Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/8186EA3008A211EA83441161C4F9AE02.roa
File: 8186EA3008A211EA83441161C4F9AE02.roa (raw, json)
Hash identifier: 6v7Fso9OTCe2JXGJRIvWJbjMtISjEaVVYIy2xiWn/Hc=
Subject key identifier: 42:E5:BB:7E:12:3F:96:5B:E2:94:11:FB:4D:E4:12:92:3B:9B:A7:97
Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
Certificate serial: 0D0C
Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/8186EA3008A211EA83441161C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:06:52 +0000
ROA not before: Tue 17 Feb 2026 08:12:46 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 137385
IP address blocks: 103.106.240.0/22 maxlen: 24
2402:49c0::/32 maxlen: 32
2402:49c0::/48 maxlen: 48
2402:49c0:1::/48 maxlen: 48
2402:49c0:2::/48 maxlen: 48
2402:49c0:3::/48 maxlen: 48
2402:49c0:4::/48 maxlen: 48
2402:49c0:5::/48 maxlen: 48
2402:49c0:6::/48 maxlen: 48
2402:49c0:7::/48 maxlen: 48
2402:49c0:8::/48 maxlen: 48
2402:49c0:9::/48 maxlen: 48
2402:49c0:a::/48 maxlen: 48
2402:49c0:b::/48 maxlen: 48
2402:49c0:c::/48 maxlen: 48
2402:49c0:d::/48 maxlen: 48
2402:49c0:e::/48 maxlen: 48
2402:49c0:f::/48 maxlen: 48
2402:49c0:10::/48 maxlen: 48
2402:49c0:11::/48 maxlen: 48
2402:49c0:12::/48 maxlen: 48
2402:49c0:13::/48 maxlen: 48
2402:49c0:14::/48 maxlen: 48
2402:49c0:15::/48 maxlen: 48
2402:49c0:16::/48 maxlen: 48
2402:49c0:17::/48 maxlen: 48
2402:49c0:18::/48 maxlen: 48
2402:49c0:19::/48 maxlen: 48
2402:49c0:1a::/48 maxlen: 48
2402:49c0:1b::/48 maxlen: 48
2402:49c0:1c::/48 maxlen: 48
2402:49c0:1d::/48 maxlen: 48
2402:49c0:1e::/48 maxlen: 48
2402:49c0:1f::/48 maxlen: 48
2402:49c0:20::/48 maxlen: 48
2402:49c0:21::/48 maxlen: 48
2402:49c0:22::/48 maxlen: 48
2402:49c0:23::/48 maxlen: 48
2402:49c0:24::/48 maxlen: 48
2402:49c0:25::/48 maxlen: 48
2402:49c0:26::/48 maxlen: 48
2402:49c0:27::/48 maxlen: 48
2402:49c0:28::/48 maxlen: 48
2402:49c0:29::/48 maxlen: 48
2402:49c0:2a::/48 maxlen: 48
2402:49c0:2b::/48 maxlen: 48
2402:49c0:2c::/48 maxlen: 48
2402:49c0:2d::/48 maxlen: 48
2402:49c0:2e::/48 maxlen: 48
2402:49c0:2f::/48 maxlen: 48
2402:49c0:30::/48 maxlen: 48
2402:49c0:31::/48 maxlen: 48
2402:49c0:32::/48 maxlen: 48
2402:49c0:33::/48 maxlen: 48
2402:49c0:34::/48 maxlen: 48
2402:49c0:35::/48 maxlen: 48
2402:49c0:36::/48 maxlen: 48
2402:49c0:37::/48 maxlen: 48
2402:49c0:38::/48 maxlen: 48
2402:49c0:39::/48 maxlen: 48
2402:49c0:3a::/48 maxlen: 48
2402:49c0:3b::/48 maxlen: 48
2402:49c0:3c::/48 maxlen: 48
2402:49c0:3d::/48 maxlen: 48
2402:49c0:3e::/48 maxlen: 48
2402:49c0:3f::/48 maxlen: 48
2402:49c0:40::/48 maxlen: 48
2402:49c0:41::/48 maxlen: 48
2402:49c0:42::/48 maxlen: 48
2402:49c0:43::/48 maxlen: 48
2402:49c0:44::/48 maxlen: 48
2402:49c0:45::/48 maxlen: 48
2402:49c0:46::/48 maxlen: 48
2402:49c0:47::/48 maxlen: 48
2402:49c0:48::/48 maxlen: 48
2402:49c0:49::/48 maxlen: 48
2402:49c0:4a::/48 maxlen: 48
2402:49c0:4b::/48 maxlen: 48
2402:49c0:4c::/48 maxlen: 48
2402:49c0:4d::/48 maxlen: 48
2402:49c0:4e::/48 maxlen: 48
2402:49c0:4f::/48 maxlen: 48
2402:49c0:50::/48 maxlen: 48
2402:49c0:51::/48 maxlen: 48
2402:49c0:52::/48 maxlen: 48
2402:49c0:53::/48 maxlen: 48
2402:49c0:54::/48 maxlen: 48
2402:49c0:55::/48 maxlen: 48
2402:49c0:56::/48 maxlen: 48
2402:49c0:a1::/48 maxlen: 48
2402:49c0:a2::/48 maxlen: 48
2402:49c0:a3::/48 maxlen: 48
2402:49c0:a4::/48 maxlen: 48
2402:49c0:a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl
rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3340 (0xd0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7
