Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/8186EA3008A211EA83441161C4F9AE02.roa
File: 8186EA3008A211EA83441161C4F9AE02.roa (raw, json)
Hash identifier: FszG+g8vl/qtex3FDIorZ8+D6lOQxfBxXOVLGxzLmac=
Subject key identifier: 1A:0E:46:C4:12:B1:86:FB:BC:15:02:79:47:3C:FC:C6:91:85:77:3F
Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
Certificate serial: 0D02
Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/8186EA3008A211EA83441161C4F9AE02.roa
Signing time: Tue 17 Feb 2026 08:12:46 +0000
ROA not before: Tue 17 Feb 2026 08:12:46 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137385
IP address blocks: 103.106.240.0/22 maxlen: 24
2402:49c0::/32 maxlen: 32
2402:49c0::/48 maxlen: 48
2402:49c0:1::/48 maxlen: 48
2402:49c0:2::/48 maxlen: 48
2402:49c0:3::/48 maxlen: 48
2402:49c0:4::/48 maxlen: 48
2402:49c0:5::/48 maxlen: 48
2402:49c0:6::/48 maxlen: 48
2402:49c0:7::/48 maxlen: 48
2402:49c0:8::/48 maxlen: 48
2402:49c0:9::/48 maxlen: 48
2402:49c0:a::/48 maxlen: 48
2402:49c0:b::/48 maxlen: 48
2402:49c0:c::/48 maxlen: 48
2402:49c0:d::/48 maxlen: 48
2402:49c0:e::/48 maxlen: 48
2402:49c0:f::/48 maxlen: 48
2402:49c0:10::/48 maxlen: 48
2402:49c0:11::/48 maxlen: 48
2402:49c0:12::/48 maxlen: 48
2402:49c0:13::/48 maxlen: 48
2402:49c0:14::/48 maxlen: 48
2402:49c0:15::/48 maxlen: 48
2402:49c0:16::/48 maxlen: 48
2402:49c0:17::/48 maxlen: 48
2402:49c0:18::/48 maxlen: 48
2402:49c0:19::/48 maxlen: 48
2402:49c0:1a::/48 maxlen: 48
2402:49c0:1b::/48 maxlen: 48
2402:49c0:1c::/48 maxlen: 48
2402:49c0:1d::/48 maxlen: 48
2402:49c0:1e::/48 maxlen: 48
2402:49c0:1f::/48 maxlen: 48
2402:49c0:20::/48 maxlen: 48
2402:49c0:21::/48 maxlen: 48
2402:49c0:22::/48 maxlen: 48
2402:49c0:23::/48 maxlen: 48
2402:49c0:24::/48 maxlen: 48
2402:49c0:25::/48 maxlen: 48
2402:49c0:26::/48 maxlen: 48
2402:49c0:27::/48 maxlen: 48
2402:49c0:28::/48 maxlen: 48
2402:49c0:29::/48 maxlen: 48
2402:49c0:2a::/48 maxlen: 48
2402:49c0:2b::/48 maxlen: 48
2402:49c0:2c::/48 maxlen: 48
2402:49c0:2d::/48 maxlen: 48
2402:49c0:2e::/48 maxlen: 48
2402:49c0:2f::/48 maxlen: 48
2402:49c0:30::/48 maxlen: 48
2402:49c0:31::/48 maxlen: 48
2402:49c0:32::/48 maxlen: 48
2402:49c0:33::/48 maxlen: 48
2402:49c0:34::/48 maxlen: 48
2402:49c0:35::/48 maxlen: 48
2402:49c0:36::/48 maxlen: 48
2402:49c0:37::/48 maxlen: 48
2402:49c0:38::/48 maxlen: 48
2402:49c0:39::/48 maxlen: 48
2402:49c0:3a::/48 maxlen: 48
2402:49c0:3b::/48 maxlen: 48
2402:49c0:3c::/48 maxlen: 48
2402:49c0:3d::/48 maxlen: 48
2402:49c0:3e::/48 maxlen: 48
2402:49c0:3f::/48 maxlen: 48
2402:49c0:40::/48 maxlen: 48
2402:49c0:41::/48 maxlen: 48
2402:49c0:42::/48 maxlen: 48
2402:49c0:43::/48 maxlen: 48
2402:49c0:44::/48 maxlen: 48
2402:49c0:45::/48 maxlen: 48
2402:49c0:46::/48 maxlen: 48
2402:49c0:47::/48 maxlen: 48
2402:49c0:48::/48 maxlen: 48
2402:49c0:49::/48 maxlen: 48
2402:49c0:4a::/48 maxlen: 48
2402:49c0:4b::/48 maxlen: 48
2402:49c0:4c::/48 maxlen: 48
2402:49c0:4d::/48 maxlen: 48
2402:49c0:4e::/48 maxlen: 48
2402:49c0:4f::/48 maxlen: 48
2402:49c0:50::/48 maxlen: 48
2402:49c0:51::/48 maxlen: 48
2402:49c0:52::/48 maxlen: 48
2402:49c0:53::/48 maxlen: 48
2402:49c0:54::/48 maxlen: 48
2402:49c0:55::/48 maxlen: 48
2402:49c0:56::/48 maxlen: 48
2402:49c0:a1::/48 maxlen: 48
2402:49c0:a2::/48 maxlen: 48
2402:49c0:a3::/48 maxlen: 48
2402:49c0:a4::/48 maxlen: 48
2402:49c0:a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl
rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3330 (0xd02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
