:ee:84:36:f9:28:e3:b5:ad:23: 76:6c:27:20:da:31:06:bd:26:e7:d2:76:47:c8:32:8d:1b:ba: 39:09:32:f6:c1:0b:b9:e6:86:37:4b:53:e3:15:c9:a5:f7:1f: d8:eb:d8:32:61:df:a5:ff:b5:6f:15:95:04:23:c7:07:dd:ee: ba:ca:0a:3a:76:b7:65:29:66:6d:e4:63:1b:39:9c:5c:d7:55: e2:cb:8e:d8:c3:09:63:e1:e4:8d:54:65:1a:fc:3e:d2:b9:b6: f9:ff:e1:4b:94:6b:be:86:17:5d:87:21:4f:30:7c:64:22:43: e9:3f:b6:b6:91:cb:46:d6:0e:f8:d1:05:90:7f:05:7e:89:84: cc:3f:34:66:b6:1a:55:eb:05:df:a5:9c:00:d8:65:7b:fc:cc: 84:3d:17:35:7c:3a:0c:6e:b4:85:5c:ae:28:31:cb:b2:0d:9f: 5f:5f:a7:c4:89:48:1c:c7:d1:03:a0:76:15:77:9f:60:f3:f9: fd:d4:b5:26:8c:b0:3c:1a:0b:02:0c:2b:81:39:6f:de:33:cf: 79:97:21:d7:7c:ad:b4:d1:ce:77:38:ad:27:88:75:26:3d:39: cc:92:e9:f2 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUf3738LTQK4Sti9J6/Pyk1B4W/v0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwODAwMDA0MVoX DTI1MTIxMzIzNTk1OVowejFJMEcGA1UEBRNANzlmMmIzMzRiMDhjOTdlZWQ4NzM2 ODdiYTY0ZjZmZjVlOTJlYWQzMTc2ZGI2ZDBlMTM2N2YwNzVjYWRkMTVhOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQll81KwFSZOQ3Pk488NMmpm5R3N pYKX5AX7nDKSl8YxmqyZ7V3Ony7u3E1mcpFpoU0QY5iSZKXssOuDuCjGWm36WKV8 kv7yA+ykyh7ofnYTuuFhip6J+9UXBSPzFA6/cXsG4en4rzmhwUOyjhmp7Q7/gWBE 0UKXMsqYFBgn+SyeAmUd+87OW3aMRyvM57ijnFMXVQUrAkHrEPVXBiF7MiplLjXF ZDGHnqJLABVv7d7OIfk3EugBgpFRBj74i+Nz57UB3CKnx7RiWsz7xHPqt+68zXXQ GHdiCnj353JXcL37Xbi6WnTkhhTteVVtaYPKWcpOkSORaZZOGZr5holaUwIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFPZRenvHQT6tE+SzgwoL4ELU3+aaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E3OGUxYTE2LTRkNTYtNDMxYy04N2MwLTczNWQwOTQyMDk5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAfuQwDQYJKoZIhvcNAQELBQADggEBAFxq238pjXr9PEPB71dhDIoO Nk7ZDL7P3x+Sme6ENvko47WtI3ZsJyDaMQa9JufSdkfIMo0bujkJMvbBC7nmhjdL U+MVyaX3H9jr2DJh36X/tW8VlQQjxwfd7rrKCjp2t2UpZm3kYxs5nFzXVeLLjtjD CWPh5I1UZRr8PtK5tvn/4UuUa76GF12HIU8wfGQiQ+k/traRy0bWDvjRBZB/BX6J hMw/NGa2GlXrBd+lnADYZXv8zIQ9FzV8OgxutIVcrigxy7INn19fp8SJSBzH0QOg dhV3n2Dz+f3UtSaMsDwaCwIMK4E5b94zz3mXIdd8rbTRznc4rSeIdSY9OcyS6fI= -----END CERTIFICATE-----Generated at Sun Nov 23 05:44:01 2025 by rpki-client