This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa
File: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=
Subject key identifier: 7F:0B:9C:B7:EE:3C:C4:BC:DE:F4:74:86:38:5D:3D:9D:16:45:69:D1
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 5EF421B412EB4B8906F8BAFD77D50A1BF3FF9389
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa
Signing time: Thu 13 Nov 2025 07:29:20 +0000
ROA not before: Thu 13 Nov 2025 07:24:20 +0000
ROA not after: Thu 12 Nov 2026 07:29:20 +0000
asID: 200017
IP address blocks: 43.255.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 08:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f4:21:b4:12:eb:4b:89:06:f8:ba:fd:77:d5:0a:1b:f3:ff:93:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Nov 13 07:24:20 2025 GMT
Not After : Nov 12 07:29:20 2026 GMT
Subject: CN=7F0B9CB7EE3CC4BCDEF47486385D3D9D164569D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:8b:f8:7c:b3:bf:df:9c:59:10:2d:9d:eb:
bb:d9:7b:40:43:ca:10:cf:56:a9:6c:78:15:43:06:
4c:26:89:87:f7:9e:10:69:b2:75:27:71:3f:42:93:
5a:ac:4f:90:a7:0e:b4:69:d2:19:b2:cf:ad:21:e1:
54:ee:7e:17:0f:98:5b:fd:85:82:75:1e:a2:c6:36:
c7:6e:de:2f:f5:08:af:e6:63:5c:a1:4c:c1:5f:d4:
70:0a:2a:be:f6:1a:d1:53:44:7e:72:b0:7c:ac:78:
12:e7:5c:86:4d:94:f0:0b:db:58:e6:9b:6b:6a:a9:
16:61:3d:bd:34:3b:00:64:78:7e:67:4d:e6:11:8d:
45:73:84:f4:5d:33:4f:95:9f:95:45:dc:6f:ac:87:
5f:ff:c5:1e:78:a6:45:8a:4b:9c:1c:37:f2:ff:eb:
77:c1:f1:48:d2:50:4a:e1:bf:81:14:d6:d7:23:75:
3d:37:c5:a1:1a:52:42:04:d7:dd:5c:a9:1c:93:71:
33:a5:f9:d0:53:c2:8f:42:20:54:c3:3e:ac:13:ff:
f2:05:d2:c0:f3:ae:df:42:57:1e:08:de:c2:ee:d5:
cb:2b:87:eb:53:cf:a7:6d:22:61:90:80:58:fb:8a:
2c:85:07:a0:52:43:de:e9:d6:d8:5e:52:7a:04:82:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0B:9C:B7:EE:3C:C4:BC:DE:F4:74:86:38:5D:3D:9D:16:45:69:D1
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.255.83.0/24
Signature Algorithm: sha256WithRSAEncryption
28:75:a0:e9:d8:b7:a6:de:8b:31:c5:1d:0a:d9:67:da:6d:e9:
31:4d:82:a0:0a:02:15:bc:74:df:a1:48:5a:22:8d:bc:05:fc:
67:dc:0f:63:77:aa:0b:d7:88:03:cd:9c:90:7a:1e:aa:6c:94:
73:3c:5e:cd:d9:3e:1c:a3:4d:90:fa:41:98:32:b0:fd:c3:e4:
23:76:bc:b1:bb:a8:a1:55:f0:84:46:86:6e:38:01:0d:8f:b6:
ca:55:33:64:f7:a8:61:e8:9f:57:a4:e5:e4:33:6c:8c:7c:88:
3d:16:dc:a0:a9:1d:6a:45:39:b7:b6:c2:2a:84:0a:cf:63:4e:
78:20:4e:43:ad:59:d3:1d:32:7a:45:ef:a2:f5:cd:4b:b2:df:
c1:cf:b2:6a:af:56:61:19:f3:b2:fb:dc:90:16:1e:67:88:b2:
b2:ff:b0:31:a0:96:77:d7:c5:a9:ea:92:a1:4d:42:1c:15:f7:
91:7b:b8:ba:b1:13:c3:eb:c4:de:86:8e:f8:30:93:37:48:00:
24:47:96:c9:d0:16:e2:0a:11:3f:d1:a1:f1:cd:b5:2c:1a:7f:
6f:45:da:97:35:c5:ce:75:99:63:c3:bd:f4:63:f2:67:0d:c2:
3e:f5:b4:3a:f1:ce:f7:27:d9:bd:33:22:36:ee:5e:ef:bb:29:
33:27:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:39:33 2025 by rpki-client