Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CAAE3F82AD1A11F1946C2E6B4111F970.roa
File: CAAE3F82AD1A11F1946C2E6B4111F970.roa (raw, json)
Hash identifier: NYLrjYfUvGkQeyBSrHsnKeWzwsJyZcUseAGZu/2HkFY=
Subject key identifier: EB:FB:BF:CF:3D:99:95:C5:FD:36:79:0E:3B:BB:80:7A:D9:EC:DC:2A
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3C18
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CAAE3F82AD1A11F1946C2E6B4111F970.roa
Signing time: Thu 10 Sep 2026 13:23:56 +0000
ROA not before: Thu 10 Sep 2026 13:23:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 111.88.8.0/21 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/19 maxlen: 24
111.88.64.0/21 maxlen: 24
111.88.72.0/23 maxlen: 24
111.88.75.0/24 maxlen: 24
111.88.80.0/20 maxlen: 24
111.88.168.0/24 maxlen: 24
111.88.169.0/24 maxlen: 24
111.88.170.0/24 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.36.0/24 maxlen: 24
115.186.37.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/23 maxlen: 23
115.186.46.0/24 maxlen: 24
115.186.52.32/27 maxlen: 27
115.186.52.64/26 maxlen: 26
115.186.53.0/24 maxlen: 24
115.186.54.0/23 maxlen: 24
115.186.62.0/23 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.104.0/24 maxlen: 24
117.102.48.0/22 maxlen: 24
117.102.52.0/22 maxlen: 24
117.102.56.0/22 maxlen: 24
117.102.60.0/22 maxlen: 24
203.81.224.0/22 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15384 (0x3c18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Sep 10 13:23:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa2af6c-7308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:3d:62:6b:a9:42:a8:87:e8:10:ff:a2:71:
8d:c0:17:ff:fd:28:90:81:6e:0f:29:47:cc:8c:d6:
32:1e:5d:c4:7d:96:46:8d:fa:64:28:df:cc:36:94:
05:83:c2:79:b7:75:83:10:ee:01:7c:2b:f7:a3:5d:
94:60:0d:40:b8:1f:de:68:9a:f8:5e:ca:05:08:1a:
71:75:a9:bb:e7:7c:2b:af:6d:8c:0f:dc:bd:1b:02:
6d:27:11:41:5e:30:f8:98:9b:20:33:a1:61:69:3d:
6c:e9:5c:b6:ad:89:10:e6:3b:e3:4f:f6:9b:b4:93:
7b:68:27:8c:20:0f:a1:c1:c9:dc:fe:da:7c:c8:f4:
9f:93:28:66:49:e6:3f:8c:44:66:61:f3:5c:d6:87:
7a:2e:a2:09:de:4b:f7:73:25:65:08:b6:a2:55:9d:
dd:3e:1a:11:df:84:fb:f1:6f:6c:1e:59:c6:25:4d:
ca:11:8b:9a:b4:41:3d:4d:c1:7b:33:ef:6e:fd:2f:
65:8f:f0:50:c4:c8:b3:9c:df:d0:63:c6:33:ab:68:
2a:e7:ed:e3:36:33:3d:00:94:80:f8:4f:5a:2d:02:
f2:bd:6b:40:e2:a3:89:63:19:43:8e:1d:17:0a:2b:
f0:1c:5e:2f:56:d8:df:65:c9:a4:77:c3:c1:9a:c9:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FB:BF:CF:3D:99:95:C5:FD:36:79:0E:3B:BB:80:7A:D9:EC:DC:2A
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CAAE3F82AD1A11F1946C2E6B4111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
111.88.8.0-111.88.73.255
111.88.75.0/24
111.88.80.0/20
111.88.168.0-111.88.170.255
115.186.2.0-115.186.9.255
115.186.36.0/23
115.186.42.0-115.186.46.255
115.186.52.32-115.186.52.127
115.186.53.0-115.186.55.255
115.186.62.0/23
115.186.80.0/21
115.186.104.0/24
117.102.48.0/20
203.81.224.0-203.81.229.255
203.81.235.0/24
Signature Algorithm: sha256WithRSAEncryption
01:05:54:29:11:8b:31:12:3e:79:91:cd:87:aa:9e:76:a2:d7:
10:8a:3f:49:d8:35:4f:39:c3:31:9e:bb:65:1c:0b:ac:4d:7b:
6d:f8:a6:ac:b6:5c:68:2a:12:07:32:99:0c:c1:1f:9c:bc:b8:
72:fc:4a:47:58:72:b7:7f:2b:c3:3b:27:d9:a1:12:d1:41:3c:
2f:3a:c6:41:51:8f:f6:a4:55:e1:6e:4e:62:2c:9a:e1:52:cb:
8b:4c:90:7a:6c:6c:ff:b8:35:97:c8:59:ad:a3:41:c0:6b:89:
97:1d:cf:e1:52:ec:21:ed:8f:99:9b:7a:f5:5d:0b:0f:74:b3:
4e:af:94:c3:83:a7:62:08:e0:b3:f5:a9:90:f0:cd:f6:42:59:
f9:67:19:8a:da:ec:49:72:c1:b4:73:09:78:3a:f4:cc:88:2a:
55:03:dc:38:77:e4:cf:f9:94:64:f9:b3:5b:7b:43:0a:a0:b0:
5c:8b:47:ae:e2:d2:87:e2:93:92:02:03:bf:3f:44:95:34:73:
b3:6c:04:25:48:4f:73:2e:23:96:3b:4f:da:9f:f0:dc:91:65:
b3:c4:b9:50:69:56:fa:23:62:d5:89:7c:82:f8:66:35:60:76:
79:c3:ac:b6:27:90:c0:be:14:b9:61:53:31:04:b1:42:8a:a2:
52:56:fd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:42:48 2026 by rpki-client