Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/F0202A84B36311F082F02072C4F9AE02.roa
File: F0202A84B36311F082F02072C4F9AE02.roa (raw, json)
Hash identifier: wAJ2XDkNijFseoWOJqzrVJUKLlIyrD59b2NEgwmzamo=
Subject key identifier: 12:AD:7C:2A:EF:0C:AD:17:74:6B:1C:BE:D7:11:94:01:C2:07:1A:F0
Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Certificate serial: 0D0A
Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/F0202A84B36311F082F02072C4F9AE02.roa
Signing time: Mon 16 Feb 2026 18:15:53 +0000
ROA not before: Mon 16 Feb 2026 18:15:53 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134970
IP address blocks: 103.251.244.0/22 maxlen: 24
103.251.244.0/23 maxlen: 24
103.251.245.0/24 maxlen: 24
103.251.246.0/24 maxlen: 24
103.251.247.0/24 maxlen: 24
220.247.128.0/22 maxlen: 24
220.247.128.0/24 maxlen: 24
220.247.130.0/23 maxlen: 23
220.247.130.0/24 maxlen: 24
220.247.131.0/24 maxlen: 24
2407:7380::/48 maxlen: 48
2407:7380:b::/48 maxlen: 48
2407:7380:c::/48 maxlen: 48
2407:7380:d::/48 maxlen: 48
2407:7380:1000::/48 maxlen: 48
2407:7380:2000::/48 maxlen: 48
2407:7380:3000::/48 maxlen: 48
2407:7380:4000::/48 maxlen: 48
2407:7380:5000::/48 maxlen: 48
2407:7380:6000::/48 maxlen: 48
2407:7380:7000::/48 maxlen: 48
2407:7380:8000::/48 maxlen: 48
2407:7380:9000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 18:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3338 (0xd0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Validity
Not Before: Feb 16 18:15:53 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69935ed9-7db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:20:2f:e3:42:51:30:6c:25:f9:a7:d4:03:
ae:1c:44:6d:60:89:1d:c5:44:af:ea:a6:94:86:dd:
da:32:97:d1:73:d2:cd:a2:fe:b9:b9:9c:b0:c1:8b:
91:b5:e2:77:02:a5:26:5b:c7:50:4e:d3:59:9b:e7:
49:5b:7e:72:c3:bd:56:cf:bb:22:fd:56:5b:3e:64:
c2:31:5f:c6:44:89:b7:f6:30:17:97:b7:fa:88:67:
90:cc:9e:88:c9:c6:dd:af:05:ad:76:d1:3c:e0:17:
1f:73:15:0e:b8:b5:a4:9b:4f:f9:0f:b8:1f:5b:38:
9a:42:75:32:9b:c5:87:37:e1:ce:07:e6:b2:03:5e:
b1:14:3a:bc:9f:d0:35:97:d7:91:0f:29:07:eb:0b:
89:67:bf:bd:ae:d4:36:3b:a0:5f:7a:b7:62:a0:5e:
2b:ec:9f:ea:53:ff:d5:f4:f5:47:6f:cd:be:b7:d2:
91:19:39:3e:ca:52:2f:08:d7:49:12:24:f1:d5:3f:
9a:6d:68:8c:24:40:32:d1:87:40:3e:71:28:8d:f0:
f1:65:a0:41:60:7e:e1:67:dd:2e:c9:c1:44:5f:9d:
da:cf:d3:40:10:f0:df:53:e6:ef:04:61:4d:56:fe:
82:83:46:ac:73:97:ab:93:80:2b:d6:67:24:b7:a0:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AD:7C:2A:EF:0C:AD:17:74:6B:1C:BE:D7:11:94:01:C2:07:1A:F0
X509v3 Authority Key Identifier:
keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/F0202A84B36311F082F02072C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.251.244.0/22
220.247.128.0/22
IPv6:
2407:7380::/48
2407:7380:b::-2407:7380:d:ffff:ffff:ffff:ffff:ffff
2407:7380:1000::/48
2407:7380:2000::/48
2407:7380:3000::/48
2407:7380:4000::/48
2407:7380:5000::/48
2407:7380:6000::/48
2407:7380:7000::/48
2407:7380:8000::/48
2407:7380:9000::/48
Signature Algorithm: sha256WithRSAEncryption
1d:35:b6:01:6b:f9:07:1e:75:c3:b1:66:cb:26:04:ab:b8:cc:
2f:14:d5:11:46:71:99:f8:ca:de:3b:eb:16:76:b9:ae:cb:73:
66:85:e9:dd:00:6b:df:d5:20:6a:ca:43:ff:fa:a1:fb:1c:61:
80:83:f8:60:d1:dd:97:fa:39:dc:c5:fd:fe:6f:32:d4:46:29:
5b:d8:d7:b8:88:55:bf:c5:44:ee:34:4c:70:8b:12:7c:a6:5d:
40:ec:b4:bc:90:59:a4:c0:ab:1e:c1:4d:1d:68:24:4d:18:a3:
97:63:d5:3d:4b:57:08:9f:23:ac:89:c6:80:d3:8f:f0:3c:db:
95:77:30:1d:df:2c:b1:4d:54:dd:d7:ed:b7:a3:88:fc:7a:e1:
82:d2:21:e0:3c:48:db:48:da:4f:24:7f:15:27:8d:8f:68:97:
56:39:bf:1b:fc:29:16:4f:cf:a9:3a:76:08:0a:f3:67:66:11:
7e:83:f2:d9:94:2f:90:70:e7:ef:a1:b5:06:14:71:a6:8b:aa:
88:38:4e:18:97:2c:df:b7:51:e5:11:57:75:96:86:f5:9f:48:
de:19:57:0c:f1:84:d3:fa:3c:1b:7c:ec:4c:fa:59:b0:83:fc:
99:e5:3e:d1:dd:82:06:11:42:fe:38:05:28:52:29:fe:aa:e8:
53:56:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:56:27 2026 by rpki-client