This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa
File: 3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa (raw, json)
Hash identifier: jaYCwKUfN1ahphjmuCip8Xd6KyVekTXlh6eiv1lr6wE=
Subject key identifier: EE:D1:68:B0:A0:5F:30:A9:FB:8E:EC:91:5C:65:3F:99:14:05:83:0D
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 4EEBD94EF0D4458A8336FEEC37879D29E86EE6E0
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa
Signing time: Fri 16 Jan 2026 17:53:43 +0000
ROA not before: Fri 16 Jan 2026 17:48:43 +0000
ROA not after: Fri 15 Jan 2027 17:53:43 +0000
asID: 138364
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 01:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:eb:d9:4e:f0:d4:45:8a:83:36:fe:ec:37:87:9d:29:e8:6e:e6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Jan 16 17:48:43 2026 GMT
Not After : Jan 15 17:53:43 2027 GMT
Subject: CN=EED168B0A05F30A9FB8EEC915C653F991405830D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:3d:19:91:4c:f0:a9:f0:ac:1a:be:5d:b1:
6d:db:7d:60:a3:a5:93:1a:9f:34:e1:ba:b9:3e:fe:
f3:7b:ff:1f:92:ea:d4:b6:31:03:f7:af:7c:07:97:
a3:fc:41:21:d4:ae:ae:1d:fb:81:ba:6e:39:4b:fd:
7b:29:67:2c:ce:0d:1c:82:62:9a:98:fe:4f:37:9a:
eb:58:b8:65:fc:8c:26:79:bf:0f:9c:5b:1a:5b:4f:
9d:9e:56:0f:62:22:04:ef:6a:48:e2:67:ab:26:27:
5e:9f:8d:2e:80:20:4a:f3:7b:5b:25:98:0a:20:2f:
fc:b3:ac:8a:de:97:e3:db:39:3d:f2:73:3f:ed:f9:
e9:cd:50:84:23:26:db:f7:67:14:80:f6:02:4f:b4:
4e:d4:8c:b2:86:59:f8:cf:b4:1e:5b:9b:21:62:4d:
0d:3a:da:7c:6f:62:1d:c9:7a:4f:00:3b:5e:d7:db:
b8:f5:a3:a3:8e:23:57:62:1d:af:c6:9f:af:7a:61:
b8:64:cf:3f:e6:98:3c:28:4f:34:a3:a0:b1:81:df:
cd:bb:ba:57:5d:34:99:86:bf:37:5a:90:8e:a0:1c:
13:15:c9:9c:e4:04:1d:d8:b8:35:7c:32:b8:05:bb:
51:21:a0:9f:9e:8e:c2:2b:33:c8:e0:92:33:d9:dc:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D1:68:B0:A0:5F:30:A9:FB:8E:EC:91:5C:65:3F:99:14:05:83:0D
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313338333634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:75:cd:0b:9f:7e:52:db:88:f0:f9:0c:30:70:7a:19:ae:03:
41:6b:d8:c5:fe:ff:89:31:db:fb:0f:d8:7a:67:f1:28:35:55:
90:cf:48:7e:0b:4f:ea:08:89:f1:1d:7d:16:bc:d7:f1:3e:43:
bb:82:a6:3c:2a:36:48:53:a2:b7:2c:24:59:9e:5d:ae:92:ea:
c1:02:53:72:dd:0b:1a:b5:44:38:77:3c:da:b8:23:df:d9:6f:
ff:61:72:79:fc:70:45:9e:30:e2:29:e2:9b:0b:06:7e:80:22:
34:58:6f:91:d7:13:6b:0a:f5:b8:59:e7:fb:79:01:ec:b5:0e:
60:bd:68:a8:2d:2d:a8:c3:41:58:b4:42:99:2c:92:ae:54:5f:
4e:61:1e:8d:b8:49:18:65:b5:4c:c6:f9:13:b9:75:e2:26:71:
1b:ae:38:22:c0:e2:42:4e:a8:43:d0:2f:37:8d:26:e5:c1:76:
a8:de:1d:2f:5e:d3:17:92:86:cd:da:a1:62:3e:53:75:8b:e9:
0f:ca:fd:ca:dc:f3:45:9b:32:78:5e:3c:42:84:c4:82:69:dc:
1e:cc:fa:33:9f:52:45:83:d7:29:1a:9b:e9:d6:1a:4a:d1:3a:
85:0f:38:70:6a:e4:0b:0d:bf:a3:ea:a9:3c:3d:cd:40:80:84:
77:58:35:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:20 2026 by rpki-client