Validity
Not Before: Feb 17 08:12:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=699422fe-db6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:76:91:4e:6f:3f:49:5b:94:f7:dc:b1:b1:
c4:57:a9:94:e4:d6:77:0b:b0:df:6e:25:c5:ce:ac:
9f:99:49:ec:e0:b7:84:e8:69:7c:db:f2:54:ba:e8:
d6:da:8c:20:13:6b:3d:58:e9:7a:4f:3e:82:64:89:
96:e7:fa:03:9e:cd:97:72:8b:9e:aa:66:dd:93:79:
bd:56:3d:3e:3c:f6:98:eb:09:9a:9b:47:23:d7:7e:
aa:2c:dc:c2:d7:ae:5b:69:3f:c1:70:40:25:9a:60:
2b:f1:b7:24:87:52:36:3f:39:e3:cf:cd:ab:35:ba:
4d:64:65:18:db:ad:9e:eb:e3:5f:d0:b4:77:7f:4c:
ed:bb:48:f3:4b:94:ef:e3:fd:3c:ee:92:ca:49:12:
ed:78:d0:87:d1:56:ac:41:e4:49:7c:c2:89:56:3c:
3d:ac:a7:71:7f:3a:89:7d:7b:96:af:70:1e:af:aa:
c4:d8:ae:28:a5:97:bc:4f:5d:56:ca:21:b3:bd:10:
fd:e3:2b:81:d9:29:6d:93:7b:d7:26:0c:97:ff:bf:
15:57:0c:3e:aa:9e:32:0e:0c:ef:e6:21:73:db:3c:
83:4b:a0:95:71:64:f0:28:d6:93:07:6d:ad:e8:94:
22:1e:1a:dd:5f:7e:7d:17:67:82:45:f5:4b:88:46:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0E:46:C4:12:B1:86:FB:BC:15:02:79:47:3C:FC:C6:91:85:77:3F
X509v3 Authority Key Identifier:
keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/8186EA3008A211EA83441161C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.240.0/22
IPv6:
2402:49c0::/32
Signature Algorithm: sha256WithRSAEncryption
42:78:af:e8:08:62:a1:1a:ca:7e:4d:d6:ad:7c:e3:dc:51:c3:
35:96:ad:57:05:9c:a2:50:a8:aa:fa:e0:6b:f7:67:d7:9a:4a:
39:8d:3d:50:cb:ec:a0:b3:c6:35:45:ad:82:8c:38:f6:e9:57:
33:65:5b:36:70:06:7f:ca:e4:98:d9:4d:44:70:ae:b3:5d:2b:
81:56:bf:af:5a:d4:98:d9:c1:89:f5:80:ea:90:3f:85:97:68:
36:39:fe:55:e2:58:d0:cb:2b:ee:8f:3d:5b:a7:20:48:29:5d:
c2:ed:f4:19:87:5b:1c:1f:87:36:ed:a4:fd:1f:a4:00:54:38:
4f:d8:0f:ee:66:d6:71:23:26:df:d9:b8:79:c5:1f:50:d4:e4:
ac:da:8c:c3:48:78:4b:d6:bd:06:d7:0e:34:f8:ee:13:99:3d:
93:09:30:26:15:3b:19:4f:9a:bd:77:33:d3:91:e0:d9:a5:7f:
40:97:d9:62:b9:6a:c2:9c:b2:6d:78:05:d7:86:33:6d:24:b6:
4d:51:3b:e4:6d:79:e2:e0:b8:e0:c4:72:6e:b3:44:90:03:6e:
7e:d6:99:85:e8:37:70:c8:af:67:6f:bb:dc:b5:e8:f4:7e:28:
12:fe:d6:2a:9a:0b:d5:a0:99:9f:c3:c6:29:b7:23:35:4c:31:
2e:07:7d:ef
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2
QTg4OTJFQjcwHhcNMjYwMjE3MDgxMjQ2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTk0MjJmZS1kYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp7x2kU5vP0lblPfcsbHEV6mU5NZ3C7DfbiXFzqyfmUns4LeE6Gl82/JUuujW
2owgE2s9WOl6Tz6CZImW5/oDns2Xcoueqmbdk3m9Vj0+PPaY6wmam0cj136qLNzC
165baT/BcEAlmmAr8bckh1I2Pznjz82rNbpNZGUY262e6+Nf0LR3f0ztu0jzS5Tv
4/087pLKSRLteNCH0VasQeRJfMKJVjw9rKdxfzqJfXuWr3Aer6rE2K4opZe8T11W
yiGzvRD94yuB2Sltk3vXJgyX/78VVww+qp4yDgzv5iFz2zyDS6CVcWTwKNaTB22t
6JQiHhrdX359F2eCRfVLiEan2wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBoORsQS
sYb7vBUCeUc8/MaRhXc/MB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4
QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM
cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTQwOEYvQUE2MDRENEEwOEEwMTFFQTlDNEFFRDVEQzRGOUFFMDIvODE4NkVBMzAw
OEEyMTFFQTgzNDQxMTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnavAwDQQCAAIwBwMFACQCScAwDQYJKoZIhvcNAQELBQAD
ggEBAEJ4r+gIYqEayn5N1q1849xRwzWWrVcFnKJQqKr64Gv3Z9eaSjmNPVDL7KCz
xjVFrYKMOPbpVzNlWzZwBn/K5JjZTURwrrNdK4FWv69a1JjZwYn1gOqQP4WXaDY5
/lXiWNDLK+6PPVunIEgpXcLt9BmHWxwfhzbtpP0fpABUOE/YD+5m1nEjJt/ZuHnF
H1DU5KzajMNIeEvWvQbXDjT47hOZPZMJMCYVOxlPmr13M9OR4Nmlf0CX2WK5asKc
sm14BdeGM20ktk1RO+RteeLguODEcm6zRJADbn7WmYXoN3DIr2dvu9y16PR+KBL+
1iqaC9WgmZ/Dxim3IzVMMS4Hfe8=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:27:26 2026 by rpki-client