Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/D677B8F8E46B11EFB0037B77C4F9AE02.roa
File: D677B8F8E46B11EFB0037B77C4F9AE02.roa (raw, json)
Hash identifier: K4F5g57zFJUCifiiu4f79X8f4i1nu9uazXLtGfM7eKU=
Subject key identifier: BD:48:2F:C7:0E:7B:F7:C4:25:B2:E3:9F:24:AD:09:E7:F4:2D:F8:E4
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 37AE
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/D677B8F8E46B11EFB0037B77C4F9AE02.roa
Signing time: Fri 18 Apr 2025 14:50:38 +0000
ROA not before: Fri 18 Apr 2025 14:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132165
IP address blocks: 103.246.108.0/22 maxlen: 22
103.246.108.0/24 maxlen: 24
103.246.109.0/24 maxlen: 24
103.246.110.0/24 maxlen: 24
103.246.111.0/24 maxlen: 24
111.88.0.0/20 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/20 maxlen: 24
111.88.48.0/20 maxlen: 24
111.88.64.0/21 maxlen: 21
111.88.64.0/24 maxlen: 24
111.88.65.0/24 maxlen: 24
111.88.66.0/24 maxlen: 24
111.88.67.0/24 maxlen: 24
111.88.68.0/24 maxlen: 24
111.88.69.0/24 maxlen: 24
111.88.70.0/24 maxlen: 24
111.88.71.0/24 maxlen: 24
111.88.72.0/22 maxlen: 22
111.88.72.0/24 maxlen: 24
111.88.73.0/24 maxlen: 24
111.88.74.0/24 maxlen: 24
111.88.75.0/24 maxlen: 24
111.88.78.0/24 maxlen: 24
111.88.80.0/20 maxlen: 20
111.88.80.0/22 maxlen: 22
111.88.80.0/24 maxlen: 24
111.88.81.0/24 maxlen: 24
111.88.82.0/24 maxlen: 24
111.88.83.0/24 maxlen: 24
111.88.84.0/22 maxlen: 22
111.88.84.0/24 maxlen: 24
111.88.85.0/24 maxlen: 24
111.88.86.0/24 maxlen: 24
111.88.87.0/24 maxlen: 24
111.88.88.0/21 maxlen: 21
111.88.88.0/24 maxlen: 24
111.88.89.0/24 maxlen: 24
111.88.90.0/24 maxlen: 24
111.88.91.0/24 maxlen: 24
111.88.92.0/24 maxlen: 24
111.88.93.0/24 maxlen: 24
111.88.94.0/24 maxlen: 24
111.88.95.0/24 maxlen: 24
111.88.96.0/19 maxlen: 19
111.88.96.0/20 maxlen: 20
111.88.96.0/24 maxlen: 24
111.88.97.0/24 maxlen: 24
111.88.98.0/24 maxlen: 24
111.88.99.0/24 maxlen: 24
111.88.100.0/24 maxlen: 24
111.88.101.0/24 maxlen: 24
111.88.102.0/24 maxlen: 24
111.88.103.0/24 maxlen: 24
111.88.104.0/24 maxlen: 24
111.88.105.0/24 maxlen: 24
111.88.106.0/24 maxlen: 24
111.88.107.0/24 maxlen: 24
111.88.108.0/24 maxlen: 24
111.88.109.0/24 maxlen: 24
111.88.110.0/24 maxlen: 24
111.88.111.0/24 maxlen: 24
111.88.112.0/20 maxlen: 20
111.88.112.0/24 maxlen: 24
111.88.113.0/24 maxlen: 24
111.88.114.0/24 maxlen: 24
111.88.115.0/24 maxlen: 24
111.88.116.0/24 maxlen: 24
111.88.117.0/24 maxlen: 24
111.88.118.0/24 maxlen: 24
111.88.119.0/24 maxlen: 24
111.88.120.0/24 maxlen: 24
111.88.121.0/24 maxlen: 24
111.88.122.0/24 maxlen: 24
111.88.123.0/24 maxlen: 24
111.88.124.0/24 maxlen: 24
111.88.125.0/24 maxlen: 24