Validity
Not Before: Feb 17 08:12:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a4803b-acb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:53:da:eb:6c:59:ca:32:bd:2a:1d:d5:37:
e6:5c:44:5f:4f:25:83:46:e0:81:c7:47:a8:fa:02:
3c:aa:ab:9b:d6:42:c4:74:62:ff:85:f3:3b:57:de:
57:b4:d2:dd:24:a5:3f:8f:96:bc:d7:d7:98:b3:56:
4b:ca:d6:be:c2:f6:c6:bf:c1:df:45:9f:af:0f:d3:
26:2b:d1:8d:6f:54:2d:78:bf:fa:60:25:01:99:0f:
c0:1a:3e:15:0f:4c:89:f7:3e:82:69:7d:a0:68:e9:
f6:e5:f8:d9:59:2f:9d:c0:4b:37:cf:8d:be:50:fe:
e5:d3:79:4f:4f:7a:d5:2f:65:7a:d1:c4:61:63:77:
8c:cd:77:65:97:e2:30:cc:ad:a9:6f:1c:4f:3c:3e:
be:43:ac:85:22:d0:ca:0d:b5:fd:9a:0a:ed:10:e7:
1f:6a:5b:4d:ee:64:16:88:92:0e:1b:f9:fb:14:77:
5f:6f:08:a9:33:75:a8:23:c4:f6:9c:dc:31:4b:d0:
68:95:75:0f:68:4f:0b:ba:08:9c:83:7a:c8:17:26:
34:50:29:82:74:7c:a9:01:66:f5:55:d0:92:1b:fb:
be:9c:16:34:25:b3:2b:6f:36:84:ce:dd:48:3a:ac:
ad:70:54:d6:8d:61:0f:16:c5:88:14:23:c2:80:b9:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E5:BB:7E:12:3F:96:5B:E2:94:11:FB:4D:E4:12:92:3B:9B:A7:97
X509v3 Authority Key Identifier:
keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/8186EA3008A211EA83441161C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.106.240.0/22
IPv6:
2402:49c0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:55:bf:74:d2:03:8f:3d:0e:a6:8c:f8:8f:49:db:27:3e:8a:
10:e5:d9:bb:40:4d:6b:d8:e9:32:70:c4:0c:91:ff:00:68:22:
ae:48:5b:46:90:fe:5e:09:4c:87:77:d5:4b:9e:e8:a6:98:2a:
ab:0b:b6:78:07:7e:2c:40:01:d6:eb:ba:84:60:bf:7c:8b:6d:
cc:e0:0b:27:12:90:1d:16:a8:18:e5:aa:dc:cc:38:2d:34:7d:
e8:e5:cd:28:90:87:6d:d4:9f:5d:d7:9b:a7:2b:ef:d4:00:b1:
fe:99:aa:e3:4a:70:46:c4:b5:30:2a:5c:3f:49:64:5a:8a:04:
cf:73:9e:5d:13:26:c3:16:71:a1:34:27:3b:e0:dd:15:8c:52:
10:22:90:72:c4:33:94:1d:27:57:6a:fc:66:59:44:75:81:3f:
22:86:05:a3:33:83:67:be:d8:6d:cd:1d:4c:0f:1e:e9:60:52:
e2:fa:d5:15:7f:1c:5b:fe:b8:6c:94:3c:d5:df:94:29:03:66:
56:14:a3:37:8e:19:f9:d4:e1:ea:01:15:37:c5:28:53:93:a7:
93:51:f2:46:bc:ab:01:91:4b:9f:ee:6f:39:d3:86:41:99:45:
1a:ff:b5:7e:06:42:5c:43:fd:c8:d7:05:9b:dc:6b:db:52:51:
8b:41:75:d2
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2
QTg4OTJFQjcwHhcNMjYwMjE3MDgxMjQ2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODAzYi1hY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzi1T2utsWcoyvSod1TfmXERfTyWDRuCBx0eo+gI8qqub1kLEdGL/hfM7V95X
tNLdJKU/j5a819eYs1ZLyta+wvbGv8HfRZ+vD9MmK9GNb1QteL/6YCUBmQ/AGj4V
D0yJ9z6CaX2gaOn25fjZWS+dwEs3z42+UP7l03lPT3rVL2V60cRhY3eMzXdll+Iw
zK2pbxxPPD6+Q6yFItDKDbX9mgrtEOcfaltN7mQWiJIOG/n7FHdfbwipM3WoI8T2
nNwxS9BolXUPaE8Lugicg3rIFyY0UCmCdHypAWb1VdCSG/u+nBY0JbMrbzaEzt1I
OqytcFTWjWEPFsWIFCPCgLlt6QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFELlu34S
P5Zb4pQR+03kEpI7m6eXMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4
QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM
cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTQwOEYvQUE2MDRENEEwOEEwMTFFQTlDNEFFRDVEQzRGOUFFMDIvODE4NkVBMzAw
OEEyMTFFQTgzNDQxMTYxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ2rwMA0EAgACMAcDBQAkAknAMA0GCSqGSIb3DQEBCwUAA4IBAQBK
Vb900gOPPQ6mjPiPSdsnPooQ5dm7QE1r2OkycMQMkf8AaCKuSFtGkP5eCUyHd9VL
nuimmCqrC7Z4B34sQAHW67qEYL98i23M4AsnEpAdFqgY5arczDgtNH3o5c0okIdt
1J9d15unK+/UALH+marjSnBGxLUwKlw/SWRaigTPc55dEybDFnGhNCc74N0VjFIQ
IpByxDOUHSdXavxmWUR1gT8ihgWjM4NnvthtzR1MDx7pYFLi+tUVfxxb/rhslDzV
35QpA2ZWFKM3jhn51OHqARU3xShTk6eTUfJGvKsBkUuf7m8504ZBmUUa/7V+BkJc
Q/3I1wWb3GvbUlGLQXXS
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:38 2026 by rpki-client