This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa
File: 3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa (raw, json)
Hash identifier: UPtxGgoTJeMeU4gNLJxLVxED7CamvppwiFq3NJXyf2E=
Subject key identifier: 24:E2:2E:8D:34:1A:2F:A4:E8:97:39:F0:B0:CA:64:39:58:4C:8B:0B
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 345A558174C9E435D664FA1DD9899CC01E415E1A
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa
Signing time: Fri 26 Dec 2025 06:10:41 +0000
ROA not before: Fri 26 Dec 2025 06:05:41 +0000
ROA not after: Fri 25 Dec 2026 06:10:41 +0000
asID: 36002
IP address blocks: 103.238.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Jan 2026 22:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5a:55:81:74:c9:e4:35:d6:64:fa:1d:d9:89:9c:c0:1e:41:5e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Dec 26 06:05:41 2025 GMT
Not After : Dec 25 06:10:41 2026 GMT
Subject: CN=24E22E8D341A2FA4E89739F0B0CA6439584C8B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:e4:27:e7:e5:29:6e:a6:4a:f3:13:1d:81:
4c:46:59:7a:4c:f8:92:da:91:aa:cb:69:ef:61:87:
41:d6:e6:47:6c:de:71:e2:87:8c:26:c8:76:65:15:
19:b9:23:39:d1:44:4b:d8:02:ba:ed:0b:c0:9e:cd:
7a:ab:fc:94:70:1b:79:b1:fb:cd:09:57:53:ba:3a:
6f:29:a1:cc:e0:52:4e:79:20:bb:07:8e:a1:cd:d8:
f6:b9:ed:a1:8d:1d:27:38:27:6a:7d:36:b9:ac:e9:
cc:1e:8a:39:5c:8d:9b:03:9c:9e:87:83:a6:06:e3:
84:ae:66:85:a2:9e:61:cc:37:0f:ce:89:44:5d:0b:
f2:cf:45:5d:fa:ae:9b:80:a4:2e:09:ae:72:5d:79:
7d:3f:87:5d:dd:1d:7c:d5:2c:3a:5b:ef:5c:d1:fc:
e4:ec:07:f2:2a:39:18:4b:66:e5:a0:ea:15:56:08:
4c:86:5f:5e:3a:77:83:d0:a6:80:a5:31:34:04:28:
78:45:b4:66:ec:5b:83:f4:3d:56:e3:44:52:f5:d4:
3a:22:f7:c5:6b:4a:87:53:d4:e3:63:20:d9:7f:7f:
17:2c:fa:c0:fd:b6:24:a4:64:de:7f:7d:5d:bb:d5:
bd:ad:19:11:3e:88:e9:1c:2a:b0:78:53:a6:a4:e0:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E2:2E:8D:34:1A:2F:A4:E8:97:39:F0:B0:CA:64:39:58:4C:8B:0B
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32342d3234203d3e203336303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.130.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8d:7e:e4:b3:8b:9e:88:c6:9d:fc:6b:66:82:2b:74:86:db:
b5:de:ca:e0:e7:30:b1:59:52:13:be:37:e5:84:51:a7:85:02:
54:6c:4c:84:54:8b:bd:88:ae:fa:1b:a0:7e:55:4b:e5:3e:97:
2e:6f:84:70:0e:3c:0a:65:f0:dd:ab:c7:2e:62:a4:cc:ab:8b:
ff:df:75:59:db:b5:d7:e9:30:d4:20:cd:8c:c9:07:f3:cb:89:
ab:10:88:b9:76:e8:e5:da:b6:c0:c6:a4:67:d5:74:5f:43:90:
a2:7b:84:ca:1c:92:be:35:83:00:95:84:56:d7:fb:e2:ca:f5:
19:b9:67:ea:57:13:30:73:a2:13:7f:92:97:e4:be:34:b9:99:
04:78:09:2d:c5:c5:92:e0:e4:e8:11:c9:3b:77:93:ba:9b:bb:
31:33:11:0b:9e:e1:8a:71:f6:d6:fe:03:c7:ff:07:eb:b4:d4:
69:a4:ae:e5:de:5d:cc:48:8c:3b:0c:de:c7:a7:d0:1c:19:f6:
43:f1:4f:cf:b0:36:d1:77:74:9b:65:95:c8:95:dc:94:1d:5c:
ce:ea:75:7b:73:d9:29:1e:71:a5:9d:45:42:f0:86:a1:cd:f9:
d2:b9:1e:c9:c3:b0:00:f4:f9:88:a1:be:10:aa:5a:a0:0b:bc:
1b:6a:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:31:10 2026 by rpki-client