This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e20313534303437.roa
File: 3130332e32352e3132342e302f32342d3234203d3e20313534303437.roa (raw, json)
Hash identifier: Vssq/QZ62h+n1ehYmeNIPp3ZdHP8q1YlxIRMrb3EDzM=
Subject key identifier: A5:28:E3:3F:DD:50:4D:9E:4F:7B:A4:7C:25:84:DC:71:86:8D:31:82
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 6C3DCC8BB942C2021552E16AEB52BFC63F42F854
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e20313534303437.roa
Signing time: Sun 18 Jan 2026 09:41:04 +0000
ROA not before: Sun 18 Jan 2026 09:36:04 +0000
ROA not after: Sun 17 Jan 2027 09:41:04 +0000
asID: 154047
IP address blocks: 103.25.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 06:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:3d:cc:8b:b9:42:c2:02:15:52:e1:6a:eb:52:bf:c6:3f:42:f8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Validity
Not Before: Jan 18 09:36:04 2026 GMT
Not After : Jan 17 09:41:04 2027 GMT
Subject: CN=A528E33FDD504D9E4F7BA47C2584DC71868D3182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:b8:b9:cb:f5:76:4c:a5:ee:86:94:0a:9b:
ed:c1:42:44:1a:d5:08:51:34:29:5c:f7:0a:bf:c9:
21:cb:2c:17:4b:5c:be:52:af:f0:e5:df:b3:5a:01:
b1:0e:22:95:eb:e0:e8:22:08:83:03:8d:7f:11:39:
27:10:8f:16:1a:e1:ae:fd:08:cb:f1:51:56:ec:dd:
38:a1:9d:72:25:be:ef:d4:e5:e9:d8:30:9d:d6:33:
0a:a1:fa:e3:71:3a:eb:7a:4f:4e:ad:47:28:12:c9:
01:18:f8:2f:9c:a4:76:a9:bc:57:b9:b3:d0:b4:d3:
07:c2:11:22:37:c7:94:ed:28:d5:dc:cd:a6:9d:10:
b8:db:a5:68:14:d9:37:5b:64:27:7c:a7:9a:c6:a5:
87:27:16:c5:cf:d4:a0:f3:69:59:da:79:78:37:56:
4b:0e:56:2d:ac:1b:0f:3f:77:ae:eb:7c:b7:8d:7e:
cd:1e:9b:45:bf:df:a9:68:83:39:64:5a:67:11:9e:
58:8f:9f:f3:59:bc:f5:1c:3f:f9:37:39:33:d9:e4:
f0:42:fb:db:69:7e:d1:c8:b1:e4:e8:97:5f:dd:26:
c9:9c:51:44:b7:31:11:0a:ce:eb:2c:87:d4:c4:9a:
17:91:5c:75:68:71:f1:62:c1:be:52:d6:58:d9:4b:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:28:E3:3F:DD:50:4D:9E:4F:7B:A4:7C:25:84:DC:71:86:8D:31:82
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e20313534303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.124.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b9:41:52:da:2a:c4:2b:66:c4:a6:f0:b2:ab:4d:61:24:e3:
ef:c2:a2:97:fb:83:fb:8e:99:6c:78:c6:5b:38:a7:81:23:b6:
53:a8:c2:e7:d4:9e:ef:9a:81:29:16:ac:f4:f4:cc:3d:1d:0d:
e5:5d:c5:de:0f:cf:df:2c:cd:80:46:f5:07:bb:e5:2f:f7:62:
82:7a:c8:f8:df:57:3d:21:17:eb:46:49:2f:84:20:1d:97:3b:
25:77:b2:a0:f1:e5:9a:e9:9b:8a:31:d5:21:6d:1e:9c:d8:7a:
f9:39:d0:f1:07:fd:58:8e:96:58:6e:09:2f:18:f0:fb:4e:0d:
fe:7d:5d:b8:8d:8b:77:7c:5b:31:94:85:fe:9e:ff:10:06:57:
f8:c3:a6:48:c8:64:85:2a:4b:47:9f:38:75:2f:e6:8c:8d:6a:
69:55:14:a3:53:eb:5c:e8:6c:5c:4d:d1:77:d3:91:3c:93:f5:
64:c2:3d:6f:e1:a9:e4:c7:8d:61:21:82:fa:77:67:92:d0:23:
a7:e9:6f:c4:24:d3:af:a5:b3:59:e5:c1:02:87:ba:96:c1:01:
9c:a0:5e:30:8e:bc:a8:7e:91:7b:14:52:ca:48:cf:2a:cc:47:
e3:4b:97:89:38:8d:ed:af:fd:f2:f6:fe:ab:ca:8c:87:02:72:
aa:7e:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:35:50 2026 by rpki-client