Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/0D341A3005A911F19E018F8D063D8C67.roa
File: 0D341A3005A911F19E018F8D063D8C67.roa (raw, json)
Hash identifier: zJ15AChEzNua5dRT3aE1+lZ5jbY/7mvSyeKPbxXnEgs=
Subject key identifier: E2:44:67:55:3C:97:E7:2A:EB:DF:3A:B3:61:45:0B:B7:97:5E:8D:B9
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0D8A
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/0D341A3005A911F19E018F8D063D8C67.roa
Signing time: Mon 09 Feb 2026 11:18:25 +0000
ROA not before: Mon 09 Feb 2026 11:18:25 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 134371
IP address blocks: 103.62.140.0/22 maxlen: 24
202.136.88.0/22 maxlen: 24
2400:3dc0::/32 maxlen: 32
2400:3dc0::/36 maxlen: 36
2400:3dc0::/44 maxlen: 48
2400:3dc0:10::/44 maxlen: 48
2400:3dc0:2e::/48 maxlen: 48
2400:3dc0:2f::/48 maxlen: 48
2400:3dc0:3e::/48 maxlen: 48
2400:3dc0:3f::/48 maxlen: 48
2400:3dc0:40::/44 maxlen: 47
2400:3dc0:40::/48 maxlen: 48
2400:3dc0:43::/48 maxlen: 48
2400:3dc0:45::/48 maxlen: 48
2400:3dc0:46::/48 maxlen: 48
2400:3dc0:49::/48 maxlen: 48
2400:3dc0:4a::/47 maxlen: 48
2400:3dc0:4c::/48 maxlen: 48
2400:3dc0:50::/44 maxlen: 47
2400:3dc0:56::/47 maxlen: 48
2400:3dc0:58::/48 maxlen: 48
2400:3dc0:5a::/47 maxlen: 48
2400:3dc0:60::/44 maxlen: 47
2400:3dc0:60::/47 maxlen: 48
2400:3dc0:68::/47 maxlen: 48
2400:3dc0:6a::/48 maxlen: 48
2400:3dc0:6c::/48 maxlen: 48
2400:3dc0:6e::/47 maxlen: 48
2400:3dc0:7b::/48 maxlen: 48
2400:3dc0:89::/48 maxlen: 48
2400:3dc0:100::/48 maxlen: 48
2400:3dc0:101::/48 maxlen: 48
2400:3dc0:140::/48 maxlen: 48
2400:3dc0:200::/48 maxlen: 48
2400:3dc0:201::/48 maxlen: 48
2400:3dc0:300::/48 maxlen: 48
2400:3dc0:400::/48 maxlen: 48
2400:3dc0:500::/48 maxlen: 48
2400:3dc0:600::/48 maxlen: 48
2400:3dc0:700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3466 (0xd8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Feb 9 11:18:25 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6989c281-9229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:88:f0:89:3b:3b:01:ef:98:6f:f3:fe:67:
8f:43:a0:f9:52:fe:48:7c:de:f9:9e:34:99:80:1a:
77:95:0b:91:5d:49:da:0c:85:fa:eb:be:d4:4c:e0:
03:ec:b7:a1:d0:ae:3f:7c:b3:83:cf:3d:81:ef:0d:
f3:15:26:03:e4:57:5f:f9:73:3f:31:dd:74:3c:25:
1e:a0:a2:09:d0:e1:a6:d8:f2:7b:4a:3b:3a:95:6f:
27:f7:50:c6:b2:1f:b2:bd:f3:48:aa:b9:ae:7f:6c:
c9:b2:fd:53:f3:e9:e4:40:fe:fd:5c:0d:dd:96:db:
ca:74:3f:d3:2f:53:19:60:22:fc:ff:04:8c:6a:4f:
c8:1b:cb:71:88:f6:77:98:d7:0f:36:7c:66:a3:89:
4f:6c:97:f2:36:5d:14:34:0c:ff:7c:91:9b:f6:f0:
2c:26:8e:f1:6a:1f:c6:0e:42:25:61:ae:c8:cf:9c:
10:ef:3d:4a:13:ac:e7:00:88:41:9c:7d:5e:9b:f3:
3a:e9:df:29:9c:76:0e:15:78:a4:cc:53:55:24:fc:
58:a7:35:6e:7c:15:22:47:93:2e:b3:a1:a7:f4:5d:
4a:be:87:cf:8e:2a:57:9c:a3:65:89:da:74:66:00:
36:b3:45:30:f7:85:19:e5:6c:48:89:65:32:a3:2e:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:44:67:55:3C:97:E7:2A:EB:DF:3A:B3:61:45:0B:B7:97:5E:8D:B9
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/0D341A3005A911F19E018F8D063D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.140.0/22
202.136.88.0/22
IPv6:
2400:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
d7:bb:51:e5:73:77:20:77:2b:b8:46:d6:5b:02:e2:b0:00:dc:
30:97:86:3b:9b:f7:fe:cc:7f:7f:4f:2d:79:a7:2d:88:8c:cd:
b1:b5:cf:ef:c8:3f:5e:c8:52:70:fa:b0:aa:95:c8:7f:c5:60:
6e:a4:87:3e:5c:d7:19:ad:ef:02:ba:a4:4f:a2:c1:7a:0c:ac:
03:de:83:e4:b4:50:3f:eb:39:73:a5:3b:dc:95:9f:94:2d:98:
41:8f:7d:f5:12:0e:8a:75:32:dd:aa:dc:7d:4b:e5:0c:a9:1f:
89:48:b6:d2:74:ff:90:a8:4d:db:8d:2a:a8:42:51:84:89:6a:
cc:df:b9:60:a8:d8:03:0c:25:b1:13:d7:10:67:3e:19:3f:f7:
79:e2:15:da:12:32:c7:d5:d1:31:20:59:a0:4c:0e:03:b5:5a:
b4:4c:1b:d2:4a:72:56:89:97:61:fd:1b:5a:e8:5e:6d:32:b5:
aa:dc:95:33:17:67:b8:7c:a2:14:32:6f:8a:37:ef:6c:b4:f9:
2b:ed:0d:98:a6:10:0e:0e:4c:8d:e1:c8:cd:44:96:5f:ae:70:
0d:13:58:4c:07:26:e6:fc:f3:d1:e7:df:80:cc:ad:f0:71:4d:
c8:a6:fb:97:8c:a5:e9:95:9c:58:fb:f6:c3:1a:c8:6b:d6:1c:
89:b6:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:12:52 2026 by rpki-client