This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20323133373131.roa
File: 3130332e3233382e3132382e302f32342d3234203d3e20323133373131.roa (raw, json)
Hash identifier: G2Zoq8FyHmareWmxTdUUlZYsXury5Z4QqjB48I3Qp9c=
Subject key identifier: C3:7B:76:31:90:BC:F7:DB:8F:8C:00:9D:E2:CC:0F:88:89:4C:EC:66
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 5BAE6E0D84208E9200F26899C811852A21541C08
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20323133373131.roa
Signing time: Sat 15 Nov 2025 11:30:53 +0000
ROA not before: Sat 15 Nov 2025 11:25:53 +0000
ROA not after: Sat 14 Nov 2026 11:30:53 +0000
asID: 213711
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 08:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ae:6e:0d:84:20:8e:92:00:f2:68:99:c8:11:85:2a:21:54:1c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Nov 15 11:25:53 2025 GMT
Not After : Nov 14 11:30:53 2026 GMT
Subject: CN=C37B763190BCF7DB8F8C009DE2CC0F88894CEC66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8d:1c:6b:ee:71:7f:c5:dc:75:55:68:cc:58:
8c:f6:d3:13:c5:ef:f8:4d:6d:46:d2:5b:e3:b4:18:
01:11:5d:a6:0e:20:5d:80:8a:55:97:34:18:68:c9:
fd:ea:6a:6f:fe:99:b2:8a:9d:f8:d7:eb:82:9b:44:
b3:d4:e2:cb:d8:15:69:15:0a:fe:bf:08:45:6e:1d:
4b:c8:d7:93:3f:ab:8a:33:95:e3:29:5f:cd:1b:7f:
83:5f:7a:15:50:0a:e1:37:2f:e5:ec:9d:99:ec:02:
29:ae:57:f0:1c:c9:f6:13:ac:48:a0:c1:64:28:dc:
73:03:9e:03:1f:f0:60:23:e4:7c:f7:43:77:64:00:
0f:50:20:ce:6c:d3:b6:e3:22:db:d8:32:a4:de:ee:
96:20:46:2d:43:15:ec:a0:db:df:7c:37:61:a6:dc:
87:04:96:6c:34:e9:7a:ed:e0:df:a0:5a:5b:e5:c7:
25:69:07:f8:59:33:73:4c:c6:a2:c0:3c:1d:6f:f2:
5a:fc:17:bc:96:53:a1:22:79:bf:bb:9a:a5:21:33:
28:c5:ae:1a:42:10:33:08:3e:11:c1:1b:72:01:e6:
44:92:f7:d6:73:88:f8:17:ab:e3:00:18:1e:3b:68:
9f:8b:61:a4:1d:b7:71:26:35:cb:c7:f3:81:c1:23:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7B:76:31:90:BC:F7:DB:8F:8C:00:9D:E2:CC:0F:88:89:4C:EC:66
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20323133373131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:dd:2e:03:25:80:1f:b8:08:ec:07:fd:2f:de:6a:a1:ad:4d:
e9:de:1a:8a:2e:ea:5c:4c:21:5a:58:5f:0e:ee:98:b7:b4:41:
c6:b0:ef:15:17:0d:c0:a1:e6:e3:b4:65:42:5f:d6:76:38:57:
73:4f:34:e1:5b:c6:c1:25:9f:92:ea:1f:8b:b9:df:8d:52:a9:
18:9e:7a:10:0a:dd:96:c2:51:e4:e7:88:37:d3:21:ba:81:af:
93:92:89:60:e1:6e:16:32:f6:05:86:26:3b:a8:5d:65:cd:e9:
0f:8d:66:21:28:b1:af:68:69:0e:f1:47:9a:ba:69:9e:7d:a8:
16:56:86:23:f2:03:d8:8c:83:b1:a8:04:78:90:5c:47:6c:8b:
b5:02:72:5d:6c:ca:23:78:bc:66:37:f7:14:1a:eb:b3:0c:ea:
12:1e:23:ed:79:ac:07:9c:5d:a4:e9:3c:05:a1:b4:0b:bd:41:
f6:50:3e:8c:3e:9b:05:5e:49:11:e7:76:8b:9a:06:4b:5f:c4:
e4:5b:93:e2:b9:ac:5b:4c:ae:e7:10:e6:d8:49:96:a7:bb:7c:
eb:60:ca:9e:d2:6e:7c:70:c8:3a:e4:7f:f8:44:bd:3e:f1:56:
98:54:58:ab:7d:b8:4f:e3:2b:93:35:42:ad:f2:3d:a5:d3:de:
1f:2b:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:34 2025 by rpki-client