This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa
File: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (raw, json)
Hash identifier: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=
Subject key identifier: 5D:6F:A6:F9:CB:68:C6:78:2D:EC:1B:4D:CB:CE:E3:CB:F8:04:E3:67
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 65492F49F6BD87C1575000BED173B7450842055C
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa
Signing time: Thu 13 Nov 2025 06:53:00 +0000
ROA not before: Thu 13 Nov 2025 06:48:00 +0000
ROA not after: Thu 12 Nov 2026 06:53:00 +0000
asID: 9312
IP address blocks: 45.124.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 11:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:49:2f:49:f6:bd:87:c1:57:50:00:be:d1:73:b7:45:08:42:05:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Nov 13 06:48:00 2025 GMT
Not After : Nov 12 06:53:00 2026 GMT
Subject: CN=5D6FA6F9CB68C6782DEC1B4DCBCEE3CBF804E367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:a3:5c:80:27:1a:4e:93:47:b7:3b:a3:d6:
fa:b3:e7:be:8e:ac:82:1d:62:32:b9:85:c1:7f:5e:
e0:f0:aa:39:1e:e6:0a:36:e3:64:9c:8e:f8:73:47:
1c:d4:2f:92:c5:99:98:0d:48:48:f8:cd:6c:17:15:
0f:bb:16:34:94:93:53:80:bd:28:c2:78:d5:5d:f9:
70:67:ee:87:58:45:bd:ff:a5:c9:43:4a:e0:d6:ee:
2a:c4:43:f1:63:85:9f:a0:e2:61:70:f0:38:ae:be:
4d:26:92:8c:38:e8:ed:0c:e3:20:c0:09:ab:b7:f0:
da:6f:95:e0:b2:59:e5:47:e9:ce:5f:fb:48:91:00:
2b:a3:9d:70:03:f5:cf:25:b3:04:1e:b7:51:00:5f:
b6:68:3f:2e:c2:b6:12:63:1c:4d:6a:bc:19:89:46:
63:b3:3b:68:f0:93:73:fd:08:4b:ce:0b:65:6b:c0:
22:b0:f0:7b:c6:f0:eb:5a:61:2f:e3:24:a4:eb:f8:
4d:c7:30:cc:18:03:0b:85:51:d6:4f:67:15:7f:50:
f5:ca:a3:c2:bc:fe:2a:82:39:1e:55:16:70:05:a1:
8a:5a:16:96:c3:c9:df:6b:03:da:64:56:78:17:fe:
96:36:76:9a:1a:2d:c2:b8:84:b8:1b:91:ce:39:ea:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6F:A6:F9:CB:68:C6:78:2D:EC:1B:4D:CB:CE:E3:CB:F8:04:E3:67
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.124.112.0/22
Signature Algorithm: sha256WithRSAEncryption
22:c0:ef:90:89:28:a8:e6:66:03:e9:d4:b2:b7:69:3b:88:9a:
c4:c6:b4:3c:0c:dc:56:8f:80:1e:bd:04:be:19:c9:df:d4:30:
e9:7a:dd:36:9b:a8:f2:95:74:f7:83:20:1b:7b:f4:fc:68:c7:
00:f2:31:f4:b3:ca:a6:a1:58:66:4c:44:08:51:8f:c4:d7:9a:
1a:c0:38:ae:24:52:a0:56:cf:08:f9:00:d8:24:af:60:f7:a3:
84:ad:a4:d5:ee:13:c9:cf:10:ab:bf:5e:af:17:b8:af:fc:ac:
bc:5d:e5:0e:57:19:40:de:02:45:e5:89:4b:98:ef:2a:17:41:
72:22:2f:48:db:8e:c1:58:15:11:84:d6:73:1a:e4:df:6b:5f:
0e:97:20:c7:71:72:8e:34:80:82:14:99:63:98:f1:9c:d5:73:
e0:d6:89:af:4c:43:4f:82:c9:0b:47:a1:2f:b6:48:7e:3c:a5:
8a:2b:8f:d2:1b:68:6b:8b:4f:48:29:f3:10:ec:87:73:02:a4:
eb:31:ae:76:61:89:86:22:e4:19:c1:28:25:bb:92:0f:20:11:
56:45:31:16:c9:42:ad:24:cd:12:f4:24:92:32:b1:48:94:90:
2b:e9:97:f1:d3:01:42:ba:63:4b:29:1c:71:2e:76:11:f8:ea:
49:8d:59:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:50:08 2025 by rpki-client