Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CAF1B6B2B03611F180C874233E11F970.roa
File: CAF1B6B2B03611F180C874233E11F970.roa (raw, json)
Hash identifier: lJp3Vay17kxfjDgfPKPZv8WMFHJPQW32KJfTkL0J+ME=
Subject key identifier: 30:B0:D4:67:0E:AA:A1:00:EF:99:25:76:11:42:E1:F4:B5:1A:FB:28
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3C1C
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CAF1B6B2B03611F180C874233E11F970.roa
Signing time: Mon 14 Sep 2026 12:21:21 +0000
ROA not before: Mon 14 Sep 2026 12:21:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 111.88.8.0/21 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/19 maxlen: 24
111.88.64.0/21 maxlen: 24
111.88.72.0/23 maxlen: 24
111.88.75.0/24 maxlen: 24
111.88.80.0/20 maxlen: 24
111.88.168.0/24 maxlen: 24
111.88.169.0/24 maxlen: 24
111.88.170.0/24 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.36.0/24 maxlen: 24
115.186.37.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/23 maxlen: 23
115.186.46.0/24 maxlen: 24
115.186.53.0/24 maxlen: 24
115.186.54.0/23 maxlen: 24
115.186.62.0/23 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.104.0/24 maxlen: 24
117.102.48.0/22 maxlen: 24
117.102.52.0/22 maxlen: 24
117.102.56.0/22 maxlen: 24
117.102.60.0/22 maxlen: 24
203.81.224.0/22 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15388 (0x3c1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Sep 14 12:21:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa7e6c0-9e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5f:3c:31:00:be:b2:e3:09:2d:19:f5:5b:09:
a9:f3:7f:1a:db:a8:6c:c1:b0:55:de:27:2c:3c:d9:
02:e8:99:d0:84:83:34:c2:08:50:fc:33:6f:43:bc:
44:ed:e2:72:2a:76:f3:5f:6c:9e:c2:f8:a2:f7:7f:
42:41:1b:6f:22:d7:14:a2:4e:92:25:80:2c:c0:19:
1c:77:32:43:42:7b:6f:93:03:ba:b8:55:d0:aa:e1:
07:2c:15:8d:bc:83:21:00:2a:0a:3f:c4:fe:24:4a:
ca:b0:c8:4b:9f:6d:de:99:3f:6f:a0:3f:a1:f9:c8:
c2:b4:14:a5:f3:e5:e3:de:5f:5b:0c:bc:be:fb:fb:
00:e8:80:57:d9:83:ec:49:68:cd:4c:db:68:01:62:
7b:3f:21:76:c7:00:fd:49:1a:1a:59:db:74:0a:4d:
0f:62:b6:a3:ef:26:69:fe:4a:96:6a:f3:18:fa:1a:
54:f1:11:bb:af:6c:76:64:a7:7e:e2:ca:ff:e7:f2:
51:42:22:1f:42:52:31:b5:53:33:7b:a1:90:d1:52:
a8:41:13:58:ad:be:70:15:32:64:a9:8d:76:3d:f0:
d6:0c:7c:f5:3c:1d:1d:01:39:aa:c1:f3:08:28:c8:
6d:f9:2d:81:8d:5d:d8:36:55:77:77:95:15:44:fe:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B0:D4:67:0E:AA:A1:00:EF:99:25:76:11:42:E1:F4:B5:1A:FB:28
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CAF1B6B2B03611F180C874233E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
111.88.8.0-111.88.73.255
111.88.75.0/24
111.88.80.0/20
111.88.168.0-111.88.170.255
115.186.2.0-115.186.9.255
115.186.36.0/23
115.186.42.0-115.186.46.255
115.186.53.0-115.186.55.255
115.186.62.0/23
115.186.80.0/21
115.186.104.0/24
117.102.48.0/20
203.81.224.0-203.81.229.255
203.81.235.0/24
Signature Algorithm: sha256WithRSAEncryption
64:9e:02:e6:ef:b9:ae:13:05:01:fd:6b:b8:df:7c:4a:9a:77:
17:68:c0:97:6e:25:45:74:d3:ab:a1:90:a5:d5:a2:1a:c9:00:
2b:59:7b:8a:c2:0c:8e:fb:5c:d8:c7:c7:19:e7:5e:5c:6b:5c:
75:1a:54:10:89:7b:5b:df:b2:b0:15:c2:4a:ad:b2:56:c1:f5:
6a:f6:6e:88:eb:18:74:c2:71:74:88:89:7a:f5:d6:6b:f0:56:
10:eb:b6:70:e9:24:b8:b1:3d:3f:83:36:99:b6:01:9b:6a:1e:
9a:c5:82:8c:3a:1c:d6:0b:b1:95:54:39:fb:3a:a7:2e:de:e9:
91:ca:99:bd:91:8c:9a:43:b7:e7:d8:3c:c1:ac:3b:08:14:54:
48:62:80:b7:e1:7f:e4:82:b8:4b:2d:f7:8b:b2:5e:9f:72:eb:
29:0d:85:cb:be:5d:c2:52:aa:81:e7:29:64:fa:18:2e:8f:45:
c2:03:27:3b:47:f0:64:9b:9e:8d:48:01:2c:ef:0a:36:f1:48:
e8:37:62:51:f8:b7:e1:28:48:e0:b7:be:f7:55:82:26:66:3d:
b4:9a:58:56:8b:86:db:ac:75:25:da:ac:6d:5c:b3:45:cc:31:
73:4d:68:ae:11:c8:60:6b:4a:75:c8:ac:31:94:54:4f:47:ba:
de:c1:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:49:03 2026 by rpki-client