Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5FF02C801CEF11F0A7C36C81C4F9AE02.roa
File: 5FF02C801CEF11F0A7C36C81C4F9AE02.roa (raw, json)
Hash identifier: LqKrHgIh84lRBWkncjkIeERvOWofWq7Th58WbRC38Ps=
Subject key identifier: A4:15:8D:64:43:A0:33:D0:2A:98:47:EA:3A:42:83:D0:D8:8F:33:F7
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 37C0
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5FF02C801CEF11F0A7C36C81C4F9AE02.roa
Signing time: Sat 19 Apr 2025 07:24:48 +0000
ROA not before: Sat 19 Apr 2025 07:24:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150382
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.164.0/24 maxlen: 24
111.88.165.0/24 maxlen: 24
111.88.166.0/24 maxlen: 24
111.88.167.0/24 maxlen: 24
111.88.184.0/24 maxlen: 24
111.88.185.0/24 maxlen: 24
111.88.186.0/24 maxlen: 24
111.88.187.0/24 maxlen: 24
111.88.188.0/24 maxlen: 24
111.88.189.0/24 maxlen: 24
111.88.190.0/24 maxlen: 24
111.88.191.0/24 maxlen: 24
111.88.232.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/24 maxlen: 24
115.186.11.0/24 maxlen: 24
115.186.12.0/24 maxlen: 24
115.186.13.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.18.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.22.0/24 maxlen: 24
115.186.24.0/24 maxlen: 24
115.186.26.0/24 maxlen: 24
115.186.27.0/24 maxlen: 24
115.186.28.0/24 maxlen: 24
115.186.29.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.48.0/24 maxlen: 24
115.186.49.0/24 maxlen: 24
115.186.50.0/24 maxlen: 24
115.186.51.0/24 maxlen: 24
115.186.52.0/24 maxlen: 24
115.186.53.0/24 maxlen: 24
115.186.54.0/24 maxlen: 24
115.186.55.0/24 maxlen: 24
115.186.64.0/24 maxlen: 24
115.186.65.0/24 maxlen: 24
115.186.66.0/24 maxlen: 24
115.186.67.0/24 maxlen: 24
115.186.68.0/24 maxlen: 24
115.186.69.0/24 maxlen: 24
115.186.70.0/24 maxlen: 24
115.186.71.0/24 maxlen: 24
115.186.72.0/24 maxlen: 24
115.186.73.0/24 maxlen: 24
115.186.74.0/24 maxlen: 24
115.186.75.0/24 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.89.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.92.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.94.0/24 maxlen: 24
115.186.95.0/24 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.124.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.127.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.11.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.14.0/24 maxlen: 24
117.102.15.0/24 maxlen: 24
117.102.20.0/24 maxlen: 24
117.102.21.0/24 maxlen: 24
117.102.22.0/24 maxlen: 24
117.102.23.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.212.0/24 maxlen: 24
