Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/C09F4778453911F1A136E9A1A1833773.roa
File: C09F4778453911F1A136E9A1A1833773.roa (raw, json)
Hash identifier: yjbpcIdH63hCQwSFgejVaijgTU0OBZ0ZWddT8xNBacw=
Subject key identifier: 2F:4D:AA:30:F1:1F:7F:F8:97:D0:92:C6:BB:E8:65:6C:B9:A1:48:AD
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3B88
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/C09F4778453911F1A136E9A1A1833773.roa
Signing time: Fri 01 May 2026 08:44:27 +0000
ROA not before: Fri 01 May 2026 08:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 111.88.8.0/22 maxlen: 24
111.88.12.0/22 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/20 maxlen: 24
111.88.48.0/20 maxlen: 24
111.88.64.0/21 maxlen: 24
111.88.72.0/23 maxlen: 24
111.88.75.0/24 maxlen: 24
111.88.80.0/20 maxlen: 24
111.88.168.0/24 maxlen: 24
111.88.169.0/24 maxlen: 24
111.88.170.0/24 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.36.0/24 maxlen: 24
115.186.37.0/24 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/23 maxlen: 23
115.186.46.0/24 maxlen: 24
115.186.52.0/22 maxlen: 24
115.186.62.0/23 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.104.0/24 maxlen: 24
117.102.48.0/22 maxlen: 24
117.102.52.0/22 maxlen: 24
117.102.56.0/22 maxlen: 24
117.102.60.0/22 maxlen: 24
203.81.224.0/22 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.231.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15240 (0x3b88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 1 08:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f467eb-f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:ba:f9:47:fe:ea:ac:99:2b:6b:d5:c9:3d:
30:1a:3d:87:54:3b:69:c7:b3:18:5f:0b:84:b2:b4:
be:a6:d9:26:b9:e5:76:06:11:55:b3:97:8f:d4:f2:
49:b5:a1:bb:57:95:44:30:a2:38:13:a0:99:be:9c:
6f:8d:78:eb:f9:e7:4b:f2:2c:3f:72:03:cf:ee:0a:
87:31:4e:af:ac:4a:8f:f9:6a:db:f7:51:77:c3:59:
cb:55:64:46:d9:aa:8d:a9:4c:2f:84:33:1b:df:b6:
02:3b:3e:e7:6f:33:e4:25:b6:a2:68:c8:08:d5:ba:
f3:1e:a7:01:2d:8b:37:9b:b3:f1:ea:aa:df:1c:36:
08:5b:36:7b:77:6a:01:8c:ec:63:f9:b6:1c:b2:99:
6b:78:88:2d:e5:6b:a0:97:8e:fb:14:d8:5d:f9:8b:
ac:2a:56:65:d3:59:74:14:59:ff:43:02:56:7c:e2:
31:44:05:d4:40:4b:7e:ed:f6:31:34:c9:d9:bf:70:
64:bb:fa:87:fb:67:82:40:5c:75:27:0c:d4:ca:68:
31:e0:c5:1c:87:60:24:41:c0:9d:0f:81:3a:d4:39:
e5:95:eb:49:54:15:16:a7:83:a4:a7:fa:5f:e8:78:
56:ab:a9:46:81:fa:15:e2:1e:1e:08:55:7c:5f:5b:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4D:AA:30:F1:1F:7F:F8:97:D0:92:C6:BB:E8:65:6C:B9:A1:48:AD
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/C09F4778453911F1A136E9A1A1833773.roa
sbgp-ipAddrBlock: critical
IPv4:
111.88.8.0-111.88.73.255
111.88.75.0/24
111.88.80.0/20
111.88.168.0-111.88.170.255
115.186.2.0-115.186.9.255
115.186.36.0/23
115.186.40.0/24
115.186.42.0-115.186.46.255
115.186.52.0/22
115.186.62.0/23
115.186.76.0-115.186.87.255
115.186.104.0/24
117.102.48.0/20
203.81.224.0-203.81.229.255
203.81.231.0/24
203.81.235.0/24
Signature Algorithm: sha256WithRSAEncryption
16:da:bc:9a:4b:56:f7:bf:83:9c:c4:55:04:e3:de:3f:da:fb:
a1:c3:e5:23:6b:46:98:9f:e2:7c:fd:1d:db:8c:aa:1f:9e:99:
47:2a:65:6f:26:a3:d1:13:77:de:39:70:b2:32:a5:a2:7b:71:
f2:fc:4a:a0:98:42:3e:69:30:71:c6:21:d8:40:d5:69:ba:23:
de:51:2d:1b:05:92:53:de:e0:78:ce:5d:c5:e9:e1:2c:c6:22:
e2:4e:ad:11:d9:3d:77:33:7d:88:13:6f:fd:3f:c8:d4:42:96:
61:1a:66:66:f5:f1:cb:5e:19:bc:1a:a0:75:3f:fc:f2:99:84:
3c:39:40:0c:31:27:c6:d3:97:2d:11:ec:95:01:02:ef:aa:63:
c0:ac:c9:30:19:be:d2:d2:c1:02:a7:fc:ae:35:7e:2d:d8:72:
61:ec:01:a1:89:be:a3:fd:af:f6:6f:b1:a9:1e:bc:b5:c9:b1:
0f:4e:1a:e5:32:20:a9:00:78:a3:a4:a9:b5:4b:da:0a:47:94:
70:37:6a:5f:74:c2:3e:ef:a2:5e:dd:0e:02:52:7d:5c:be:af:
1d:69:f3:60:9f:dc:be:49:16:c7:37:34:05:7e:05:f6:c4:85:
0d:dc:fc:b4:7b:15:8a:2b:21:d5:bf:6b:99:49:ea:95:db:25:
9c:11:80:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 12:42:22 2026 by rpki-client