This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa
File: 3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa (raw, json)
Hash identifier: BOcBhnnvYV178kOTT3dELkNmbvpnN/z4847g0PI0+QA=
Subject key identifier: D4:04:3D:D5:93:3A:43:21:CA:CF:93:91:6B:CA:BC:94:CC:34:35:9F
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 4C18BE06DCD354495D5BF1B4D3F8CA80E18602E8
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa
Signing time: Mon 09 Feb 2026 04:34:09 +0000
ROA not before: Mon 09 Feb 2026 04:29:09 +0000
ROA not after: Mon 08 Feb 2027 04:34:09 +0000
asID: 395047
IP address blocks: 103.238.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Feb 2026 11:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:18:be:06:dc:d3:54:49:5d:5b:f1:b4:d3:f8:ca:80:e1:86:02:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Feb 9 04:29:09 2026 GMT
Not After : Feb 8 04:34:09 2027 GMT
Subject: CN=D4043DD5933A4321CACF93916BCABC94CC34359F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:23:78:1d:61:39:85:23:42:11:b4:41:97:
39:73:35:36:99:59:13:45:7a:05:20:9d:d6:c4:ff:
fb:75:40:15:cd:d7:48:e6:3b:c7:51:53:62:4b:c7:
28:75:30:7f:90:b0:d4:33:b5:ac:19:75:3d:9f:12:
46:52:9b:af:cc:b6:5d:56:64:40:14:7c:50:6b:46:
50:bc:cd:7e:2f:06:88:34:dd:23:49:13:d1:24:1f:
21:95:cf:ca:13:9d:ae:b6:ac:e4:16:80:74:3e:33:
f9:39:5e:89:7f:5e:55:7c:84:86:6b:7e:9e:9e:6b:
e5:09:14:4e:64:65:d8:44:d8:77:5c:05:4d:cf:97:
f4:8e:b3:2f:5d:3a:cb:05:cb:c4:aa:86:f3:f0:11:
3a:e7:b9:63:86:30:92:ca:02:57:dc:fd:8b:a4:1b:
94:67:f1:2c:98:65:aa:3e:d3:fa:98:37:70:bf:3c:
b8:86:5a:0d:df:58:63:14:c4:f8:d6:e1:24:ca:d8:
de:d5:25:61:78:81:ea:a0:99:f3:9c:82:03:aa:c1:
2c:a0:6f:ed:80:4d:3d:3c:cd:3b:9b:7d:9d:66:8a:
90:4f:e2:a8:70:d9:8e:2b:77:78:2e:49:80:2e:e2:
1c:7f:c8:cf:a0:07:ee:33:d6:c9:08:01:59:47:e2:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:04:3D:D5:93:3A:43:21:CA:CF:93:91:6B:CA:BC:94:CC:34:35:9F
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133312e302f32342d3234203d3e20333935303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.131.0/24
Signature Algorithm: sha256WithRSAEncryption
82:2c:e0:c5:f8:02:d1:7e:8d:a2:00:40:10:6c:57:b4:9b:0f:
32:6c:24:86:99:fd:5e:9b:c8:eb:4e:3b:6a:b7:60:e9:57:c4:
cf:90:4e:af:11:58:0d:af:2e:20:85:71:4c:c2:1e:48:d5:e3:
2b:5c:32:0e:a0:c8:7e:41:21:a6:a2:fd:c7:24:78:f3:1b:4d:
20:da:3b:9b:d7:5b:1c:12:61:d1:c6:59:58:76:fa:09:f4:cf:
11:6c:3c:ef:99:37:44:3b:d0:0e:78:43:50:41:81:02:ed:96:
ea:5f:c5:75:ad:c5:98:7c:d2:35:a8:b0:95:14:96:d5:34:1a:
4d:e6:ac:d1:eb:f2:3d:1d:4e:77:50:8e:49:4d:19:d4:e3:6d:
d8:42:5b:e7:ea:a3:98:d7:60:12:76:7e:f3:6c:72:85:09:9a:
ce:86:d2:ba:f5:05:59:2c:00:4b:9f:d9:8e:9d:34:c3:88:d1:
df:6c:e2:92:c5:a3:f0:23:07:49:b4:00:0d:2f:2e:cc:c6:43:
1a:2f:60:e5:eb:9a:1e:d2:ae:fd:2d:30:a3:36:58:21:ac:22:
14:bc:6f:14:d8:10:34:1f:bf:c9:34:ba:b3:3c:e1:98:29:d3:
bb:c6:42:b2:86:9d:fb:bb:37:69:b1:e8:3c:ce:70:37:3b:9f:
3f:77:cf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 22:25:47 2026 by rpki-client