Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/922088EA301211F0AACFF912C4F9AE02.roa
File: 922088EA301211F0AACFF912C4F9AE02.roa (raw, json)
Hash identifier: 6UvgjqNiRVyQTvYsrIeJ1cmL4n0HXzWOjUcsI7ZQBJM=
Subject key identifier: 6F:68:F5:AA:43:84:5D:96:5C:55:B3:61:72:0B:D7:37:16:E9:99:6B
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 380D
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/922088EA301211F0AACFF912C4F9AE02.roa
Signing time: Tue 13 May 2025 15:54:37 +0000
ROA not before: Tue 13 May 2025 15:54:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132165
IP address blocks: 103.246.108.0/22 maxlen: 22
103.246.108.0/24 maxlen: 24
103.246.109.0/24 maxlen: 24
103.246.110.0/24 maxlen: 24
103.246.111.0/24 maxlen: 24
111.88.0.0/20 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/20 maxlen: 24
111.88.48.0/20 maxlen: 24
111.88.64.0/21 maxlen: 21
111.88.64.0/24 maxlen: 24
111.88.65.0/24 maxlen: 24
111.88.66.0/24 maxlen: 24
111.88.67.0/24 maxlen: 24
111.88.68.0/24 maxlen: 24
111.88.69.0/24 maxlen: 24
111.88.70.0/24 maxlen: 24
111.88.71.0/24 maxlen: 24
111.88.72.0/22 maxlen: 22
111.88.72.0/24 maxlen: 24
111.88.73.0/24 maxlen: 24
111.88.74.0/24 maxlen: 24
111.88.75.0/24 maxlen: 24
111.88.78.0/24 maxlen: 24
111.88.80.0/20 maxlen: 20
111.88.80.0/22 maxlen: 22
111.88.80.0/24 maxlen: 24
111.88.81.0/24 maxlen: 24
111.88.82.0/24 maxlen: 24
111.88.83.0/24 maxlen: 24
111.88.84.0/22 maxlen: 22
111.88.84.0/24 maxlen: 24
111.88.85.0/24 maxlen: 24
111.88.86.0/24 maxlen: 24
111.88.87.0/24 maxlen: 24
111.88.88.0/21 maxlen: 21
111.88.88.0/24 maxlen: 24
111.88.89.0/24 maxlen: 24
111.88.90.0/24 maxlen: 24
111.88.91.0/24 maxlen: 24
111.88.92.0/24 maxlen: 24
111.88.93.0/24 maxlen: 24
111.88.94.0/24 maxlen: 24
111.88.95.0/24 maxlen: 24
111.88.104.0/21 maxlen: 24
111.88.136.0/23 maxlen: 24
111.88.172.0/22 maxlen: 22
111.88.172.0/24 maxlen: 24
111.88.173.0/24 maxlen: 24
111.88.174.0/24 maxlen: 24
111.88.175.0/24 maxlen: 24
111.88.176.0/21 maxlen: 21
111.88.176.0/24 maxlen: 24
111.88.177.0/24 maxlen: 24
111.88.178.0/24 maxlen: 24
111.88.179.0/24 maxlen: 24
111.88.180.0/24 maxlen: 24
111.88.181.0/24 maxlen: 24
111.88.182.0/24 maxlen: 24
111.88.183.0/24 maxlen: 24
111.88.192.0/21 maxlen: 24
111.88.208.0/20 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/22 maxlen: 22
115.186.80.0/24 maxlen: 24
115.186.81.0/24 maxlen: 24
115.186.82.0/24 maxlen: 24
115.186.83.0/24 maxlen: 24
115.186.84.0/22 maxlen: 22
115.186.84.0/24 maxlen: 24
115.186.85.0/24 maxlen: 24
115.186.86.0/24 maxlen: 24
115.186.87.0/24 maxlen: 24
117.102.48.0/20 maxlen: 20
117.102.48.0/24 maxlen: 24
117.102.49.0/24 maxlen: 24
117.102.50.0/24 maxlen: 24
117.102.51.0/24 maxlen: 24
117.102.52.0/24 maxlen: 24
