Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3601365863DE11F1AE9C550C8747A888.roa
File: 3601365863DE11F1AE9C550C8747A888.roa (raw, json)
Hash identifier: a5VM7JtD6LcodsYeGlB0EAm1aE+9xhQRh0wSSd39kMo=
Subject key identifier: 52:2A:70:67:92:B4:C1:2B:5E:00:5E:05:7F:4F:62:A1:AA:1D:BE:9D
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3BBA
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3601365863DE11F1AE9C550C8747A888.roa
Signing time: Tue 09 Jun 2026 08:35:47 +0000
ROA not before: Tue 09 Jun 2026 08:35:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 111.88.8.0/22 maxlen: 24
111.88.12.0/22 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/20 maxlen: 24
111.88.48.0/20 maxlen: 24
111.88.64.0/21 maxlen: 24
111.88.72.0/23 maxlen: 24
111.88.75.0/24 maxlen: 24
111.88.80.0/20 maxlen: 24
111.88.168.0/24 maxlen: 24
111.88.169.0/24 maxlen: 24
111.88.170.0/24 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.36.0/24 maxlen: 24
115.186.37.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/23 maxlen: 23
115.186.46.0/24 maxlen: 24
115.186.52.0/22 maxlen: 24
115.186.62.0/23 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.104.0/24 maxlen: 24
117.102.48.0/22 maxlen: 24
117.102.52.0/22 maxlen: 24
117.102.56.0/22 maxlen: 24
117.102.60.0/22 maxlen: 24
203.81.224.0/22 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15290 (0x3bba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jun 9 08:35:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a27d063-de35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:ff:df:0f:77:f2:01:1c:2b:19:f5:91:52:
c9:67:46:9f:3e:af:c0:45:01:5b:3f:08:e4:75:21:
03:d3:c3:25:15:a9:04:69:4c:16:63:a5:fc:49:f5:
a1:76:a8:c9:c8:7f:8c:cd:08:43:69:79:1d:a1:42:
26:dd:bb:00:4f:00:96:15:85:42:63:17:2a:06:0a:
a1:e0:7e:02:1a:f2:56:b0:74:3d:f9:79:90:3d:72:
57:eb:6e:c8:e9:fe:90:36:78:67:82:bd:f4:b1:c1:
87:e7:ea:5f:67:ac:6a:74:5b:0e:c0:e6:f7:a9:f5:
85:4a:7d:be:55:ee:48:9d:52:8c:4a:03:b7:20:af:
a3:11:a2:c2:48:59:63:a2:4e:1d:c5:bb:61:79:f7:
9b:28:6a:e5:fa:00:be:65:30:b7:c6:52:94:b9:9c:
f1:b6:7e:ec:7f:50:7d:90:24:93:95:66:14:91:59:
fb:ab:f5:74:d0:c0:a6:c0:d0:1d:20:59:04:c6:91:
0f:0e:1f:e5:0d:5f:30:46:ba:f2:e5:43:50:9f:e1:
18:7c:98:c4:6a:c5:f2:c1:77:d5:77:82:3f:17:d3:
aa:45:8f:c0:28:01:8c:70:c1:f3:9b:d3:65:2c:34:
51:e1:3a:82:37:7c:ce:b3:a8:3c:62:a0:ca:b1:da:
c3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2A:70:67:92:B4:C1:2B:5E:00:5E:05:7F:4F:62:A1:AA:1D:BE:9D
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3601365863DE11F1AE9C550C8747A888.roa
sbgp-ipAddrBlock: critical
IPv4:
111.88.8.0-111.88.73.255
111.88.75.0/24
111.88.80.0/20
111.88.168.0-111.88.170.255
115.186.2.0-115.186.9.255
115.186.36.0/23
115.186.42.0-115.186.46.255
115.186.52.0/22
115.186.62.0/23
115.186.76.0-115.186.87.255
115.186.104.0/24
117.102.48.0/20
203.81.224.0-203.81.229.255
203.81.235.0/24
Signature Algorithm: sha256WithRSAEncryption
45:da:ef:8f:ba:d9:b0:cc:1c:aa:d4:bb:04:44:e9:b8:ff:77:
7f:36:12:88:05:90:4c:2e:e6:5e:18:42:1a:5c:d7:93:b6:1b:
79:9d:99:af:84:fa:8c:c6:c0:1b:b1:1e:ec:bf:31:98:54:04:
ac:9c:e3:8c:d7:39:4f:12:d9:85:48:66:ba:17:26:0d:04:08:
9c:96:ce:11:56:22:f9:0e:fd:b3:0f:22:7f:e5:49:b1:d4:a4:
6d:5e:40:63:36:6f:c2:a2:62:cc:e5:09:3f:d5:46:68:55:81:
b3:ec:19:f0:1e:59:d8:9a:39:19:1b:05:02:bb:1f:de:ba:32:
af:b0:10:c8:cf:e4:9c:4f:f9:fc:99:83:df:7d:ed:df:c5:54:
42:a4:68:63:b1:91:e7:12:de:de:e4:dd:f3:c1:e1:cd:0d:7e:
b9:03:a4:88:35:85:32:b4:f5:45:23:77:1d:c5:e7:9b:e6:20:
b5:ab:a6:00:36:79:ff:ed:67:00:85:99:93:ca:da:25:ff:19:
7a:f6:2e:2e:96:b9:47:ad:78:18:6e:28:e1:18:e4:a7:93:e7:
0e:47:c9:59:2c:3f:1b:d4:a0:30:b5:e2:96:ae:cd:71:82:d7:
46:d5:79:b3:bb:4a:6e:70:bd:27:dc:52:21:6c:ba:5a:df:58:
b4:c3:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 16:55:40 2026 by rpki-client