Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa
File: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (raw, json)
Hash identifier: 2GnDplQiwMAlUAy3xpN879Pw+i4tKoxvTJrAxvUorrE=
Subject key identifier: 95:6C:C2:E1:AF:05:E0:FA:FB:D6:AC:09:22:28:5F:4C:61:4C:C2:51
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0CBC
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa
Signing time: Tue 22 Apr 2025 11:33:26 +0000
ROA not before: Tue 22 Apr 2025 11:33:26 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 38322
IP address blocks: 42.152.0.0/14 maxlen: 14
42.153.4.0/24 maxlen: 24
42.153.6.0/24 maxlen: 24
42.153.7.0/24 maxlen: 24
42.153.8.0/24 maxlen: 24
42.153.9.0/24 maxlen: 24
42.153.10.0/24 maxlen: 24
42.153.11.0/24 maxlen: 24
42.153.16.0/24 maxlen: 24
42.153.19.0/24 maxlen: 24
42.153.20.0/24 maxlen: 24
42.153.21.0/24 maxlen: 24
42.153.22.0/24 maxlen: 24
42.153.23.0/24 maxlen: 24
42.153.24.0/24 maxlen: 24
42.153.25.0/24 maxlen: 24
42.153.26.0/24 maxlen: 24
42.153.28.0/24 maxlen: 24
42.153.29.0/24 maxlen: 24
42.153.32.0/24 maxlen: 24
42.153.33.0/24 maxlen: 24
42.153.34.0/24 maxlen: 24
42.153.35.0/24 maxlen: 24
42.153.36.0/24 maxlen: 24
42.153.37.0/24 maxlen: 24
42.153.38.0/24 maxlen: 24
42.153.39.0/24 maxlen: 24
42.153.40.0/24 maxlen: 24
42.153.41.0/24 maxlen: 24
42.153.42.0/24 maxlen: 24
42.153.43.0/24 maxlen: 24
42.153.44.0/24 maxlen: 24
42.153.45.0/24 maxlen: 24
42.153.46.0/24 maxlen: 24
42.153.47.0/24 maxlen: 24
42.153.48.0/24 maxlen: 24
42.153.49.0/24 maxlen: 24
42.153.50.0/24 maxlen: 24
42.153.51.0/24 maxlen: 24
42.153.52.0/24 maxlen: 24
42.153.53.0/24 maxlen: 24
42.153.54.0/24 maxlen: 24
42.153.55.0/24 maxlen: 24
42.153.56.0/24 maxlen: 24
42.153.57.0/24 maxlen: 24
42.153.58.0/24 maxlen: 24
42.153.59.0/24 maxlen: 24
42.153.60.0/24 maxlen: 24
42.153.61.0/24 maxlen: 24
42.153.62.0/24 maxlen: 24
42.153.63.0/24 maxlen: 24
42.153.89.0/24 maxlen: 24
42.153.95.0/24 maxlen: 24
42.153.96.0/24 maxlen: 24
42.153.128.0/24 maxlen: 24
42.153.129.0/24 maxlen: 24
42.153.130.0/24 maxlen: 24
42.153.131.0/24 maxlen: 24
42.153.132.0/24 maxlen: 24
42.153.133.0/24 maxlen: 24
42.153.134.0/24 maxlen: 24
42.153.135.0/24 maxlen: 24
42.153.136.0/24 maxlen: 24
42.153.137.0/24 maxlen: 24
42.153.138.0/24 maxlen: 24
42.153.139.0/24 maxlen: 24
