Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/A26500A2A27F11EBBE87837FC4F9AE02.roa
File: A26500A2A27F11EBBE87837FC4F9AE02.roa (raw, json)
Hash identifier: JcJjcqVYRiJWI65KJfNfUjdxHTQiwbOdniRkiuwt4/8=
Subject key identifier: A8:01:F9:96:61:2D:92:66:6F:D4:E9:6A:60:4F:02:3E:B7:22:B8:C4
Certificate issuer: /CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
Certificate serial: 0699
Authority key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/A26500A2A27F11EBBE87837FC4F9AE02.roa
Signing time: Wed 04 Feb 2026 22:18:57 +0000
ROA not before: Wed 04 Feb 2026 22:18:57 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 45648
IP address blocks: 27.34.240.0/24 maxlen: 24
27.34.241.0/24 maxlen: 24
27.34.242.0/24 maxlen: 24
27.34.243.0/24 maxlen: 24
27.34.244.0/24 maxlen: 24
27.34.245.0/24 maxlen: 24
27.34.246.0/24 maxlen: 24
27.34.247.0/24 maxlen: 24
27.34.248.0/24 maxlen: 24
27.34.249.0/24 maxlen: 24
27.34.250.0/24 maxlen: 24
27.34.251.0/24 maxlen: 24
27.34.252.0/24 maxlen: 24
27.34.253.0/24 maxlen: 24
27.34.254.0/24 maxlen: 24
27.34.255.0/24 maxlen: 24
43.254.160.0/24 maxlen: 24
43.254.161.0/24 maxlen: 24
43.254.162.0/24 maxlen: 24
43.254.163.0/24 maxlen: 24
103.228.220.0/24 maxlen: 24
103.228.221.0/24 maxlen: 24
103.228.222.0/24 maxlen: 24
103.228.223.0/24 maxlen: 24
111.125.192.0/24 maxlen: 24
111.125.193.0/24 maxlen: 24
111.125.200.0/24 maxlen: 24
111.125.201.0/24 maxlen: 24
111.125.202.0/24 maxlen: 24
111.125.203.0/24 maxlen: 24
111.125.204.0/24 maxlen: 24
111.125.205.0/24 maxlen: 24
111.125.206.0/24 maxlen: 24
111.125.207.0/24 maxlen: 24
111.125.212.0/24 maxlen: 24
183.87.212.0/24 maxlen: 24
183.87.213.0/24 maxlen: 24
183.87.250.0/24 maxlen: 24
203.201.60.0/24 maxlen: 24
203.201.61.0/24 maxlen: 24
203.201.62.0/24 maxlen: 24
203.201.63.0/24 maxlen: 24
2400:d280::/32 maxlen: 32
2400:d280::/36 maxlen: 36
2400:d280:1000::/36 maxlen: 36
2400:d280:2000::/36 maxlen: 36
2400:d280:3000::/36 maxlen: 36
2400:d280:4000::/36 maxlen: 36
2400:d280:5000::/36 maxlen: 36
2400:d280:6000::/36 maxlen: 36
2400:d280:7000::/36 maxlen: 36
2400:d280:8000::/36 maxlen: 36
2400:d280:9000::/36 maxlen: 36
2400:d280:a000::/36 maxlen: 36
2400:d280:b000::/36 maxlen: 36
2400:d280:c000::/36 maxlen: 36
2400:d280:d000::/36 maxlen: 36
2400:d280:e000::/36 maxlen: 36
2400:d280:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl
rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1689 (0x699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C39D1, serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
Validity
Not Before: Feb 4 22:18:57 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6983c5d0-568c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:d0:a3:57:de:20:c8:1c:04:a7:3f:83:b1:
22:c6:23:9f:8d:67:ad:75:9c:29:97:f3:dc:63:8b:
b3:54:eb:df:25:c1:40:81:1b:80:cd:5d:76:0f:2f:
31:7f:ba:ec:2e:b5:1c:5f:dd:60:1d:6f:52:18:c1:
6e:ed:0b:2c:60:ac:af:36:68:ec:79:75:8f:93:8a:
4d:dc:0f:24:cc:4f:e6:69:87:6f:54:a8:2d:0e:11:
36:e2:35:30:94:19:87:52:5f:ad:42:69:2a:a6:5c:
b8:4c:cc:50:70:2a:50:07:63:cc:ac:cd:c4:f8:96:
71:f9:d4:f1:12:db:8c:0e:a1:ed:3f:90:d3:08:d3:
0e:74:5c:6a:fa:59:06:d7:8e:c1:10:fb:85:fd:db:
9d:ff:eb:00:a4:66:ec:ba:05:89:a7:1f:88:4f:11:
d6:51:64:1d:5e:89:65:39:c0:b3:a3:c6:b1:82:db:
4b:e4:ab:e9:1d:eb:6a:46:5f:65:6c:d0:a9:51:60:
c9:eb:91:82:72:07:8f:8c:38:cb:81:a7:b5:4f:72:
e3:8f:fa:a0:f1:91:7b:ac:17:e6:da:57:a0:ab:40:
8b:46:86:05:2d:5c:99:d5:3f:61:76:7f:92:f2:21:
24:7b:ea:dc:47:f6:2a:2b:63:64:57:d8:0e:4b:fa:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:01:F9:96:61:2D:92:66:6F:D4:E9:6A:60:4F:02:3E:B7:22:B8:C4
X509v3 Authority Key Identifier:
keyid:8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/A26500A2A27F11EBBE87837FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.34.240.0/20
43.254.160.0/22
103.228.220.0/22
111.125.192.0/23
111.125.200.0/21
111.125.212.0/24
183.87.212.0/23
183.87.250.0/24
203.201.60.0/22
IPv6:
2400:d280::/32
Signature Algorithm: sha256WithRSAEncryption
13:f8:49:65:22:a8:7b:40:bc:a3:46:4f:b9:c9:de:dd:53:be:
89:22:27:41:86:21:d9:9d:a3:47:b8:87:1e:33:40:c9:f2:d1:
c4:07:1c:1a:6e:29:24:4f:93:9c:1a:f6:04:3f:98:09:5e:84:
97:2b:40:28:3f:f5:c4:dc:8b:12:19:8d:b2:0e:40:34:bd:c9:
e5:8c:a0:44:05:1a:f2:87:aa:fb:c6:b5:3d:da:f7:77:fb:f9:
b3:0b:c2:b1:a1:f7:8d:ac:21:58:e1:41:45:73:f4:9a:98:5c:
8c:e8:58:71:7d:1a:f0:2e:3b:66:27:3e:79:88:90:2d:31:57:
16:eb:83:26:9e:71:f6:18:15:5f:f7:4b:82:dd:c2:83:a3:43:
b2:4e:75:67:1c:99:67:7c:7d:3b:fc:63:af:01:de:e4:3e:f8:
db:d3:6c:01:01:19:10:95:c9:93:79:87:ad:ea:dd:a5:34:63:
ee:ee:83:d7:23:3d:08:ff:25:08:d6:86:05:8e:66:3f:3e:ec:
9f:89:76:3c:d3:74:e3:ed:53:ca:c1:49:39:76:eb:a0:b3:66:
f2:7f:e9:e5:f1:96:ea:ce:4f:20:9b:36:3d:72:97:4f:08:d2:
bf:e1:14:e8:3b:ff:a6:5a:bb:c4:7a:39:cf:0c:70:e8:d0:36:
cd:1a:6d:0c
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QzM5RDExMTAvBgNVBAUTKDhERUVBRTg1NkU5NUYzQ0VBQ0UxMTJDMEExRUE5N0JB
NDVBNTdBNDQwHhcNMjYwMjA0MjIxODU3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgzYzVkMC01NjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0VjQo1feIMgcBKc/g7EixiOfjWetdZwpl/PcY4uzVOvfJcFAgRuAzV12Dy8x
f7rsLrUcX91gHW9SGMFu7QssYKyvNmjseXWPk4pN3A8kzE/maYdvVKgtDhE24jUw
lBmHUl+tQmkqply4TMxQcCpQB2PMrM3E+JZx+dTxEtuMDqHtP5DTCNMOdFxq+lkG
147BEPuF/dud/+sApGbsugWJpx+ITxHWUWQdXollOcCzo8axgttL5KvpHetqRl9l
bNCpUWDJ65GCcgePjDjLgae1T3Ljj/qg8ZF7rBfm2legq0CLRoYFLVyZ1T9hdn+S
8iEke+rcR/YqK2NkV9gOS/rPMwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFKgB+ZZh
LZJmb9TpamBPAj63IrjEMB8GA1UdIwQYMBaAFI3uroVulfPOrOESwKHql7pFpXpE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzlEMS8wODhDMUI0OEEy
N0QxMUVCQTI4RjkxNzdDNEY5QUUwMi9qZTZ1aFc2Vjg4NnM0UkxBb2VxWHVrV2xl
a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2plNnVoVzZWODg2czRSTEFvZXFYdWtXbGVrUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzM5RDEvMDg4QzFCNDhBMjdEMTFFQkEyOEY5MTc3QzRGOUFFMDIvQTI2NTAwQTJB
MjdGMTFFQkJFODc4MzdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXgYIKwYBBQUHAQcBAf8E
TzBNMDwEAgABMDYDBAQbIvADBAIr/qADBAJn5NwDBAFvfcADBANvfcgDBABvfdQD
BAG3V9QDBAC3V/oDBALLyTwwDQQCAAIwBwMFACQA0oAwDQYJKoZIhvcNAQELBQAD
ggEBABP4SWUiqHtAvKNGT7nJ3t1TvokiJ0GGIdmdo0e4hx4zQMny0cQHHBpuKSRP
k5wa9gQ/mAlehJcrQCg/9cTcixIZjbIOQDS9yeWMoEQFGvKHqvvGtT3a93f7+bML
wrGh942sIVjhQUVz9JqYXIzoWHF9GvAuO2YnPnmIkC0xVxbrgyaecfYYFV/3S4Ld
woOjQ7JOdWccmWd8fTv8Y68B3uQ++NvTbAEBGRCVyZN5h63q3aU0Y+7ug9cjPQj/
JQjWhgWOZj8+7J+JdjzTdOPtU8rBSTl266CzZvJ/6eXxlurOTyCbNj1yl08I0r/h
FOg7/6Zau8R6Oc8McOjQNs0abQw=
-----END CERTIFICATE-----
Generated at Fri Feb 20 00:12:33 2026 by rpki-client