This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa
File: 3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa (raw, json)
Hash identifier: /3IEW/L0xD5c+gjtCpGu3f4OnNilISvSgo/f0RfHoCg=
Subject key identifier: D2:03:8C:A5:E7:D8:07:07:60:00:DB:F9:9B:91:B4:58:15:E7:BE:39
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 188D02A62313112453720CF846A5C9F7D175BE90
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa
Signing time: Mon 15 Dec 2025 15:28:17 +0000
ROA not before: Mon 15 Dec 2025 15:23:17 +0000
ROA not after: Mon 14 Dec 2026 15:28:17 +0000
asID: 154408
IP address blocks: 103.238.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 03:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8d:02:a6:23:13:11:24:53:72:0c:f8:46:a5:c9:f7:d1:75:be:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Dec 15 15:23:17 2025 GMT
Not After : Dec 14 15:28:17 2026 GMT
Subject: CN=D2038CA5E7D807076000DBF99B91B45815E7BE39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:bb:9f:6f:b2:c3:c0:6b:e5:25:9f:fc:f4:
60:6b:37:ae:1d:bd:75:7f:c8:e7:78:aa:48:29:c8:
c0:20:bf:b5:37:dc:8e:79:0c:97:32:c7:42:51:cd:
89:29:cc:27:8b:b3:1b:14:1f:8c:19:a4:8b:e3:be:
84:32:b9:97:32:52:d1:5c:52:3a:a6:cd:5e:a8:dd:
60:37:45:12:ea:07:b8:7f:ee:c5:81:76:f3:94:07:
de:f4:87:da:0a:63:6e:09:ca:22:35:65:b6:77:e6:
1e:17:f5:14:10:57:0e:35:31:f9:55:17:a5:aa:0d:
56:10:56:a3:ec:dd:0f:28:cc:e9:ba:83:52:fa:83:
94:ed:22:fb:55:fe:e3:ba:ed:11:61:6e:b4:e0:eb:
f8:65:9b:d9:c2:44:8c:98:ee:31:06:15:30:39:ea:
7b:88:eb:de:75:39:9b:7f:09:fb:0f:89:da:f4:e0:
1f:0c:92:05:bc:76:0d:2e:2a:ad:66:28:50:51:ac:
68:2b:d8:ea:f1:d8:60:32:83:bb:fb:27:e5:01:9e:
81:91:1e:0b:99:2e:4e:81:7b:c8:41:bc:f4:fe:7c:
e4:44:fb:90:13:8b:39:9b:69:64:20:f4:62:2f:62:
6e:1b:76:2f:ab:53:ea:85:b9:fa:d6:12:be:6d:45:
af:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:03:8C:A5:E7:D8:07:07:60:00:DB:F9:9B:91:B4:58:15:E7:BE:39
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313534343038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:cb:89:3f:33:7d:e3:8d:d8:cb:e4:9b:61:6b:16:8b:4f:d1:
db:e1:c7:5a:2a:8c:cf:5c:5b:19:05:be:ed:e7:c0:01:9e:58:
f4:40:79:73:6c:2a:94:c2:e6:52:24:50:8f:c2:4a:f9:0d:ec:
1a:68:6f:b8:82:a9:82:ac:60:5d:a3:a7:97:f9:1d:63:7d:8f:
4f:f9:f0:0b:7f:f6:ad:6f:47:63:a7:13:a7:14:a2:0d:ab:d2:
99:5c:ec:d8:68:b1:2f:f3:2c:da:0d:48:73:b6:4c:44:e5:8f:
3a:e3:84:47:6a:0a:42:4d:41:67:68:2e:91:5b:1e:94:57:87:
8d:d9:0f:6f:3c:1d:0b:81:a3:34:31:7d:02:4d:39:7a:31:98:
01:12:cd:b1:a3:2e:c5:a9:5c:08:d1:03:9a:73:dd:19:b6:91:
d6:e8:fd:07:c9:28:85:0b:4b:ee:af:14:2d:e9:d3:e7:de:6e:
c1:71:50:cd:ce:09:db:3b:65:3b:01:1e:7a:b9:b7:e1:7b:1e:
5b:77:49:8a:17:6b:96:52:55:19:09:7e:e7:16:a8:a7:0f:9c:
56:95:f1:12:65:d4:3b:a3:6e:9a:b4:5f:85:bd:41:70:ef:b9:
ed:d6:05:19:0b:37:6d:98:c5:03:9c:08:9d:a7:63:b0:fa:90:
f8:e5:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:49:48 2025 by rpki-client