This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e20313534303437.roa
File:                     3130332e32352e3132342e302f32342d3234203d3e20313534303437.roa (raw, json)
Hash identifier:          Vssq/QZ62h+n1ehYmeNIPp3ZdHP8q1YlxIRMrb3EDzM=
Subject key identifier:   A5:28:E3:3F:DD:50:4D:9E:4F:7B:A4:7C:25:84:DC:71:86:8D:31:82
Certificate issuer:       /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial:       6C3DCC8BB942C2021552E16AEB52BFC63F42F854
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e20313534303437.roa
Signing time:             Sun 18 Jan 2026 09:41:04 +0000
ROA not before:           Sun 18 Jan 2026 09:36:04 +0000
ROA not after:            Sun 17 Jan 2027 09:41:04 +0000
asID:                     154047
IP address blocks:        103.25.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
                          rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 06:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3d:cc:8b:b9:42:c2:02:15:52:e1:6a:eb:52:bf:c6:3f:42:f8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
        Validity
            Not Before: Jan 18 09:36:04 2026 GMT
            Not After : Jan 17 09:41:04 2027 GMT
        Subject: CN=A528E33FDD504D9E4F7BA47C2584DC71868D3182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:38:b8:b9:cb:f5:76:4c:a5:ee:86:94:0a:9b:
                    ed:c1:42:44:1a:d5:08:51:34:29:5c:f7:0a:bf:c9:
                    21:cb:2c:17:4b:5c:be:52:af:f0:e5:df:b3:5a:01:
                    b1:0e:22:95:eb:e0:e8:22:08:83:03:8d:7f:11:39:
                    27:10:8f:16:1a:e1:ae:fd:08:cb:f1:51:56:ec:dd:
                    38:a1:9d:72:25:be:ef:d4:e5:e9:d8:30:9d:d6:33:
                    0a:a1:fa:e3:71:3a:eb:7a:4f:4e:ad:47:28:12:c9:
                    01:18:f8:2f:9c:a4:76:a9:bc:57:b9:b3:d0:b4:d3:
                    07:c2:11:22:37:c7:94:ed:28:d5:dc:cd:a6:9d:10:
                    b8:db:a5:68:14:d9:37:5b:64:27:7c:a7:9a:c6:a5:
                    87:27:16:c5:cf:d4:a0:f3:69:59:da:79:78:37:56:
                    4b:0e:56:2d:ac:1b:0f:3f:77:ae:eb:7c:b7:8d:7e:
                    cd:1e:9b:45:bf:df:a9:68:83:39:64:5a:67:11:9e:
                    58:8f:9f:f3:59:bc:f5:1c:3f:f9:37:39:33:d9:e4:
                    f0:42:fb:db:69:7e:d1:c8:b1:e4:e8:97:5f:dd:26:
                    c9:9c:51:44:b7:31:11:0a:ce:eb:2c:87:d4:c4:9a:
                    17:91:5c:75:68:71:f1:62:c1:be:52:d6:58:d9:4b:
                    b7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:28:E3:3F:DD:50:4D:9E:4F:7B:A4:7C:25:84:DC:71:86:8D:31:82
            X509v3 Authority Key Identifier:
                keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132342e302f32342d3234203d3e20313534303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:41:52:da:2a:c4:2b:66:c4:a6:f0:b2:ab:4d:61:24:e3:
         ef:c2:a2:97:fb:83:fb:8e:99:6c:78:c6:5b:38:a7:81:23:b6:
         53:a8:c2:e7:d4:9e:ef:9a:81:29:16:ac:f4:f4:cc:3d:1d:0d:
         e5:5d:c5:de:0f:cf:df:2c:cd:80:46:f5:07:bb:e5:2f:f7:62:
         82:7a:c8:f8:df:57:3d:21:17:eb:46:49:2f:84:20:1d:97:3b:
         25:77:b2:a0:f1:e5:9a:e9:9b:8a:31:d5:21:6d:1e:9c:d8:7a:
         f9:39:d0:f1:07:fd:58:8e:96:58:6e:09:2f:18:f0:fb:4e:0d:
         fe:7d:5d:b8:8d:8b:77:7c:5b:31:94:85:fe:9e:ff:10:06:57:
         f8:c3:a6:48:c8:64:85:2a:4b:47:9f:38:75:2f:e6:8c:8d:6a:
         69:55:14:a3:53:eb:5c:e8:6c:5c:4d:d1:77:d3:91:3c:93:f5:
         64:c2:3d:6f:e1:a9:e4:c7:8d:61:21:82:fa:77:67:92:d0:23:
         a7:e9:6f:c4:24:d3:af:a5:b3:59:e5:c1:02:87:ba:96:c1:01:
         9c:a0:5e:30:8e:bc:a8:7e:91:7b:14:52:ca:48:cf:2a:cc:47:
         e3:4b:97:89:38:8d:ed:af:fd:f2:f6:fe:ab:ca:8c:87:02:72:
         aa:7e:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:35:50 2026 by rpki-client