This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2033323538.roa
File: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (raw, json)
Hash identifier: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=
Subject key identifier: 3A:87:C3:A6:A5:19:08:D1:C3:8B:A4:A9:6C:2F:2B:7E:A6:8E:16:1F
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 0C282BD2421C70FEAD0524B71F54DA43AEB78DEE
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2033323538.roa
Signing time: Thu 13 Nov 2025 06:53:00 +0000
ROA not before: Thu 13 Nov 2025 06:48:00 +0000
ROA not after: Thu 12 Nov 2026 06:53:00 +0000
asID: 3258
IP address blocks: 45.124.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 11:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:28:2b:d2:42:1c:70:fe:ad:05:24:b7:1f:54:da:43:ae:b7:8d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Nov 13 06:48:00 2025 GMT
Not After : Nov 12 06:53:00 2026 GMT
Subject: CN=3A87C3A6A51908D1C38BA4A96C2F2B7EA68E161F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:0d:1e:ea:15:d0:52:70:3f:54:09:fd:62:
b1:49:a2:dd:71:2e:f4:a7:11:43:46:bc:b4:76:47:
24:b2:28:c3:00:a4:12:2b:b8:1d:1f:4c:29:a6:fd:
bd:17:8f:bf:75:d9:4d:ce:03:df:81:90:f6:e6:56:
27:74:f0:d5:62:5a:0d:57:f6:04:7b:5f:86:2b:5e:
b3:bd:b3:d1:ac:8f:ee:db:60:8b:04:9c:b9:30:26:
b2:9b:7d:b5:b5:b8:34:de:bd:30:29:60:cf:49:a4:
14:54:87:16:b3:cd:11:18:e5:d2:7c:e6:c2:c0:b7:
2f:b3:cd:78:3b:bf:f1:91:ad:9a:93:b7:33:cb:df:
ad:f9:a4:2f:b1:db:35:d0:75:fa:b3:db:df:a0:f4:
d7:39:b4:ea:34:b4:6e:1e:1d:2c:20:1d:57:91:ef:
5c:b3:66:10:d7:91:6a:c6:93:65:8d:cf:ad:0c:bd:
94:48:20:22:62:ac:65:7e:31:ff:32:9b:57:6a:f7:
f8:f4:dc:0f:c0:d3:e1:0d:75:1a:e3:4b:54:aa:b3:
9e:46:94:3e:e4:07:f1:0d:dd:72:8e:f9:98:b7:8c:
72:d0:8d:f4:ca:e9:02:4a:db:67:e4:96:28:a3:9b:
3d:d1:6e:6a:7e:ae:92:9f:e4:ac:b9:5d:0a:c7:c9:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:87:C3:A6:A5:19:08:D1:C3:8B:A4:A9:6C:2F:2B:7E:A6:8E:16:1F
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.124.112.0/22
Signature Algorithm: sha256WithRSAEncryption
39:a4:da:bb:c6:59:31:9b:20:fd:05:60:69:86:94:40:3f:5d:
9b:10:ea:4a:ce:2d:c1:ad:9f:30:92:1c:43:3d:ff:93:53:64:
ff:db:d6:aa:6d:da:40:92:9b:a9:58:5f:8e:83:4d:81:7e:0c:
d9:e1:a4:b3:85:86:43:89:b6:b8:02:28:5a:48:32:a4:7e:bc:
71:d1:08:11:2d:5f:36:1d:fe:a7:6e:9d:01:ca:ca:10:a9:4b:
4a:01:66:f8:54:55:77:c3:ac:02:a1:19:23:c6:0a:ca:1f:b8:
81:26:9e:75:20:f0:6b:55:79:ce:ee:4e:69:4d:d3:42:c4:98:
d4:90:9c:fc:04:f6:59:62:a1:13:eb:b5:21:20:32:df:73:1b:
82:19:66:9a:84:a3:49:d4:c7:06:ad:43:d9:49:8b:a8:ce:09:
85:9a:44:92:ad:58:ab:e3:2c:00:0d:13:a1:34:07:5d:84:eb:
0a:13:14:76:11:e0:32:ef:cd:be:73:9f:04:8f:11:6e:a4:fd:
c7:1d:05:22:07:92:8d:54:93:26:29:13:75:b5:25:30:16:95:
6d:9e:64:d0:3e:99:56:e6:f0:c4:55:78:b6:bf:af:bf:61:d8:
b1:40:3d:90:29:5a:ed:bb:32:6d:d1:36:a5:f3:9d:f3:d3:04:
19:61:27:30
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIUDCgr0kIccP6tBSS3H1TaQ663je4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB
NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI1MTExMzA2NDgwMFoX
DTI2MTExMjA2NTMwMFowMzExMC8GA1UEAxMoM0E4N0MzQTZBNTE5MDhEMUMzOEJB
NEE5NkMyRjJCN0VBNjhFMTYxRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIlrDR7qFdBScD9UCf1isUmi3XEu9KcRQ0a8tHZHJLIowwCkEiu4HR9MKab9
vRePv3XZTc4D34GQ9uZWJ3Tw1WJaDVf2BHtfhites72z0ayP7ttgiwScuTAmspt9
tbW4NN69MClgz0mkFFSHFrPNERjl0nzmwsC3L7PNeDu/8ZGtmpO3M8vfrfmkL7Hb
NdB1+rPb36D01zm06jS0bh4dLCAdV5HvXLNmENeRasaTZY3PrQy9lEggImKsZX4x
/zKbV2r3+PTcD8DT4Q11GuNLVKqznkaUPuQH8Q3dco75mLeMctCN9MrpAkrbZ+SW
KKObPdFuan6ukp/krLldCsfJVwECAwEAAaOCAegwggHkMB0GA1UdDgQWBBQ6h8Om
pRkI0cOLpKlsLyt+po4WHzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He
GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE
NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j
ZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNDIvMzQzNTJlMzEzMjM0MmUzMTMxMzIyZTMwMmYzMjMy
MmQzMjM0MjAzZDNlMjAzMzMyMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi18cDANBgkqhkiG9w0B
AQsFAAOCAQEAOaTau8ZZMZsg/QVgaYaUQD9dmxDqSs4twa2fMJIcQz3/k1Nk/9vW
qm3aQJKbqVhfjoNNgX4M2eGks4WGQ4m2uAIoWkgypH68cdEIES1fNh3+p26dAcrK
EKlLSgFm+FRVd8OsAqEZI8YKyh+4gSaedSDwa1V5zu5OaU3TQsSY1JCc/AT2WWKh
E+u1ISAy33MbghlmmoSjSdTHBq1D2UmLqM4JhZpEkq1Yq+MsAA0ToTQHXYTrChMU
dhHgMu/NvnOfBI8RbqT9xx0FIgeSjVSTJikTdbUlMBaVbZ5k0D6ZVubwxFV4tr+v
v2HYsUA9kCla7bsybdE2pfOd89MEGWEnMA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:43:06 2025 by rpki-client