Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/442DE3EE888711F0878DDD72C4F9AE02.roa
File: 442DE3EE888711F0878DDD72C4F9AE02.roa (raw, json)
Hash identifier: Hx6+a1QsxJh/pFcZUreaEjrGoPzgzjX+edJqu9UnJ7Y=
Subject key identifier: 98:0E:FF:7E:65:47:42:FA:B4:C9:E4:BE:FC:51:ED:C7:2E:1B:07:1B
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3978
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/442DE3EE888711F0878DDD72C4F9AE02.roa
Signing time: Wed 03 Sep 2025 05:31:39 +0000
ROA not before: Wed 03 Sep 2025 05:31:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.184.0/22 maxlen: 23
111.88.188.0/22 maxlen: 23
111.88.233.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
115.186.10.0/23 maxlen: 23
115.186.13.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.18.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/21 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/22 maxlen: 22
115.186.56.0/21 maxlen: 21
115.186.56.0/22 maxlen: 24
115.186.60.0/23 maxlen: 24
115.186.63.0/24 maxlen: 24
115.186.64.0/19 maxlen: 23
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.96.0/20 maxlen: 20
115.186.96.0/21 maxlen: 22
115.186.96.0/22 maxlen: 24
115.186.100.0/23 maxlen: 23
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/20 maxlen: 23
115.186.112.0/23 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/23 maxlen: 24
115.186.120.0/23 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.12.0/23 maxlen: 23
117.102.12.0/24 maxlen: 24
117.102.14.0/23 maxlen: 23
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 23
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.230.0/24 maxlen: 24
203.81.239.0/24 maxlen: 24
2406:7000::/32 maxlen: 32
2406:7000::/48 maxlen: 48
2406:7000:1::/48 maxlen: 48
2406:7000:2::/48 maxlen: 48
2406:7000:3::/48 maxlen: 48
2406:7000:4::/48 maxlen: 48
2406:7000:5::/48 maxlen: 48
2406:7000:6::/48 maxlen: 48
2406:7000:7::/48 maxlen: 48
2406:7000:8::/48 maxlen: 48
2406:7000:9::/48 maxlen: 48
2406:7000:a::/48 maxlen: 48
2406:7000:b::/48 maxlen: 48
2406:7000:c::/48 maxlen: 48
2406:7000:d::/48 maxlen: 48
2406:7000:e::/48 maxlen: 48
2406:7000:f::/48 maxlen: 48
2406:7000:10::/48 maxlen: 48
2406:7000:11::/48 maxlen: 56
2406:7000:12::/48 maxlen: 48
2406:7000:13::/48 maxlen: 48
2406:7000:14::/48 maxlen: 48
2406:7000:15::/48 maxlen: 48
2406:7000:16::/48 maxlen: 48
2406:7000:17::/48 maxlen: 48
2406:7000:18::/48 maxlen: 48
2406:7000:19::/48 maxlen: 48
2406:7000:1a::/48 maxlen: 48
2406:7000:1b::/48 maxlen: 48
2406:7000:1c::/48 maxlen: 48
2406:7000:1d::/48 maxlen: 48
2406:7000:1e::/48 maxlen: 48
2406:7000:1f::/48 maxlen: 48
2406:7000:20::/48 maxlen: 48
2406:7000:21::/48 maxlen: 48
2406:7000:22::/48 maxlen: 48
2406:7000:23::/48 maxlen: 48
2406:7000:24::/48 maxlen: 48
2406:7000:25::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Sep 2025 14:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14712 (0x3978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Sep 3 05:31:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68b7d2bb-fa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:da:ec:74:9f:74:2b:ca:4b:77:8f:84:02:a0:
53:d1:13:ac:78:9e:55:24:55:6b:03:d8:31:04:e0:
77:07:d3:c3:f7:5b:08:2a:9b:91:9d:56:4a:b6:38:
d0:94:fb:95:fc:f1:7c:6d:11:58:7a:3c:55:0f:b4:
12:f1:1b:cc:c0:36:e8:24:b3:74:db:6c:22:36:9e:
a2:47:11:21:ed:d5:21:3d:d2:db:78:2d:19:6c:04:
f8:bb:e8:a6:81:62:2a:78:dd:26:3b:32:93:06:cc:
