This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/59/3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa File: 3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa (raw, json) Hash identifier: m8YqiID+Q725PKBIKrUauO2lTKAbZU016aARa/XfmOg= Subject key identifier: A0:C9:B5:62:3F:0A:60:ED:3F:82:B6:15:CF:1B:4C:36:05:BB:80:51 Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 4339CC524EE8F075D15E679219CCAF1AB28C29A4 Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa Signing time: Tue 02 Dec 2025 20:44:04 +0000 ROA not before: Tue 02 Dec 2025 20:39:04 +0000 ROA not after: Tue 01 Dec 2026 20:44:04 +0000 asID: 3258 IP address blocks: 103.121.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 18:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:39:cc:52:4e:e8:f0:75:d1:5e:67:92:19:cc:af:1a:b2:8c:29:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Dec 2 20:39:04 2025 GMT Not After : Dec 1 20:44:04 2026 GMT Subject: CN=A0C9B5623F0A60ED3F82B615CF1B4C3605BB8051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ac:b4:db:e9:ad:7a:38:f9:5e:91:b0:03:5c: 93:50:5f:89:58:f1:25:ad:d5:99:ab:7f:f3:79:f0: 68:6e:26:57:48:ce:f4:f5:8a:1a:52:21:81:74:40: 8b:53:3b:ec:28:13:45:37:64:9c:84:fc:07:09:78: 2b:f2:e4:cc:12:8f:e8:af:6e:be:e1:07:4f:42:bb: c5:83:bc:8a:4f:7e:5f:97:55:93:97:af:5c:54:1f: f6:ff:a1:59:db:93:ec:8c:69:23:cd:23:5c:5f:68: e1:72:31:1d:d5:e0:b2:cb:51:5e:fe:98:bb:c3:07: 76:15:c9:de:e0:c5:09:11:cf:29:7e:c7:93:b2:e2: bf:df:f3:32:9e:54:98:b1:92:bb:4a:34:5c:92:ee: 7c:be:32:b7:32:a5:8b:4e:ae:6e:91:45:ec:e0:d0: c7:5e:20:29:f0:0f:86:e1:f4:73:4c:f8:f0:79:3e: 9c:52:bb:98:ba:70:de:31:43:4a:f8:18:ab:27:a9: 19:57:6e:ed:0f:0f:12:11:d4:96:ec:82:bf:81:15: 35:89:2f:0e:62:08:a8:40:1a:fd:d8:34:f6:b5:23: 88:bd:60:4a:c6:e6:56:52:df:33:78:13:5c:e5:12: 2c:79:f2:cc:52:7f:ee:a3:42:54:84:7b:96:62:a6: 5e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C9:B5:62:3F:0A:60:ED:3F:82:B6:15:CF:1B:4C:36:05:BB:80:51 X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/3130332e3132312e3230382e302f32322d3234203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.208.0/22 Signature Algorithm: sha256WithRSAEncryption a5:8e:ab:a2:8d:fb:d0:e5:64:ea:c3:31:a8:30:08:48:64:2b: 2e:62:14:e9:8e:fe:89:ae:14:af:f5:eb:f2:2b:3e:f5:4e:d7: 90:c8:79:01:7a:65:f0:40:7f:41:e0:31:c5:0a:f2:8a:f6:d2: 91:47:b2:69:b3:9b:a0:70:b6:3d:65:62:7a:76:5e:06:4d:50: aa:72:e3:6f:34:e4:57:05:87:c6:49:4f:30:11:4a:38:9f:6e: 78:a1:63:ee:55:8e:d5:e2:23:33:a6:fe:5b:e3:5b:21:01:f5: 26:8a:39:68:41:54:40:98:25:c1:b9:db:91:7d:fb:ee:9b:cf: df:91:97:64:42:b3:ca:bd:71:84:23:8c:fb:42:d9:d7:fc:67: a4:5c:10:25:bb:9f:a2:51:83:5c:8c:6e:53:a6:c1:09:1f:e6: 37:d7:0e:3d:29:4a:0f:15:3d:32:8b:d1:03:7a:e8:29:14:4d: 43:fb:e5:89:49:02:56:9f:ff:d0:41:66:0c:76:45:2e:d0:c2: fe:c4:b8:9f:95:f4:53:9f:fa:6d:3f:1a:8c:93:0c:bb:48:f5: 75:90:a5:df:b1:07:ae:cc:4f:96:c1:8b:da:48:a4:6f:a8:16: 35:c9:dc:16:49:e3:cc:71:aa:50:c0:d6:32:4c:f3:b5:7b:87: 1b:c5:16:9a -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUQznMUk7o8HXRXmeSGcyvGrKMKaQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI1MTIwMjIwMzkwNFoX DTI2MTIwMTIwNDQwNFowMzExMC8GA1UEAxMoQTBDOUI1NjIzRjBBNjBFRDNGODJC NjE1Q0YxQjRDMzYwNUJCODA1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+stNvprXo4+V6RsANck1BfiVjxJa3Vmat/83nwaG4mV0jO9PWKGlIhgXRA i1M77CgTRTdknIT8Bwl4K/LkzBKP6K9uvuEHT0K7xYO8ik9+X5dVk5evXFQf9v+h WduT7IxpI80jXF9o4XIxHdXgsstRXv6Yu8MHdhXJ3uDFCRHPKX7Hk7Liv9/zMp5U mLGSu0o0XJLufL4ytzKli06ubpFF7ODQx14gKfAPhuH0c0z48Hk+nFK7mLpw3jFD SvgYqyepGVdu7Q8PEhHUluyCv4EVNYkvDmIIqEAa/dg09rUjiL1gSsbmVlLfM3gT XOUSLHnyzFJ/7qNCVIR7lmKmXiUCAwEAAaOCAeowggHmMB0GA1UdDgQWBBSgybVi Pwpg7T+CthXPG0w2BbuAUTAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvMzEzMDMzMmUzMTMyMzEyZTMyMzAzODJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDMzMzIzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3nQMA0GCSqGSIb3 DQEBCwUAA4IBAQCljquijfvQ5WTqwzGoMAhIZCsuYhTpjv6JrhSv9evyKz71TteQ yHkBemXwQH9B4DHFCvKK9tKRR7Jps5ugcLY9ZWJ6dl4GTVCqcuNvNORXBYfGSU8w EUo4n254oWPuVY7V4iMzpv5b41shAfUmijloQVRAmCXBuduRffvum8/fkZdkQrPK vXGEI4z7QtnX/GekXBAlu5+iUYNcjG5TpsEJH+Y31w49KUoPFT0yi9EDeugpFE1D ++WJSQJWn//QQWYMdkUu0ML+xLiflfRTn/ptPxqMkwy7SPV1kKXfsQeuzE+WwYva SKRvqBY1ydwWSePMcapQwNYyTPO1e4cbxRaa -----END CERTIFICATE-----Generated at Sat Dec 6 18:45:43 2025 by rpki-client