This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2039333132.roa
File: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (raw, json)
Hash identifier: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=
Subject key identifier: AB:51:70:1E:F1:42:C2:3B:1C:24:18:DA:0E:42:4C:A0:86:E1:C6:D6
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 6F170B697C13725D38A7A9B4C950536F032CCF55
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2039333132.roa
Signing time: Thu 13 Nov 2025 06:53:00 +0000
ROA not before: Thu 13 Nov 2025 06:48:00 +0000
ROA not after: Thu 12 Nov 2026 06:53:00 +0000
asID: 9312
IP address blocks: 45.116.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 11:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:17:0b:69:7c:13:72:5d:38:a7:a9:b4:c9:50:53:6f:03:2c:cf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Nov 13 06:48:00 2025 GMT
Not After : Nov 12 06:53:00 2026 GMT
Subject: CN=AB51701EF142C23B1C2418DA0E424CA086E1C6D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:a6:6d:33:67:df:89:b2:c3:d8:52:d7:cf:
18:d1:c7:3d:a1:d3:16:83:a1:5f:8c:00:8b:e2:b9:
96:dc:1c:0c:f1:cb:21:cf:ca:fb:c1:ef:e6:eb:5b:
c2:9d:a3:8f:b0:72:e0:f5:a9:7b:05:0d:61:13:c0:
88:1d:b6:9a:62:7a:e3:73:15:96:c7:2e:2e:6d:fb:
91:a4:ea:f3:dd:ea:db:a3:0c:73:62:85:fa:06:9b:
c6:92:4a:7b:e2:d8:48:e8:e9:8d:eb:1f:a6:b7:8b:
d7:03:07:46:5b:19:45:a1:a1:6c:6c:78:52:0d:de:
be:fa:bd:c8:07:90:64:14:69:bb:13:60:ae:6d:33:
6d:61:61:40:73:26:7c:00:a3:00:cd:a6:3c:26:96:
61:ff:15:05:58:c9:64:1d:2c:a1:cc:46:ed:07:18:
f1:8f:eb:03:74:cf:e4:e7:86:09:da:43:80:fc:f6:
e3:85:4a:b9:73:d3:47:e3:ea:17:be:4c:23:7b:14:
d7:8a:7d:04:8b:36:5e:dc:49:71:76:0e:c1:a9:07:
36:da:33:c3:8f:0c:c7:57:dd:7b:e1:d1:5a:2a:e0:
f7:39:e5:47:92:42:3a:d4:62:db:41:b0:96:99:57:
43:53:12:31:64:3f:ca:ee:39:a3:0a:84:b2:de:d8:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:51:70:1E:F1:42:C2:3B:1C:24:18:DA:0E:42:4C:A0:86:E1:C6:D6
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.116.12.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:65:c4:2e:37:6b:8c:13:5f:a7:fe:ae:1b:ee:f6:88:42:3b:
6c:f7:a4:56:bf:a4:e4:e3:7f:d3:db:be:d2:77:c8:fe:6b:79:
6a:97:7a:5e:7b:16:5c:45:64:db:56:0b:29:3f:0b:62:c4:12:
53:80:dd:e4:13:a4:fc:ae:cb:20:f3:e1:30:fb:33:1e:e5:71:
b7:d4:f8:73:3b:b2:93:00:d6:5c:67:86:57:57:d8:99:8a:1d:
31:0f:c9:9c:4f:c7:a7:e0:62:fe:7e:3b:ae:d8:12:7d:be:f1:
50:4a:56:23:9c:0f:ad:bc:ca:8f:6e:6f:8f:77:03:19:63:15:
48:0c:8a:14:fa:fe:94:47:12:d0:76:71:e7:f4:1a:5b:b6:fe:
88:31:13:ff:44:91:ea:9d:e6:65:29:d1:3a:ab:87:5a:7e:22:
7f:12:e6:2d:58:6d:8d:b5:3b:8f:a3:3a:55:ab:ae:d4:3f:05:
9e:fc:4d:96:7d:e3:0f:02:28:2d:e9:a5:b3:a1:a5:71:84:7c:
26:99:2a:d0:59:29:ce:c7:fe:bc:ac:cd:d8:f8:90:ad:25:18:
9e:b4:8d:bf:eb:84:29:5a:4e:f0:e3:e4:54:50:b6:86:02:06:
40:1a:c6:0a:95:e4:f3:ef:13:b3:5c:3c:30:b0:8c:38:cf:46:
1e:39:ee:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:43:42 2025 by rpki-client