Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/A6EC746ACE6C11F19E1BBADF2F66CEF9.roa
File: A6EC746ACE6C11F19E1BBADF2F66CEF9.roa (raw, json)
Hash identifier: 4OiYt8TpTxGWusbxSbuDn/FcJ/TMZRfQsFS2eJkGfaA=
Subject key identifier: 01:49:ED:26:AF:31:E4:74:1F:D8:8E:93:DE:57:F0:7E:F4:27:9A:E0
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3C3B
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/A6EC746ACE6C11F19E1BBADF2F66CEF9.roa
Signing time: Thu 22 Oct 2026 23:06:25 +0000
ROA not before: Thu 22 Oct 2026 23:06:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 111.88.8.0/21 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/19 maxlen: 24
111.88.64.0/21 maxlen: 24
111.88.72.0/23 maxlen: 24
111.88.75.0/24 maxlen: 24
111.88.80.0/22 maxlen: 24
111.88.88.0/21 maxlen: 24
111.88.168.0/24 maxlen: 24
111.88.169.0/24 maxlen: 24
111.88.170.0/24 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.36.0/24 maxlen: 24
115.186.37.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/23 maxlen: 23
115.186.46.0/24 maxlen: 24
115.186.53.0/24 maxlen: 24
115.186.54.0/23 maxlen: 24
115.186.62.0/23 maxlen: 24
115.186.84.0/22 maxlen: 24
115.186.104.0/24 maxlen: 24
117.102.48.0/22 maxlen: 24
117.102.52.0/22 maxlen: 24
117.102.56.0/22 maxlen: 24
117.102.60.0/22 maxlen: 24
203.81.224.0/22 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15419 (0x3c3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Oct 22 23:06:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ada96f1-0995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:fc:64:36:e9:f8:e2:16:8c:e4:90:61:06:
fe:ef:fe:74:cb:e0:4e:82:2b:b8:90:75:d8:a6:e8:
54:a5:49:4f:0c:06:2d:c7:79:df:cc:a6:ac:9d:c4:
66:d4:4b:4c:e9:4b:81:d7:53:49:f6:83:32:d0:1d:
42:88:20:52:41:f8:0c:f3:36:91:6e:21:60:00:46:
5c:a0:7b:cb:59:28:c3:bf:36:74:be:35:eb:7b:26:
8b:65:cd:ab:57:6f:95:2a:74:42:9a:6c:5f:16:6e:
69:e0:eb:2b:21:ab:3e:2f:ae:69:0e:03:9a:82:63:
6b:54:ce:fc:1e:04:1a:de:4c:ff:ec:6c:56:7a:e7:
12:eb:8c:3e:61:5f:f6:98:51:ed:00:5f:d1:9a:9f:
9a:c5:28:6a:12:45:75:d2:bc:f2:ff:f5:cb:f0:9a:
2a:a1:b2:1f:ca:b5:38:07:6b:7b:24:c6:00:b9:bb:
f7:c5:36:ff:43:67:50:27:61:89:de:36:4a:6b:14:
b3:80:0f:c7:57:02:72:01:39:68:5a:c5:f0:39:d3:
9f:40:be:39:c3:55:33:46:b1:b3:82:32:d5:b3:66:
e9:41:17:d4:a0:26:55:cc:1b:47:0a:d1:77:e1:fd:
0c:f0:97:25:de:94:5e:e3:76:db:d6:c1:35:61:1f:
cf:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:49:ED:26:AF:31:E4:74:1F:D8:8E:93:DE:57:F0:7E:F4:27:9A:E0
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/A6EC746ACE6C11F19E1BBADF2F66CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
111.88.8.0-111.88.73.255
111.88.75.0/24
111.88.80.0/22
111.88.88.0/21
111.88.168.0-111.88.170.255
115.186.2.0-115.186.9.255
115.186.36.0/23
115.186.42.0-115.186.46.255
115.186.53.0-115.186.55.255
115.186.62.0/23
115.186.84.0/22
115.186.104.0/24
117.102.48.0/20
203.81.224.0-203.81.229.255
203.81.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:24:71:a3:d2:d8:28:47:b4:32:fc:66:1d:97:22:fb:e3:3d:
e3:cc:46:49:55:9a:33:26:d7:a6:37:07:da:72:11:8c:dc:f9:
db:95:bd:1a:2e:4e:c3:0e:bb:f4:16:52:fd:af:99:f1:19:21:
b8:fa:ea:c0:0a:6d:37:be:fd:8a:8e:33:db:75:59:c0:81:b2:
6b:0d:dc:f8:61:1b:61:3a:5d:b1:9e:48:82:1a:a0:b5:41:3f:
fb:56:c1:fc:f4:60:f2:96:dc:53:1d:73:8f:19:b9:29:c1:b6:
ba:cd:19:5b:16:35:5e:38:99:fa:2e:1d:fa:19:66:f2:a8:90:
9f:d2:ae:76:ec:36:55:50:a1:e1:5d:39:da:8b:10:ae:a0:82:
58:f8:e5:5f:ad:b8:27:1d:71:1d:5e:d8:b5:02:f4:88:2f:d8:
9d:0e:02:6f:1a:d3:88:e3:42:be:d8:77:fb:04:a0:79:20:97:
09:84:f0:95:83:8f:76:58:72:e0:f0:c0:fe:4e:20:82:1f:c6:
06:40:6d:17:6f:b9:5a:eb:9f:91:77:04:51:4d:e8:56:1c:b7:
c7:5e:02:c7:53:ad:de:f2:4a:94:9f:5d:5c:24:ad:11:ba:64:
6f:83:b3:95:61:b7:61:6f:77:d4:f3:54:9a:de:99:f9:13:c9:
a8:51:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:57 2026 by rpki-client