This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa
File: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (raw, json)
Hash identifier: IZjqCDuu48x7AjQOOlR475AlABLppx+n0KPWP3mbyaw=
Subject key identifier: 5A:F4:AC:79:43:E7:EE:60:FC:FD:05:C1:44:38:9D:35:D1:D6:04:68
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 03E0482E371B7E60AC15F65D8FCBD1E132BFA012
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa
Signing time: Tue 11 Nov 2025 00:00:37 +0000
ROA not before: Tue 11 Nov 2025 00:00:37 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 122.248.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 00:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e0:48:2e:37:1b:7e:60:ac:15:f6:5d:8f:cb:d1:e1:32:bf:a0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Nov 11 00:00:37 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=ab534bc2d6cac9092201a50c43948d9fff7397511e562abb9e99555d9ebde922, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d3:11:86:7d:53:08:18:98:19:7f:60:63:18:
3e:66:07:11:ef:27:d4:91:a7:25:81:4f:8a:ff:8e:
49:a5:56:01:b7:02:a3:1b:1c:12:89:06:26:57:e6:
d5:3b:ea:87:05:b8:c0:95:31:b5:92:36:4d:37:b4:
a8:c4:41:b8:bc:62:51:a7:f5:f8:ab:25:66:f3:43:
f8:a4:b0:85:f9:f8:ef:22:4e:83:8a:d8:8a:e9:0b:
37:54:4a:fe:17:01:d8:15:14:2a:1b:ba:ea:dc:e3:
e7:0b:58:01:88:f7:5a:7d:5d:10:29:fe:6d:7e:d9:
ab:b5:9b:6c:a8:d9:57:ee:10:5f:9c:cc:69:0c:85:
dc:41:25:2e:e6:43:38:80:73:64:e1:b7:85:53:3b:
2a:22:ee:24:ac:94:35:e3:16:d9:7c:9f:b7:58:7f:
42:b8:5c:bb:f6:da:bb:ff:39:98:47:c0:a7:52:ad:
76:27:31:c1:69:64:d9:7b:e0:60:4e:d6:40:86:c4:
7b:0d:f0:17:61:10:4f:78:a7:7f:9c:96:5c:48:62:
b3:de:2f:9e:c7:bc:cb:95:38:84:f1:ab:0c:89:42:
3b:42:61:6a:8a:f1:45:8f:1d:8c:30:bc:c3:d6:f8:
3b:fa:43:a4:6a:71:6f:0a:32:72:b8:82:7f:a7:af:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F4:AC:79:43:E7:EE:60:FC:FD:05:C1:44:38:9D:35:D1:D6:04:68
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.248.240.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:fc:e4:92:24:2b:00:da:16:d9:b5:6b:25:57:ca:28:29:75:
65:3d:e1:96:7f:ee:8d:be:78:ca:e3:67:be:29:42:a0:a6:15:
f5:8f:4e:bb:6c:8b:65:dc:5e:54:90:64:e0:63:e0:98:47:bc:
d1:e4:2d:33:70:03:af:b8:6f:29:29:92:61:40:50:5f:1b:91:
35:2e:d5:f1:f3:a1:3c:f1:b8:bb:86:08:31:5b:c6:fc:b5:84:
0a:ac:94:c8:e9:12:50:a7:80:f0:ef:9e:e8:e9:8c:ab:21:c6:
28:01:1b:6b:fb:79:27:b9:1b:61:4c:10:18:05:e4:74:ff:ca:
6a:72:62:47:f3:0c:d1:d8:bb:9c:8f:74:a2:af:d3:76:02:5d:
69:6e:18:5a:27:6f:4f:78:cf:0a:89:06:20:ea:7d:05:93:19:
b4:52:3c:77:0c:a4:60:04:8c:3e:d8:04:8f:8f:e7:fd:10:a6:
97:35:a1:61:6f:08:bb:02:95:da:ee:ef:6d:23:c2:f7:88:1d:
2e:ae:76:9e:98:50:68:be:b9:fb:ef:1d:25:d0:cd:26:66:5e:
23:c5:b3:00:e3:b2:bb:1a:51:a5:bb:e8:cc:4b:a5:bf:2b:2c:
02:ab:de:b2:fe:d2:77:f4:35:5d:8a:6c:67:2d:d9:44:72:64:
74:77:e9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 01:16:09 2025 by rpki-client