111.88.126.0/24 maxlen: 24
111.88.127.0/24 maxlen: 24
111.88.128.0/21 maxlen: 21
111.88.128.0/24 maxlen: 24
111.88.129.0/24 maxlen: 24
111.88.130.0/24 maxlen: 24
111.88.131.0/24 maxlen: 24
111.88.132.0/24 maxlen: 24
111.88.133.0/24 maxlen: 24
111.88.134.0/24 maxlen: 24
111.88.135.0/24 maxlen: 24
111.88.136.0/23 maxlen: 24
111.88.140.0/22 maxlen: 22
111.88.140.0/24 maxlen: 24
111.88.141.0/24 maxlen: 24
111.88.142.0/24 maxlen: 24
111.88.143.0/24 maxlen: 24
111.88.160.0/22 maxlen: 22
111.88.160.0/24 maxlen: 24
111.88.161.0/24 maxlen: 24
111.88.162.0/24 maxlen: 24
111.88.163.0/24 maxlen: 24
111.88.172.0/22 maxlen: 22
111.88.172.0/24 maxlen: 24
111.88.173.0/24 maxlen: 24
111.88.174.0/24 maxlen: 24
111.88.175.0/24 maxlen: 24
111.88.176.0/21 maxlen: 21
111.88.176.0/24 maxlen: 24
111.88.177.0/24 maxlen: 24
111.88.178.0/24 maxlen: 24
111.88.179.0/24 maxlen: 24
111.88.180.0/24 maxlen: 24
111.88.181.0/24 maxlen: 24
111.88.182.0/24 maxlen: 24
111.88.183.0/24 maxlen: 24
111.88.192.0/19 maxlen: 19
111.88.192.0/24 maxlen: 24
111.88.193.0/24 maxlen: 24
111.88.194.0/24 maxlen: 24
111.88.195.0/24 maxlen: 24
111.88.196.0/24 maxlen: 24
111.88.197.0/24 maxlen: 24
111.88.198.0/24 maxlen: 24
111.88.199.0/24 maxlen: 24
111.88.200.0/24 maxlen: 24
111.88.201.0/24 maxlen: 24
111.88.202.0/24 maxlen: 24
111.88.203.0/24 maxlen: 24
111.88.204.0/24 maxlen: 24
111.88.205.0/24 maxlen: 24
111.88.206.0/24 maxlen: 24
111.88.207.0/24 maxlen: 24
111.88.208.0/24 maxlen: 24
111.88.209.0/24 maxlen: 24
111.88.210.0/24 maxlen: 24
111.88.211.0/24 maxlen: 24
111.88.212.0/24 maxlen: 24
111.88.213.0/24 maxlen: 24
111.88.214.0/24 maxlen: 24
111.88.215.0/24 maxlen: 24
111.88.216.0/24 maxlen: 24
111.88.217.0/24 maxlen: 24
111.88.218.0/24 maxlen: 24
111.88.219.0/24 maxlen: 24
111.88.220.0/24 maxlen: 24
111.88.221.0/24 maxlen: 24
111.88.222.0/24 maxlen: 24
111.88.223.0/24 maxlen: 24
111.88.224.0/21 maxlen: 21
111.88.224.0/24 maxlen: 24
111.88.225.0/24 maxlen: 24
111.88.226.0/24 maxlen: 24
111.88.227.0/24 maxlen: 24
111.88.228.0/24 maxlen: 24
111.88.229.0/24 maxlen: 24
111.88.230.0/24 maxlen: 24
111.88.231.0/24 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/22 maxlen: 22
115.186.80.0/24 maxlen: 24
115.186.81.0/24 maxlen: 24
115.186.82.0/24 maxlen: 24
115.186.83.0/24 maxlen: 24
115.186.84.0/22 maxlen: 22
115.186.84.0/24 maxlen: 24
115.186.85.0/24 maxlen: 24
115.186.86.0/24 maxlen: 24
115.186.87.0/24 maxlen: 24
117.102.48.0/20 maxlen: 20
117.102.48.0/24 maxlen: 24
117.102.49.0/24 maxlen: 24
117.102.50.0/24 maxlen: 24
117.102.51.0/24 maxlen: 24
117.102.52.0/24 maxlen: 24
117.102.53.0/24 maxlen: 24
117.102.54.0/24 maxlen: 24
117.102.55.0/24 maxlen: 24
