This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa
File: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (raw, json)
Hash identifier: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=
Subject key identifier: 97:39:CF:ED:3B:41:83:A5:5E:DA:E4:A5:6F:A0:C1:8C:6A:B7:3D:06
Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial: 608291E3D14D83B2B4425C50658891120D2A5B11
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa
Signing time: Wed 19 Nov 2025 11:53:00 +0000
ROA not before: Wed 19 Nov 2025 11:48:00 +0000
ROA not after: Wed 18 Nov 2026 11:53:00 +0000
asID: 8888
IP address blocks: 103.193.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 17:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:82:91:e3:d1:4d:83:b2:b4:42:5c:50:65:88:91:12:0d:2a:5b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Validity
Not Before: Nov 19 11:48:00 2025 GMT
Not After : Nov 18 11:53:00 2026 GMT
Subject: CN=9739CFED3B4183A55EDAE4A56FA0C18C6AB73D06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:d8:7c:ae:2e:62:03:72:71:ed:30:d6:db:
1b:82:f2:10:34:dd:ee:12:de:b9:6f:b3:95:b6:2e:
fc:58:10:99:6d:36:a1:17:1c:71:20:1a:0e:8e:b5:
cc:0a:ca:d9:1c:15:55:23:56:ab:75:b2:1a:7e:ce:
9e:a3:43:77:96:ad:26:70:36:8e:4f:ca:f2:7f:ce:
40:b5:36:23:dd:28:50:8f:fa:b5:55:52:5f:d9:70:
61:68:67:c0:c8:ab:73:66:85:3b:bc:9b:a7:c3:2f:
d3:a8:65:17:4f:86:fd:50:a7:b9:ac:da:c2:39:9b:
7b:12:24:13:05:46:8f:14:7f:4c:79:87:d3:fd:90:
05:80:e8:ec:de:8f:24:f1:ab:84:a9:69:20:0c:73:
91:f2:b6:e4:a5:4d:62:05:0e:6a:dc:3e:20:eb:13:
16:5b:1a:94:43:08:e8:86:7c:d3:df:99:de:69:5e:
88:9e:ca:59:43:51:2e:a4:7b:b4:16:50:f2:8d:e4:
df:50:e4:f5:5f:26:92:4b:a9:1c:b4:cd:8d:90:1a:
38:9c:35:39:de:5a:94:87:84:12:b2:cd:e9:11:6c:
0a:6e:74:8c:b8:d7:f1:18:2c:10:14:3c:46:ee:8f:
4c:4d:60:ed:eb:b1:c9:5f:54:97:98:6d:02:5d:5d:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:CF:ED:3B:41:83:A5:5E:DA:E4:A5:6F:A0:C1:8C:6A:B7:3D:06
X509v3 Authority Key Identifier:
keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.193.128.0/22
Signature Algorithm: sha256WithRSAEncryption
72:a1:26:5a:10:68:ef:2f:85:07:7a:5d:91:1e:0f:c1:d6:78:
7a:36:97:27:c1:e6:3d:7b:6f:4d:ec:ab:a1:bc:bb:a1:8c:e0:
c8:d3:36:79:30:cf:93:19:1d:de:17:22:c6:b1:cd:80:20:2e:
d5:ad:28:c6:45:ca:a6:b0:77:ba:b3:63:4a:7d:51:22:4e:1d:
9c:a8:ae:64:1f:dd:d3:23:fa:59:ae:8f:be:77:6a:d2:5d:47:
50:75:64:d0:4e:dd:fa:67:83:bc:9a:7b:7a:77:1d:07:b0:4e:
f7:63:53:6c:28:6f:86:63:22:53:c3:d6:78:b2:49:19:2f:06:
70:93:30:a6:5f:39:cc:99:8f:e8:0c:38:26:24:8c:5a:c9:5f:
f1:b0:c4:79:3d:04:aa:86:9d:73:38:67:b9:97:29:6c:bb:7b:
ea:c8:33:a6:0a:8d:0f:4f:b6:8a:98:9c:9e:05:cf:53:2d:91:
d9:50:c2:b3:be:07:3f:47:ad:45:1e:ba:ac:ef:bb:c8:2b:76:
c4:01:5c:7c:22:96:0e:f8:3c:25:39:71:be:e5:20:fd:60:54:
5d:25:64:b1:cb:2b:e7:94:6d:e7:fd:89:42:62:1c:4b:04:e4:
a5:45:f2:b0:e2:91:ac:32:ab:ab:e6:1b:08:cc:7d:ae:3e:44:
c7:83:61:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:52:23 2025 by rpki-client