This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A916FC1D0000/0/34392e3231332e36332e302f32342d3234203d3e20313534313535.roa
File: 34392e3231332e36332e302f32342d3234203d3e20313534313535.roa (raw, json)
Hash identifier: lxmJhnE/3u/mEMAudnAPfckbhfAAPLZoqr3Lo3NuO8c=
Subject key identifier: 9B:4F:4D:C6:8C:EC:D7:CD:BA:DA:76:24:C1:07:4E:65:AC:37:E8:65
Certificate issuer: /CN=A916FC1D0000/serialNumber=8630DB364752FB672480309F11531C73BFEDD599
Certificate serial: 13424C962C808E3B8EF38AB2F1FC56F25EA1F797
Authority key identifier: 86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/34392e3231332e36332e302f32342d3234203d3e20313534313535.roa
Signing time: Fri 28 Nov 2025 10:05:58 +0000
ROA not before: Fri 28 Nov 2025 10:00:58 +0000
ROA not after: Fri 27 Nov 2026 10:05:58 +0000
asID: 154155
IP address blocks: 49.213.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl
rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 06:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:42:4c:96:2c:80:8e:3b:8e:f3:8a:b2:f1:fc:56:f2:5e:a1:f7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FC1D0000, serialNumber=8630DB364752FB672480309F11531C73BFEDD599
Validity
Not Before: Nov 28 10:00:58 2025 GMT
Not After : Nov 27 10:05:58 2026 GMT
Subject: CN=9B4F4DC68CECD7CDBADA7624C1074E65AC37E865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:52:38:24:57:a2:8f:a5:9e:df:c8:64:21:
da:c2:50:44:3f:6a:5f:3c:52:f6:25:3a:04:8b:01:
a3:02:e0:11:9d:80:a4:06:31:1b:8f:55:1c:c5:66:
b8:4f:a1:d9:60:85:26:aa:26:55:bd:4f:f9:02:28:
86:4a:93:64:29:ac:72:bb:7c:f0:ed:78:08:df:be:
aa:13:93:86:33:7e:8c:ab:0e:fd:f6:38:dd:27:5b:
62:58:05:00:49:83:73:32:20:b3:08:1a:20:d4:3e:
8c:4d:1e:6e:96:80:0a:86:51:ac:2a:94:e3:dd:ba:
83:c3:0a:bb:91:85:c2:08:0a:16:6d:93:24:ec:f1:
5b:a7:fc:12:9d:07:46:64:c6:ca:96:87:1a:eb:ba:
82:a4:93:5c:46:c4:2c:ac:3c:c2:c7:c5:1d:2d:5e:
58:e5:7a:cd:2d:fb:b6:c0:c1:24:1b:d4:a0:92:ad:
db:9e:cf:65:86:18:0b:80:2b:f9:6c:ba:61:35:0a:
06:fb:4f:74:41:3f:81:a4:db:c4:09:3f:97:0f:7b:
a2:74:e6:5f:66:15:44:29:6d:83:c7:f1:07:80:fe:
fa:4a:7a:dc:2a:e3:ac:6d:94:71:4f:1c:81:bc:46:
d8:f1:72:41:e7:42:03:97:10:5b:0a:87:69:06:27:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4F:4D:C6:8C:EC:D7:CD:BA:DA:76:24:C1:07:4E:65:AC:37:E8:65
X509v3 Authority Key Identifier:
keyid:86:30:DB:36:47:52:FB:67:24:80:30:9F:11:53:1C:73:BF:ED:D5:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/8630DB364752FB672480309F11531C73BFEDD599.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjDbNkdS-2ckgDCfEVMcc7_t1Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A916FC1D0000/0/34392e3231332e36332e302f32342d3234203d3e20313534313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.213.63.0/24
Signature Algorithm: sha256WithRSAEncryption
29:dc:0f:1d:84:56:e6:79:c3:b3:5a:8d:24:d7:55:ed:ef:1d:
ec:71:07:eb:25:d7:31:dc:9f:12:cb:e3:a8:23:e1:e7:c0:73:
ae:af:f9:4b:23:3d:61:dd:51:e8:9e:3c:15:08:94:ef:2c:8f:
3e:1c:b5:55:7a:ab:db:ec:71:2c:72:f1:ea:73:02:d3:07:3a:
7a:66:30:0b:6e:2c:fa:b2:a4:ae:92:12:08:8f:b0:ec:e0:2d:
df:58:4d:7c:2a:fa:56:23:33:56:d2:13:97:77:3e:97:d6:f3:
74:83:10:e9:08:01:d3:49:ce:41:46:96:03:e7:b5:ed:e8:c2:
bd:bd:8a:e2:f9:d7:44:30:42:76:da:66:d9:3d:b3:d5:3b:ec:
40:47:a6:37:1d:18:38:00:31:f2:fe:33:5d:69:42:25:b6:03:
53:10:a3:1d:d9:22:5e:56:2d:14:38:29:76:04:88:49:06:47:
ff:e1:38:aa:ff:b0:f2:a0:d8:e9:49:5e:b7:fc:fc:97:d1:4c:
7c:b7:ac:2f:f6:79:67:3f:24:f6:2a:3c:ae:4e:95:4c:3f:94:
9c:04:ac:4c:36:e9:11:94:41:7a:29:41:d8:aa:54:f7:a9:8a:
6b:bf:25:42:ff:5b:7b:fe:28:fa:9c:fd:ff:11:73:75:93:50:
45:fc:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:04:50 2025 by rpki-client