This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa
File: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (raw, json)
Hash identifier: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=
Subject key identifier: F8:33:40:C0:30:B6:30:63:61:18:4B:0F:61:28:50:E4:23:97:FB:BE
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 30B6D3559754ABAD7C4A26B66BDF086541F6D933
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa
Signing time: Thu 13 Nov 2025 06:53:00 +0000
ROA not before: Thu 13 Nov 2025 06:48:00 +0000
ROA not after: Thu 12 Nov 2026 06:53:00 +0000
asID: 9312
IP address blocks: 180.235.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 11:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b6:d3:55:97:54:ab:ad:7c:4a:26:b6:6b:df:08:65:41:f6:d9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Nov 13 06:48:00 2025 GMT
Not After : Nov 12 06:53:00 2026 GMT
Subject: CN=F83340C030B6306361184B0F612850E42397FBBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:b7:6f:04:e5:8e:66:51:29:cc:89:4b:ac:
ab:a9:55:a1:6f:31:e2:dc:47:8e:4d:0d:87:48:35:
b5:02:4f:3d:29:d7:76:cc:d9:88:19:f7:90:90:b4:
fe:4e:68:dd:59:85:ac:cb:f9:4c:43:85:12:fd:87:
5d:a4:3b:9a:81:78:c9:3d:63:b7:04:07:62:55:3a:
a8:b2:1e:ef:ec:ea:00:cf:cd:30:64:ec:b4:6a:b7:
87:4b:6e:dc:95:d9:6f:2a:66:b8:c7:d1:fb:cd:09:
6b:17:fa:a5:99:79:bd:a6:80:2d:4f:b6:72:4f:9a:
4c:83:7c:d7:cc:63:b0:4f:48:2e:29:12:04:a7:f5:
a8:e5:d3:bc:21:9a:36:73:66:98:04:e9:47:74:20:
68:38:2a:71:98:64:0c:26:2a:cd:71:9d:a1:e1:fc:
e9:63:9a:f7:12:89:c8:11:d7:76:c1:ae:24:2c:8c:
d5:a4:39:95:f0:04:9a:30:69:58:88:eb:a5:01:e0:
8f:7d:89:9d:ed:5a:e4:f4:44:0e:f9:62:fe:bd:18:
e4:99:d7:ca:a7:8f:db:a8:b2:b1:ce:ad:2a:00:9f:
75:45:8a:a8:5c:af:61:88:11:25:d0:68:62:33:40:
d6:3c:9d:d3:23:77:f6:87:f0:12:b2:7f:c1:64:45:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:33:40:C0:30:B6:30:63:61:18:4B:0F:61:28:50:E4:23:97:FB:BE
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.235.136.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e9:c1:3d:46:a4:bc:38:a5:7e:59:87:21:f9:19:cd:06:d2:
2a:ed:36:63:3d:8f:1f:78:60:67:e3:b7:9b:c4:c0:01:c9:09:
df:60:fd:50:c3:c9:6f:d9:5c:8b:b0:56:04:b5:03:d2:db:1f:
aa:b7:87:69:cc:7c:bb:27:61:9f:34:11:b7:35:b7:46:05:10:
e1:ce:5c:78:78:5e:1e:d8:36:62:22:7a:9c:bf:53:6e:1d:83:
5b:5c:cc:c3:3b:df:26:ab:0f:c8:d8:23:4b:d9:2d:cd:d3:a6:
6c:cc:9f:33:c8:0b:22:39:12:07:1e:68:2f:66:fe:20:05:40:
da:71:2e:1b:79:4f:f4:ae:ff:3b:b9:94:91:19:ee:03:70:48:
32:19:0e:dc:35:82:e1:8d:50:c0:3d:f8:2a:ff:9e:3b:de:59:
e7:8d:1f:18:07:83:7f:ec:c6:eb:4e:79:99:dc:c6:85:03:58:
ef:5f:81:7e:17:94:21:65:f5:8f:d3:77:95:f9:c4:d2:90:6c:
c0:a3:a7:1d:c5:c3:be:70:a2:d4:91:9d:e9:3d:e5:b2:de:a3:
3a:1f:11:c8:36:31:73:fe:ed:ef:5e:c6:88:cd:c5:d8:b6:64:
55:f4:00:ac:94:92:aa:2f:80:2b:c3:c4:7a:24:23:ef:1a:b6:
98:2e:b2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:50:04 2025 by rpki-client