Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/AA00C86E327B11F1A7DE805FC2833773.roa
File: AA00C86E327B11F1A7DE805FC2833773.roa (raw, json)
Hash identifier: 8krSfaesOuTcor4Zy5DuQ6VsfipJvIEqtjuec3PLprY=
Subject key identifier: 26:FB:32:7A:E9:CE:54:3D:74:02:5E:A3:C7:95:A5:E3:71:8C:8E:2B
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3B52
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/AA00C86E327B11F1A7DE805FC2833773.roa
Signing time: Tue 07 Apr 2026 12:16:54 +0000
ROA not before: Tue 07 Apr 2026 12:16:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 111.88.8.0/22 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/20 maxlen: 24
111.88.48.0/20 maxlen: 24
111.88.64.0/21 maxlen: 24
111.88.72.0/22 maxlen: 24
111.88.78.0/24 maxlen: 24
111.88.80.0/20 maxlen: 24
111.88.168.0/24 maxlen: 24
111.88.169.0/24 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.36.0/24 maxlen: 24
115.186.37.0/24 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/23 maxlen: 23
115.186.46.0/24 maxlen: 24
115.186.52.0/22 maxlen: 24
115.186.62.0/23 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.104.0/24 maxlen: 24
117.102.48.0/22 maxlen: 24
117.102.52.0/22 maxlen: 24
117.102.56.0/22 maxlen: 24
117.102.60.0/22 maxlen: 24
203.81.224.0/22 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.231.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15186 (0x3b52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 7 12:16:54 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69d4f5b6-02b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:be:1f:bb:a4:60:a9:73:d0:4a:4b:d3:91:
17:5f:43:45:2d:76:03:e6:59:3f:23:c1:bc:1e:0f:
a6:d1:b1:61:80:eb:91:23:50:f1:d6:f7:4a:ff:e8:
11:a6:6d:34:b8:75:d8:8c:4e:80:15:89:4b:4e:5d:
37:36:ef:64:67:45:87:5a:8d:66:e1:df:15:bc:92:
a3:09:4d:8f:89:57:3b:7a:21:08:f4:67:4e:45:4c:
65:ec:8f:40:b5:a9:2b:09:ce:bd:31:20:11:8d:d2:
4e:b1:92:99:d2:09:86:9d:5c:62:39:e8:2b:c6:b1:
6a:66:88:bc:51:78:62:0a:d7:45:61:a2:74:ab:f9:
b9:e3:fd:3e:8c:c7:2a:88:d1:eb:22:d4:1c:d3:d1:
f9:e9:a7:74:43:ca:5e:8f:57:67:86:ae:ed:52:02:
92:8c:70:a8:c3:61:c4:60:f4:dd:7c:c5:ed:5b:97:
94:b9:77:88:f8:b5:2c:0a:1e:2b:a5:0d:2f:32:6b:
71:bc:94:d9:9e:87:40:28:98:d6:f9:c8:11:5c:55:
ca:20:40:a0:54:0d:06:99:99:02:09:20:81:00:bd:
2c:ee:0a:0a:a8:9f:66:e7:71:a9:01:3a:a3:44:bf:
59:98:9a:87:f2:93:a5:61:65:34:b4:c6:70:2a:ad:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FB:32:7A:E9:CE:54:3D:74:02:5E:A3:C7:95:A5:E3:71:8C:8E:2B
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/AA00C86E327B11F1A7DE805FC2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
111.88.8.0/22
111.88.16.0-111.88.75.255
111.88.78.0/24
111.88.80.0/20
111.88.168.0/23
115.186.2.0-115.186.9.255
115.186.36.0/23
115.186.40.0/24
115.186.42.0-115.186.46.255
115.186.52.0/22
115.186.62.0/23
115.186.76.0-115.186.87.255
115.186.104.0/24
117.102.48.0/20
203.81.224.0-203.81.229.255
203.81.231.0/24
203.81.235.0/24
Signature Algorithm: sha256WithRSAEncryption
92:91:08:4c:c4:71:a8:a8:30:1e:81:83:f5:28:6b:5b:9d:e5:
af:6a:32:07:af:0e:e8:4a:98:43:1a:ca:d5:b6:92:ba:7a:11:
9d:35:36:df:c7:f6:cd:83:b4:1a:6c:44:7e:3f:f4:ff:db:c9:
8b:f6:5f:ba:44:b3:cf:bb:df:dc:98:61:13:6b:1b:28:a7:89:
d9:72:b1:f0:4c:3a:34:b7:18:7d:7f:de:4d:10:de:86:b3:e9:
04:be:c6:fb:8c:32:52:f3:0f:a5:b5:bd:f7:88:11:02:db:05:
7c:88:bc:52:cc:fe:bc:d3:79:c3:c7:c6:35:bc:0a:ed:69:8c:
6e:58:b8:53:ab:7d:a0:78:34:92:c7:67:81:23:74:99:1f:a9:
bd:6a:0a:72:a5:44:96:95:18:81:56:ca:78:26:98:b7:12:e3:
2f:ef:4d:9c:4f:97:1c:84:f4:17:93:30:fe:65:8d:93:e5:a4:
0b:ba:b3:0d:bf:b0:c2:d4:ab:82:ac:04:02:8e:5e:fd:8e:bc:
6c:79:8a:24:c1:4e:b3:d4:19:92:fd:17:eb:d4:83:ce:79:58:
8a:ab:cb:5b:23:23:b9:ce:84:55:5f:3a:84:84:60:93:51:00:
81:0d:d1:a2:04:f7:6a:62:18:5b:ea:bb:4e:1a:ab:44:4a:0e:
c3:de:ac:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:24 2026 by rpki-client