This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31323a3a2f36342d3634203d3e20333939313634.roa
File: 323430333a323530303a383030303a31323a3a2f36342d3634203d3e20333939313634.roa (raw, json)
Hash identifier: vMX1m653oNyj15F2eYPQKhqNFV8kF2BEw5uci5nccSg=
Subject key identifier: 70:F0:7F:57:D0:22:6D:CA:DA:57:7D:9B:54:10:AA:D9:A0:66:1C:7C
Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Certificate serial: 53FC9523534E3ECC818C24EAA75245E7379D2E32
Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31323a3a2f36342d3634203d3e20333939313634.roa
Signing time: Sat 08 Nov 2025 12:14:33 +0000
ROA not before: Sat 08 Nov 2025 12:09:33 +0000
ROA not after: Sat 07 Nov 2026 12:14:33 +0000
asID: 399164
IP address blocks: 2403:2500:8000:12::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:fc:95:23:53:4e:3e:cc:81:8c:24:ea:a7:52:45:e7:37:9d:2e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186
Validity
Not Before: Nov 8 12:09:33 2025 GMT
Not After : Nov 7 12:14:33 2026 GMT
Subject: CN=70F07F57D0226DCADA577D9B5410AAD9A0661C7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:ff:fb:b0:5c:df:8b:fb:74:e3:1b:8a:44:
d2:14:39:de:76:cd:00:35:f6:fa:9e:76:50:89:dd:
0b:c6:9b:2a:cf:d9:43:3e:59:29:83:1a:49:60:35:
7e:c9:0d:0b:84:b9:8e:1c:ff:22:ea:bd:73:93:60:
12:70:81:85:3e:91:4e:76:a3:72:c4:c6:8c:c8:bc:
1a:7f:ff:0c:63:89:5c:86:b0:ee:e8:73:98:26:8e:
93:a3:cc:50:56:0a:1e:08:2d:32:f2:f0:d8:54:43:
3d:32:42:50:4b:a7:d1:de:db:10:4b:6a:01:aa:4e:
99:74:f3:20:08:78:52:73:7b:6a:35:7c:a6:08:81:
b7:72:51:e1:0b:18:bd:aa:8e:3d:8a:c5:2d:02:73:
08:34:23:82:07:f6:5b:c3:e7:dd:e9:ed:33:85:36:
d2:59:4e:a3:d0:dd:d5:cf:30:32:4a:ed:0f:ad:ae:
06:cf:b4:7a:27:32:85:7d:47:64:7c:44:de:c5:12:
25:85:64:ba:c2:01:b6:03:c7:6b:56:4e:2d:cb:54:
bc:e3:ea:c0:d3:88:02:14:de:97:f9:e9:71:a6:77:
21:2e:80:b3:31:93:13:48:6d:b6:08:cd:7f:21:41:
35:c8:a7:11:71:a3:35:38:53:11:61:8d:17:33:dd:
5b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F0:7F:57:D0:22:6D:CA:DA:57:7D:9B:54:10:AA:D9:A0:66:1C:7C
X509v3 Authority Key Identifier:
keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31323a3a2f36342d3634203d3e20333939313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:2500:8000:12::/64
Signature Algorithm: sha256WithRSAEncryption
22:b3:af:74:43:61:47:de:ef:c6:73:f0:d7:28:bf:5a:bd:e9:
44:16:57:31:19:ba:de:0b:94:7d:7a:ae:d4:bc:a8:3a:60:07:
1e:e2:94:32:96:46:71:16:01:3a:24:a5:ce:dd:be:51:a4:f0:
eb:c0:e9:90:69:21:d8:78:54:7b:ec:56:31:5e:e3:f5:df:77:
60:bd:75:34:e6:80:8a:b9:17:6c:f0:f4:14:2c:23:43:1c:97:
94:53:2e:22:3a:e7:6e:b4:86:cc:70:17:0b:89:51:17:8e:b3:
28:44:ea:0d:26:66:e1:52:4f:ae:23:02:47:af:c7:b0:67:1a:
f7:e5:c0:b4:44:5c:7c:1b:e5:80:59:9e:76:17:22:ac:45:15:
9a:75:81:35:a9:66:c1:21:f3:cd:db:6a:42:57:c5:05:5c:fe:
08:70:9c:de:3a:7e:6a:fb:0d:69:4d:c6:6f:a2:bc:f9:c0:03:
4b:88:64:d1:29:90:3d:e0:bb:41:7e:c2:c2:fb:1c:ae:88:67:
22:01:76:7a:5c:63:3d:55:e1:57:32:ec:bd:14:36:d9:76:ff:
00:a6:f6:8b:dd:86:0e:74:8d:bb:ab:e7:ee:cc:bb:69:98:e6:
65:e1:37:2a:f3:23:a3:a7:c8:b9:ef:a4:c5:38:bd:73:77:d1:
cc:60:73:e1
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUU/yVI1NOPsyBjCTqp1JF5zedLjIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0
QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI1MTEwODEyMDkzM1oX
DTI2MTEwNzEyMTQzM1owMzExMC8GA1UEAxMoNzBGMDdGNTdEMDIyNkRDQURBNTc3
RDlCNTQxMEFBRDlBMDY2MUM3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK3P//uwXN+L+3TjG4pE0hQ53nbNADX2+p52UIndC8abKs/ZQz5ZKYMaSWA1
fskNC4S5jhz/Iuq9c5NgEnCBhT6RTnajcsTGjMi8Gn//DGOJXIaw7uhzmCaOk6PM
UFYKHggtMvLw2FRDPTJCUEun0d7bEEtqAapOmXTzIAh4UnN7ajV8pgiBt3JR4QsY
vaqOPYrFLQJzCDQjggf2W8Pn3entM4U20llOo9Dd1c8wMkrtD62uBs+0eicyhX1H
ZHxE3sUSJYVkusIBtgPHa1ZOLctUvOPqwNOIAhTel/npcaZ3IS6AszGTE0httgjN
fyFBNcinEXGjNThTEWGNFzPdW98CAwEAAaOCAlEwggJNMB0GA1UdDgQWBBRw8H9X
0CJtytpXfZtUEKrZoGYcfDAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x
hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2
ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE
RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y
cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3
QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgbIGCCsG
AQUFBwELBIGlMIGiMIGfBggrBgEFBQcwC4aBknJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4
Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzgzMDMwMzAzYTMxMzIzYTNhMmYzNjM0
MmQzNjM0MjAzZDNlMjAzMzM5MzkzMTM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwJAYIKwYBBQUHAQcBAf8EFTATMBEEAgACMAsDCQAkAyUAgAAAEjAN
BgkqhkiG9w0BAQsFAAOCAQEAIrOvdENhR97vxnPw1yi/Wr3pRBZXMRm63guUfXqu
1LyoOmAHHuKUMpZGcRYBOiSlzt2+UaTw68DpkGkh2HhUe+xWMV7j9d93YL11NOaA
irkXbPD0FCwjQxyXlFMuIjrnbrSGzHAXC4lRF46zKETqDSZm4VJPriMCR6/HsGca
9+XAtERcfBvlgFmedhcirEUVmnWBNalmwSHzzdtqQlfFBVz+CHCc3jp+avsNaU3G
b6K8+cADS4hk0SmQPeC7QX7CwvscrohnIgF2elxjPVXhVzLsvRQ22Xb/AKb2i92G
DnSNu6vn7sy7aZjmZeE3KvMjo6fIue+kxTi9c3fRzGBz4Q==
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:42:37 2025 by rpki-client