42.153.140.0/24 maxlen: 24
42.153.141.0/24 maxlen: 24
42.153.142.0/24 maxlen: 24
42.153.143.0/24 maxlen: 24
42.153.144.0/24 maxlen: 24
42.153.145.0/24 maxlen: 24
42.153.146.0/24 maxlen: 24
42.153.147.0/24 maxlen: 24
42.153.148.0/24 maxlen: 24
42.153.149.0/24 maxlen: 24
42.153.150.0/24 maxlen: 24
42.153.151.0/24 maxlen: 24
42.153.152.0/24 maxlen: 24
42.153.153.0/24 maxlen: 24
42.153.154.0/24 maxlen: 24
42.153.155.0/24 maxlen: 24
42.153.156.0/24 maxlen: 24
42.153.157.0/24 maxlen: 24
42.153.158.0/24 maxlen: 24
42.153.159.0/24 maxlen: 24
122.255.96.0/19 maxlen: 19
2401:3c00:8::/46 maxlen: 46
2401:3c00:14::/46 maxlen: 46
2401:3c00:18::/46 maxlen: 46
2401:3c00:48::/46 maxlen: 46
2401:3c00:54::/46 maxlen: 46
2401:3c00:58::/46 maxlen: 46
2401:3c00:a4::/48 maxlen: 48
2401:3c00:a5::/48 maxlen: 48
2401:3c00:a6::/48 maxlen: 48
2401:3c00:a7::/48 maxlen: 48
2401:3c00:a8::/48 maxlen: 48
2401:3c00:a9::/48 maxlen: 48
2401:3c00:c0::/46 maxlen: 46
2401:3c00:c0:5::/64 maxlen: 64
2401:3c00:d8::/48 maxlen: 48
2401:3c00:d9::/48 maxlen: 48
2401:3c00:da::/48 maxlen: 48
2401:3c00:db::/48 maxlen: 48
2401:3c00:dc::/48 maxlen: 48
2401:3c00:100::/43 maxlen: 43
2401:3c00:120::/43 maxlen: 43
2401:3c00:180::/43 maxlen: 43
2401:3c00:1a0::/43 maxlen: 43
2401:3c00:250::/48 maxlen: 48
2401:3c00:251::/48 maxlen: 48
2401:3c00:252::/48 maxlen: 48
2401:3c00:253::/48 maxlen: 48
2401:3c00:254::/48 maxlen: 48
2401:3c00:255::/48 maxlen: 48
2401:3c00:256::/48 maxlen: 48
2401:3c00:257::/48 maxlen: 48
2401:3c00:258::/48 maxlen: 48
2401:3c00:259::/48 maxlen: 48
2401:3c00:25a::/48 maxlen: 48
2401:3c00:25c::/48 maxlen: 48
2401:3c00:25d::/48 maxlen: 48
2401:3c00:25f::/48 maxlen: 48
2401:3c00:260::/48 maxlen: 48
2401:3c00:261::/48 maxlen: 48
2401:3c00:262::/48 maxlen: 48
2401:3c00:280::/48 maxlen: 48
2401:3c00:281::/48 maxlen: 48
2401:3c00:290::/48 maxlen: 48
2401:3c00:291::/48 maxlen: 48
2401:3c00:292::/48 maxlen: 48
2401:3c00:293::/48 maxlen: 48
2401:3c00:294::/48 maxlen: 48
2401:3c00:295::/48 maxlen: 48
2401:3c00:2a0::/48 maxlen: 48
2401:3c00:2a1::/48 maxlen: 48
2401:3c00:2a2::/48 maxlen: 48
2401:3c00:2a3::/48 maxlen: 48
2401:3c00:2a4::/48 maxlen: 48
2401:3c00:2a5::/48 maxlen: 48
2401:3c00:2b0::/48 maxlen: 48
2401:3c00:2b1::/48 maxlen: 48
2401:3c00:2b2::/48 maxlen: 48
2401:3c00:2b3::/48 maxlen: 48
