This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa
File:                     3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (raw, json)
Hash identifier:          W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=
Subject key identifier:   A6:AE:C8:B6:A0:BD:E3:BD:23:8E:98:14:82:4F:42:4D:9D:3D:98:94
Certificate issuer:       /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial:       27A9EF0E860AEFB9F687ABB8E7D954AD5F8C339B
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa
Signing time:             Wed 19 Nov 2025 11:53:00 +0000
ROA not before:           Wed 19 Nov 2025 11:48:00 +0000
ROA not after:            Wed 18 Nov 2026 11:53:00 +0000
asID:                     3258
IP address blocks:        103.193.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
                          rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 17:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a9:ef:0e:86:0a:ef:b9:f6:87:ab:b8:e7:d9:54:ad:5f:8c:33:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
        Validity
            Not Before: Nov 19 11:48:00 2025 GMT
            Not After : Nov 18 11:53:00 2026 GMT
        Subject: CN=A6AEC8B6A0BDE3BD238E9814824F424D9D3D9894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:39:f7:f3:b4:13:0d:40:c4:12:b3:fd:93:
                    88:fd:d7:e3:11:eb:5b:7b:9e:fc:c2:7f:32:b1:44:
                    1a:38:49:cc:20:10:0e:83:62:22:e7:8a:7f:78:c4:
                    06:bc:b1:9a:95:21:af:56:bc:5e:25:06:31:bc:e4:
                    f0:a5:4c:6f:f8:78:da:3f:bb:56:74:40:8e:71:ab:
                    f9:ec:5e:8b:ee:26:42:65:fc:be:0a:0f:48:63:f9:
                    dc:92:a7:89:cc:15:f7:fc:54:46:87:0e:31:e4:5d:
                    0b:7d:09:c0:7a:0b:52:d3:27:fb:ee:73:6e:06:d5:
                    5a:ba:6e:c9:df:f7:5d:64:8c:db:df:1b:8a:bb:80:
                    19:d5:b7:70:36:b0:65:64:8a:db:93:ca:d7:89:ba:
                    d8:d9:47:8b:4d:10:6a:76:02:73:99:4d:33:98:ad:
                    b3:9b:8c:b5:4c:51:13:b0:53:36:a0:c9:ca:eb:01:
                    52:e2:e1:75:cb:8a:fa:d7:73:2a:0b:da:4f:28:86:
                    ce:94:44:10:84:e3:6e:ec:35:24:16:86:50:d1:8e:
                    66:f9:31:c9:11:b7:b2:57:2a:b4:ac:ee:be:22:54:
                    b1:ad:1a:2f:e3:70:c8:ba:ca:e3:ab:27:32:1d:7b:
                    1e:fb:dd:a6:40:19:32:4c:ff:f4:70:3e:8a:f9:28:
                    d8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AE:C8:B6:A0:BD:E3:BD:23:8E:98:14:82:4F:42:4D:9D:3D:98:94
            X509v3 Authority Key Identifier:
                keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:5d:c4:1a:84:d6:91:a0:5a:d9:73:a9:87:3c:6a:1a:ad:09:
         82:f4:d3:ce:30:32:88:1c:8a:12:3a:81:cf:f1:d9:1d:87:d7:
         a2:6e:63:e9:09:b0:34:f0:51:6e:6f:1a:95:ea:33:11:e7:2d:
         0a:ef:4b:8c:d0:e5:f0:5d:55:3a:37:62:4d:f2:d7:57:6a:01:
         5b:78:7f:7c:d1:3e:36:ff:4b:06:08:ee:e1:0b:c2:c5:b3:94:
         89:84:0e:3b:0e:4b:61:f1:d2:da:9a:2c:f1:d6:dc:9b:9f:f5:
         f5:14:14:52:01:fe:5b:93:7d:e8:ff:07:da:c1:e5:97:d6:d7:
         7f:0e:43:7d:f5:6a:ea:2e:9f:59:6f:78:b5:16:37:d4:51:68:
         f9:bb:6b:c4:c8:77:6c:02:f6:2f:06:88:12:f9:85:37:76:11:
         1f:cc:4c:b7:a3:09:e1:46:df:4b:2f:4c:7a:92:53:ba:c2:77:
         39:35:61:0a:1b:a2:9b:6e:df:ec:59:9e:a0:98:cb:e2:29:20:
         8a:41:38:e2:f9:6f:47:9c:db:6a:61:10:f7:f8:fa:a9:49:cb:
         b2:95:2e:aa:54:2e:d5:d5:4c:ba:e6:44:c0:7b:12:59:ce:27:
         41:f3:95:a3:d3:07:93:15:c5:15:a5:5f:7e:53:46:db:e7:08:
         08:21:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:49:38 2025 by rpki-client