This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa
File: 3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (raw, json)
Hash identifier: S7WsIsK6ViMEMbud6Qfi8tnNCEiIdCO/5Os6gk5h8V8=
Subject key identifier: C8:AA:38:91:B9:AC:50:09:3E:F6:10:B4:2C:38:AC:64:D4:01:82:83
Certificate issuer: /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial: 27F9DD317252A23BA9FDB1B35376D21D5C89A9D4
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa
Signing time: Mon 05 Jan 2026 14:29:20 +0000
ROA not before: Mon 05 Jan 2026 14:24:20 +0000
ROA not after: Mon 04 Jan 2027 14:29:20 +0000
asID: 150675
IP address blocks: 103.25.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 06:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f9:dd:31:72:52:a2:3b:a9:fd:b1:b3:53:76:d2:1d:5c:89:a9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126DA80000, serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Validity
Not Before: Jan 5 14:24:20 2026 GMT
Not After : Jan 4 14:29:20 2027 GMT
Subject: CN=C8AA3891B9AC50093EF610B42C38AC64D4018283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:26:95:17:ec:ee:ab:cd:35:1a:2a:e3:40:
e1:f1:c4:22:26:5d:a4:0f:8c:33:a6:61:f1:fe:82:
1c:90:ba:77:e3:a4:35:8d:b8:1e:de:bd:95:c0:a8:
37:8a:ed:8b:4d:27:56:46:05:be:e8:dc:62:14:e9:
12:2f:5a:85:3c:08:ee:b9:4a:5c:f3:a9:24:e8:06:
d6:0c:e2:de:49:dd:3b:98:7f:b9:c8:50:2c:26:38:
b8:bd:1d:2c:d5:06:68:35:4c:ad:dd:f1:a3:2a:77:
a5:7a:14:0e:7f:3a:b0:aa:61:12:44:42:de:83:11:
7c:c5:85:79:96:3a:1c:0d:f4:60:93:8b:30:94:85:
47:c1:f5:84:7c:53:ad:de:b4:97:e8:49:f5:a9:31:
c0:9c:ca:69:4b:44:34:c6:4a:77:d5:b6:9d:0f:e2:
d2:61:1e:58:db:af:14:b5:57:ef:b8:5e:94:27:8d:
46:43:00:83:3c:4d:db:78:b8:a5:85:b3:28:2a:f2:
3b:02:19:97:db:22:5b:d7:e4:a1:ad:61:fe:f4:ce:
26:97:20:62:46:15:8f:a7:ef:e9:07:b3:c1:b4:57:
5b:b4:43:67:18:9f:00:20:25:27:11:c0:7b:2f:4f:
ce:4f:83:39:bf:d1:84:2f:cb:b4:f4:9d:a1:50:0e:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AA:38:91:B9:AC:50:09:3E:F6:10:B4:2C:38:AC:64:D4:01:82:83
X509v3 Authority Key Identifier:
keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.127.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1b:34:b8:70:09:3f:58:5e:57:5d:93:99:d0:83:6a:92:71:
69:40:66:4e:bd:ff:b4:9f:f4:81:a3:9c:8b:78:a9:50:52:a8:
d3:cb:74:9a:80:9d:77:98:b1:c6:3a:a5:c6:17:8f:5d:54:15:
38:92:cb:c1:7c:e1:73:6c:2b:40:2d:1d:8a:df:69:e2:75:1f:
57:99:84:a1:15:7c:c3:5d:4b:3d:4c:6a:8d:34:0c:24:94:b1:
d1:eb:8d:7a:78:7c:fe:75:c8:e6:a5:b1:5a:19:dd:c9:f3:15:
db:9c:c9:bc:39:9c:e9:2c:13:76:34:3f:51:2b:6b:33:b8:88:
16:4b:1c:a4:f2:69:b8:95:8b:5e:8a:3e:03:2e:cc:92:c3:25:
f4:42:37:77:09:81:ea:12:fb:31:cc:2d:13:1c:47:eb:2e:6f:
33:97:11:f5:78:ad:d1:d6:30:d3:56:4f:b7:b1:f7:ea:f6:bb:
52:ed:fa:90:ff:91:25:39:f2:64:28:21:89:dc:6b:6c:6b:e5:
82:d0:30:96:e4:3b:b9:06:b2:08:bb:08:e6:7a:5e:82:46:08:
00:10:b4:f6:50:6a:38:a6:0c:b4:a5:c0:da:1d:a5:28:e9:e3:
2c:5e:56:a2:d9:f7:df:92:ba:01:9f:ae:1a:9a:cb:10:af:38:
c0:36:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:45:27 2026 by rpki-client