203.81.214.0/24 maxlen: 24
203.81.216.0/24 maxlen: 24
203.81.217.0/24 maxlen: 24
203.81.218.0/24 maxlen: 24
203.81.219.0/24 maxlen: 24
203.81.220.0/24 maxlen: 24
203.81.221.0/24 maxlen: 24
203.81.222.0/24 maxlen: 24
203.81.223.0/24 maxlen: 24
203.81.224.0/24 maxlen: 24
203.81.225.0/24 maxlen: 24
203.81.226.0/24 maxlen: 24
203.81.227.0/24 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.231.0/24 maxlen: 24
203.81.232.0/24 maxlen: 24
203.81.233.0/24 maxlen: 24
203.81.234.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
203.81.236.0/24 maxlen: 24
203.81.237.0/24 maxlen: 24
203.81.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 14:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14272 (0x37c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 19 07:24:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68034fc0-3246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:ce:d3:cd:b8:d0:32:6b:cc:be:43:03:57:
41:9e:d0:1e:6e:99:0a:ea:6a:e5:2e:e2:a8:db:2c:
2e:ca:c4:35:91:0c:4c:39:e5:a0:c5:26:4b:74:60:
f5:ae:69:f1:dd:5e:37:a8:3b:7b:4f:0c:25:e0:ac:
bb:fc:e5:b5:32:1c:c2:69:f2:cf:15:e0:aa:85:08:
bc:e6:a9:ee:55:a5:da:6f:f4:74:b7:2a:52:e9:94:
fb:d3:93:f6:e5:00:35:0c:b7:0e:ce:88:41:b3:a6:
3d:4c:5c:3d:74:52:9b:60:3f:f7:23:e4:aa:27:a9:
7a:98:cd:e6:41:c7:15:59:a9:60:d2:28:3c:4c:09:
aa:9e:25:d4:7f:c4:97:b3:bf:a3:c2:fd:d2:7b:75:
0a:3e:55:27:49:fc:43:32:d7:2c:37:ad:fc:27:8a:
ea:4a:34:6f:64:6c:e4:35:00:58:9f:ef:61:2f:85:
87:81:3c:06:c0:8c:7d:3a:25:88:36:41:65:d3:b7:
8f:e7:f2:31:50:88:09:1f:07:1d:81:bc:87:8b:e6:
88:b9:18:38:5b:6b:27:c1:ae:c0:7a:6f:48:4e:1a:
7d:03:7b:63:56:ca:e1:a2:cc:3b:74:4a:60:ad:b5:
f4:27:9d:74:75:f0:0e:64:f6:dd:f5:9e:2e:20:3d:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:15:8D:64:43:A0:33:D0:2A:98:47:EA:3A:42:83:D0:D8:8F:33:F7
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5FF02C801CEF11F0A7C36C81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.164.0/22
111.88.184.0/21
111.88.232.0/24
111.88.234.0-111.88.237.255
115.186.1.0/24
115.186.10.0-115.186.13.255
115.186.16.0/24
115.186.18.0/23
115.186.22.0/24
115.186.24.0/24
115.186.26.0-115.186.29.255
115.186.41.0/24
115.186.48.0/21
115.186.64.0-115.186.75.255
115.186.88.0/23
115.186.91.0-115.186.95.255
115.186.97.0/24
115.186.99.0-115.186.100.255
115.186.105.0/24
115.186.114.0/24
115.186.116.0/24
115.186.122.0-115.186.125.255
115.186.127.0/24
117.102.10.0/23
117.102.13.0-117.102.15.255
117.102.20.0/22
117.102.27.0/24
117.102.29.0-117.102.31.255
203.81.212.0/24
203.81.214.0/24
203.81.216.0-203.81.229.255
