Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/681269F8087811F19439B7C20A3D8C67.roa
File: 681269F8087811F19439B7C20A3D8C67.roa (raw, json)
Hash identifier: uCizFzbivbOBctlRtQY/UGeZMCFLDUQEJVtoK0MLkDg=
Subject key identifier: A7:DC:44:4E:83:04:B3:39:1C:E5:88:DB:D3:96:9E:2F:AB:BF:BE:59
Certificate issuer: /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial: 32
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/681269F8087811F19439B7C20A3D8C67.roa
Signing time: Fri 13 Feb 2026 01:07:46 +0000
ROA not before: Fri 13 Feb 2026 01:07:46 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 9652
IP address blocks: 27.127.192.0/19 maxlen: 19
27.127.193.0/24 maxlen: 24
27.127.194.0/23 maxlen: 24
27.127.196.0/23 maxlen: 24
27.127.198.0/23 maxlen: 24
27.127.200.0/23 maxlen: 24
27.127.202.0/23 maxlen: 24
27.127.204.0/23 maxlen: 24
27.127.206.0/23 maxlen: 24
27.127.208.0/23 maxlen: 24
27.127.210.0/23 maxlen: 24
27.127.212.0/23 maxlen: 24
27.127.214.0/23 maxlen: 24
27.127.216.0/23 maxlen: 24
27.127.218.0/23 maxlen: 24
27.127.220.0/23 maxlen: 24
27.127.222.0/23 maxlen: 23
27.127.224.0/20 maxlen: 24
202.3.96.0/20 maxlen: 20
202.3.96.0/23 maxlen: 24
202.3.98.0/23 maxlen: 24
202.3.100.0/23 maxlen: 24
202.3.102.0/23 maxlen: 24
202.3.104.0/23 maxlen: 24
202.3.106.0/23 maxlen: 24
202.3.108.0/24 maxlen: 24
202.3.109.0/24 maxlen: 24
202.3.110.0/24 maxlen: 24
202.3.111.0/24 maxlen: 24
203.22.70.0/23 maxlen: 24
203.29.180.0/24 maxlen: 24
203.55.38.0/24 maxlen: 24
203.55.158.0/24 maxlen: 24
203.55.254.0/24 maxlen: 24
203.201.128.0/19 maxlen: 19
203.201.128.0/23 maxlen: 24
203.201.130.0/23 maxlen: 24
203.201.132.0/23 maxlen: 24
203.201.134.0/23 maxlen: 24
203.201.136.0/23 maxlen: 24
203.201.138.0/23 maxlen: 24
203.201.140.0/23 maxlen: 24
203.201.142.0/23 maxlen: 24
203.201.144.0/23 maxlen: 24
203.201.146.0/23 maxlen: 24
203.201.148.0/23 maxlen: 24
203.201.150.0/23 maxlen: 24
203.201.152.0/23 maxlen: 24
203.201.154.0/24 maxlen: 24
203.201.155.0/24 maxlen: 24
203.201.156.0/24 maxlen: 24
203.201.157.0/24 maxlen: 24
203.201.158.0/23 maxlen: 24
2400:6880::/32 maxlen: 32
2400:6880::/33 maxlen: 34
2400:6880::/38 maxlen: 38
2400:6880:8000::/36 maxlen: 36
2400:6880:9000::/36 maxlen: 36
2400:6880:a000::/35 maxlen: 35
2400:6880:e000::/35 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Validity
Not Before: Feb 13 01:07:46 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=698e7962-5c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:9a:32:41:f5:68:c2:a0:de:f4:98:7f:26:
5b:fa:00:90:dc:1f:32:13:38:37:69:d9:8d:ae:ae:
f7:15:db:46:34:60:8d:2c:08:83:cb:17:1f:03:bc:
2a:2c:8a:82:c8:5f:2b:b7:f1:b7:f1:f1:93:5d:5a:
35:12:7e:13:22:66:dc:3a:7e:8b:d1:ed:e6:d2:c9:
71:1f:7e:02:6c:01:ee:3d:93:49:72:55:d0:1f:43:
9d:fd:93:90:68:78:08:f9:80:15:83:4a:2e:e4:cc:
de:24:99:6b:a1:05:21:69:46:d3:bb:d4:37:4a:c7:
28:00:d8:44:d5:23:57:82:71:8c:46:c4:a5:25:9f:
b8:ae:e1:0a:59:02:53:7a:5c:b4:7f:f4:4b:73:9f:
87:df:14:1d:f8:d3:31:90:61:2b:08:60:45:e6:5f:
e9:2b:1c:a7:c7:2c:43:57:76:b6:5e:78:1d:95:db:
e3:14:39:60:57:c3:1e:d3:ac:7c:33:2c:a9:42:5f:
22:e4:15:e7:43:64:ad:5b:9c:f3:63:2b:70:f7:88:
