Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/21F334F091F111F0A634F345C4F9AE02.roa
File: 21F334F091F111F0A634F345C4F9AE02.roa (raw, json)
Hash identifier: CDMmx0KtNY3s3YAsi7N1SgJ6PryOlKZo3OmwgFx2KMU=
Subject key identifier: 8B:B7:EF:9E:EF:2E:04:4C:B3:6E:01:8C:60:1F:DF:D6:C8:43:58:34
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 399C
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/21F334F091F111F0A634F345C4F9AE02.roa
Signing time: Mon 15 Sep 2025 05:16:11 +0000
ROA not before: Mon 15 Sep 2025 05:16:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132165
IP address blocks: 103.246.108.0/22 maxlen: 22
103.246.108.0/24 maxlen: 24
103.246.109.0/24 maxlen: 24
103.246.110.0/24 maxlen: 24
103.246.111.0/24 maxlen: 24
111.88.0.0/22 maxlen: 24
111.88.4.0/24 maxlen: 30
111.88.5.0/24 maxlen: 24
111.88.6.0/23 maxlen: 24
111.88.8.0/21 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/20 maxlen: 24
111.88.48.0/20 maxlen: 24
111.88.64.0/21 maxlen: 21
111.88.64.0/24 maxlen: 24
111.88.65.0/24 maxlen: 24
111.88.66.0/24 maxlen: 24
111.88.67.0/24 maxlen: 24
111.88.68.0/24 maxlen: 24
111.88.69.0/24 maxlen: 24
111.88.70.0/24 maxlen: 24
111.88.71.0/24 maxlen: 24
111.88.72.0/22 maxlen: 22
111.88.72.0/24 maxlen: 24
111.88.73.0/24 maxlen: 24
111.88.74.0/24 maxlen: 24
111.88.75.0/24 maxlen: 24
111.88.78.0/24 maxlen: 24
111.88.80.0/20 maxlen: 20
111.88.80.0/22 maxlen: 22
111.88.80.0/24 maxlen: 24
111.88.81.0/24 maxlen: 24
111.88.82.0/24 maxlen: 24
111.88.83.0/24 maxlen: 24
111.88.84.0/24 maxlen: 30
111.88.85.0/24 maxlen: 24
111.88.86.0/23 maxlen: 24
111.88.88.0/21 maxlen: 21
111.88.88.0/24 maxlen: 24
111.88.89.0/24 maxlen: 24
111.88.90.0/24 maxlen: 24
111.88.91.0/24 maxlen: 24
111.88.92.0/24 maxlen: 24
111.88.93.0/24 maxlen: 24
111.88.94.0/24 maxlen: 24
111.88.95.0/24 maxlen: 24
111.88.136.0/23 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/22 maxlen: 22
115.186.80.0/24 maxlen: 24
115.186.81.0/24 maxlen: 24
115.186.82.0/24 maxlen: 24
115.186.83.0/24 maxlen: 24
115.186.84.0/22 maxlen: 22
115.186.84.0/24 maxlen: 24
115.186.85.0/24 maxlen: 24
115.186.86.0/24 maxlen: 24
115.186.87.0/24 maxlen: 24
117.102.48.0/20 maxlen: 20
117.102.48.0/24 maxlen: 24
117.102.49.0/24 maxlen: 24
117.102.50.0/24 maxlen: 24
117.102.51.0/24 maxlen: 24
117.102.52.0/24 maxlen: 24
117.102.53.0/24 maxlen: 24
117.102.54.0/24 maxlen: 24
117.102.55.0/24 maxlen: 24
117.102.56.0/24 maxlen: 24
117.102.57.0/24 maxlen: 24
117.102.58.0/24 maxlen: 24
117.102.59.0/24 maxlen: 24
117.102.60.0/24 maxlen: 24
117.102.61.0/24 maxlen: 24
117.102.62.0/24 maxlen: 24
117.102.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14748 (0x399c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Sep 15 05:16:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68c7a11b-712b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:ad:3c:23:c6:a4:cc:09:0e:2d:ec:1b:4c:
27:49:1f:79:ad:03:d8:76:49:7f:f4:ab:07:72:96:
cb:58:10:39:0d:47:dc:51:b9:97:80:ed:e8:20:ca:
83:f3:3d:94:6c:31:e2:e1:b6:9a:dc:44:3a:0f:35:
be:20:30:e7:7a:9d:27:21:8d:06:11:f6:1c:f9:d1:
53:10:5d:57:5c:cc:04:b7:8d:32:b4:1f:88:83:88:
6b:cb:49:1b:70:5b:8f:ef:b9:50:78:7d:0f:54:9a:
51:f5:17:a0:25:94:f3:ea:b1:26:07:32:7d:e6:80:
df:87:4b:48:20:9f:c5:61:ab:f4:9a:05:57:6f:c5:
35:70:0e:b9:34:b2:1d:2f:f7:97:6e:7a:51:e8:b4:
97:30:ae:d8:89:be:55:7a:7e:b7:40:90:72:39:d0:
53:04:1b:a7:24:9e:e4:a2:56:03:e3:10:ae:9b:ee:
ad:d6:d3:fb:e5:39:7c:98:27:e1:e4:0b:d8:3f:c2:
89:af:77:11:b5:2b:a8:07:ef:20:90:ed:22:1a:e6:
37:16:86:7e:69:b7:da:40:45:a4:da:43:00:fe:34:
de:86:3a:85:02:3e:aa:c9:ba:ca:58:97:36:9e:8e:
c1:a7:e0:35:46:55:6e:d9:19:b3:60:d7:ab:d6:82:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B7:EF:9E:EF:2E:04:4C:B3:6E:01:8C:60:1F:DF:D6:C8:43:58:34
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/21F334F091F111F0A634F345C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.108.0/22
111.88.0.0-111.88.75.255
111.88.78.0/24
111.88.80.0/20
111.88.136.0/23
115.186.2.0-115.186.9.255
115.186.76.0-115.186.87.255
117.102.48.0/20
Signature Algorithm: sha256WithRSAEncryption
ba:6d:ea:e8:af:b1:85:4d:b8:78:1f:aa:22:d9:e9:4a:8c:fd:
39:90:48:43:77:41:7e:68:17:4b:be:ac:1e:30:27:cd:2a:56:
4d:50:a7:54:5f:d8:22:eb:68:b3:ed:96:ed:b4:62:89:e7:90:
50:59:c0:0b:3a:28:09:de:c5:6e:72:1d:06:bd:9e:92:29:5a:
90:b6:9a:4d:51:33:41:cc:9f:42:10:b7:c0:20:d3:ad:27:2e:
6e:9d:7f:61:3e:e0:f5:e1:12:75:45:f5:65:6b:d1:72:df:8c:
7e:9f:d8:c4:1b:d5:71:49:55:36:83:d5:ea:dc:52:d0:52:c6:
aa:81:c0:7f:4d:d9:4c:e5:2c:fc:d9:fb:1e:25:52:2c:d3:0a:
ce:06:2c:3e:67:fa:07:3c:2c:b0:2b:90:3f:ee:39:f4:be:fc:
88:5b:7d:84:64:33:2a:ba:d8:bd:6e:15:e8:c1:d0:14:5c:54:
11:a4:50:89:5a:23:b6:d8:c9:60:2b:18:cc:ad:38:fd:c2:4c:
eb:e7:88:ca:d3:7e:26:dd:aa:db:17:ef:25:41:7c:51:ac:1b:
4b:a9:8b:37:21:65:26:fc:5b:7e:ba:a4:20:e1:a3:fa:e6:ad:
ab:80:04:7f:87:cf:0a:14:c2:29:c3:c4:a5:9c:24:c8:b5:56:
86:e3:db:9a
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgICOZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjUwOTE1MDUxNjExWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGM3YTExYi03MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2BitPCPGpMwJDi3sG0wnSR95rQPYdkl/9KsHcpbLWBA5DUfcUbmXgO3oIMqD
8z2UbDHi4baa3EQ6DzW+IDDnep0nIY0GEfYc+dFTEF1XXMwEt40ytB+Ig4hry0kb
cFuP77lQeH0PVJpR9RegJZTz6rEmBzJ95oDfh0tIIJ/FYav0mgVXb8U1cA65NLId
L/eXbnpR6LSXMK7Yib5Ven63QJByOdBTBBunJJ7kolYD4xCum+6t1tP75Tl8mCfh
5AvYP8KJr3cRtSuoB+8gkO0iGuY3FoZ+abfaQEWk2kMA/jTehjqFAj6qybrKWJc2
no7Bp+A1RlVu2RmzYNer1oJDmQIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFIu3757v
LgRMs24BjGAf39bIQ1g0MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvMjFGMzM0RjA5
MUYxMTFGMEE2MzRGMzQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYAYIKwYBBQUHAQcBAf8E
UTBPME0EAgABMEcDBAJn9mwwCwMDA29YAwQCb1hIAwQAb1hOAwQEb1hQAwQBb1iI
MAwDBAFzugIDBAFzuggwDAMEAnO6TAMEA3O6UAMEBHVmMDANBgkqhkiG9w0BAQsF
AAOCAQEAum3q6K+xhU24eB+qItnpSoz9OZBIQ3dBfmgXS76sHjAnzSpWTVCnVF/Y
Iutos+2W7bRiieeQUFnACzooCd7FbnIdBr2ekilakLaaTVEzQcyfQhC3wCDTrScu
bp1/YT7g9eESdUX1ZWvRct+Mfp/YxBvVcUlVNoPV6txS0FLGqoHAf03ZTOUs/Nn7
HiVSLNMKzgYsPmf6BzwssCuQP+459L78iFt9hGQzKrrYvW4V6MHQFFxUEaRQiVoj
ttjJYCsYzK04/cJM6+eIytN+Jt2q2xfvJUF8UawbS6mLNyFlJvxbfrqkIOGj+uat
q4AEf4fPChTCKcPEpZwkyLVWhuPbmg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:23 2025 by rpki-client