This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa
File: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (raw, json)
Hash identifier: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=
Subject key identifier: A6:AE:C8:B6:A0:BD:E3:BD:23:8E:98:14:82:4F:42:4D:9D:3D:98:94
Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial: 27A9EF0E860AEFB9F687ABB8E7D954AD5F8C339B
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa
Signing time: Wed 19 Nov 2025 11:53:00 +0000
ROA not before: Wed 19 Nov 2025 11:48:00 +0000
ROA not after: Wed 18 Nov 2026 11:53:00 +0000
asID: 3258
IP address blocks: 103.193.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 17:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:a9:ef:0e:86:0a:ef:b9:f6:87:ab:b8:e7:d9:54:ad:5f:8c:33:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Validity
Not Before: Nov 19 11:48:00 2025 GMT
Not After : Nov 18 11:53:00 2026 GMT
Subject: CN=A6AEC8B6A0BDE3BD238E9814824F424D9D3D9894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:39:f7:f3:b4:13:0d:40:c4:12:b3:fd:93:
88:fd:d7:e3:11:eb:5b:7b:9e:fc:c2:7f:32:b1:44:
1a:38:49:cc:20:10:0e:83:62:22:e7:8a:7f:78:c4:
06:bc:b1:9a:95:21:af:56:bc:5e:25:06:31:bc:e4:
f0:a5:4c:6f:f8:78:da:3f:bb:56:74:40:8e:71:ab:
f9:ec:5e:8b:ee:26:42:65:fc:be:0a:0f:48:63:f9:
dc:92:a7:89:cc:15:f7:fc:54:46:87:0e:31:e4:5d:
0b:7d:09:c0:7a:0b:52:d3:27:fb:ee:73:6e:06:d5:
5a:ba:6e:c9:df:f7:5d:64:8c:db:df:1b:8a:bb:80:
19:d5:b7:70:36:b0:65:64:8a:db:93:ca:d7:89:ba:
d8:d9:47:8b:4d:10:6a:76:02:73:99:4d:33:98:ad:
b3:9b:8c:b5:4c:51:13:b0:53:36:a0:c9:ca:eb:01:
52:e2:e1:75:cb:8a:fa:d7:73:2a:0b:da:4f:28:86:
ce:94:44:10:84:e3:6e:ec:35:24:16:86:50:d1:8e:
66:f9:31:c9:11:b7:b2:57:2a:b4:ac:ee:be:22:54:
b1:ad:1a:2f:e3:70:c8:ba:ca:e3:ab:27:32:1d:7b:
1e:fb:dd:a6:40:19:32:4c:ff:f4:70:3e:8a:f9:28:
d8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AE:C8:B6:A0:BD:E3:BD:23:8E:98:14:82:4F:42:4D:9D:3D:98:94
X509v3 Authority Key Identifier:
keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.193.128.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:5d:c4:1a:84:d6:91:a0:5a:d9:73:a9:87:3c:6a:1a:ad:09:
82:f4:d3:ce:30:32:88:1c:8a:12:3a:81:cf:f1:d9:1d:87:d7:
a2:6e:63:e9:09:b0:34:f0:51:6e:6f:1a:95:ea:33:11:e7:2d:
0a:ef:4b:8c:d0:e5:f0:5d:55:3a:37:62:4d:f2:d7:57:6a:01:
5b:78:7f:7c:d1:3e:36:ff:4b:06:08:ee:e1:0b:c2:c5:b3:94:
89:84:0e:3b:0e:4b:61:f1:d2:da:9a:2c:f1:d6:dc:9b:9f:f5:
f5:14:14:52:01:fe:5b:93:7d:e8:ff:07:da:c1:e5:97:d6:d7:
7f:0e:43:7d:f5:6a:ea:2e:9f:59:6f:78:b5:16:37:d4:51:68:
f9:bb:6b:c4:c8:77:6c:02:f6:2f:06:88:12:f9:85:37:76:11:
1f:cc:4c:b7:a3:09:e1:46:df:4b:2f:4c:7a:92:53:ba:c2:77:
39:35:61:0a:1b:a2:9b:6e:df:ec:59:9e:a0:98:cb:e2:29:20:
8a:41:38:e2:f9:6f:47:9c:db:6a:61:10:f7:f8:fa:a9:49:cb:
b2:95:2e:aa:54:2e:d5:d5:4c:ba:e6:44:c0:7b:12:59:ce:27:
41:f3:95:a3:d3:07:93:15:c5:15:a5:5f:7e:53:46:db:e7:08:
08:21:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:49:38 2025 by rpki-client