2f:4e:c6:fe:6d:0f:11:51:fb:2b:d9:3f:7e:77:c5:
bb:e5:ae:2d:69:9d:4f:62:3b:86:c6:75:58:2a:f5:
d1:94:58:33:97:bf:87:55:66:53:59:b3:12:ab:00:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DC:44:4E:83:04:B3:39:1C:E5:88:DB:D3:96:9E:2F:AB:BF:BE:59
X509v3 Authority Key Identifier:
keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/681269F8087811F19439B7C20A3D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.127.192.0-27.127.239.255
202.3.96.0/20
203.22.70.0/23
203.29.180.0/24
203.55.38.0/24
203.55.158.0/24
203.55.254.0/24
203.201.128.0/19
IPv6:
2400:6880::/32
Signature Algorithm: sha256WithRSAEncryption
7a:9b:a0:22:a4:6b:76:a1:ca:43:e8:ff:1a:99:a5:cf:e9:48:
cd:7a:56:5b:1d:63:33:02:a8:69:c8:75:ec:a4:61:3f:b4:ed:
7b:68:90:42:b5:5b:5a:92:b7:6f:f7:2c:e9:c7:0e:47:cc:30:
cd:c7:81:be:7b:f8:65:14:8c:36:38:22:39:43:68:be:d7:4b:
02:73:38:d0:05:6a:bb:99:3d:3c:73:fb:0c:2d:a4:41:73:a0:
85:f8:9a:3c:a0:c9:a9:ee:0f:34:2a:b9:ae:cf:1e:99:b8:0b:
02:84:45:f1:03:71:28:09:bb:33:5d:fd:79:f4:07:81:2f:3a:
6c:72:d8:f1:79:1f:77:30:08:6a:cd:fa:61:be:f6:7c:5a:86:
70:fb:2b:d1:42:ee:20:ae:56:74:7d:c6:4d:8b:dd:a0:8e:b3:
37:c6:e7:9d:2f:5f:df:19:53:1c:a2:80:1b:85:2a:1d:70:4a:
03:8e:bd:53:2c:48:4e:15:36:91:3c:78:1d:75:b0:66:29:fa:
e8:49:86:6e:5e:89:1e:01:18:92:26:9c:cd:c4:36:2e:ba:aa:
17:e8:3c:ea:18:00:e4:73:b8:e0:fe:55:8d:ab:98:34:a3:9e:
5a:02:a2:66:5c:80:55:85:23:0e:99:99:52:41:3a:9c:5d:21:
ff:79:e2:92
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RkVBODExMC8GA1UEBRMoNzc4NDg4MTQ4RTNBRTJGMTRBRDQwODU0RjdBMkZBNTk1
Nzc1QzU3NTAeFw0yNjAyMTMwMTA3NDZaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5OGU3OTYyLTVjMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCiqpoyQfVowqDe9Jh/Jlv6AJDcHzITODdp2Y2urvcV20Y0YI0sCIPLFx8DvCos
ioLIXyu38bfx8ZNdWjUSfhMiZtw6fovR7ebSyXEffgJsAe49k0lyVdAfQ539k5Bo
eAj5gBWDSi7kzN4kmWuhBSFpRtO71DdKxygA2ETVI1eCcYxGxKUln7iu4QpZAlN6
XLR/9Etzn4ffFB340zGQYSsIYEXmX+krHKfHLENXdrZeeB2V2+MUOWBXwx7TrHwz
LKlCXyLkFedDZK1bnPNjK3D3iC9Oxv5tDxFR+yvZP353xbvlri1pnU9iO4bGdVgq
9dGUWDOXv4dVZlNZsxKrAExzAgMBAAGjggLWMIIC0jAdBgNVHQ4EFgQUp9xEToME
szkc5Yjb05aeL6u/vlkwHwYDVR0jBBgwFoAUd4SIFI464vFK1AhU96L6WVd1xXUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGRUE4LzA2OEU3NjdBQzU5
RjExRjBCMzBENUQ3Q0M0RjlBRTAyL2Q0U0lGSTQ2NHZGSzFBaFU5Nkw2V1ZkMXhY
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZDRTSUZJNDY0dkZLMUFoVTk2TDZXVmQxeFhVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkVBOC8wNjhFNzY3QUM1OUYxMUYwQjMwRDVEN0NDNEY5QUUwMi82ODEyNjlGODA4
NzgxMUYxOTQzOUI3QzIwQTNEOEM2Ny5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBgBggrBgEFBQcBBwEB/wRR
ME8wPgQCAAEwODAMAwQGG3/AAwQEG3/gAwQEygNgAwQByxZGAwQAyx20AwQAyzcm
AwQAyzeeAwQAyzf+AwQFy8mAMA0EAgACMAcDBQAkAGiAMA0GCSqGSIb3DQEBCwUA
A4IBAQB6m6AipGt2ocpD6P8amaXP6UjNelZbHWMzAqhpyHXspGE/tO17aJBCtVta
krdv9yzpxw5HzDDNx4G+e/hlFIw2OCI5Q2i+10sCczjQBWq7mT08c/sMLaRBc6CF
+Jo8oMmp7g80Krmuzx6ZuAsChEXxA3EoCbszXf159AeBLzpsctjxeR93MAhqzfph
vvZ8WoZw+yvRQu4grlZ0fcZNi92gjrM3xuedL1/fGVMcooAbhSodcEoDjr1TLEhO
FTaRPHgddbBmKfroSYZuXokeARiSJpzNxDYuuqoX6DzqGADkc7jg/lWNq5g0o55a
AqJmXIBVhSMOmZlSQTqcXSH/eeKS
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:24:42 2026 by rpki-client