2401:3c00:2b4::/48 maxlen: 48
2401:3c00:2b5::/48 maxlen: 48
2401:3c00:2c0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 19:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3260 (0xcbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Apr 22 11:33:26 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=68077e86-fc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:3e:a2:63:f0:97:92:c0:19:51:9a:6b:27:
a7:e6:d9:4b:f6:28:67:85:36:10:ff:15:a3:e6:71:
ae:a2:07:e2:13:db:04:5f:8a:6d:30:9f:7b:42:7c:
c1:a7:9b:36:49:5e:05:88:61:4e:30:44:39:2e:86:
aa:bf:1c:c0:1e:57:62:f4:fd:ff:1e:15:33:c4:f4:
d1:dd:a4:aa:fe:21:ff:99:ee:fd:21:16:26:a6:fd:
78:98:ce:58:c9:60:ea:6a:be:c6:7b:59:49:70:0b:
a5:3a:09:33:22:5e:1f:d3:75:6e:cf:8e:77:7c:ca:
8f:ac:bd:ca:5c:74:d0:36:ab:e2:fe:8a:72:ed:0d:
81:30:8b:65:b5:43:c1:c4:01:c1:5b:ae:39:51:7e:
06:a1:e0:9b:d7:e1:dc:d7:bc:0c:33:63:54:fe:cb:
0c:b3:6a:b3:fe:b0:52:a6:24:b9:d6:f7:37:ea:0a:
59:c2:c9:4a:91:a1:00:c5:c7:8b:77:96:b3:cf:14:
89:6a:57:ee:19:2a:66:74:6e:e3:22:7c:e0:44:28:
fc:27:0a:cf:03:75:ce:a5:2c:e4:5e:67:54:50:45:
1d:6a:d2:b1:8e:dc:51:fa:68:42:31:90:a8:c8:6c:
28:c7:cc:d5:f6:c4:e2:1d:08:6e:5d:84:f7:32:62:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6C:C2:E1:AF:05:E0:FA:FB:D6:AC:09:22:28:5F:4C:61:4C:C2:51
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.152.0.0/14
122.255.96.0/19
IPv6:
2401:3c00:8::/46
2401:3c00:14::-2401:3c00:1b:ffff:ffff:ffff:ffff:ffff
2401:3c00:48::/46
2401:3c00:54::-2401:3c00:5b:ffff:ffff:ffff:ffff:ffff
2401:3c00:a4::-2401:3c00:a9:ffff:ffff:ffff:ffff:ffff
2401:3c00:c0::/46
2401:3c00:d8::-2401:3c00:dc:ffff:ffff:ffff:ffff:ffff
2401:3c00:100::/42
2401:3c00:180::/42
2401:3c00:250::-2401:3c00:25a:ffff:ffff:ffff:ffff:ffff
2401:3c00:25c::/47
2401:3c00:25f::-2401:3c00:262:ffff:ffff:ffff:ffff:ffff
2401:3c00:280::/47
2401:3c00:290::-2401:3c00:295:ffff:ffff:ffff:ffff:ffff
2401:3c00:2a0::-2401:3c00:2a5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2b0::-2401:3c00:2b5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2c0::/42
Signature Algorithm: sha256WithRSAEncryption
12:cc:8a:83:c3:82:74:25:c9:4f:ca:7d:63:b7:16:f6:6b:f1:
60:bc:a7:97:77:b5:fd:24:32:eb:9a:b7:0b:38:51:44:6a:5f:
f1:3f:3e:be:c9:b9:1d:c4:a0:b3:87:65:32:9d:86:9e:e3:4b:
d7:12:2f:01:01:db:d7:f6:fa:a2:e7:24:dd:e2:21:59:3c:9d:
5c:83:85:e9:b6:e5:ce:03:f8:fa:32:63:f1:b5:2d:83:a3:b3:
2b:09:db:b4:f8:0b:1e:e8:76:37:68:ac:09:8b:df:ea:ec:3b:
68:04:48:c5:3e:95:c8:79:92:97:76:67:b2:aa:51:6f:16:43:
88:73:a4:b6:ca:81:98:8b:5c:f7:c8:f3:ee:80:61:5e:60:8d:
a3:28:f7:45:28:5d:6e:31:d3:e7:43:dd:8c:ea:fb:d4:03:45:
0c:2c:b6:a6:f7:71:ff:dc:14:80:76:e1:70:ee:b2:d5:1a:2b:
c7:1b:0e:9d:a0:55:a4:da:90:bd:95:bc:ce:fb:c3:06:18:ed:
30:23:f4:68:d7:e9:e5:c6:b5:d8:de:d8:c1:fe:12:65:11:cc:
40:34:5f:03:eb:82:11:f3:96:0c:f2:c2:f9:92:d1:9f:d3:65:
a7:25:e9:75:03:71:a5:20:b4:6f:a8:79:4e:34:4a:22:65:4b:
e5:47:7e:2c
-----BEGIN CERTIFICATE-----
MIIGgzCCBWugAwIBAgICDLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF
Q0QxRDczQjYwHhcNMjUwNDIyMTEzMzI2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODA3N2U4Ni1mYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAutU+omPwl5LAGVGaayen5tlL9ihnhTYQ/xWj5nGuogfiE9sEX4ptMJ97QnzB
p5s2SV4FiGFOMEQ5LoaqvxzAHldi9P3/HhUzxPTR3aSq/iH/me79IRYmpv14mM5Y
yWDqar7Ge1lJcAulOgkzIl4f03Vuz453fMqPrL3KXHTQNqvi/opy7Q2BMItltUPB
xAHBW645UX4GoeCb1+Hc17wMM2NU/ssMs2qz/rBSpiS51vc36gpZwslKkaEAxceL
d5azzxSJalfuGSpmdG7jInzgRCj8JwrPA3XOpSzkXmdUUEUdatKxjtxR+mhCMZCo
yGwox8zV9sTiHQhuXYT3MmIgeQIDAQABo4IDpzCCA6MwHQYDVR0OBBYEFJVswuGv
BeD6+9asCSIoX0xhTMJRMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1
RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOUIzRkYwRUMx
RjZEMTFGMEJCRUU3NTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggEvBggrBgEFBQcBBwEB
/wSCAR4wggEaMBEEAgABMAsDAwIqmAMEBXr/YDCCAQMEAgACMIH8AwcCJAE8AAAI
MBIDBwIkATwAABQDBwIkATwAABgDBwIkATwAAEgwEgMHAiQBPAAAVAMHAiQBPAAA
WDASAwcCJAE8AACkAwcBJAE8AACoAwcCJAE8AADAMBIDBwMkATwAANgDBwAkATwA
ANwDBwYkATwAAQADBwYkATwAAYAwEgMHBCQBPAACUAMHACQBPAACWgMHASQBPAAC
XDASAwcAJAE8AAJfAwcAJAE8AAJiAwcBJAE8AAKAMBIDBwQkATwAApADBwEkATwA
ApQwEgMHBSQBPAACoAMHASQBPAACpDASAwcEJAE8AAKwAwcBJAE8AAK0AwcGJAE8
AALAMA0GCSqGSIb3DQEBCwUAA4IBAQASzIqDw4J0JclPyn1jtxb2a/FgvKeXd7X9
JDLrmrcLOFFEal/xPz6+ybkdxKCzh2UynYae40vXEi8BAdvX9vqi5yTd4iFZPJ1c
g4XptuXOA/j6MmPxtS2Do7MrCdu0+Ase6HY3aKwJi9/q7DtoBEjFPpXIeZKXdmey
qlFvFkOIc6S2yoGYi1z3yPPugGFeYI2jKPdFKF1uMdPnQ92M6vvUA0UMLLam93H/
3BSAduFw7rLVGivHGw6doFWk2pC9lbzO+8MGGO0wI/Ro1+nlxrXY3tjB/hJlEcxA
NF8D64IR85YM8sL5ktGf02WnJel1A3GlILRvqHlONEoiZUvlR34s
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:35:06 2025 by rpki-client