Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7CBDCB1E1ACF11F08F1F055CC4F9AE02.roa
File: 7CBDCB1E1ACF11F08F1F055CC4F9AE02.roa (raw, json)
Hash identifier: r4hi9r8fqg3eM2aWkSOaGIl5XW1mlhpfI43yLoqEhK4=
Subject key identifier: 5B:7F:02:66:FB:72:94:A1:6B:C0:F6:CC:50:A9:AE:C0:21:AB:08:D1
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 37BC
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7CBDCB1E1ACF11F08F1F055CC4F9AE02.roa
Signing time: Fri 18 Apr 2025 15:22:41 +0000
ROA not before: Fri 18 Apr 2025 15:22:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.96.0/19 maxlen: 19
111.88.164.0/22 maxlen: 23
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 23
111.88.188.0/22 maxlen: 23
111.88.233.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
111.88.248.0/24 maxlen: 24
115.186.10.0/23 maxlen: 23
115.186.12.0/23 maxlen: 23
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/20 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/22 maxlen: 23
115.186.36.0/23 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 23
115.186.56.0/22 maxlen: 24
115.186.60.0/23 maxlen: 24
115.186.63.0/24 maxlen: 24
115.186.64.0/19 maxlen: 23
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.96.0/20 maxlen: 23
115.186.96.0/22 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/23 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/20 maxlen: 23
115.186.112.0/23 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/23 maxlen: 24
115.186.120.0/23 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.12.0/23 maxlen: 23
117.102.12.0/24 maxlen: 24
117.102.14.0/23 maxlen: 23
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 23
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.208.0/20 maxlen: 23
203.81.208.0/22 maxlen: 24
203.81.213.0/24 maxlen: 24
203.81.215.0/24 maxlen: 24
203.81.224.0/20 maxlen: 23
203.81.230.0/24 maxlen: 24
203.81.239.0/24 maxlen: 24
2406:7000::/32 maxlen: 32
2406:7000::/48 maxlen: 48
2406:7000:1::/48 maxlen: 48
2406:7000:2::/48 maxlen: 48
2406:7000:3::/48 maxlen: 48
2406:7000:4::/48 maxlen: 48
2406:7000:5::/48 maxlen: 48
2406:7000:6::/48 maxlen: 48
2406:7000:7::/48 maxlen: 48
2406:7000:8::/48 maxlen: 48
2406:7000:9::/48 maxlen: 48
2406:7000:a::/48 maxlen: 48
2406:7000:b::/48 maxlen: 48
2406:7000:c::/48 maxlen: 48
2406:7000:d::/48 maxlen: 48
2406:7000:e::/48 maxlen: 48
2406:7000:f::/48 maxlen: 48
2406:7000:10::/48 maxlen: 48
2406:7000:11::/48 maxlen: 48
2406:7000:12::/48 maxlen: 48
2406:7000:13::/48 maxlen: 48
2406:7000:14::/48 maxlen: 48
2406:7000:15::/48 maxlen: 48
2406:7000:16::/48 maxlen: 48
2406:7000:17::/48 maxlen: 48
2406:7000:18::/48 maxlen: 48
2406:7000:19::/48 maxlen: 48
2406:7000:1a::/48 maxlen: 48
2406:7000:1b::/48 maxlen: 48
2406:7000:1c::/48 maxlen: 48
2406:7000:1d::/48 maxlen: 48
2406:7000:1e::/48 maxlen: 48
2406:7000:1f::/48 maxlen: 48
2406:7000:20::/48 maxlen: 48
2406:7000:21::/48 maxlen: 48
2406:7000:22::/48 maxlen: 48
2406:7000:23::/48 maxlen: 48
2406:7000:24::/48 maxlen: 48
2406:7000:25::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 14:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14268 (0x37bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 18 15:22:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68026e41-d0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:16:f2:e9:5a:01:40:9b:ce:d1:55:c2:a6:
5b:0b:b9:61:80:f7:72:cd:fb:8d:fc:69:0e:24:f8:
ae:20:e8:d2:65:9c:e4:94:46:96:99:1f:b0:35:28:
04:bc:ed:b4:49:cf:c2:3a:19:4b:8b:52:24:4d:05:
3f:32:66:a8:c5:13:a1:59:ac:f1:2c:87:ea:20:b8:
ee:7a:08:a6:c9:36:48:97:97:73:0a:48:0e:16:9b:
77:1f:25:c8:1e:9f:a0:d0:0f:ba:42:1b:9c:f1:68:
08:d8:e2:18:90:eb:50:05:14:92:ce:66:77:90:bc:
1b:13:00:25:27:d1:77:36:70:2f:c7:ee:d8:23:4f:
42:d4:fd:8a:75:87:7d:19:da:3f:7f:57:be:d4:54:
0e:09:5c:0b:aa:aa:82:35:7c:2b:ae:aa:8c:47:ad:
ae:bb:89:04:af:25:3e:25:96:b4:52:05:eb:88:25:
b6:55:8a:c5:a7:86:bb:bd:22:a7:d1:30:68:7e:ec:
67:91:a4:f9:71:79:8a:1f:e6:5c:76:dc:e8:1d:be:
58:7d:a1:78:2b:54:dc:d4:81:d6:b1:f5:20:dc:69:
92:54:94:f2:68:b4:6d:a5:50:29:45:06:35:5f:7e:
62:f4:3c:74:70:e5:93:1c:8f:fe:9c:e9:35:07:60:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7F:02:66:FB:72:94:A1:6B:C0:F6:CC:50:A9:AE:C0:21:AB:08:D1
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7CBDCB1E1ACF11F08F1F055CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.96.0/19
111.88.164.0-111.88.171.255
111.88.184.0/21
111.88.233.0/24
111.88.238.0/23
111.88.248.0/24
115.186.10.0-115.186.14.255
115.186.16.0/23
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.47.255
115.186.56.0-115.186.127.255
117.102.0.0-117.102.9.255
117.102.12.0-117.102.28.255
117.102.32.0/20
203.81.208.0-203.81.239.255
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
3a:bc:4f:db:d8:27:bd:1b:9c:cb:05:76:ad:4b:f7:24:ab:fa:
a0:6b:41:1d:20:c6:20:40:86:6b:48:30:d0:6f:e8:0a:e6:85:
b6:f6:be:34:5c:20:56:96:96:6a:29:68:9c:51:58:47:5f:b0:
7d:88:a4:8a:12:19:0d:77:4f:58:be:04:f3:e4:f0:17:e4:b5:
af:1e:b0:b8:8a:c0:f1:4d:5f:00:db:e5:30:f4:44:4c:a2:94:
32:bd:d4:da:ce:ef:bf:e1:61:01:4c:27:08:da:1f:d5:53:f1:
6c:1a:95:1b:71:5b:8a:07:8f:c4:5e:36:f4:31:1b:f2:16:94:
d0:b6:7c:8e:1b:33:e8:31:22:0b:16:da:2f:7e:93:26:81:f8:
0c:4e:5e:93:3d:ee:2a:86:91:dc:ae:dc:d7:a3:47:5c:d7:88:
7c:2c:75:d2:33:03:50:12:8a:62:21:db:bb:5e:35:b2:6e:52:
a3:ad:b4:08:48:40:00:a4:01:49:12:73:55:60:13:9e:a0:26:
47:c5:d2:cb:38:7b:5c:ec:80:da:9a:fa:f2:0c:43:ae:33:19:
ec:fe:df:49:1e:97:18:e3:cf:ee:58:67:5f:62:8f:d3:8e:8a:
7d:47:14:a2:ba:51:8b:ef:99:c4:67:62:34:32:71:8c:e3:ff:
aa:d0:e4:da
-----BEGIN CERTIFICATE-----
MIIGHjCCBQagAwIBAgICN7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjUwNDE4MTUyMjQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODAyNmU0MS1kMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvNsW8ulaAUCbztFVwqZbC7lhgPdyzfuN/GkOJPiuIOjSZZzklEaWmR+wNSgE
vO20Sc/COhlLi1IkTQU/MmaoxROhWazxLIfqILjuegimyTZIl5dzCkgOFpt3HyXI
Hp+g0A+6Qhuc8WgI2OIYkOtQBRSSzmZ3kLwbEwAlJ9F3NnAvx+7YI09C1P2KdYd9
Gdo/f1e+1FQOCVwLqqqCNXwrrqqMR62uu4kEryU+JZa0UgXriCW2VYrFp4a7vSKn
0TBofuxnkaT5cXmKH+ZcdtzoHb5YfaF4K1Tc1IHWsfUg3GmSVJTyaLRtpVApRQY1
X35i9Dx0cOWTHI/+nOk1B2DwCQIDAQABo4IDQjCCAz4wHQYDVR0OBBYEFFt/Amb7
cpSha8D2zFCprsAhqwjRMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvN0NCRENCMUUx
QUNGMTFGMDhGMUYwNTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgcsGCCsGAQUFBwEHAQH/
BIG7MIG4MIGmBAIAATCBnwMEBW9YYDAMAwQCb1ikAwQCb1ioAwQDb1i4AwQAb1jp
AwQBb1juAwQAb1j4MAwDBAFzugoDBABzug4DBAFzuhADBABzuhUwDAMEAHO6FwME
AXO6GDAMAwQBc7oeAwQEc7ogMAwDBANzujgDBAdzugAwCwMDAXVmAwQBdWYIMAwD
BAJ1ZgwDBAB1ZhwDBAR1ZiAwDAMEBMtR0AMEBMtR4DANBAIAAjAHAwUAJAZwADAN
BgkqhkiG9w0BAQsFAAOCAQEAOrxP29gnvRucywV2rUv3JKv6oGtBHSDGIECGa0gw
0G/oCuaFtva+NFwgVpaWailonFFYR1+wfYikihIZDXdPWL4E8+TwF+S1rx6wuIrA
8U1fANvlMPRETKKUMr3U2s7vv+FhAUwnCNof1VPxbBqVG3FbigePxF429DEb8haU
0LZ8jhsz6DEiCxbaL36TJoH4DE5ekz3uKoaR3K7c16NHXNeIfCx10jMDUBKKYiHb
u141sm5So620CEhAAKQBSRJzVWATnqAmR8XSyzh7XOyA2pr68gxDrjMZ7P7fSR6X
GOPP7lhnX2KP046KfUcUorpRi++ZxGdiNDJxjOP/qtDk2g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:01:59 2025 by rpki-client