Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa
File: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (raw, json)
Hash identifier: oIlNxA/X4w99Dtq7i69xwEidK0QOO+TfD/eZvN+32J0=
Subject key identifier: 43:58:3B:3E:9A:BF:56:70:47:D1:14:01:94:09:70:EB:78:EA:38:10
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0D47
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa
Signing time: Sun 02 Nov 2025 19:08:06 +0000
ROA not before: Sun 02 Nov 2025 19:08:06 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 38322
IP address blocks: 42.152.0.0/14 maxlen: 14
42.153.4.0/24 maxlen: 24
42.153.6.0/24 maxlen: 24
42.153.7.0/24 maxlen: 24
42.153.8.0/24 maxlen: 24
42.153.9.0/24 maxlen: 24
42.153.10.0/24 maxlen: 24
42.153.11.0/24 maxlen: 24
42.153.16.0/24 maxlen: 24
42.153.19.0/24 maxlen: 24
42.153.20.0/24 maxlen: 24
42.153.21.0/24 maxlen: 24
42.153.22.0/24 maxlen: 24
42.153.23.0/24 maxlen: 24
42.153.24.0/24 maxlen: 24
42.153.25.0/24 maxlen: 24
42.153.26.0/24 maxlen: 24
42.153.28.0/24 maxlen: 24
42.153.29.0/24 maxlen: 24
42.153.32.0/24 maxlen: 24
42.153.33.0/24 maxlen: 24
42.153.34.0/24 maxlen: 24
42.153.35.0/24 maxlen: 24
42.153.36.0/24 maxlen: 24
42.153.37.0/24 maxlen: 24
42.153.38.0/24 maxlen: 24
42.153.39.0/24 maxlen: 24
42.153.40.0/24 maxlen: 24
42.153.41.0/24 maxlen: 24
42.153.42.0/24 maxlen: 24
42.153.43.0/24 maxlen: 24
42.153.44.0/24 maxlen: 24
42.153.45.0/24 maxlen: 24
42.153.46.0/24 maxlen: 24
42.153.47.0/24 maxlen: 24
42.153.48.0/24 maxlen: 24
42.153.49.0/24 maxlen: 24
42.153.50.0/24 maxlen: 24
42.153.51.0/24 maxlen: 24
42.153.52.0/24 maxlen: 24
42.153.53.0/24 maxlen: 24
42.153.54.0/24 maxlen: 24
42.153.55.0/24 maxlen: 24
42.153.56.0/24 maxlen: 24
42.153.57.0/24 maxlen: 24
42.153.58.0/24 maxlen: 24
42.153.59.0/24 maxlen: 24
42.153.60.0/24 maxlen: 24
42.153.61.0/24 maxlen: 24
42.153.62.0/24 maxlen: 24
42.153.63.0/24 maxlen: 24
42.153.89.0/24 maxlen: 24
42.153.95.0/24 maxlen: 24
42.153.96.0/24 maxlen: 24
42.153.128.0/24 maxlen: 24
42.153.129.0/24 maxlen: 24
42.153.130.0/24 maxlen: 24
42.153.131.0/24 maxlen: 24
42.153.132.0/24 maxlen: 24
42.153.133.0/24 maxlen: 24
42.153.134.0/24 maxlen: 24
42.153.135.0/24 maxlen: 24
42.153.136.0/24 maxlen: 24
42.153.137.0/24 maxlen: 24
42.153.138.0/24 maxlen: 24
42.153.139.0/24 maxlen: 24
