Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BB325C9676F711F08DF03837C4F9AE02.roa
File: BB325C9676F711F08DF03837C4F9AE02.roa (raw, json)
Hash identifier: hZnu1npuJq+XWisFxutzHm3N3d1yBBY4yhjjy4nOi2g=
Subject key identifier: B0:9A:C1:A4:33:54:BC:87:6C:7A:B6:45:6A:3C:FA:6F:EC:75:3A:30
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3940
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BB325C9676F711F08DF03837C4F9AE02.roa
Signing time: Mon 11 Aug 2025 21:11:22 +0000
ROA not before: Mon 11 Aug 2025 21:11:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150382
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.184.0/24 maxlen: 24
111.88.185.0/24 maxlen: 24
111.88.186.0/24 maxlen: 24
111.88.187.0/24 maxlen: 24
111.88.188.0/24 maxlen: 24
111.88.189.0/24 maxlen: 24
111.88.190.0/24 maxlen: 24
111.88.191.0/24 maxlen: 24
111.88.232.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/24 maxlen: 24
115.186.11.0/24 maxlen: 24
115.186.12.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.22.0/24 maxlen: 24
115.186.24.0/24 maxlen: 24
115.186.26.0/24 maxlen: 24
115.186.27.0/24 maxlen: 24
115.186.28.0/24 maxlen: 24
115.186.29.0/24 maxlen: 24
115.186.48.0/24 maxlen: 24
115.186.49.0/24 maxlen: 24
115.186.50.0/24 maxlen: 24
115.186.51.0/24 maxlen: 24
115.186.52.0/24 maxlen: 24
115.186.53.0/24 maxlen: 24
115.186.54.0/24 maxlen: 24
115.186.55.0/24 maxlen: 24
115.186.64.0/24 maxlen: 24
115.186.65.0/24 maxlen: 24
115.186.66.0/24 maxlen: 24
115.186.67.0/24 maxlen: 24
115.186.68.0/24 maxlen: 24
115.186.69.0/24 maxlen: 24
115.186.70.0/24 maxlen: 24
115.186.71.0/24 maxlen: 24
115.186.72.0/24 maxlen: 24
115.186.73.0/24 maxlen: 24
115.186.74.0/24 maxlen: 24
115.186.75.0/24 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.89.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.92.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.94.0/24 maxlen: 24
115.186.95.0/24 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.124.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.127.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.11.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.14.0/24 maxlen: 24
117.102.15.0/24 maxlen: 24
117.102.20.0/24 maxlen: 24
117.102.21.0/24 maxlen: 24
117.102.22.0/24 maxlen: 24
117.102.23.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.224.0/24 maxlen: 24
203.81.225.0/24 maxlen: 24
203.81.226.0/24 maxlen: 24
203.81.227.0/24 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.231.0/24 maxlen: 24
203.81.232.0/24 maxlen: 24
203.81.233.0/24 maxlen: 24
203.81.234.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 14:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14656 (0x3940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Aug 11 21:11:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=689a5c7a-ddf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:fe:ed:cc:75:7b:71:0b:44:f7:8b:93:57:
30:58:a9:26:b3:f6:85:8d:76:3f:d1:58:5d:c4:50:
fb:89:2b:1b:bb:bc:31:05:2e:88:52:a2:9b:95:ef:
a4:39:a5:59:be:55:f0:0f:6c:e8:6e:e6:00:e0:ab:
11:98:4e:9c:02:88:c8:2d:5d:39:65:6c:0b:07:af:
d9:29:2d:f8:af:df:1b:a7:c4:11:56:d2:82:3b:eb:
9f:ef:00:cf:e7:37:04:b2:11:06:a2:d2:68:6b:f0:
1f:cb:33:6d:f0:45:a5:94:fe:ff:6a:da:9b:bc:27:
87:28:27:c5:4b:b6:2e:4c:40:4c:11:09:93:f8:f0:
b4:e6:e6:1f:e4:17:d3:71:17:c6:7f:ff:c7:74:b3:
c5:80:fd:83:fb:5d:33:bd:3e:7c:4e:f5:29:76:b0:
18:68:19:ba:4b:fa:e4:79:01:45:6c:55:a2:e9:31:
9e:c2:1c:40:71:64:fc:6c:92:f6:54:5f:de:12:b8:
76:98:d1:bf:b0:cb:ee:5e:1f:b2:dd:3c:6a:f5:11:
e0:21:70:9d:1c:68:8a:77:1b:ac:62:b2:6e:a6:9e:
26:73:43:87:5e:78:99:87:de:c8:25:36:54:b8:78:
d0:58:9e:1d:7b:ad:e0:ba:ee:8e:23:0f:e4:d4:f1:
58:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9A:C1:A4:33:54:BC:87:6C:7A:B6:45:6A:3C:FA:6F:EC:75:3A:30
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/BB325C9676F711F08DF03837C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.184.0/21
111.88.232.0/24
111.88.234.0-111.88.237.255
115.186.1.0/24
115.186.10.0-115.186.12.255
115.186.16.0/24
115.186.19.0/24
115.186.22.0/24
115.186.24.0/24
115.186.26.0-115.186.29.255
115.186.48.0/21
115.186.64.0-115.186.75.255
115.186.88.0/23
115.186.91.0-115.186.95.255
115.186.97.0/24
115.186.99.0-115.186.100.255
115.186.105.0/24
115.186.114.0/24
115.186.116.0/24
115.186.122.0-115.186.125.255
115.186.127.0/24
117.102.10.0/23
117.102.13.0-117.102.15.255
117.102.20.0/22
117.102.27.0/24
117.102.29.0-117.102.31.255
203.81.224.0-203.81.229.255
203.81.231.0-203.81.235.255
Signature Algorithm: sha256WithRSAEncryption
48:82:63:83:f7:79:6a:19:57:4a:1b:98:5a:23:f5:42:26:7f:
39:ea:f4:03:dd:c9:b8:d2:de:30:4b:f0:70:81:5c:1c:1e:98:
e4:e6:9b:05:df:a0:23:78:06:cf:66:ee:c7:ca:02:a2:f2:ee:
a4:60:56:f1:39:4c:dc:cf:8e:c3:04:13:b3:8b:e8:6a:6d:e5:
a8:82:3b:62:66:3d:33:e6:04:2b:d0:bf:0a:27:18:9a:eb:ce:
23:3d:50:90:ec:d7:82:f2:28:4f:a0:cd:0d:c2:18:d5:d9:e5:
a6:ac:54:4b:4d:9b:3a:8c:c4:46:36:36:2d:46:d8:30:c1:7a:
40:b4:4c:08:ad:32:f5:4a:bc:64:ff:c3:be:14:34:90:18:37:
00:4a:e9:2d:f0:78:74:b0:74:62:6b:86:ff:a4:f8:1b:85:be:
ce:e7:fc:12:82:c3:fe:e8:e0:2d:e6:69:1f:4f:51:bb:6c:1a:
e5:db:67:12:50:ed:6d:38:80:07:00:6a:6a:0d:eb:90:d6:81:
77:a3:52:68:50:ab:9e:bd:14:95:4d:d5:86:51:8c:f6:ab:4f:
ad:c8:ab:e6:89:a8:65:49:f7:39:e7:bd:ae:5d:6e:f6:24:02:
c8:6a:31:a0:57:a0:a5:c5:43:6c:94:d2:ec:8e:d1:67:8f:d4:
1d:76:ef:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:56 2025 by rpki-client