Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2EA401CE235611F1ABDB4788B0833773.roa
File: 2EA401CE235611F1ABDB4788B0833773.roa (raw, json)
Hash identifier: 2yimAlRgwEPQDoN7BXpTI7W5sUcavqxhD3FAh17K7+o=
Subject key identifier: 90:5F:67:2F:40:F5:C2:70:C8:5A:EF:B1:55:BA:28:42:4A:55:D4:63
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3AE7
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2EA401CE235611F1ABDB4788B0833773.roa
Signing time: Thu 19 Mar 2026 05:59:10 +0000
ROA not before: Thu 19 Mar 2026 05:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 111.88.32.0/20 maxlen: 24
111.88.48.0/20 maxlen: 24
111.88.64.0/21 maxlen: 24
111.88.72.0/22 maxlen: 24
111.88.78.0/24 maxlen: 24
111.88.80.0/20 maxlen: 24
111.88.168.0/24 maxlen: 24
111.88.169.0/24 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.44.0/23 maxlen: 23
115.186.46.0/24 maxlen: 24
115.186.52.0/22 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.104.0/24 maxlen: 24
117.102.56.0/22 maxlen: 24
203.81.224.0/22 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.231.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15079 (0x3ae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Mar 19 05:59:10 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69bb90ae-866c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ab:c5:ea:8e:80:9c:bc:6b:92:9f:59:8a:17:
0e:9d:10:44:40:a0:9a:b1:0d:a3:ae:59:f7:21:d8:
8d:90:10:2b:ac:dd:35:9e:cc:c2:de:8d:ce:a9:df:
e4:af:1d:00:8c:23:a7:63:d3:1f:bd:eb:69:ab:c6:
3a:f7:50:40:4b:82:08:fe:3e:f5:71:0d:aa:f5:ec:
37:9d:de:22:59:53:77:59:e5:4a:16:45:59:97:c8:
21:db:d2:41:ed:36:64:f3:3a:7e:2a:c9:72:63:37:
6e:59:47:8a:6e:8c:6c:bb:78:f4:8d:98:22:8b:82:
f6:35:95:3e:ab:08:8c:84:69:02:fb:8c:b7:b4:13:
a5:1c:b6:44:13:71:e0:f5:7c:4c:fd:e8:c8:6e:b7:
48:f5:67:2c:d4:d6:96:13:97:df:b5:65:6e:98:5a:
60:88:44:8b:74:d6:c4:f4:59:1a:18:cb:a8:a5:29:
95:3c:0f:48:1d:42:00:07:9c:cc:cf:cc:a5:c8:1a:
e3:2e:8d:6b:63:2d:79:4c:d4:af:15:70:3b:f8:61:
2b:fb:36:c5:5f:51:72:32:8f:1f:be:c7:e1:73:91:
e3:fa:e5:1e:dc:5a:5e:db:e4:f1:2c:a4:b2:c9:f3:
08:ab:02:88:ad:71:24:ab:0e:b3:d5:e9:8e:e0:d8:
c2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5F:67:2F:40:F5:C2:70:C8:5A:EF:B1:55:BA:28:42:4A:55:D4:63
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2EA401CE235611F1ABDB4788B0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
111.88.32.0-111.88.75.255
111.88.78.0/24
111.88.80.0/20
111.88.168.0/23
115.186.2.0-115.186.9.255
115.186.44.0-115.186.46.255
115.186.52.0/22
115.186.76.0-115.186.87.255
115.186.104.0/24
117.102.56.0/22
203.81.224.0-203.81.229.255
203.81.231.0/24
203.81.235.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:37:c7:9c:b9:90:f2:22:8f:ee:e3:ff:7e:f7:29:fd:1b:36:
67:4b:6c:6c:31:e7:9d:df:25:29:42:e6:c9:39:9e:55:6a:d0:
bd:cb:72:e5:48:4c:ce:53:f0:b1:76:05:5a:07:38:a4:9d:4c:
3f:03:4b:b8:4f:3d:08:fd:46:28:ff:44:3d:fb:7d:2c:a1:6f:
09:92:05:02:ed:cd:bc:35:6e:ca:f8:2a:b6:54:08:11:49:da:
e4:d9:8e:2c:1c:a8:37:a9:11:1b:5b:5b:8e:21:3b:d4:cc:75:
4a:88:88:48:bc:8f:b4:bc:61:3d:ff:f8:c3:8a:7a:0f:2d:1b:
63:d2:71:ae:df:8a:54:e1:4e:fd:8a:f8:13:3d:b6:2b:64:c4:
b7:9f:bb:8f:be:ba:35:4e:36:0f:18:fe:dd:36:8b:89:99:a8:
27:45:25:14:79:4c:44:d2:d4:30:ed:5a:5f:2a:c2:16:99:6c:
ae:a1:95:72:64:46:b6:0b:3c:cc:32:c4:11:93:c9:20:33:ef:
b2:09:dc:7c:b9:35:47:c0:9c:5a:66:12:d6:a3:ff:17:6f:a3:
f1:00:4f:65:03:0b:16:12:67:bc:82:3f:73:c3:1c:1c:b1:1d:
1c:a4:a5:0f:24:7b:49:75:a4:33:91:a3:5f:6e:21:07:48:0d:
a9:37:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:58 2026 by rpki-client