42.153.140.0/24 maxlen: 24
42.153.141.0/24 maxlen: 24
42.153.142.0/24 maxlen: 24
42.153.143.0/24 maxlen: 24
42.153.144.0/24 maxlen: 24
42.153.145.0/24 maxlen: 24
42.153.146.0/24 maxlen: 24
42.153.147.0/24 maxlen: 24
42.153.148.0/24 maxlen: 24
42.153.149.0/24 maxlen: 24
42.153.150.0/24 maxlen: 24
42.153.151.0/24 maxlen: 24
42.153.152.0/24 maxlen: 24
42.153.153.0/24 maxlen: 24
42.153.154.0/24 maxlen: 24
42.153.155.0/24 maxlen: 24
42.153.156.0/24 maxlen: 24
42.153.157.0/24 maxlen: 24
42.153.158.0/24 maxlen: 24
42.153.159.0/24 maxlen: 24
122.255.96.0/19 maxlen: 19
2401:3c00:8::/46 maxlen: 46
2401:3c00:14::/46 maxlen: 46
2401:3c00:18::/46 maxlen: 46
2401:3c00:48::/46 maxlen: 46
2401:3c00:54::/46 maxlen: 46
2401:3c00:58::/46 maxlen: 46
2401:3c00:a4::/48 maxlen: 48
2401:3c00:a5::/48 maxlen: 48
2401:3c00:a6::/48 maxlen: 48
2401:3c00:a7::/48 maxlen: 48
2401:3c00:a8::/48 maxlen: 48
2401:3c00:a9::/48 maxlen: 48
2401:3c00:c0::/46 maxlen: 46
2401:3c00:c0:5::/64 maxlen: 64
2401:3c00:d8::/48 maxlen: 48
2401:3c00:d9::/48 maxlen: 48
2401:3c00:da::/48 maxlen: 48
2401:3c00:db::/48 maxlen: 48
2401:3c00:dc::/48 maxlen: 48
2401:3c00:100::/43 maxlen: 43
2401:3c00:120::/43 maxlen: 43
2401:3c00:180::/43 maxlen: 43
2401:3c00:1a0::/43 maxlen: 43
2401:3c00:250::/48 maxlen: 48
2401:3c00:251::/48 maxlen: 48
2401:3c00:252::/48 maxlen: 48
2401:3c00:253::/48 maxlen: 48
2401:3c00:254::/48 maxlen: 48
2401:3c00:255::/48 maxlen: 48
2401:3c00:256::/48 maxlen: 48
2401:3c00:257::/48 maxlen: 48
2401:3c00:258::/48 maxlen: 48
2401:3c00:259::/48 maxlen: 48
2401:3c00:25a::/48 maxlen: 48
2401:3c00:25c::/48 maxlen: 48
2401:3c00:25d::/48 maxlen: 48
2401:3c00:25f::/48 maxlen: 48
2401:3c00:260::/48 maxlen: 48
2401:3c00:261::/48 maxlen: 48
2401:3c00:262::/48 maxlen: 48
2401:3c00:280::/48 maxlen: 48
2401:3c00:281::/48 maxlen: 48
2401:3c00:290::/48 maxlen: 48
2401:3c00:291::/48 maxlen: 48
2401:3c00:292::/48 maxlen: 48
2401:3c00:293::/48 maxlen: 48
2401:3c00:294::/48 maxlen: 48
2401:3c00:295::/48 maxlen: 48
2401:3c00:2a0::/48 maxlen: 48
2401:3c00:2a1::/48 maxlen: 48
2401:3c00:2a2::/48 maxlen: 48
2401:3c00:2a3::/48 maxlen: 48
2401:3c00:2a4::/48 maxlen: 48
2401:3c00:2a5::/48 maxlen: 48
2401:3c00:2b0::/48 maxlen: 48
2401:3c00:2b1::/48 maxlen: 48
2401:3c00:2b2::/48 maxlen: 48