117.102.56.0/24 maxlen: 24
117.102.57.0/24 maxlen: 24
117.102.58.0/24 maxlen: 24
117.102.59.0/24 maxlen: 24
117.102.60.0/24 maxlen: 24
117.102.61.0/24 maxlen: 24
117.102.62.0/24 maxlen: 24
117.102.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 14:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14254 (0x37ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 18 14:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=680266be-810d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ab:9e:10:d0:ea:e1:e7:9f:ff:3e:e7:a9:8b:
97:a5:89:ab:db:5e:13:ff:05:ac:2b:8c:06:3f:99:
d0:b7:10:51:0b:87:eb:21:bb:b5:54:64:96:8f:02:
43:36:9e:d0:3e:9a:45:ef:50:23:12:91:2b:5a:b9:
99:38:4f:b7:6c:a7:5a:26:2a:8d:ce:71:6c:1f:76:
9d:98:c3:76:7f:d4:d3:93:09:c6:a8:d6:51:38:32:
a3:3d:b3:3b:0f:c8:48:29:b5:9d:82:d4:a8:a7:a6:
72:a5:4b:04:a2:af:e5:94:80:db:33:35:57:b5:47:
c8:86:fc:f1:da:73:af:8c:6b:9d:85:61:8f:e0:18:
00:d5:b6:f4:12:0a:df:ad:49:7b:9a:7a:cd:db:59:
b2:88:43:84:20:6d:ec:dc:df:9d:91:58:73:46:8c:
ad:99:3c:c9:4b:c5:68:c0:d3:7e:ed:74:2e:da:0a:
83:60:fc:7f:c9:d8:21:68:15:1f:40:7c:1b:49:f4:
88:96:94:47:94:34:a6:ab:f1:29:e0:e9:fe:8a:44:
f1:d3:16:23:a3:95:10:76:be:1a:70:cf:75:6f:c5:
33:7b:2d:39:a2:ca:98:5e:0d:2b:bf:d5:35:3d:66:
71:c2:b2:6c:6f:7c:3f:56:09:fe:b0:f4:0a:4e:93:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:48:2F:C7:0E:7B:F7:C4:25:B2:E3:9F:24:AD:09:E7:F4:2D:F8:E4
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/D677B8F8E46B11EFB0037B77C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.108.0/22
111.88.0.0-111.88.75.255
111.88.78.0/24
111.88.80.0-111.88.137.255
111.88.140.0/22
111.88.160.0/22
111.88.172.0-111.88.183.255
111.88.192.0-111.88.231.255
115.186.2.0-115.186.9.255
115.186.76.0-115.186.87.255
117.102.48.0/20
Signature Algorithm: sha256WithRSAEncryption
78:85:7c:2c:09:bc:99:4d:10:8e:a0:cc:09:b2:ab:31:74:44:
9b:76:b7:d9:5e:e6:7c:81:c7:29:7b:a3:47:d7:98:4b:59:d7:
38:62:6f:be:81:e0:50:5d:1e:3c:56:61:30:e8:7b:d3:10:55:
7a:b9:a1:cd:71:28:95:52:fc:19:65:63:f4:f3:8b:99:ba:db:
50:36:3c:f8:f5:59:3f:95:b5:11:6f:e5:21:98:a9:9a:bd:3d:
da:1d:e4:c5:10:69:8a:40:59:a8:b0:c1:cb:f3:3c:28:6c:3f:
8d:b2:09:6a:a2:c2:77:3f:9b:1e:13:ce:93:e0:ff:70:c1:08:
03:70:7c:c3:66:bb:f7:04:26:7d:0f:46:ea:9d:fa:4c:6f:16:
0a:be:c8:10:0a:2d:8b:f5:21:dc:99:21:f7:94:dc:2a:82:87:
9c:d8:2e:4d:c2:9b:e3:3c:72:0d:68:fe:bb:05:1f:23:1b:b1:
50:02:50:c0:84:e4:a3:fa:2e:b1:af:13:99:77:9d:bb:49:21:
ff:3e:85:27:d5:ee:b6:7b:2b:06:2e:f6:80:fe:aa:90:e1:42:
c6:61:d9:3b:d7:44:58:b7:49:71:57:ca:39:7c:6c:a7:20:ef:
14:1d:68:1f:52:2e:2a:b1:d7:a7:1c:f2:c4:5e:4b:ed:6c:f0:
f3:76:d0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:50 2025 by rpki-client