203.81.231.0-203.81.238.255
Signature Algorithm: sha256WithRSAEncryption
2c:14:98:f3:80:87:0a:88:4c:63:c0:49:fb:ee:d5:dd:d7:92:
11:e1:6f:99:28:0b:87:ea:0d:7f:92:6a:23:86:2f:15:c5:2f:
1d:d5:74:dc:66:65:fa:dc:88:95:74:7b:1d:0d:5c:4d:45:ad:
de:e2:f5:0f:84:4a:01:bf:57:9f:0b:32:f2:91:52:37:6a:e4:
8f:1c:29:e4:19:68:fc:fa:f4:13:43:4d:8e:e3:45:9f:a6:e5:
e3:ad:86:b0:48:11:07:cb:cc:00:4f:68:93:99:d6:0b:ab:a0:
f6:00:98:b1:3a:dc:78:44:1d:32:d4:3c:8d:e8:ab:b2:50:fd:
4a:d1:22:3a:df:c6:96:fc:33:0b:5c:1f:f1:ec:7a:11:d9:05:
fe:94:7d:bd:82:4b:0b:33:38:db:ac:82:34:74:bf:4c:80:d0:
c4:b9:c0:31:4d:e8:fa:1f:5c:6b:7f:be:2e:c4:c2:28:88:d6:
55:e8:aa:b1:bf:21:7d:95:7c:b1:40:64:e3:0d:9a:9f:66:38:
b7:2e:e9:b4:61:d8:bb:7f:44:62:33:cf:18:62:f0:df:56:40:
16:67:de:b0:16:c8:51:78:a2:88:ff:17:c7:9e:62:2d:58:b3:
31:ce:b1:d0:98:61:09:3b:87:74:f3:93:22:2a:09:2d:fd:da:
1c:f1:d8:ad
-----BEGIN CERTIFICATE-----
MIIGnzCCBYegAwIBAgICN8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjUwNDE5MDcyNDQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODAzNGZjMC0zMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuH3O08240DJrzL5DA1dBntAebpkK6mrlLuKo2ywuysQ1kQxMOeWgxSZLdGD1
rmnx3V43qDt7Twwl4Ky7/OW1MhzCafLPFeCqhQi85qnuVaXab/R0typS6ZT705P2
5QA1DLcOzohBs6Y9TFw9dFKbYD/3I+SqJ6l6mM3mQccVWalg0ig8TAmqniXUf8SX
s7+jwv3Se3UKPlUnSfxDMtcsN638J4rqSjRvZGzkNQBYn+9hL4WHgTwGwIx9OiWI
NkFl07eP5/IxUIgJHwcdgbyHi+aIuRg4W2snwa7Aem9IThp9A3tjVsrhosw7dEpg
rbX0J510dfAOZPbd9Z4uID2SFQIDAQABo4IDwzCCA78wHQYDVR0OBBYEFKQVjWRD
oDPQKphH6jpCg9DYjzP3MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvNUZGMDJDODAx
Q0VGMTFGMEE3QzM2QzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFLBggrBgEFBQcBBwEB
/wSCATowggE2MIIBMgQCAAEwggEqAwQBb1hMAwQAb1hPAwQBb1iKAwQCb1ikAwQD
b1i4AwQAb1joMAwDBAFvWOoDBAFvWOwDBABzugEwDAMEAXO6CgMEAXO6DAMEAHO6
EAMEAXO6EgMEAHO6FgMEAHO6GDAMAwQBc7oaAwQBc7ocAwQAc7opAwQDc7owMAwD
BAZzukADBAJzukgDBAFzulgwDAMEAHO6WwMEBXO6QAMEAHO6YTAMAwQAc7pjAwQA
c7pkAwQAc7ppAwQAc7pyAwQAc7p0MAwDBAFzunoDBAFzunwDBABzun8DBAF1Zgow
DAMEAHVmDQMEBHVmAAMEAnVmFAMEAHVmGzAMAwQAdWYdAwQFdWYAAwQAy1HUAwQA
y1HWMAwDBAPLUdgDBAHLUeQwDAMEAMtR5wMEAMtR7jANBgkqhkiG9w0BAQsFAAOC
AQEALBSY84CHCohMY8BJ++7V3deSEeFvmSgLh+oNf5JqI4YvFcUvHdV03GZl+tyI
lXR7HQ1cTUWt3uL1D4RKAb9Xnwsy8pFSN2rkjxwp5Blo/Pr0E0NNjuNFn6bl462G
sEgRB8vMAE9ok5nWC6ug9gCYsTrceEQdMtQ8jeirslD9StEiOt/GlvwzC1wf8ex6
EdkF/pR9vYJLCzM426yCNHS/TIDQxLnAMU3o+h9ca3++LsTCKIjWVeiqsb8hfZV8
sUBk4w2an2Y4ty7ptGHYu39EYjPPGGLw31ZAFmfesBbIUXiiiP8Xx55iLVizMc6x
0JhhCTuHdPOTIioJLf3aHPHYrQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:23 2025 by rpki-client