2401:3c00:2b3::/48 maxlen: 48
2401:3c00:2b4::/48 maxlen: 48
2401:3c00:2b5::/48 maxlen: 48
2401:3c00:2c0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3399 (0xd47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Nov 2 19:08:06 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6907ac16-49fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:5b:1e:b2:a2:e0:9c:b6:c5:5c:fe:87:b9:
6e:aa:da:9b:8b:bb:ef:70:53:99:73:f9:2f:4f:b6:
ec:1c:80:ae:ac:b2:35:b5:88:3a:fe:17:d1:26:7d:
08:45:b7:b5:f5:47:39:60:3e:12:93:34:8e:83:b2:
ef:19:f8:e8:1a:7e:55:f3:6c:f8:4d:47:6a:a7:56:
6d:5e:73:57:60:f1:9b:34:15:7a:c2:b5:30:15:50:
50:18:3a:d5:e0:b5:06:9b:3f:ec:5b:aa:02:c1:38:
15:f9:a5:ad:e8:a0:bf:bd:85:fd:bc:5d:d6:49:59:
f1:05:1c:27:a4:84:af:f0:df:f1:8c:5e:00:00:ac:
73:51:28:ad:77:ac:55:79:c8:b4:ec:02:21:2b:ab:
f6:9d:39:78:0f:55:76:46:8d:8e:7a:82:5d:cc:45:
70:f5:ea:50:31:f1:68:80:9e:58:a0:b0:27:07:4d:
36:6d:ee:f1:a0:48:be:40:81:de:82:79:e3:41:9a:
9a:7d:d5:39:47:7b:ca:52:70:cd:9f:3d:2b:38:71:
f6:28:8c:78:df:1c:24:59:6f:c5:91:44:65:39:76:
23:6e:28:e7:08:9e:4e:06:1c:92:f1:4d:60:f4:22:
65:0b:ae:99:4e:3d:7d:ed:51:02:b8:c3:ca:32:4a:
ec:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:58:3B:3E:9A:BF:56:70:47:D1:14:01:94:09:70:EB:78:EA:38:10
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.152.0.0/14
122.255.96.0/19
IPv6:
2401:3c00:8::/46
2401:3c00:14::-2401:3c00:1b:ffff:ffff:ffff:ffff:ffff
2401:3c00:48::/46
2401:3c00:54::-2401:3c00:5b:ffff:ffff:ffff:ffff:ffff
2401:3c00:a4::-2401:3c00:a9:ffff:ffff:ffff:ffff:ffff
2401:3c00:c0::/46
2401:3c00:d8::-2401:3c00:dc:ffff:ffff:ffff:ffff:ffff
2401:3c00:100::/42
2401:3c00:180::/42
2401:3c00:250::-2401:3c00:25a:ffff:ffff:ffff:ffff:ffff
2401:3c00:25c::/47
2401:3c00:25f::-2401:3c00:262:ffff:ffff:ffff:ffff:ffff
2401:3c00:280::/47
2401:3c00:290::-2401:3c00:295:ffff:ffff:ffff:ffff:ffff
2401:3c00:2a0::-2401:3c00:2a5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2b0::-2401:3c00:2b5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2c0::/42
Signature Algorithm: sha256WithRSAEncryption
41:b3:92:62:af:30:4f:9f:e1:17:81:6a:ef:39:2a:61:03:ac:
00:06:ee:ec:b2:b0:12:b2:25:0d:3d:ae:52:ac:ca:99:0c:72:
32:69:57:27:80:86:dd:70:9c:60:b2:d9:c5:59:d6:93:d8:8d:
a9:c1:19:0b:45:53:42:f6:a3:1f:71:07:f6:bb:06:f5:1b:80:
