This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38322e302f32342d3234203d3e20383334.roa
File: 34332e3235352e38322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: icPb5M6Y/CPwkJET9vdKSzs0dBOYlGKaymEwUa2ujW8=
Subject key identifier: 31:FA:34:C5:AF:89:40:88:2F:11:51:05:96:D8:31:4E:33:8E:EA:8C
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 067C9F6DFD62C070EAFE1FE02BD3ACBD7BBEB081
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38322e302f32342d3234203d3e20383334.roa
Signing time: Thu 15 Jan 2026 06:45:26 +0000
ROA not before: Thu 15 Jan 2026 06:40:26 +0000
ROA not after: Thu 14 Jan 2027 06:45:26 +0000
asID: 834
IP address blocks: 43.255.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 01:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7c:9f:6d:fd:62:c0:70:ea:fe:1f:e0:2b:d3:ac:bd:7b:be:b0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Jan 15 06:40:26 2026 GMT
Not After : Jan 14 06:45:26 2027 GMT
Subject: CN=31FA34C5AF8940882F11510596D8314E338EEA8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:b4:f9:69:ee:49:5d:1f:8e:9f:ed:25:43:
f4:43:4f:a8:9f:ce:4f:ec:18:2d:47:a0:08:93:8b:
a4:32:f0:59:4c:2d:7e:f4:e2:45:c7:4d:fe:ea:eb:
16:ce:6d:3d:65:6a:81:42:9e:b3:f0:20:81:66:e6:
ac:ff:f1:45:7b:37:95:06:1d:fe:7e:72:e5:38:60:
bd:4d:cc:28:e4:db:53:4b:61:ce:3a:ea:60:05:87:
8d:49:f6:67:69:97:e9:d4:f5:51:d8:47:f5:c9:a4:
ee:03:f9:e7:f0:7a:4a:42:84:41:3c:ec:20:66:84:
63:55:79:0e:10:20:2b:ef:3b:05:8f:da:01:d5:2d:
6b:a3:0a:cf:fc:41:ed:02:b5:0e:08:83:7b:f4:8c:
a3:77:37:81:cc:73:63:f3:1d:22:a5:7a:28:ff:af:
34:84:5b:87:21:21:f4:5a:fe:48:cc:3e:d9:f8:bf:
90:d6:22:89:66:b3:fb:b8:f2:9a:fb:1b:f1:af:4b:
a5:78:9d:21:d8:d0:0b:1d:e4:c5:cc:b8:51:fd:d7:
22:c2:94:73:37:8d:18:31:6e:00:bf:c7:9f:57:70:
4e:e1:65:ce:ad:ef:31:91:d8:3c:5e:72:d9:86:58:
5b:cb:bb:e3:51:07:4d:61:23:b3:8f:7e:9b:78:d0:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:34:C5:AF:89:40:88:2F:11:51:05:96:D8:31:4E:33:8E:EA:8C
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.255.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:66:0b:db:2a:d0:8f:d5:9e:16:5d:c1:ed:f0:97:c1:ec:41:
f7:07:10:ce:e5:1f:12:46:bb:61:74:68:c2:5a:20:83:4c:fc:
9d:c2:06:74:03:12:84:1f:52:9f:8d:f9:77:cf:5a:1e:3d:cb:
50:2b:5c:77:3f:b6:e2:61:5a:ac:0a:9c:0a:f0:e7:bc:11:61:
cb:cf:3c:66:c2:d2:75:9c:11:2e:6b:40:ba:8c:43:eb:56:42:
2b:24:24:70:4d:85:36:05:9c:55:ca:2e:5a:6e:c0:ba:b9:0d:
78:45:98:4e:28:3c:52:59:21:3b:d9:f8:9b:b6:24:91:43:d7:
f9:86:65:a8:c6:42:ed:bd:2b:ad:de:16:35:dc:28:f2:02:f4:
27:7d:5d:f4:01:85:59:20:21:5b:50:56:8e:ce:4a:f2:a6:3e:
43:b5:b2:52:75:ec:19:d9:13:eb:1f:dc:d4:8d:57:d1:d1:8b:
f6:a1:a6:55:a1:49:f4:90:e1:1c:24:a5:58:75:7b:1c:ec:85:
47:63:90:7a:10:92:d1:46:d1:bb:92:be:7a:a4:ac:75:7e:c3:
e0:7c:16:1e:8a:a1:7d:f6:6d:07:d3:fa:b2:b0:6e:26:13:1c:
b5:b7:7e:3b:f3:2b:32:55:f0:11:21:14:95:3d:ae:db:b2:7b:
f8:2d:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:57 2026 by rpki-client