117.102.53.0/24 maxlen: 24
117.102.54.0/24 maxlen: 24
117.102.55.0/24 maxlen: 24
117.102.56.0/24 maxlen: 24
117.102.57.0/24 maxlen: 24
117.102.58.0/24 maxlen: 24
117.102.59.0/24 maxlen: 24
117.102.60.0/24 maxlen: 24
117.102.61.0/24 maxlen: 24
117.102.62.0/24 maxlen: 24
117.102.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Jun 2025 14:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14349 (0x380d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 13 15:54:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68236b3d-8fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:7f:55:9e:81:dc:10:01:18:a7:75:3d:c1:
b2:84:36:dc:02:83:56:c3:8d:42:28:05:45:1c:87:
06:e9:e2:de:9a:8d:04:9b:cc:1b:63:73:a6:5d:fb:
5c:f7:33:4c:89:68:26:e2:ab:f9:89:c6:6b:73:68:
30:3d:f6:2f:5f:b1:1f:3c:d3:69:10:da:0b:4c:68:
97:70:95:82:a0:c4:f6:d3:28:ed:a7:cb:e8:1f:a1:
cf:cd:08:b8:e8:8c:2b:33:78:03:a0:32:3d:99:20:
b7:76:bb:73:91:d9:30:ec:2a:c8:46:0c:0b:34:37:
12:4b:e2:71:95:fb:e8:d0:ee:30:2f:29:03:72:c9:
d8:26:e4:be:fb:ef:4e:cf:28:65:64:a1:35:f7:99:
6c:e8:56:31:e5:6e:c1:0f:d8:9f:8b:b8:ed:18:af:
4a:41:9f:b8:05:a0:fd:fd:0a:0c:f2:f0:7c:19:69:
de:a7:1e:51:52:dc:1d:f2:6d:cc:87:d1:44:53:96:
0f:71:34:40:bb:f7:22:77:8e:ff:da:d1:ae:5a:13:
c6:14:28:a1:2a:bd:e6:e9:f8:4a:6f:7d:d9:c4:99:
6e:e2:c4:52:53:ab:4c:e5:ad:e0:d1:0d:37:7d:fd:
25:70:cb:d9:be:13:9e:9b:ff:8e:16:62:44:fd:1a:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:68:F5:AA:43:84:5D:96:5C:55:B3:61:72:0B:D7:37:16:E9:99:6B
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/922088EA301211F0AACFF912C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.108.0/22
111.88.0.0-111.88.75.255
111.88.78.0/24
111.88.80.0/20
111.88.104.0/21
111.88.136.0/23
111.88.172.0-111.88.183.255
111.88.192.0/21
111.88.208.0/20
115.186.2.0-115.186.9.255
115.186.76.0-115.186.87.255
117.102.48.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:0e:b7:3f:cd:fe:0d:21:1f:69:1d:9d:3a:6e:09:b5:62:29:
48:fd:c0:d8:75:65:63:e7:62:9c:0a:5c:1d:94:35:b5:83:84:
ea:f4:7a:a6:2e:be:26:e5:02:5a:81:46:4c:e1:0a:ed:0a:ad:
6e:3f:fb:de:88:71:5d:99:6c:b8:55:d5:5d:65:18:6a:d5:c9:
fd:98:1e:98:43:3a:86:77:d4:99:8f:ed:a9:76:24:a3:3f:70:
0e:61:cf:d1:e9:ca:49:5d:d2:2d:72:10:5f:9a:2f:80:6e:b4:
d0:36:7e:12:e2:34:05:d2:0a:60:f5:80:26:45:e0:cb:58:e7:
97:ed:42:2d:52:61:30:f8:9a:f3:67:c7:a6:90:21:33:61:05:
4f:17:f3:a5:96:85:fe:8a:92:d7:82:33:51:af:ed:f6:16:a4:
98:22:7a:c1:3e:12:95:33:dc:3e:02:97:67:01:09:0a:b7:7e:
60:15:de:a1:01:0e:80:38:bd:91:93:63:76:16:8b:8d:8a:fb:
21:4e:ca:28:7d:31:e3:1b:25:67:eb:97:10:c6:3f:3e:d5:dc:
c8:8b:44:de:a1:8b:c9:2d:5f:b5:91:ff:e1:b4:67:2d:58:81:
a9:fa:18:d9:5b:49:b8:f8:f8:e8:5c:1e:e6:3b:b4:75:4e:4f:
22:c0:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:13:34 2025 by rpki-client