Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/041A5B042C6911F098B91B76C4F9AE02.roa
File: 041A5B042C6911F098B91B76C4F9AE02.roa (raw, json)
Hash identifier: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=
Subject key identifier: 64:76:E4:4B:E1:42:F2:BA:3D:1D:0A:28:B5:5B:C9:37:B0:53:0F:9E
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0DB2
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/041A5B042C6911F098B91B76C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:42:02 +0000
ROA not before: Sun 02 Nov 2025 19:08:03 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 17971
IP address blocks: 49.236.192.0/20 maxlen: 24
103.17.168.0/22 maxlen: 24
112.137.160.0/20 maxlen: 24
119.110.96.0/20 maxlen: 24
202.71.96.0/20 maxlen: 23
202.71.96.0/21 maxlen: 24
202.71.104.0/22 maxlen: 24
202.71.108.0/24 maxlen: 24
202.71.110.0/23 maxlen: 24
202.75.32.0/20 maxlen: 23
202.75.32.0/21 maxlen: 24
202.75.40.0/24 maxlen: 24
202.75.42.0/23 maxlen: 24
202.75.44.0/22 maxlen: 24
202.75.48.0/20 maxlen: 24
202.165.3.0/24 maxlen: 24
210.48.144.0/20 maxlen: 20
210.48.145.0/24 maxlen: 24
210.48.148.0/23 maxlen: 24
210.48.150.0/24 maxlen: 24
210.48.151.0/24 maxlen: 24
210.48.152.0/24 maxlen: 24
210.48.153.0/24 maxlen: 24
210.48.154.0/24 maxlen: 24
210.48.156.0/24 maxlen: 24
210.48.157.0/24 maxlen: 24
210.48.158.0/24 maxlen: 24
210.48.159.0/24 maxlen: 24
218.100.22.0/24 maxlen: 24
2401:b000::/32 maxlen: 32
2401:b000::/48 maxlen: 48
2401:b000:0:5::/64 maxlen: 64
2401:b000:0:6::/64 maxlen: 64
2401:b000:10::/48 maxlen: 48
2404:b8::/48 maxlen: 48
2404:b8:0:1::/64 maxlen: 64
2404:b8:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3506 (0xdb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Nov 2 19:08:03 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4887a-e706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:b8:ea:02:8a:92:2d:8c:a5:83:0d:93:aa:
53:89:e2:41:a3:c0:ab:ad:d1:5f:2b:37:dd:48:e5:
8b:4c:65:73:d9:35:7d:c9:75:6d:5f:70:87:9e:0d:
39:40:1a:d2:a7:ec:a0:2c:3e:85:ac:ba:68:34:a2:
e6:60:26:46:56:95:d7:84:46:2d:c4:41:61:a1:b3:
f8:b8:89:ac:c9:c6:44:fd:e7:f4:19:4c:18:3d:49:
f4:f9:ed:c9:7e:47:f1:8a:be:19:18:38:60:37:06:
83:a6:0a:a2:00:e8:f1:d7:87:fe:b1:10:e7:fa:3b:
89:2c:8d:e5:30:3b:ea:d7:c4:0e:0d:b8:71:f5:3f:
df:b8:0a:43:aa:2e:ea:31:34:33:d7:ba:d3:f5:ce:
61:51:39:51:b1:bf:40:9a:8d:9e:c1:02:ca:8b:8e:
ae:e6:ea:f9:20:0d:c7:98:01:b2:78:a4:fb:4b:83:
48:f9:49:53:ce:53:05:a5:0b:ba:10:07:f7:5b:cf:
08:c5:dd:80:22:78:d6:59:1f:c8:b5:9c:e2:bb:8b:
84:8e:bd:79:bd:11:d8:c2:7a:65:5b:3c:32:0e:19:
b7:18:35:c5:de:cc:3b:f4:27:79:dd:44:70:03:c8:
a9:08:8c:eb:2a:77:f2:52:91:53:1d:40:d5:65:85:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:E4:4B:E1:42:F2:BA:3D:1D:0A:28:B5:5B:C9:37:B0:53:0F:9E
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/041A5B042C6911F098B91B76C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.236.192.0/20
103.17.168.0/22
112.137.160.0/20
119.110.96.0/20
202.71.96.0/20
202.75.32.0/19
202.165.3.0/24
210.48.144.0/20
218.100.22.0/24
IPv6:
2401:b000::/32
2404:b8::/48
2404:b8:3::/48
Signature Algorithm: sha256WithRSAEncryption
1e:ed:99:a1:1a:9d:88:9e:44:18:ac:6f:d9:8a:df:9c:2a:d8:
f7:aa:7f:5a:cb:2e:11:8a:77:70:59:91:8e:52:42:2a:27:54:
94:ca:ae:b2:10:e4:34:81:f0:70:61:29:a5:18:fa:5c:28:5a:
1b:fe:a8:9c:4c:c0:17:05:9d:8e:9a:f7:c3:82:32:07:80:57:
82:da:4d:26:c3:ca:58:8b:14:8b:36:2a:78:f0:8a:54:f1:1c:
9d:b9:0a:7c:14:d4:68:0f:4e:9c:ac:d0:a2:45:1a:c7:85:f6:
2f:d4:d5:fe:e8:20:fa:f4:51:e1:1a:70:86:48:52:18:0e:5b:
da:06:cb:74:bf:13:40:0a:e7:ad:bb:8f:49:f2:ac:80:3e:09:
51:1c:79:ce:e8:de:a0:7f:74:f1:1c:e1:3c:67:c8:08:8f:8c:
06:94:be:ff:24:fe:f5:f3:fe:57:b0:b0:3d:48:be:85:af:62:
d1:de:fd:59:56:94:19:c9:94:78:f5:6c:4a:56:c3:ad:15:07:
0a:c6:2f:c9:75:75:be:3f:23:b5:18:0a:64:9a:6f:87:30:2f:
d4:6d:07:f4:45:3e:00:63:00:38:50:cc:af:5c:86:25:f9:91:
9b:f0:83:06:0c:bc:b3:20:ff:ea:29:11:90:c6:f2:04:6b:dd:
da:9d:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:42 2026 by rpki-client