Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/E350F182060411F192CA7B231D3D8C67.roa
File: E350F182060411F192CA7B231D3D8C67.roa (raw, json)
Hash identifier: q5ZQk4oiBy1p2PlzdXizUHCuqx46P/q0L/L1xwCHgSc=
Subject key identifier: 94:DE:06:1A:E7:B5:1B:30:54:55:8B:CD:51:C7:24:2A:21:DB:3E:62
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 09DB
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/E350F182060411F192CA7B231D3D8C67.roa
Signing time: Mon 09 Feb 2026 22:15:49 +0000
ROA not before: Mon 09 Feb 2026 22:15:49 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 135060
IP address blocks: 103.93.150.0/24 maxlen: 24
103.93.151.0/24 maxlen: 24
103.152.128.0/24 maxlen: 24
103.152.129.0/24 maxlen: 24
103.208.4.0/22 maxlen: 22
103.208.4.0/24 maxlen: 24
103.208.5.0/24 maxlen: 24
103.208.6.0/24 maxlen: 24
103.208.7.0/24 maxlen: 24
116.206.128.0/24 maxlen: 24
116.206.129.0/24 maxlen: 24
123.100.140.0/23 maxlen: 24
123.100.143.0/24 maxlen: 24
123.100.144.0/24 maxlen: 24
123.100.145.0/24 maxlen: 24
123.100.146.0/24 maxlen: 24
123.100.147.0/24 maxlen: 24
123.100.148.0/22 maxlen: 22
123.100.148.0/24 maxlen: 24
123.100.149.0/24 maxlen: 24
123.100.150.0/24 maxlen: 24
123.100.151.0/24 maxlen: 24
123.100.152.0/24 maxlen: 24
123.253.192.0/24 maxlen: 24
123.253.194.0/23 maxlen: 23
123.253.194.0/24 maxlen: 24
202.86.52.0/24 maxlen: 24
202.86.53.0/24 maxlen: 24
202.86.54.0/24 maxlen: 24
202.86.55.0/24 maxlen: 24
2404:6a80::/41 maxlen: 41
2404:6a80:200::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2523 (0x9db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Validity
Not Before: Feb 9 22:15:49 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=698a5c95-8efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:e6:3f:63:24:83:b4:c8:4c:51:7f:4a:81:
6c:98:6c:bd:c4:d9:b7:92:e2:bf:a5:8b:fa:95:c0:
12:04:ac:33:c2:e7:d3:c0:b4:cb:f9:f9:28:6a:f1:
99:a0:7a:bd:3e:7d:55:c9:3b:60:40:d3:db:c3:ff:
6e:11:93:b8:32:0d:81:45:96:a6:5c:96:48:8e:d3:
5f:b4:61:3c:d1:09:80:00:d9:04:78:e0:b6:e2:5b:
25:35:c4:7b:be:e7:94:76:bf:30:9f:e3:52:19:65:
73:55:f3:8e:74:33:7b:80:52:6c:cb:4f:1f:54:de:
7e:54:34:57:7c:c1:03:dd:0e:b3:5d:d1:a4:68:c2:
43:81:78:3d:cf:8e:81:94:44:ef:2c:c2:b2:23:97:
53:81:b0:6d:45:60:67:c1:2a:8b:e9:58:b0:28:c1:
f9:da:60:0f:59:5a:11:12:cf:cf:61:47:8b:56:91:
18:cd:09:d6:bb:3f:4a:2e:0b:a6:e6:16:a2:bf:53:
d5:25:47:a8:6b:9e:57:cd:a9:37:d6:03:67:e9:31:
3e:ab:43:7d:f5:e6:95:bf:cc:4f:27:27:a5:8b:3b:
75:01:e6:c4:43:58:10:13:6f:70:86:f2:9b:42:37:
f1:ba:ee:71:c9:64:61:a7:a4:2f:e3:3b:7d:b5:19:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DE:06:1A:E7:B5:1B:30:54:55:8B:CD:51:C7:24:2A:21:DB:3E:62
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/E350F182060411F192CA7B231D3D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.93.150.0/23
103.152.128.0/23
103.208.4.0/22
116.206.128.0/23
123.100.140.0/23
123.100.143.0-123.100.152.255
123.253.192.0/24
123.253.194.0/23
202.86.52.0/22
IPv6:
2404:6a80::/41
2404:6a80:200::/41
Signature Algorithm: sha256WithRSAEncryption
51:be:7c:71:d0:ea:ac:c1:33:f0:94:a0:01:7f:cd:df:4a:d3:
56:33:e9:e4:1e:eb:9e:d9:08:4a:64:3b:f9:8b:96:a1:5f:76:
a1:98:d2:26:b4:b7:fd:67:78:0e:36:fb:b3:b0:e5:03:ed:6c:
2a:20:8f:7d:ef:83:cb:60:ab:f9:66:05:32:b3:b0:ca:1a:06:
38:d3:f9:ea:2f:0b:16:81:b1:98:0d:ba:f0:d0:4c:e6:7e:0e:
b9:e3:36:85:ef:97:b8:4a:a5:b1:42:e7:13:b2:a0:40:76:a1:
05:4c:50:e2:2a:2a:9b:06:11:58:77:58:f0:23:7e:ac:60:0a:
a5:c2:fb:11:75:f7:0e:7b:d3:51:d9:d1:5a:90:70:b7:03:f7:
9b:60:8f:d6:f3:46:41:04:72:bc:86:fb:c0:da:25:44:46:71:
51:62:6a:d2:6c:ae:dc:d6:f9:18:80:18:8f:23:40:fd:69:9a:
8b:73:e6:36:5f:7d:12:b3:bd:0f:4e:71:fa:41:22:5b:94:82:
c6:d7:63:2d:3b:6c:ad:45:fd:3b:89:97:41:aa:0b:13:7f:dd:
d9:11:09:cd:7b:99:ae:88:f9:3b:65:7e:1a:25:e1:b9:94:25:
d6:55:e8:32:9b:58:6a:f8:c3:3b:9c:f3:d4:a4:07:a8:c4:c4:
ec:da:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:09:14 2026 by rpki-client