b1:3f:c6:81:13:71:f7:52:0e:82:88:52:c8:46:26:86:ea:0f:
85:73:e2:13:5b:f7:cb:52:44:3e:39:ab:e5:7d:e8:6e:43:7e:
bd:97:ec:01:bb:d4:c9:46:13:cf:eb:05:03:d3:fd:7d:92:9b:
a2:f7:33:49:0f:49:51:38:2e:e8:a6:12:00:e0:a3:0d:a6:53:
e8:b3:d8:05:7e:71:74:5c:db:68:40:07:65:2f:f2:9d:48:3c:
c5:43:12:1f:f3:16:69:fa:ab:e6:81:37:a2:73:5c:23:e6:7b:
52:01:65:8d:f6:b4:aa:62:34:03:6e:3e:e2:e5:b6:f6:d1:68:
08:65:27:7b:36:74:5d:c4:22:22:38:cf:6e:05:1f:a3:85:75:
de:f1:3a:03:f6:98:11:a3:98:6e:7e:bf:b0:f8:7b:3b:e7:2b:
6d:0f:10:5d:a6:44:cd:3b:29:c8:4b:10:35:85:6b:d1:63:2c:
c2:c2:df:6d
-----BEGIN CERTIFICATE-----
MIIGgzCCBWugAwIBAgICDUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF
Q0QxRDczQjYwHhcNMjUxMTAyMTkwODA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA3YWMxNi00OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn6xbHrKi4Jy2xVz+h7luqtqbi7vvcFOZc/kvT7bsHICurLI1tYg6/hfRJn0I
Rbe19Uc5YD4SkzSOg7LvGfjoGn5V82z4TUdqp1ZtXnNXYPGbNBV6wrUwFVBQGDrV
4LUGmz/sW6oCwTgV+aWt6KC/vYX9vF3WSVnxBRwnpISv8N/xjF4AAKxzUSitd6xV
eci07AIhK6v2nTl4D1V2Ro2OeoJdzEVw9epQMfFogJ5YoLAnB002be7xoEi+QIHe
gnnjQZqafdU5R3vKUnDNnz0rOHH2KIx43xwkWW/FkURlOXYjbijnCJ5OBhyS8U1g
9CJlC66ZTj197VECuMPKMkrs+wIDAQABo4IDpzCCA6MwHQYDVR0OBBYEFENYOz6a
v1ZwR9EUAZQJcOt46jgQMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1
RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOUIzRkYwRUMx
RjZEMTFGMEJCRUU3NTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggEvBggrBgEFBQcBBwEB
/wSCAR4wggEaMBEEAgABMAsDAwIqmAMEBXr/YDCCAQMEAgACMIH8AwcCJAE8AAAI
MBIDBwIkATwAABQDBwIkATwAABgDBwIkATwAAEgwEgMHAiQBPAAAVAMHAiQBPAAA
WDASAwcCJAE8AACkAwcBJAE8AACoAwcCJAE8AADAMBIDBwMkATwAANgDBwAkATwA
ANwDBwYkATwAAQADBwYkATwAAYAwEgMHBCQBPAACUAMHACQBPAACWgMHASQBPAAC
XDASAwcAJAE8AAJfAwcAJAE8AAJiAwcBJAE8AAKAMBIDBwQkATwAApADBwEkATwA
ApQwEgMHBSQBPAACoAMHASQBPAACpDASAwcEJAE8AAKwAwcBJAE8AAK0AwcGJAE8
AALAMA0GCSqGSIb3DQEBCwUAA4IBAQBBs5JirzBPn+EXgWrvOSphA6wABu7ssrAS
siUNPa5SrMqZDHIyaVcngIbdcJxgstnFWdaT2I2pwRkLRVNC9qMfcQf2uwb1G4Cx
P8aBE3H3Ug6CiFLIRiaG6g+Fc+ITW/fLUkQ+OavlfehuQ369l+wBu9TJRhPP6wUD
0/19kpui9zNJD0lROC7ophIA4KMNplPos9gFfnF0XNtoQAdlL/KdSDzFQxIf8xZp
+qvmgTeic1wj5ntSAWWN9rSqYjQDbj7i5bb20WgIZSd7NnRdxCIiOM9uBR+jhXXe
8ToD9pgRo5hufr+w+Hs75yttDxBdpkTNOynISxA1hWvRYyzCwt9t
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:36:36 2025 by rpki-client