Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/87F433B2234C11EBA94AE637C4F9AE02.roa
File: 87F433B2234C11EBA94AE637C4F9AE02.roa (raw, json)
Hash identifier: fW423i9YptB2vQQls6Zf/9LAq4LJaE6Jc7QTZg/DwVU=
Subject key identifier: 45:E7:1E:EB:E5:34:8B:F3:9E:7D:AC:F5:A6:AD:A6:84:4C:B2:A8:5E
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1E70
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/87F433B2234C11EBA94AE637C4F9AE02.roa
Signing time: Wed 30 Sep 2026 16:29:45 +0000
ROA not before: Wed 30 Sep 2026 16:29:45 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 141031
IP address blocks: 111.88.0.0/24 maxlen: 24
111.88.1.0/24 maxlen: 24
113.203.192.0/24 maxlen: 24
113.203.194.0/24 maxlen: 24
113.203.196.0/24 maxlen: 24
113.203.197.0/24 maxlen: 24
113.203.198.0/24 maxlen: 24
113.203.199.0/24 maxlen: 24
118.103.224.0/24 maxlen: 24
118.103.225.0/24 maxlen: 24
2406:d00:ee00::/48 maxlen: 48
2406:d00:ee01::/48 maxlen: 48
2406:d00:ee02::/48 maxlen: 48
2406:d00:ee03::/48 maxlen: 48
2406:d00:ee04::/48 maxlen: 48
2406:d00:ee05::/48 maxlen: 48
2406:d00:ee06::/48 maxlen: 48
2406:d00:ee0a::/48 maxlen: 48
2406:d00:ee0b::/48 maxlen: 48
2406:d00:ee0c::/48 maxlen: 48
2406:d00:ee0d::/48 maxlen: 48
2406:d00:ee0e::/48 maxlen: 48
2406:d00:ee0f::/48 maxlen: 48
2406:d00:ee55::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 16:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7792 (0x1e70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Sep 30 16:29:45 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd38f9-feff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:e5:b2:0d:fc:cc:1b:0e:c3:05:f4:1a:b3:
51:e5:02:75:ae:45:7c:6c:00:d9:18:ba:58:57:06:
7a:ba:86:84:b6:17:d1:9e:f1:6e:d0:4e:a3:6e:12:
8e:51:9d:58:3a:d6:d2:a7:90:1f:b0:d7:7a:24:ec:
7f:db:5f:5e:f5:c0:ee:35:85:8c:5d:44:74:31:36:
1b:b9:3a:5a:b5:d2:2d:14:79:15:3d:5a:2e:c8:1c:
cf:77:41:44:94:73:d5:4b:9c:9d:05:36:46:36:7d:
fd:f6:07:ad:7d:93:0f:e9:8e:3e:c0:36:40:00:d4:
f5:b1:87:55:8a:53:8a:48:08:cc:64:5e:3a:34:6e:
88:7f:68:33:c1:35:bd:b1:f6:6f:83:5e:16:d9:b1:
ea:03:41:d5:aa:e4:3f:f0:56:34:70:a2:8c:ba:36:
12:c4:af:7b:76:00:51:41:fb:f4:4a:15:c8:13:23:
24:a8:fc:f2:4c:d8:7e:8b:d3:b8:e7:1a:db:b4:a7:
bc:f7:21:10:ba:38:2c:66:db:c5:a3:bc:42:e1:f4:
95:6b:3c:6c:7c:ab:48:79:22:30:ec:46:1f:06:51:
a8:cf:88:a7:0d:cd:28:7d:d3:21:0e:c5:d6:25:19:
97:8d:1a:78:78:36:27:7d:4e:0c:5f:b3:cd:d5:47:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E7:1E:EB:E5:34:8B:F3:9E:7D:AC:F5:A6:AD:A6:84:4C:B2:A8:5E
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/87F433B2234C11EBA94AE637C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
111.88.0.0/23
113.203.192.0/24
113.203.194.0/24
113.203.196.0/22
118.103.224.0/23
IPv6:
2406:d00:ee00::-2406:d00:ee06:ffff:ffff:ffff:ffff:ffff
2406:d00:ee0a::-2406:d00:ee0f:ffff:ffff:ffff:ffff:ffff
2406:d00:ee55::/48
Signature Algorithm: sha256WithRSAEncryption
1e:3d:35:dc:a6:55:98:c5:17:e8:0e:c6:d9:09:f1:da:45:32:
5b:91:b6:1d:46:98:4b:c3:09:2d:80:e2:e3:7d:fc:4b:15:3e:
e5:f0:41:ac:1b:13:c9:e9:01:b7:54:10:b5:7a:0b:bc:ac:4c:
5f:c5:e3:5d:84:a2:4f:43:d9:e7:6b:99:69:4a:07:38:37:33:
ce:d0:01:fb:72:46:85:b8:88:0a:78:3f:ed:09:48:b4:30:fb:
cd:10:b1:33:39:fd:c9:47:46:69:94:d3:d3:e3:fc:22:ec:23:
2e:68:0e:b2:67:20:25:4b:a7:82:9f:72:4b:5f:a1:ff:8d:3c:
1d:cc:9e:d8:ae:c3:68:f8:b8:30:eb:48:e8:74:b1:c4:7b:ca:
60:ce:32:6f:1f:be:78:e0:bd:b3:81:ca:10:05:d7:ac:b4:91:
09:5d:86:d1:f7:7c:e6:73:f5:33:44:72:7a:fa:f1:57:8d:b2:
5b:64:09:5b:d0:fe:6b:65:6b:21:6d:7b:c0:69:52:3d:ec:77:
0e:00:37:b8:e7:a3:bb:38:5b:5e:f1:1f:46:7c:47:1c:a0:17:
d2:ec:3c:c6:2d:30:c0:5a:86:6f:11:46:6c:b8:03:13:c5:a6:
ff:da:2e:4b:6a:1b:d5:6e:8d:4b:bd:34:72:ef:1a:f0:d4:7a:
5c:bd:db:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:33:24 2026 by rpki-client