Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7271843C4F8211F1B3A64C398F833773.roa
File: 7271843C4F8211F1B3A64C398F833773.roa (raw, json)
Hash identifier: VMdHPEUcPViFjUZYJ5spr8XGpbxJ61XzEubq4rS7ha8=
Subject key identifier: 25:C6:FA:BC:97:1A:5D:FF:63:D8:31:C5:08:67:68:84:FA:C3:88:11
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3BA2
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7271843C4F8211F1B3A64C398F833773.roa
Signing time: Wed 20 May 2026 06:59:01 +0000
ROA not before: Wed 20 May 2026 06:59:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 111.88.8.0/22 maxlen: 24
111.88.12.0/22 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/20 maxlen: 24
111.88.48.0/20 maxlen: 24
111.88.64.0/21 maxlen: 24
111.88.72.0/23 maxlen: 24
111.88.75.0/24 maxlen: 24
111.88.80.0/20 maxlen: 24
111.88.168.0/24 maxlen: 24
111.88.169.0/24 maxlen: 24
111.88.170.0/24 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.36.0/24 maxlen: 24
115.186.37.0/24 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/23 maxlen: 23
115.186.46.0/24 maxlen: 24
115.186.52.0/22 maxlen: 24
115.186.62.0/23 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.104.0/24 maxlen: 24
117.102.48.0/22 maxlen: 24
117.102.52.0/22 maxlen: 24
117.102.56.0/22 maxlen: 24
117.102.60.0/22 maxlen: 24
203.81.224.0/22 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.231.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 14:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15266 (0x3ba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 20 06:59:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a0d5bb5-e7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:6f:66:bd:c2:1f:20:1a:47:a3:0e:8c:3e:
db:f9:fa:ad:ff:0c:5a:b0:68:da:4e:8d:9d:29:7f:
2c:e4:f1:f8:b5:97:c0:82:aa:a9:5b:a7:c3:67:90:
36:8b:00:c3:55:3b:ee:59:1f:5c:1b:21:43:27:6a:
26:52:fd:15:7c:fd:bd:9a:98:09:68:4e:95:95:0a:
de:2f:0b:36:6f:75:41:f9:f4:28:ea:59:bc:1c:44:
03:d3:0e:03:35:17:c8:9c:df:c5:da:b1:7c:b2:6b:
5d:51:fb:28:80:64:87:a6:c9:bf:dc:7a:f4:0b:d0:
3e:d7:1c:6e:25:29:d7:1a:98:35:ab:be:29:34:19:
af:35:d2:ca:1e:27:01:9e:d9:88:5b:15:cc:78:34:
cb:81:92:0e:9e:0f:e0:c8:cf:77:ba:c9:98:77:c9:
62:83:30:c0:df:35:af:8e:eb:44:4a:a9:d9:26:b1:
31:92:76:93:66:dc:85:c6:21:75:09:85:7a:bb:6f:
73:90:b6:d6:72:9e:a3:c5:88:81:f8:6b:e9:73:ba:
de:cc:d4:b3:ca:99:2b:0e:25:ce:26:94:7a:d0:8e:
3c:53:93:35:1d:5e:c3:8b:98:45:f0:07:71:e2:9d:
da:00:64:dc:91:2b:2f:6d:39:11:03:25:ee:c6:51:
c5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C6:FA:BC:97:1A:5D:FF:63:D8:31:C5:08:67:68:84:FA:C3:88:11
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7271843C4F8211F1B3A64C398F833773.roa
sbgp-ipAddrBlock: critical
IPv4:
111.88.8.0-111.88.73.255
111.88.75.0/24
111.88.80.0/20
111.88.168.0-111.88.170.255
115.186.2.0-115.186.9.255
115.186.36.0/23
115.186.40.0/24
115.186.42.0-115.186.46.255
115.186.52.0/22
115.186.62.0/23
115.186.76.0-115.186.87.255
115.186.104.0/24
117.102.48.0/20
203.81.224.0-203.81.229.255
203.81.231.0/24
203.81.235.0/24
Signature Algorithm: sha256WithRSAEncryption
52:64:70:59:45:de:58:21:c4:cb:fb:5c:47:4d:cc:e4:4d:2b:
48:ff:29:4c:91:6a:7a:82:87:84:9a:6c:86:a6:3e:a8:55:fd:
ee:be:7a:af:01:60:20:84:27:b6:ec:f8:f0:64:3b:50:d7:96:
2d:10:7f:77:f9:d7:cb:0d:e3:d7:7d:a0:76:78:b5:12:97:28:
4c:91:b3:79:14:85:ce:51:52:06:f5:64:e7:b3:94:91:3f:6d:
95:a8:e7:ea:51:5c:b5:a8:3b:f8:88:1f:01:fb:fa:34:d7:af:
89:fc:a2:6f:e4:cc:b2:8e:f6:c8:36:bc:4b:38:8d:50:35:82:
2e:3c:13:74:f8:01:a5:57:0c:51:5b:56:1c:4b:ab:45:18:57:
5f:a5:66:a3:26:c5:13:2a:03:9e:61:f8:00:1e:14:02:5a:60:
4e:31:7d:a7:db:97:a7:b7:d5:3f:42:f1:92:d0:05:49:27:22:
c0:86:1b:61:56:60:9c:34:04:be:18:5b:7a:2d:e1:c0:72:7f:
0e:b5:d5:1e:f4:28:01:6e:f5:37:a0:55:71:6c:ed:76:0c:43:
37:b8:f3:27:93:01:77:2c:02:b6:27:ec:67:a4:5f:da:43:01:
6c:9a:57:c0:f5:bc:5d:8c:36:1d:bc:84:5c:9c:62:0e:c3:20:
d6:79:2b:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 23 03:03:30 2026 by rpki-client