This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fab3da77-ebfb-4546-8acb-418377cd2663.roa File: fab3da77-ebfb-4546-8acb-418377cd2663.roa (raw, json) Hash identifier: Bbn0qr49s6vH1uS99mxn/NzWLef/8tItwW+D2FvE0cM= Subject key identifier: 88:C2:D2:BA:83:0F:60:07:6F:40:8A:11:E2:A1:CA:06:40:DC:96:8D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 041B39A0B3EFD0A60DED6902C9D5E847E2CB1449 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fab3da77-ebfb-4546-8acb-418377cd2663.roa Signing time: Sun 09 Nov 2025 00:10:06 +0000 ROA not before: Sun 09 Nov 2025 00:10:06 +0000 ROA not after: Sun 14 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2406:da2c:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Nov 2025 00:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1b:39:a0:b3:ef:d0:a6:0d:ed:69:02:c9:d5:e8:47:e2:cb:14:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Nov 9 00:10:06 2025 GMT Not After : Dec 14 23:59:59 2025 GMT Subject: serialNumber=299544621ec05c8e1fb6cd7a3e3fdf3784f26aee169873b6aa84a0ace5155e11, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:98:c1:fb:6e:21:6a:a1:3d:79:67:60:c4:02: 12:62:7c:bb:31:c8:33:1a:ce:97:d2:79:3b:73:b3: 21:1f:c3:6a:66:09:7f:0b:43:60:29:c9:39:5c:4a: a5:16:c7:84:fd:e8:0d:9c:6b:b1:32:82:49:e6:ed: 5b:99:9a:86:2c:df:00:d1:48:bf:96:eb:37:ec:75: 94:8a:5b:b3:85:fa:19:0d:b3:85:ee:4f:fb:af:42: a5:51:b2:30:d6:5c:a1:82:5e:38:a5:a4:18:b6:65: b4:c4:d4:d9:7c:24:c6:ff:57:cf:c7:fa:92:67:7a: 6b:33:5f:90:e6:c7:3e:2e:19:1f:21:5a:a1:23:9a: 8e:66:91:6f:cc:7c:af:76:85:82:ae:48:d5:89:1d: df:74:ad:55:a3:02:ef:94:ab:2e:cc:76:bb:e8:b7: 12:29:5e:7a:8b:36:1f:e1:a0:9d:19:b2:09:7c:ce: 70:c0:9e:b0:76:8f:dd:eb:0c:4a:3a:90:ef:e0:b7: 20:ea:5a:e4:49:6a:4f:ab:fc:83:3d:60:48:f3:9b: db:da:c6:ff:3f:d8:72:8f:66:4d:0b:7c:72:5d:76: ac:3a:eb:ec:4f:95:af:07:37:37:01:73:5a:fd:05: ca:08:56:5a:4b:c4:7e:b9:9b:5a:8b:70:36:b7:24: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C2:D2:BA:83:0F:60:07:6F:40:8A:11:E2:A1:CA:06:40:DC:96:8D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fab3da77-ebfb-4546-8acb-418377cd2663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2c:8000::/36 Signature Algorithm: sha256WithRSAEncryption 73:6f:17:fa:51:b4:0b:e1:d3:4c:72:31:7e:dd:af:e4:42:0c: 9c:22:fc:b7:56:98:3c:d6:7f:d9:86:03:4b:45:0e:0e:f0:6d: ee:0a:c6:c5:81:3d:76:93:a3:8a:11:a3:9e:a1:35:ef:d8:ef: d3:20:db:e7:63:60:8d:3f:b2:e5:6f:29:26:9e:37:b1:22:e4: 59:eb:3b:5d:ec:85:81:37:ec:2c:fb:d1:8a:ee:4b:a5:3f:b2: 34:ae:08:2a:46:2b:6e:f5:c4:65:86:a9:69:b4:67:97:a6:6c: 1e:aa:22:23:cf:03:89:d8:41:bc:37:5c:cf:86:53:4f:95:76: ec:3a:64:17:ac:6e:4d:f4:ea:0c:b2:89:a2:ca:90:d3:ff:0d: f7:70:66:18:53:bd:6e:c9:a5:db:af:d8:c2:c9:2e:31:3d:82: 42:f5:6c:c2:a4:c9:95:23:8c:1d:9f:4a:83:8e:0e:5f:73:32: 19:74:6b:e7:d3:d4:6d:4f:96:c5:ad:99:0c:62:f6:93:61:c8: 44:04:18:b5:4f:83:d1:9f:ee:0f:c8:bd:42:4d:7c:2e:40:3e: 2b:07:a1:b6:38:e2:1c:bd:c7:cd:76:31:83:d3:ba:9d:25:1c: 3d:47:6d:62:a5:3c:62:53:16:92:c2:59:1b:38:bf:7c:25:db: b4:c5:2f:5f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUBBs5oLPv0KYN7WkCydXoR+LLFEkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MTEwOTAwMTAwNloX DTI1MTIxNDIzNTk1OVowejFJMEcGA1UEBRNAMjk5NTQ0NjIxZWMwNWM4ZTFmYjZj ZDdhM2UzZmRmMzc4NGYyNmFlZTE2OTg3M2I2YWE4NGEwYWNlNTE1NWUxMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpjB+24haqE9eWdgxAISYny7Mcgz Gs6X0nk7c7MhH8NqZgl/C0NgKck5XEqlFseE/egNnGuxMoJJ5u1bmZqGLN8A0Ui/ lus37HWUiluzhfoZDbOF7k/7r0KlUbIw1lyhgl44paQYtmW0xNTZfCTG/1fPx/qS Z3prM1+Q5sc+LhkfIVqhI5qOZpFvzHyvdoWCrkjViR3fdK1VowLvlKsuzHa76LcS KV56izYf4aCdGbIJfM5wwJ6wdo/d6wxKOpDv4Lcg6lrkSWpPq/yDPWBI85vb2sb/ P9hyj2ZNC3xyXXasOuvsT5WvBzc3AXNa/QXKCFZaS8R+uZtai3A2tyQoKQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIjC0rqDD2AHb0CKEeKhygZA3JaNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2ZhYjNkYTc3LWViZmItNDU0Ni04YWNiLTQxODM3N2NkMjY2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaLIAwDQYJKoZIhvcNAQELBQADggEBAHNvF/pRtAvh00xyMX7d r+RCDJwi/LdWmDzWf9mGA0tFDg7wbe4KxsWBPXaTo4oRo56hNe/Y79Mg2+djYI0/ suVvKSaeN7Ei5FnrO13shYE37Cz70YruS6U/sjSuCCpGK271xGWGqWm0Z5embB6q IiPPA4nYQbw3XM+GU0+Vduw6ZBesbk306gyyiaLKkNP/DfdwZhhTvW7Jpduv2MLJ LjE9gkL1bMKkyZUjjB2fSoOODl9zMhl0a+fT1G1PlsWtmQxi9pNhyEQEGLVPg9Gf 7g/IvUJNfC5APisHobY44hy9x812MYPTup0lHD1HbWKlPGJTFpLCWRs4v3wl27TF L18= -----END CERTIFICATE-----Generated at Sun Nov 23 05:44:03 2025 by rpki-client