Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/9B36F1103AF011F09A3D5756C4F9AE02.roa
File: 9B36F1103AF011F09A3D5756C4F9AE02.roa (raw, json)
Hash identifier: VicC5vRoh5ix4EQslQ/+CVZ8rYOaSIWRANQgij3cFYE=
Subject key identifier: 33:05:B6:D8:92:F3:FF:0D:80:44:08:FA:F5:12:9C:59:CB:45:0D:89
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3871
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/9B36F1103AF011F09A3D5756C4F9AE02.roa
Signing time: Tue 27 May 2025 11:49:12 +0000
ROA not before: Tue 27 May 2025 11:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.112.0/20 maxlen: 20
111.88.184.0/22 maxlen: 23
111.88.188.0/22 maxlen: 23
111.88.233.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
115.186.10.0/23 maxlen: 23
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.18.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/19 maxlen: 19
115.186.32.0/21 maxlen: 21
115.186.32.0/22 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/23 maxlen: 24
115.186.38.0/24 maxlen: 24
115.186.39.0/24 maxlen: 24
115.186.40.0/21 maxlen: 22
115.186.40.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 23
115.186.56.0/22 maxlen: 24
115.186.60.0/23 maxlen: 24
115.186.63.0/24 maxlen: 24
115.186.64.0/19 maxlen: 23
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.96.0/20 maxlen: 23
115.186.96.0/22 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/23 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/20 maxlen: 23
115.186.112.0/23 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/23 maxlen: 24
115.186.120.0/23 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.12.0/23 maxlen: 23
117.102.12.0/24 maxlen: 24
117.102.14.0/23 maxlen: 23
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 23
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.230.0/24 maxlen: 24
203.81.239.0/24 maxlen: 24
2406:7000::/32 maxlen: 32
2406:7000::/48 maxlen: 48
2406:7000:1::/48 maxlen: 48
2406:7000:2::/48 maxlen: 48
2406:7000:3::/48 maxlen: 48
2406:7000:4::/48 maxlen: 48
2406:7000:5::/48 maxlen: 48
2406:7000:6::/48 maxlen: 48
2406:7000:7::/48 maxlen: 48
2406:7000:8::/48 maxlen: 48
2406:7000:9::/48 maxlen: 48
2406:7000:a::/48 maxlen: 48
2406:7000:b::/48 maxlen: 48
2406:7000:c::/48 maxlen: 48
2406:7000:d::/48 maxlen: 48
2406:7000:e::/48 maxlen: 48
2406:7000:f::/48 maxlen: 48
2406:7000:10::/48 maxlen: 48
2406:7000:11::/48 maxlen: 48
2406:7000:12::/48 maxlen: 48
2406:7000:13::/48 maxlen: 48
2406:7000:14::/48 maxlen: 48
2406:7000:15::/48 maxlen: 48
2406:7000:16::/48 maxlen: 48
2406:7000:17::/48 maxlen: 48
2406:7000:18::/48 maxlen: 48
2406:7000:19::/48 maxlen: 48
2406:7000:1a::/48 maxlen: 48
2406:7000:1b::/48 maxlen: 48
2406:7000:1c::/48 maxlen: 48
2406:7000:1d::/48 maxlen: 48
2406:7000:1e::/48 maxlen: 48
2406:7000:1f::/48 maxlen: 48
2406:7000:20::/48 maxlen: 48
2406:7000:21::/48 maxlen: 48
2406:7000:22::/48 maxlen: 48
2406:7000:23::/48 maxlen: 48
2406:7000:24::/48 maxlen: 48
2406:7000:25::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Jun 2025 14:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14449 (0x3871)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 27 11:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6835a6b8-38ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:4c:b0:95:c7:07:22:25:0a:04:b1:92:cd:
90:7d:5d:5a:2b:f1:e0:47:86:ce:2f:8b:08:f4:8e:
c9:97:c4:5d:a0:fc:24:38:65:06:68:9a:75:c6:f3:
e1:35:5c:16:8c:73:72:cd:7f:de:64:f7:56:ce:91:
65:57:b3:89:da:01:05:be:e1:85:d4:4c:ec:44:da:
88:9c:23:80:e9:f6:75:e4:4e:dd:fe:cd:14:59:76:
a9:67:d4:9d:a8:37:98:d8:03:37:4d:15:e7:f1:76:
f2:bc:57:a3:3c:e3:3d:1d:29:02:11:aa:42:05:1a:
1d:aa:eb:28:de:8f:d2:be:85:57:01:bf:06:a1:0e:
a4:e8:9a:32:df:30:ce:ba:c9:e0:24:1d:d7:e7:5e:
b0:20:15:03:ba:7f:1c:f9:4a:a0:e2:46:db:12:e0:
c1:37:7f:71:ba:e3:70:57:0a:6d:7e:71:3f:86:b0:
0b:b3:f6:63:5f:fb:d0:fa:2f:7e:2e:1f:84:9d:ad:
b8:f4:85:3d:e1:7a:a4:77:99:7f:8b:d9:9d:35:99:
91:80:f6:ad:72:b4:96:84:32:a0:48:00:3f:cd:b5:
22:bf:93:7b:7f:85:7d:ed:f7:10:ef:d2:31:63:61:
97:cc:47:17:68:12:8d:b6:63:0f:d1:4b:45:22:b6:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:B6:D8:92:F3:FF:0D:80:44:08:FA:F5:12:9C:59:CB:45:0D:89
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/9B36F1103AF011F09A3D5756C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.112.0/20
111.88.184.0/21
111.88.233.0/24
111.88.238.0/23
115.186.10.0/23
115.186.14.0/24
115.186.16.0-115.186.18.255
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.127.255
117.102.0.0-117.102.9.255
117.102.12.0-117.102.28.255
117.102.32.0/20
203.81.230.0/24
203.81.239.0/24
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
22:84:22:f5:58:5e:bf:5e:34:61:e0:3d:76:e6:fa:02:49:ea:
2f:b3:e1:a5:27:4e:f8:10:be:83:fe:f1:5e:79:96:dd:ab:2c:
0b:e6:2d:39:25:0a:b0:4e:77:3d:4d:70:09:1a:84:be:ce:c5:
b7:20:1f:12:d0:b7:7e:e6:31:eb:07:a8:cf:1d:28:6f:cc:ba:
05:3c:40:93:7d:98:ed:d1:49:60:79:53:4d:fd:7c:13:23:94:
82:e6:3f:df:96:06:f8:0d:51:ca:75:82:4b:d5:9f:11:96:17:
c7:11:b5:fa:f0:03:80:04:6f:f1:d5:d4:0b:e2:e7:16:81:2c:
ab:8d:39:b1:db:67:9f:90:ff:ca:12:48:de:75:c7:31:c9:12:
63:38:13:3d:0c:2e:da:32:d0:db:c9:f1:ef:41:8d:74:20:08:
cc:12:8b:8b:12:af:d0:56:e1:4f:e6:df:a7:dc:43:0e:13:d0:
5a:a3:e8:60:c2:31:ad:ae:d8:a3:cc:52:9d:0d:84:23:cf:ef:
aa:87:74:74:de:a8:d1:76:e0:d6:58:e4:ea:d4:bc:f1:e3:0a:
63:11:f6:a6:6b:11:93:93:77:d5:21:98:e6:c3:1b:fe:f8:bc:
b9:4f:6e:a6:68:97:bf:7e:f2:f9:d9:b4:d6:64:58:69:f4:99:
2f:09:c6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:02:30 2025 by rpki-client