Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA8C670008B511F19E011CBA1D3D8C67.roa
File: BA8C670008B511F19E011CBA1D3D8C67.roa (raw, json)
Hash identifier: /Yn6RMRKy4hs0mGzd9xKABQL1qSAx7vx5Fm12oiw/yc=
Subject key identifier: 77:F0:75:9B:BC:55:16:A6:E9:2A:40:E0:E4:54:0E:72:BE:E8:BF:4B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D0BD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA8C670008B511F19E011CBA1D3D8C67.roa
Signing time: Fri 13 Feb 2026 08:26:44 +0000
ROA not before: Fri 13 Feb 2026 08:26:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
43.228.164.0/23 maxlen: 24
43.230.148.0/22 maxlen: 24
43.248.152.0/22 maxlen: 24
43.248.240.0/22 maxlen: 24
43.251.92.0/22 maxlen: 23
43.251.93.0/24 maxlen: 24
43.251.94.0/24 maxlen: 24
43.251.95.0/24 maxlen: 24
45.120.160.0/22 maxlen: 24
45.248.0.0/22 maxlen: 24
45.248.172.0/22 maxlen: 24
103.37.98.0/23 maxlen: 24
103.40.200.0/22 maxlen: 24
103.43.32.0/22 maxlen: 24
103.54.27.0/24 maxlen: 24
103.55.60.0/22 maxlen: 24
103.68.20.0/22 maxlen: 24
103.68.140.0/23 maxlen: 24
103.69.239.0/24 maxlen: 24
103.72.196.0/24 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/22 maxlen: 24
103.92.107.0/24 maxlen: 24
103.93.39.0/24 maxlen: 24
103.100.4.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.106.28.0/22 maxlen: 24
103.113.110.0/23 maxlen: 24
103.120.108.0/24 maxlen: 24
103.120.152.0/24 maxlen: 24
103.120.153.0/24 maxlen: 24
103.124.174.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.139.143.0/24 maxlen: 24
103.152.158.0/24 maxlen: 24
103.154.8.0/23 maxlen: 24
103.154.56.0/23 maxlen: 24
103.155.237.0/24 maxlen: 24
103.156.121.0/24 maxlen: 24
103.157.188.0/23 maxlen: 24
103.158.90.0/23 maxlen: 24
103.159.104.0/23 maxlen: 24
103.160.25.0/24 maxlen: 24
103.164.140.0/24 maxlen: 24
103.165.88.0/23 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.169.242.0/24 maxlen: 24
103.169.243.0/24 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.52.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.178.24.0/23 maxlen: 24
103.178.117.0/24 maxlen: 24
103.179.50.0/23 maxlen: 24
103.181.66.0/24 maxlen: 24
103.181.119.0/24 maxlen: 24
103.184.205.0/24 maxlen: 24
103.198.172.0/22 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
103.216.140.0/22 maxlen: 24
103.217.132.0/22 maxlen: 24
103.224.144.0/22 maxlen: 24
103.225.188.0/22 maxlen: 24
103.232.232.0/22 maxlen: 24
103.248.92.0/22 maxlen: 24
103.248.172.0/22 maxlen: 24
157.119.80.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
210.79.134.0/24 maxlen: 24
2001:df0:47c0::/48 maxlen: 48
2001:df1:1980::/48 maxlen: 48
2001:df1:ed40::/48 maxlen: 48
2001:df2:3ac0::/48 maxlen: 48
2001:df2:3f40::/48 maxlen: 48
2001:df3:1340::/48 maxlen: 48
2001:df3:6ec0::/48 maxlen: 48
2400:d660::/32 maxlen: 32
2401:bba0::/32 maxlen: 32
2405:e100:a::/48 maxlen: 48
2405:e100:b::/48 maxlen: 48
2405:e100:c::/48 maxlen: 48
2405:e100:d::/48 maxlen: 48
2405:e100:e::/48 maxlen: 48
2405:e100:f::/48 maxlen: 48
2405:e100:1d::/48 maxlen: 48
2405:e100:1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 13:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53437 (0xd0bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 13 08:26:44 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=698ee044-15fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:3e:c5:2e:a1:09:26:33:56:5b:57:65:12:
86:ad:82:c2:df:7a:d9:e9:99:a9:48:02:ee:0e:51:
6e:d2:c6:92:1d:47:a8:0f:74:fc:05:7e:59:d0:f3:
e4:b2:fd:7e:94:1f:85:67:93:77:e3:44:3e:63:22:
52:29:4b:8e:b8:d8:cb:a4:4c:cd:31:b4:fe:21:42:
1a:7d:19:60:ae:58:35:b5:64:6a:f9:b5:7a:17:99:
3f:36:94:ed:96:cc:05:9b:fc:2d:08:57:ec:f4:94:
19:5b:3f:8d:d2:83:01:32:6b:f9:ad:2f:dc:00:a8:
ad:91:ea:d6:7d:4f:f7:41:fa:d0:6e:4e:61:ff:1a:
ec:42:01:bb:4d:14:fa:35:0d:22:57:21:40:a1:16:
5c:f6:0f:aa:d0:eb:1a:a9:fa:44:8a:de:34:b4:1c:
54:1f:1a:a7:41:55:7e:b4:86:4e:0b:70:c0:1c:25:
5b:d8:19:9a:68:7d:cf:64:e9:f3:a4:e7:e3:de:06:
aa:52:00:19:22:83:5d:2d:a1:b0:a2:3d:2e:51:f7:
7a:0e:fb:0a:f1:8e:86:92:43:3b:41:31:9d:08:5f:
f0:8f:8c:90:11:02:99:27:ae:00:dd:85:b2:37:3e:
46:9e:4c:9f:5a:46:1a:52:05:61:63:00:72:3e:00:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F0:75:9B:BC:55:16:A6:E9:2A:40:E0:E4:54:0E:72:BE:E8:BF:4B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA8C670008B511F19E011CBA1D3D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
43.228.164.0/23
43.230.148.0/22
43.248.152.0/22
43.248.240.0/22
43.251.92.0/22
45.120.160.0/22
45.248.0.0/22
45.248.172.0/22
103.37.98.0/23
103.40.200.0/22
103.43.32.0/22
103.54.27.0/24
103.55.60.0/22
103.68.20.0/22
103.68.140.0/23
103.69.239.0/24
103.72.196.0/24
103.91.72.0/21
103.92.107.0/24
103.93.39.0/24
103.100.4.0/24
103.101.112.0/22
103.106.28.0/22
103.113.110.0/23
103.120.108.0/24
103.120.152.0/23
103.124.174.0/24
103.138.9.0/24
103.139.143.0/24
103.152.158.0/24
103.154.8.0/23
103.154.56.0/23
103.155.237.0/24
103.156.121.0/24
103.157.188.0/23
103.158.90.0/23
103.159.104.0/23
103.160.25.0/24
103.164.140.0/24
103.165.88.0/23
103.167.154.0/23
103.167.182.0/23
103.167.224.0/23
103.167.238.0/23
103.168.60.0/23
103.169.242.0/23
103.170.38.0/23
103.170.52.0/23
103.170.84.0/23
103.178.24.0/23
103.178.117.0/24
103.179.50.0/23
103.181.66.0/24
103.181.119.0/24
103.184.205.0/24
103.198.172.0/22
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.216.140.0/22
103.217.132.0/22
103.224.144.0/22
103.225.188.0/22
103.232.232.0/22
103.248.92.0/22
103.248.172.0/22
157.119.80.0/22
202.4.169.0/24
210.79.134.0/24
IPv6:
2001:df0:47c0::/48
2001:df1:1980::/48
2001:df1:ed40::/48
2001:df2:3ac0::/48
2001:df2:3f40::/48
2001:df3:1340::/48
2001:df3:6ec0::/48
2400:d660::/32
2401:bba0::/32
2405:e100:a::-2405:e100:f:ffff:ffff:ffff:ffff:ffff
2405:e100:1d::-2405:e100:1e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4c:f0:3d:7c:fa:7d:70:51:2d:14:80:ff:85:d7:ed:fa:c8:ad:
4f:37:c0:b5:c0:77:0c:93:35:7a:6a:ac:67:85:1f:f5:9c:65:
28:22:4b:53:d2:b6:5f:d3:ce:65:65:a7:b5:db:ff:90:fe:26:
10:cd:24:81:c3:67:d3:65:45:dd:42:73:03:56:d9:8f:51:34:
4c:e0:0e:9d:34:d9:64:b3:f8:55:eb:1a:96:49:10:ab:14:d8:
cc:c6:08:1e:e2:49:6d:86:7b:89:cd:b9:d1:94:ca:a5:8d:76:
3d:a5:03:58:e1:2e:bf:79:47:65:fb:1d:0d:ce:eb:db:cb:33:
c0:cc:d9:af:64:77:88:35:56:d7:3e:2a:07:5e:42:7f:a9:4e:
61:58:af:7e:72:4a:94:3b:37:3e:48:25:7a:db:55:31:d0:ee:
21:f9:37:8a:f7:63:08:e0:f1:ab:e5:f1:81:59:22:65:1f:8e:
52:10:fd:aa:2e:7c:37:37:dd:0f:04:47:b5:8a:c3:85:b9:c8:
1d:53:ca:f7:31:38:a3:0a:05:18:fb:a0:b4:fe:c8:61:3b:7f:
aa:6f:87:43:20:e0:b3:e0:0c:6c:ec:02:5b:6b:97:1e:ac:d4:
5c:91:4a:d5:47:fe:da:66:8f:56:6f:c1:36:59:fc:22:4a:64:
03:6c:88:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:37:58 2026 by rpki-client