Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/55CFC60E3F9811F098104369C4F9AE02.roa
File: 55CFC60E3F9811F098104369C4F9AE02.roa (raw, json)
Hash identifier: UdCkIarcUDsEiShYuFqpcC316/DtGKuONC/DzAx7Abk=
Subject key identifier: EA:B3:03:14:E8:51:61:22:80:71:41:8A:4D:F8:D1:A8:47:9A:68:21
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 387B
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/55CFC60E3F9811F098104369C4F9AE02.roa
Signing time: Mon 02 Jun 2025 09:59:55 +0000
ROA not before: Mon 02 Jun 2025 09:59:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150382
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.184.0/24 maxlen: 24
111.88.185.0/24 maxlen: 24
111.88.186.0/24 maxlen: 24
111.88.187.0/24 maxlen: 24
111.88.188.0/24 maxlen: 24
111.88.189.0/24 maxlen: 24
111.88.190.0/24 maxlen: 24
111.88.191.0/24 maxlen: 24
111.88.232.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/24 maxlen: 24
115.186.11.0/24 maxlen: 24
115.186.12.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.22.0/24 maxlen: 24
115.186.24.0/24 maxlen: 24
115.186.26.0/24 maxlen: 24
115.186.27.0/24 maxlen: 24
115.186.28.0/24 maxlen: 24
115.186.29.0/24 maxlen: 24
115.186.48.0/24 maxlen: 24
115.186.49.0/24 maxlen: 24
115.186.50.0/24 maxlen: 24
115.186.51.0/24 maxlen: 24
115.186.52.0/24 maxlen: 24
115.186.53.0/24 maxlen: 24
115.186.54.0/24 maxlen: 24
115.186.55.0/24 maxlen: 24
115.186.64.0/24 maxlen: 24
115.186.65.0/24 maxlen: 24
115.186.66.0/24 maxlen: 24
115.186.67.0/24 maxlen: 24
115.186.68.0/24 maxlen: 24
115.186.69.0/24 maxlen: 24
115.186.70.0/24 maxlen: 24
115.186.71.0/24 maxlen: 24
115.186.72.0/24 maxlen: 24
115.186.73.0/24 maxlen: 24
115.186.74.0/24 maxlen: 24
115.186.75.0/24 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.89.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.92.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.94.0/24 maxlen: 24
115.186.95.0/24 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.124.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.127.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.11.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.14.0/24 maxlen: 24
117.102.15.0/24 maxlen: 24
117.102.20.0/24 maxlen: 24
117.102.21.0/24 maxlen: 24
117.102.22.0/24 maxlen: 24
117.102.23.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.224.0/24 maxlen: 24
203.81.225.0/24 maxlen: 24
203.81.226.0/24 maxlen: 24
203.81.227.0/24 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.231.0/24 maxlen: 24
203.81.232.0/24 maxlen: 24
203.81.233.0/24 maxlen: 24
203.81.234.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
203.81.236.0/24 maxlen: 24
203.81.237.0/24 maxlen: 24
203.81.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Jun 2025 07:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14459 (0x387b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jun 2 09:59:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=683d761b-b4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ef:77:04:b2:ca:39:6b:7d:76:cf:2a:33:12:
85:fd:4e:60:78:2a:fb:7d:c1:94:c1:9c:6a:a4:9c:
55:b9:95:4e:d4:75:16:ad:c3:d5:5c:28:62:6c:b7:
25:8a:97:9b:48:3f:90:e8:bd:3a:5c:58:e4:39:ec:
d2:68:c2:dc:49:f8:10:fd:83:98:23:bf:10:51:9d:
8a:ae:9a:63:d3:d2:5b:e1:96:e9:9d:07:b6:dd:f5:
57:9f:76:0a:4a:dd:ea:d3:ea:16:c0:3c:8b:8d:78:
f6:8e:f7:e5:7f:37:f6:a7:ee:2c:a9:d5:ea:32:af:
e7:33:99:25:30:93:20:bf:9e:80:72:8b:37:ae:57:
5d:f1:bf:fd:54:8e:a8:e7:9f:2d:7f:c1:ec:f2:b8:
03:7d:c3:e9:a2:0c:c4:e6:c3:a3:f5:5d:2a:22:eb:
5b:e3:38:9d:86:5e:7e:b3:ee:99:2c:cd:f2:8a:05:
5d:c4:20:ae:01:a7:55:e4:31:57:4e:57:b4:47:a1:
45:c4:af:29:ce:0b:b3:b0:ff:ad:93:74:a3:e4:f9:
f7:65:cd:f8:4e:a4:fd:7d:12:85:09:79:28:d7:8b:
43:62:7b:3d:c7:aa:e3:e5:4c:fa:ba:7f:d8:04:69:
86:1f:c5:f1:b6:3b:f4:3a:19:99:e9:69:69:f0:d6:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B3:03:14:E8:51:61:22:80:71:41:8A:4D:F8:D1:A8:47:9A:68:21
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/55CFC60E3F9811F098104369C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.184.0/21
111.88.232.0/24
111.88.234.0-111.88.237.255
115.186.1.0/24
115.186.10.0-115.186.12.255
115.186.16.0/24
115.186.19.0/24
115.186.22.0/24
115.186.24.0/24
115.186.26.0-115.186.29.255
115.186.48.0/21
115.186.64.0-115.186.75.255
115.186.88.0/23
115.186.91.0-115.186.95.255
115.186.97.0/24
115.186.99.0-115.186.100.255
115.186.105.0/24
115.186.114.0/24
115.186.116.0/24
115.186.122.0-115.186.125.255
115.186.127.0/24
117.102.10.0/23
117.102.13.0-117.102.15.255
117.102.20.0/22
117.102.27.0/24
117.102.29.0-117.102.31.255
203.81.224.0-203.81.229.255
203.81.231.0-203.81.238.255
Signature Algorithm: sha256WithRSAEncryption
34:6c:88:f9:2f:16:79:81:05:e9:43:f3:c7:3c:e1:12:02:20:
8d:5e:35:5e:93:e1:8c:d8:a2:62:89:61:9c:37:3a:28:f9:1f:
b7:98:45:b6:a4:c2:93:0b:21:16:88:e5:7c:65:1d:d3:a3:86:
53:8c:ad:80:2a:29:ca:1e:75:28:21:4e:91:43:32:ec:29:b8:
98:ba:1a:fd:93:e8:ac:95:fa:bf:17:df:e9:1e:9f:3a:f3:d4:
68:f6:f3:cb:56:0c:af:eb:78:a2:fe:6d:d3:8e:4f:23:3d:e6:
c8:0e:24:b2:92:8a:66:51:33:dc:f0:2f:81:5d:14:c4:9e:7e:
12:7c:92:6e:4c:6a:cd:eb:4c:30:c7:13:5e:cf:9f:2e:02:7d:
f6:18:c1:fb:6e:c7:9e:1a:f0:50:48:29:79:24:3c:cc:67:94:
3f:b1:0a:f7:8d:e7:d5:34:c7:e2:19:c9:b3:75:66:e6:58:97:
99:c3:32:80:80:ce:4e:2a:aa:9f:e8:88:7a:d6:17:68:3b:ae:
bd:87:c1:6a:e9:62:c6:70:7a:11:28:10:95:1f:07:89:98:3d:
95:d4:19:a0:23:8e:c7:db:15:d6:e4:22:ff:1d:3c:4a:19:f0:
8c:76:53:5b:d0:01:f2:5e:42:3d:82:06:e7:6a:98:ad:bd:7c:
f0:bd:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:14:10 2025 by rpki-client