This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38322e302f32342d3234203d3e20393834.roa
File: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (raw, json)
Hash identifier: iePGe9T2LA42zdlsMC0OBhMqCfwBJ5LDY/yEOVKS4Ac=
Subject key identifier: 1A:20:F1:DA:B0:BD:1F:99:6D:E6:F6:AE:BD:8B:30:3D:98:04:FF:B2
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 369EBC80171F72E6756A7565122ED239E0405457
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38322e302f32342d3234203d3e20393834.roa
Signing time: Thu 13 Nov 2025 07:29:20 +0000
ROA not before: Thu 13 Nov 2025 07:24:20 +0000
ROA not after: Thu 12 Nov 2026 07:29:20 +0000
asID: 984
IP address blocks: 43.255.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 08:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:9e:bc:80:17:1f:72:e6:75:6a:75:65:12:2e:d2:39:e0:40:54:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Nov 13 07:24:20 2025 GMT
Not After : Nov 12 07:29:20 2026 GMT
Subject: CN=1A20F1DAB0BD1F996DE6F6AEBD8B303D9804FFB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:65:32:09:f0:b4:a5:fc:ae:88:5d:5a:e5:
8a:ba:b0:02:6d:1b:02:b7:67:dc:60:8c:d3:9a:65:
13:ae:73:97:12:56:8c:53:d1:f3:ca:11:ae:8d:9f:
76:cb:c2:bf:60:77:0c:5e:d2:10:02:3d:ce:0a:64:
dc:48:f6:a9:a2:80:80:ff:8f:38:26:33:6e:b3:dd:
d9:b1:13:d0:90:80:15:6b:1d:57:06:d2:71:62:b2:
1c:91:b6:b3:fe:45:c4:18:6a:e8:ad:bf:56:82:77:
d5:33:43:86:92:f6:f9:46:51:11:c2:b7:6e:52:e2:
39:73:8b:50:d6:59:10:a1:14:e9:5b:be:c4:c6:ee:
e5:16:38:5a:8f:51:63:40:a4:e7:f2:5a:e5:b4:ea:
e9:32:20:4b:3d:c1:88:d9:c4:40:a3:ca:7c:7c:d0:
a0:6a:58:79:63:a5:dd:9b:37:55:ec:54:9c:b7:98:
44:be:34:73:32:91:e2:ab:08:25:6c:48:7c:2e:a9:
9b:d2:a5:cf:00:17:9e:28:72:32:67:bc:86:20:bf:
21:43:e9:0b:e5:d6:94:4e:e4:46:d9:a7:bc:9a:3b:
49:c3:0d:a0:47:20:05:61:5b:40:cb:84:32:8d:e2:
7f:cb:ac:77:7d:c9:cd:25:c9:84:89:06:fd:82:87:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:20:F1:DA:B0:BD:1F:99:6D:E6:F6:AE:BD:8B:30:3D:98:04:FF:B2
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38322e302f32342d3234203d3e20393834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.255.82.0/24
Signature Algorithm: sha256WithRSAEncryption
02:23:78:a1:55:81:0d:b2:01:eb:c8:93:54:a5:c3:95:a0:67:
c0:01:f6:c2:ff:31:b4:2b:a3:58:08:1b:f7:16:55:a5:45:a4:
7a:24:69:e7:01:ca:85:2c:6f:75:40:18:83:61:55:d7:d4:1a:
4c:c2:b8:1e:53:90:68:ca:77:8b:55:09:c9:0e:91:51:f6:4a:
c1:5c:d3:5c:62:48:d8:92:eb:01:41:18:dc:6b:4a:b4:a3:00:
0c:67:c5:a4:ee:87:b8:56:7b:ce:b1:0d:89:95:75:16:1b:05:
9c:a1:28:99:c2:cb:a3:70:99:d2:2d:0f:23:e3:db:57:73:77:
bf:1b:4b:db:b5:02:c8:fe:75:25:ea:78:d6:bc:58:61:6e:42:
f2:bc:13:32:3e:c6:52:9b:80:66:96:c2:d2:49:3e:2a:9d:6d:
ad:7a:fc:27:d8:b5:cf:eb:9e:cb:6b:17:15:2b:09:74:e8:e4:
b8:92:b3:19:de:51:aa:9b:c2:f2:6c:69:42:c9:64:3c:79:71:
ae:1f:f1:d1:e5:64:7e:48:b9:bf:a4:7a:69:ec:68:ee:9d:76:
a3:4a:92:67:9d:b8:22:17:c0:3b:30:df:8b:be:6e:99:7b:ce:
36:60:ec:c5:98:36:00:fe:ec:00:6a:0b:73:f2:ed:06:fe:86:
4b:b3:ea:b1
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUNp68gBcfcuZ1anVlEi7SOeBAVFcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4
NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MTExMzA3MjQyMFoX
DTI2MTExMjA3MjkyMFowMzExMC8GA1UEAxMoMUEyMEYxREFCMEJEMUY5OTZERTZG
NkFFQkQ4QjMwM0Q5ODA0RkZCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMHlZTIJ8LSl/K6IXVrlirqwAm0bArdn3GCM05plE65zlxJWjFPR88oRro2f
dsvCv2B3DF7SEAI9zgpk3Ej2qaKAgP+POCYzbrPd2bET0JCAFWsdVwbScWKyHJG2
s/5FxBhq6K2/VoJ31TNDhpL2+UZREcK3blLiOXOLUNZZEKEU6Vu+xMbu5RY4Wo9R
Y0Ck5/Ja5bTq6TIgSz3BiNnEQKPKfHzQoGpYeWOl3Zs3VexUnLeYRL40czKR4qsI
JWxIfC6pm9KlzwAXnihyMme8hiC/IUPpC+XWlE7kRtmnvJo7ScMNoEcgBWFbQMuE
Mo3if8usd33JzSXJhIkG/YKH1RcCAwEAAaOCAgswggIHMB0GA1UdDgQWBBQaIPHa
sL0fmW3m9q69izA9mAT/sjAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64
ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4
QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2
dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUH
MAuGaXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxQTYx
MzEwMDAwLzAvMzQzMzJlMzIzNTM1MmUzODMyMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzkzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAK/9SMA0GCSqGSIb3DQEBCwUAA4IBAQACI3ih
VYENsgHryJNUpcOVoGfAAfbC/zG0K6NYCBv3FlWlRaR6JGnnAcqFLG91QBiDYVXX
1BpMwrgeU5BoyneLVQnJDpFR9krBXNNcYkjYkusBQRjca0q0owAMZ8Wk7oe4VnvO
sQ2JlXUWGwWcoSiZwsujcJnSLQ8j49tXc3e/G0vbtQLI/nUl6njWvFhhbkLyvBMy
PsZSm4BmlsLSST4qnW2tevwn2LXP657LaxcVKwl06OS4krMZ3lGqm8LybGlCyWQ8
eXGuH/HR5WR+SLm/pHpp7GjunXajSpJnnbgiF8A7MN+Lvm6Ze842YOzFmDYA/uwA
agtz8u0G/oZLs+qx
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:41:21 2025 by rpki-client