This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/58/3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa
File: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (raw, json)
Hash identifier: v7yteh1WZLVmaCu2bY234mxu37OO1wWdr68ndeJ4RSk=
Subject key identifier: 7B:AC:50:D3:D9:36:F2:27:B8:EF:A2:AF:EB:D7:E3:3D:D7:66:50:95
Certificate issuer: /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
Certificate serial: 1CBFEF313D27F8B1285675CEC9FD30FE10B26AA7
Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/58/3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa
Signing time: Tue 02 Dec 2025 20:34:44 +0000
ROA not before: Tue 02 Dec 2025 20:29:44 +0000
ROA not after: Tue 01 Dec 2026 20:34:44 +0000
asID: 3258
IP address blocks: 103.201.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl
rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 22:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:bf:ef:31:3d:27:f8:b1:28:56:75:ce:c9:fd:30:fe:10:b2:6a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
Validity
Not Before: Dec 2 20:29:44 2025 GMT
Not After : Dec 1 20:34:44 2026 GMT
Subject: CN=7BAC50D3D936F227B8EFA2AFEBD7E33DD7665095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:d4:25:d5:b5:b1:d8:b0:1c:33:0f:6a:0e:
4f:42:af:c9:32:9c:e5:3b:32:4e:2a:8d:88:ca:d2:
78:02:5e:76:d3:a5:79:49:55:9e:7a:07:58:ee:f1:
88:7f:65:43:b4:ab:2d:06:53:ea:5e:71:dd:cf:97:
22:2d:bd:a3:1e:4c:7e:7c:c2:2a:06:ef:a4:37:0d:
0c:8a:6f:3c:98:14:e3:48:1c:91:23:04:44:b1:a6:
5f:a2:bd:f5:94:70:3b:af:f6:6f:a5:43:85:17:93:
ad:d1:38:ea:60:dc:bc:9f:a3:66:a3:2b:c2:ef:cd:
67:3d:8d:66:2c:c4:3b:c1:dc:84:e9:ba:4f:48:14:
03:06:bf:8d:9d:6d:b6:cb:81:a4:e0:c9:54:b1:e3:
df:6d:59:26:f6:ce:c5:77:9e:fc:5f:a5:3e:a1:48:
f7:9a:5c:67:c4:dc:2a:51:ea:4f:36:d0:cc:4c:05:
67:66:69:b4:ad:f3:ad:e2:e7:ac:2c:4f:78:64:94:
ba:34:76:e2:0d:c2:79:55:9f:2d:65:00:6a:b0:54:
b9:de:b7:5c:bd:ba:a9:21:c2:e9:d5:f6:a2:06:27:
9e:e4:bc:56:08:86:36:40:6e:b8:0d:be:78:8b:92:
64:9e:ef:73:66:3a:43:50:38:37:49:65:21:b3:66:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:50:D3:D9:36:F2:27:B8:EF:A2:AF:EB:D7:E3:3D:D7:66:50:95
X509v3 Authority Key Identifier:
keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.201.128.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:cb:d2:b0:f3:86:1e:24:d8:f5:54:11:14:e7:78:89:41:02:
39:77:34:21:b6:e9:c7:5c:9d:c2:b9:54:d2:8f:6c:73:fd:1f:
7e:f9:ea:8a:36:b3:b6:ef:1c:22:1b:27:25:79:d6:6d:28:4b:
b2:29:88:71:c3:c1:59:74:8c:7a:91:cd:05:18:ab:38:5f:5b:
a4:09:ee:46:42:e3:9d:eb:b5:23:91:e5:ea:96:ce:45:cc:3a:
90:02:77:fd:27:40:52:55:85:75:30:79:08:70:a3:8c:94:ee:
be:5b:fb:c6:2f:8c:f6:d9:70:98:5c:3b:dc:57:5e:d3:40:49:
24:d5:ee:de:f8:2a:04:44:75:71:93:a8:90:65:a4:c7:11:79:
cb:c8:1c:12:ea:5b:ce:03:3f:d1:49:7f:9f:59:7d:4e:06:37:
d6:63:05:02:01:45:e7:5a:e5:10:65:84:88:b2:84:b8:ac:de:
62:dd:06:58:95:cd:68:8f:ba:8a:a9:7f:42:0f:98:dc:2e:31:
db:55:08:1b:86:6e:5f:51:50:36:15:04:9c:0c:f7:db:e6:b4:
82:de:cd:f2:79:57:12:ec:e9:2b:2b:af:d1:2c:b6:88:79:53:
67:12:15:a4:65:43:87:1d:f2:14:bf:a6:cc:28:35:61:9b:bc:
d3:78:50:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:48:05 2025 by rpki-client