This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa
File: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (raw, json)
Hash identifier: 3XBxA+HuJWdSueJFSLvSDWfHwlrm0e9fb9EGVWHwsCU=
Subject key identifier: 2A:94:75:19:CC:E4:3A:02:E3:56:7E:CC:A0:19:AF:AC:E7:BE:43:55
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 6C16BB6F1CC615645A5E7C22ED8BD5183B6AB5C5
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa
Signing time: Thu 13 Nov 2025 07:29:20 +0000
ROA not before: Thu 13 Nov 2025 07:24:20 +0000
ROA not after: Thu 12 Nov 2026 07:29:20 +0000
asID: 198100
IP address blocks: 103.238.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 08:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:16:bb:6f:1c:c6:15:64:5a:5e:7c:22:ed:8b:d5:18:3b:6a:b5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Nov 13 07:24:20 2025 GMT
Not After : Nov 12 07:29:20 2026 GMT
Subject: CN=2A947519CCE43A02E3567ECCA019AFACE7BE4355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:9e:35:53:f8:f9:13:e7:05:11:54:02:be:
b3:df:0c:16:46:93:85:ab:81:58:0d:68:2c:0b:f5:
b3:1d:9a:a9:c3:0d:a2:da:21:80:ce:c7:6f:63:99:
72:07:3b:c6:22:4a:a3:d2:4a:c6:cd:80:cd:6e:b0:
00:77:4f:74:3a:dc:af:8e:36:57:9b:d7:78:86:b3:
3c:c7:af:56:11:81:a0:a2:0c:69:29:f4:20:95:01:
86:d5:49:12:c9:7b:70:95:c4:8e:62:48:e3:d8:d0:
94:9b:b2:01:4c:50:ac:bc:f4:ee:58:b6:1d:aa:c2:
ad:81:6a:28:9d:eb:c3:d8:10:3f:ec:b9:7d:74:23:
3d:1e:04:78:92:24:49:4f:c0:67:82:5c:99:75:78:
28:eb:8f:22:40:ec:c9:26:c3:5f:d8:ee:16:74:fd:
2f:4c:e0:83:16:e4:56:57:ae:23:ae:08:19:1c:20:
d9:fc:6c:37:47:f8:9e:5f:41:d0:fa:3b:bc:2a:9c:
08:e6:50:bd:40:96:ce:12:ff:ef:ad:b9:e2:1d:5e:
31:f0:18:cd:e0:c8:ed:04:a3:9a:cf:39:e0:02:df:
45:49:d8:5c:d6:94:f1:41:a0:c1:64:a7:ab:79:b7:
8a:41:07:19:f4:ef:31:8e:0c:24:0f:13:cb:c6:67:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:94:75:19:CC:E4:3A:02:E3:56:7E:CC:A0:19:AF:AC:E7:BE:43:55
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.129.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4a:24:e4:3e:7c:6e:28:61:7b:39:8d:d7:47:47:88:cc:50:
dd:80:34:56:97:e5:29:d8:e0:67:9f:39:12:d0:ed:92:7d:7d:
38:10:81:3d:73:61:4f:f1:35:f3:28:2e:42:2c:f1:13:b5:96:
77:70:40:65:da:6b:fc:85:bf:ff:8d:43:b8:2f:41:a0:2d:59:
22:0d:48:06:fa:70:70:44:0d:e6:70:41:cb:16:d7:f1:2f:93:
37:16:a5:73:26:02:be:23:11:a0:cc:e0:2f:48:c6:cd:b7:c7:
06:f1:e9:02:cb:13:58:a8:f3:99:ac:64:80:84:ad:e8:46:ee:
bf:58:95:bd:1f:22:30:a5:a9:a4:b0:a6:e6:d5:e1:3c:90:0e:
c3:36:ff:f6:5f:a1:85:f5:89:9a:30:9e:06:78:c2:ee:7c:04:
8e:1f:f8:62:18:31:5e:3c:43:72:b4:cc:6f:73:b1:89:32:1a:
19:f0:73:29:d8:57:14:1f:a1:da:38:6d:75:d9:bc:d8:65:47:
c3:d4:40:e1:45:50:5d:16:9e:a3:0d:26:c6:1c:74:09:a5:1e:
42:53:b2:f8:4d:9b:72:42:91:41:c9:6d:b6:b3:9c:d1:bb:ec:
c6:80:7c:36:d2:69:86:e5:da:7c:8e:34:3e:ce:bf:44:74:b7:
e6:06:50:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:07:36 2025 by rpki-client