46:5e:f0:67:ce:cb:c4:62:93:37:a0:d1:d7:43:1f:
f1:1f:49:38:e5:71:27:ec:20:54:74:50:be:52:8b:
15:94:ed:e7:c4:06:47:b1:b2:cc:44:32:e9:5f:7f:
2b:dd:54:7f:de:45:91:65:23:91:e3:9d:18:30:5a:
c6:ea:39:2f:39:a4:eb:b2:98:ff:96:cb:c6:d9:86:
35:c0:74:f1:cd:bd:38:1f:8f:11:b1:c8:ef:fd:44:
a9:df:99:82:fe:64:2a:58:fc:95:cf:04:f2:c0:c7:
85:e7:e1:bd:46:a5:fd:94:69:aa:a1:51:71:cb:86:
9e:db:79:dc:81:7c:e5:2f:2d:c3:95:e7:c7:12:9c:
34:36:7c:c2:d7:46:58:06:16:2e:79:56:c9:6a:7f:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0E:FF:7E:65:47:42:FA:B4:C9:E4:BE:FC:51:ED:C7:2E:1B:07:1B
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/442DE3EE888711F0878DDD72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.184.0/21
111.88.233.0/24
111.88.238.0/23
115.186.10.0/23
115.186.13.0/24
115.186.17.0-115.186.18.255
115.186.23.0-115.186.25.255
115.186.30.0-115.186.40.255
115.186.42.0-115.186.47.255
115.186.56.0-115.186.127.255
117.102.0.0-117.102.9.255
117.102.12.0-117.102.28.255
117.102.32.0/20
203.81.230.0/24
203.81.239.0/24
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
0d:f9:df:e5:38:f8:95:84:2c:a3:f1:df:76:41:af:96:19:e2:
b0:ef:5b:b3:6f:59:88:8e:cd:28:0e:52:de:95:28:3d:fc:94:
90:ac:b1:83:92:21:5f:14:b7:62:21:9d:fc:4f:54:7f:a8:d6:
ce:71:22:e8:c7:d9:19:84:83:7b:d5:89:90:39:0a:e9:ec:ec:
fe:48:3b:6f:55:42:7b:cd:bd:27:4e:e6:ea:91:76:3f:a7:6f:
b9:f5:7e:75:1b:e8:8d:34:a0:96:0b:ce:85:ff:c6:2e:ea:f9:
c3:44:79:e0:98:23:32:31:08:0e:34:c0:9b:74:be:cf:7c:82:
d0:64:7c:07:f0:45:40:95:ef:b0:5a:03:09:ca:35:12:18:e5:
45:9d:67:e5:5c:e4:6b:18:a7:4a:cb:e2:ed:5c:5f:d4:4f:52:
77:b6:d3:0a:77:0b:8f:f9:d7:05:e8:47:a6:c8:95:c9:06:79:
bb:67:22:f1:9a:ae:5f:45:f6:e0:42:8a:a1:f6:da:2d:82:03:
04:f4:23:26:fc:8c:9e:6e:a7:39:5b:ca:1c:78:19:63:80:73:
86:dc:65:fe:bb:9a:f1:b0:31:3a:96:46:f9:25:ec:56:c3:18:
54:13:59:53:0b:51:51:02:51:fa:74:d4:63:fb:87:ad:6a:0d:
e3:6a:da:87
-----BEGIN CERTIFICATE-----
MIIGEDCCBPigAwIBAgICOXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjUwOTAzMDUzMTM5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3ZDJiYi1mYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9drsdJ90K8pLd4+EAqBT0ROseJ5VJFVrA9gxBOB3B9PD91sIKpuRnVZKtjjQ
lPuV/PF8bRFYejxVD7QS8RvMwDboJLN022wiNp6iRxEh7dUhPdLbeC0ZbAT4u+im
gWIqeN0mOzKTBsxGXvBnzsvEYpM3oNHXQx/xH0k45XEn7CBUdFC+UosVlO3nxAZH
sbLMRDLpX38r3VR/3kWRZSOR450YMFrG6jkvOaTrspj/lsvG2YY1wHTxzb04H48R
scjv/USp35mC/mQqWPyVzwTywMeF5+G9RqX9lGmqoVFxy4ae23ncgXzlLy3DlefH
Epw0NnzC10ZYBhYueVbJan/Q0wIDAQABo4IDNDCCAzAwHQYDVR0OBBYEFJgO/35l
R0L6tMnkvvxR7ccuGwcbMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvNDQyREUzRUU4
ODg3MTFGMDg3OERERDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgb0GCCsGAQUFBwEHAQH/
BIGtMIGqMIGYBAIAATCBkQMEA29YuAMEAG9Y6QMEAW9Y7gMEAXO6CgMEAHO6DTAM
AwQAc7oRAwQAc7oSMAwDBABzuhcDBAFzuhgwDAMEAXO6HgMEAHO6KDAMAwQBc7oq
AwQEc7ogMAwDBANzujgDBAdzugAwCwMDAXVmAwQBdWYIMAwDBAJ1ZgwDBAB1ZhwD
BAR1ZiADBADLUeYDBADLUe8wDQQCAAIwBwMFACQGcAAwDQYJKoZIhvcNAQELBQAD
ggEBAA353+U4+JWELKPx33ZBr5YZ4rDvW7NvWYiOzSgOUt6VKD38lJCssYOSIV8U
t2IhnfxPVH+o1s5xIujH2RmEg3vViZA5Cuns7P5IO29VQnvNvSdO5uqRdj+nb7n1
fnUb6I00oJYLzoX/xi7q+cNEeeCYIzIxCA40wJt0vs98gtBkfAfwRUCV77BaAwnK
NRIY5UWdZ+Vc5GsYp0rL4u1cX9RPUne20wp3C4/51wXoR6bIlckGebtnIvGarl9F
9uBCiqH22i2CAwT0Iyb8jJ5upzlbyhx4GWOAc4bcZf67mvGwMTqWRvkl7FbDGFQT
WVMLUVECUfp01GP7h61qDeNq2oc=
-----END CERTIFICATE-----
Generated at Mon Sep 8 07:27:20 2025 by rpki-client