This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
File: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (raw, json)
Hash identifier: I0Zg9xT9Bg2a4KTy349qNEfNGpcUr650fo4y7Gh3gpM=
Subject key identifier: 13:5D:1F:CB:D6:BA:C7:67:84:1F:42:98:06:D0:AE:88:7B:E0:97:16
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 3233FAA0664BBCE759F73186D2D1F27571285491
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
Signing time: Fri 19 Dec 2025 00:00:01 +0000
ROA not before: Thu 18 Dec 2025 23:55:01 +0000
ROA not after: Fri 18 Dec 2026 00:00:01 +0000
asID: 24021
IP address blocks: 203.147.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 18:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:33:fa:a0:66:4b:bc:e7:59:f7:31:86:d2:d1:f2:75:71:28:54:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Dec 18 23:55:01 2025 GMT
Not After : Dec 18 00:00:01 2026 GMT
Subject: CN=135D1FCBD6BAC767841F429806D0AE887BE09716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:d5:91:e2:26:58:41:eb:c1:ed:5f:89:11:
32:6f:45:b8:d3:9e:0b:d6:c8:f5:42:37:80:c9:44:
d3:27:a8:20:2f:c8:cd:ac:1b:fa:b3:d4:c4:15:61:
22:fd:b2:3c:33:b3:90:7d:b1:80:76:a4:d2:d0:16:
4b:ea:d4:13:bc:37:b0:3f:dc:cf:59:e0:77:63:6e:
78:b9:c3:27:a6:04:59:81:45:64:f5:9a:7c:8f:42:
cc:d9:18:0d:09:48:6b:ed:be:a5:99:7c:f6:64:ee:
49:f9:57:09:51:02:13:f6:5e:bb:b0:b7:43:bc:ef:
bb:e3:d5:e6:78:93:49:f1:c9:cb:c4:04:dd:5d:d2:
9a:13:7c:c0:75:a6:30:e4:76:b3:0d:ea:00:5b:a6:
bf:18:19:3b:90:68:3e:4d:f1:ae:4f:28:93:ac:3b:
89:fd:44:3b:af:9b:75:d9:1a:7e:44:37:9e:7f:54:
bb:20:76:06:e1:be:c2:3f:ac:09:23:d8:10:00:da:
d0:a1:c7:f6:62:5d:59:91:85:03:5a:32:88:9f:b9:
57:4d:ee:9a:bf:42:42:a1:33:ad:87:d1:77:4d:1d:
36:be:78:e9:fa:06:c9:15:88:17:5c:13:7a:46:c9:
fb:d5:38:25:f3:83:8e:3c:10:0e:9a:0f:d0:8e:49:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5D:1F:CB:D6:BA:C7:67:84:1F:42:98:06:D0:AE:88:7B:E0:97:16
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.147.108.0/23
Signature Algorithm: sha256WithRSAEncryption
12:29:5c:15:d7:4a:86:ea:0b:6e:47:49:8f:75:be:df:55:ec:
1d:ca:2c:a1:e8:24:08:8b:a6:35:29:bc:27:0e:97:76:7f:d8:
23:0d:1c:9e:16:e4:e2:01:6a:07:cb:07:b4:a4:b3:13:3f:d9:
6b:bd:be:4c:5c:63:63:56:1e:bb:e1:7c:49:76:34:2e:8b:2e:
7a:0a:e8:ea:42:2e:c8:15:59:a6:ab:77:ba:06:7d:18:54:73:
e8:c8:8f:ec:fb:37:a0:47:c9:05:56:39:65:53:3f:a8:2c:3b:
36:56:55:ce:6f:7a:3f:3b:52:e3:45:69:17:d1:08:37:bf:01:
39:9c:a8:b8:d9:c2:97:18:f7:9d:f4:c9:95:62:9e:ef:b8:d5:
d6:dd:48:a6:dc:88:a0:44:45:be:11:78:4c:e1:e3:cb:8d:ac:
db:01:4e:21:cb:f2:0e:db:be:76:d7:f3:e1:a1:85:1c:15:ab:
f0:a3:0e:8e:0a:79:d2:94:21:78:3d:59:81:7e:26:cc:7b:88:
e7:5a:01:05:42:4b:da:bb:65:e1:bf:fb:f4:12:1a:2d:d0:e7:
06:4a:e8:5b:31:b3:2f:df:ce:88:fb:6b:15:b6:42:58:c0:29:
29:0f:ac:f4:78:e4:b3:88:b6:73:08:9e:1a:9e:56:bd:d1:0f:
b7:01:dd:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUMjP6oGZLvOdZ9zGG0tHydXEoVJEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3
REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MTIxODIzNTUwMVoX
DTI2MTIxODAwMDAwMVowMzExMC8GA1UEAxMoMTM1RDFGQ0JENkJBQzc2Nzg0MUY0
Mjk4MDZEMEFFODg3QkUwOTcxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANab1ZHiJlhB68HtX4kRMm9FuNOeC9bI9UI3gMlE0yeoIC/Izawb+rPUxBVh
Iv2yPDOzkH2xgHak0tAWS+rUE7w3sD/cz1ngd2NueLnDJ6YEWYFFZPWafI9CzNkY
DQlIa+2+pZl89mTuSflXCVECE/Zeu7C3Q7zvu+PV5niTSfHJy8QE3V3SmhN8wHWm
MOR2sw3qAFumvxgZO5BoPk3xrk8ok6w7if1EO6+bddkafkQ3nn9UuyB2BuG+wj+s
CSPYEADa0KHH9mJdWZGFA1oyiJ+5V03umr9CQqEzrYfRd00dNr546foGyRWIF1wT
ekbJ+9U4JfODjjwQDpoP0I5JyCkCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBQTXR/L
1rrHZ4QfQpgG0K6Ie+CXFjAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM
4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp
LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF
MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw
MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv
QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL
enctdE1MUmQyRE9FLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUFBzALhmxy
c3luYzovL3Jwa2kucmFuZC5hcG5pYy5uZXQvcmVwby9BOTE4NzJFRDAwMDEvMC8z
MjMwMzMyZTMxMzQzNzJlMzEzMDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIz
NDMwMzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAcuTbDANBgkqhkiG9w0BAQsFAAOCAQEAEilcFddK
huoLbkdJj3W+31XsHcosoegkCIumNSm8Jw6Xdn/YIw0cnhbk4gFqB8sHtKSzEz/Z
a72+TFxjY1Yeu+F8SXY0Losuegro6kIuyBVZpqt3ugZ9GFRz6MiP7Ps3oEfJBVY5
ZVM/qCw7NlZVzm96PztS40VpF9EIN78BOZyouNnClxj3nfTJlWKe77jV1t1IptyI
oERFvhF4TOHjy42s2wFOIcvyDtu+dtfz4aGFHBWr8KMOjgp50pQheD1ZgX4mzHuI
51oBBUJL2rtl4b/79BIaLdDnBkroWzGzL9/OiPtrFbZCWMApKQ+s9Hjks4i2cwie
Gp5WvdEPtwHdrQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:10:19 2025 by rpki-client