This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa
File: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (raw, json)
Hash identifier: 6TVtRjMo6NdmFhAHDl8M0r+4lRhfrCtY1qBQoykIxG0=
Subject key identifier: 68:11:D7:18:4A:E5:79:CB:E5:8F:CC:8F:47:4D:5F:A6:8E:E4:B4:D7
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 53B21F2294F1A702FEA1C06A8C08A5B8AFA553DA
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa
Signing time: Wed 19 Nov 2025 16:29:20 +0000
ROA not before: Wed 19 Nov 2025 16:24:20 +0000
ROA not after: Wed 18 Nov 2026 16:29:20 +0000
asID: 51847
IP address blocks: 103.238.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 08:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b2:1f:22:94:f1:a7:02:fe:a1:c0:6a:8c:08:a5:b8:af:a5:53:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Nov 19 16:24:20 2025 GMT
Not After : Nov 18 16:29:20 2026 GMT
Subject: CN=6811D7184AE579CBE58FCC8F474D5FA68EE4B4D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:89:e2:64:e7:5a:91:11:9d:ef:3e:e7:fd:
20:9d:da:2b:b9:99:9b:8c:16:57:44:ab:9c:f7:1c:
95:7c:d0:fe:73:6d:1d:8e:27:42:ce:d7:26:e8:ce:
1f:5e:8f:54:14:41:ff:db:e5:e0:9b:2f:b8:75:4e:
1c:e3:34:91:7c:e5:e6:dd:86:55:0e:19:f9:b0:32:
4e:9f:a5:49:9c:da:7d:ec:f1:fb:87:fe:2c:5d:79:
82:81:da:e3:f3:24:1d:43:b0:b1:05:89:c8:bc:0d:
3b:cf:bb:bd:9a:66:73:3f:1a:4c:dd:ef:41:39:ec:
4f:d0:14:a6:a0:65:c5:f3:65:f3:02:3e:f5:54:0e:
b5:3f:e5:a7:c8:24:89:99:4c:60:5d:70:2d:13:92:
be:9c:a2:85:6c:d8:a6:c3:95:c0:de:e6:79:00:58:
e4:6a:c0:2d:fc:7f:7b:cb:17:42:2c:4f:c3:eb:79:
50:60:4c:c6:32:19:dc:9e:bd:09:08:7b:b9:3d:08:
5f:80:06:b1:37:80:53:f2:4a:a4:59:5b:98:4b:31:
0f:a1:4e:4a:3b:e4:69:8c:0b:74:89:5d:c3:fb:7d:
e0:b3:1e:b3:77:e9:4e:73:5b:f2:dc:5c:d8:cf:4b:
82:8d:37:8e:c9:be:fa:aa:6f:81:e8:3c:7c:fc:a7:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:11:D7:18:4A:E5:79:CB:E5:8F:CC:8F:47:4D:5F:A6:8E:E4:B4:D7
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.129.0/24
Signature Algorithm: sha256WithRSAEncryption
06:af:4f:0d:21:bc:22:21:53:5c:2b:90:69:f9:67:b5:45:87:
dd:d2:86:fb:9c:1d:21:98:80:83:c1:80:dd:34:38:dc:ed:b9:
40:d1:2f:4e:28:04:3b:f5:9b:01:31:43:3f:6c:fa:6f:7f:88:
04:f8:3e:75:58:97:0b:f2:b8:7d:f5:7d:16:c2:b2:26:a2:de:
19:32:a5:09:b3:67:a0:14:af:2a:c7:9c:84:c4:7e:ec:5a:aa:
4a:4b:12:70:71:8f:e8:e3:de:a2:f2:42:7e:21:f4:40:bf:b2:
b9:9d:1a:32:f1:43:6b:54:e6:be:7f:f8:e3:b5:0d:2a:6d:14:
f0:55:a6:70:1c:b4:6c:70:36:b6:72:64:b0:d1:d1:e6:fa:50:
42:b8:d6:ff:9d:b0:07:e0:33:4b:75:66:5b:47:aa:e4:92:92:
8e:e9:c6:93:1c:25:df:e7:4b:04:6d:72:8d:e4:51:db:c8:4f:
a0:30:a9:07:9f:00:bd:96:db:41:04:bf:66:14:cc:15:a2:83:
1b:cc:75:5f:bf:d0:39:c6:a6:f4:66:a8:00:0b:f9:3b:9b:ec:
88:83:43:eb:01:de:b2:6d:4b:75:75:72:1d:fc:b4:d5:08:cc:
6a:4d:0a:1c:26:fc:24:8b:7c:6f:34:5f:6a:a9:9a:3c:d5:da:
6b:bd:53:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:55:50 2025 by rpki-client