Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/5DF74F48956211F1AC3F97E96811F970.roa
File: 5DF74F48956211F1AC3F97E96811F970.roa (raw, json)
Hash identifier: n2tAxKbJZXNir9xEBlEeg5g4K3jn8USGwY+8bwTUumE=
Subject key identifier: 11:C3:E9:DB:D7:54:01:D1:71:59:D3:C6:48:BE:A7:0A:33:58:8D:95
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2C77
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/5DF74F48956211F1AC3F97E96811F970.roa
Signing time: Tue 11 Aug 2026 16:50:50 +0000
ROA not before: Tue 11 Aug 2026 16:50:50 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45430
IP address blocks: 49.0.64.0/18 maxlen: 18
49.229.0.0/16 maxlen: 16
49.229.0.0/20 maxlen: 20
49.229.8.0/24 maxlen: 24
49.229.31.0/24 maxlen: 24
49.229.33.0/24 maxlen: 24
49.229.68.0/24 maxlen: 24
49.229.94.0/24 maxlen: 24
49.229.95.0/24 maxlen: 24
49.229.112.0/21 maxlen: 21
49.229.128.0/17 maxlen: 17
49.229.160.0/19 maxlen: 19
49.229.192.0/19 maxlen: 19
49.229.224.0/19 maxlen: 19
49.230.0.0/16 maxlen: 16
49.230.40.0/24 maxlen: 24
49.230.41.0/24 maxlen: 24
49.230.42.0/24 maxlen: 24
49.230.43.0/24 maxlen: 24
49.231.0.0/16 maxlen: 16
49.231.32.0/21 maxlen: 21
49.231.44.0/22 maxlen: 24
49.231.48.0/20 maxlen: 24
49.231.64.0/21 maxlen: 21
49.231.70.0/24 maxlen: 24
49.231.71.0/24 maxlen: 24
49.231.80.0/20 maxlen: 20
49.231.87.0/24 maxlen: 24
49.231.96.0/19 maxlen: 24
58.64.0.0/17 maxlen: 17
58.64.64.0/18 maxlen: 18
58.136.0.0/16 maxlen: 16
103.3.64.0/22 maxlen: 22
103.3.64.0/24 maxlen: 24
110.49.113.0/24 maxlen: 24
115.178.56.0/22 maxlen: 22
115.178.57.0/24 maxlen: 24
115.178.59.0/24 maxlen: 24
119.31.0.0/17 maxlen: 17
182.232.0.0/16 maxlen: 16
202.80.224.0/19 maxlen: 19
2001:df2:400::/48 maxlen: 48
2001:44c8::/32 maxlen: 32
2405:9800::/32 maxlen: 32
2405:9800:8::/48 maxlen: 48
2405:9800:8::/49 maxlen: 64
2405:9800:8:8000::/49 maxlen: 64
2405:9800:c::/48 maxlen: 48
2405:9800:d::/48 maxlen: 48
2405:9800:10::/48 maxlen: 48
2405:9800:10::/49 maxlen: 64
2405:9800:10:8000::/49 maxlen: 64
2405:9800:12::/48 maxlen: 48
2405:9800:13::/48 maxlen: 48
2405:9800:13::/49 maxlen: 64
2405:9800:14::/48 maxlen: 48
2405:9800:14::/49 maxlen: 64
2405:9800:16::/48 maxlen: 48
2405:9800:16::/49 maxlen: 64
2405:9800:20::/48 maxlen: 48
2405:9800:20::/49 maxlen: 64
2405:9800:20:8000::/49 maxlen: 64
2405:9800:21::/48 maxlen: 48
2405:9800:21::/49 maxlen: 64
2405:9800:21:8000::/49 maxlen: 64
2405:9800:30::/44 maxlen: 48
2405:9800:30::/49 maxlen: 64
2405:9800:30:8000::/49 maxlen: 64
2405:9800:31::/49 maxlen: 64
2405:9800:31:8000::/49 maxlen: 64
2405:9800:40::/48 maxlen: 48
2405:9800:40::/49 maxlen: 64
2405:9800:40:8000::/49 maxlen: 64
2405:9800:41::/48 maxlen: 48
2405:9800:42::/48 maxlen: 48
2405:9800:42::/49 maxlen: 64
2405:9800:42:8000::/49 maxlen: 64
2405:9800:60::/44 maxlen: 44
2405:9800:9800::/48 maxlen: 48
2405:9800:9805::/48 maxlen: 48
2405:9800:9813::/48 maxlen: 48
2405:9800:b000::/36 maxlen: 36
2405:9800:c820::/44 maxlen: 44
2405:9800:c925::/48 maxlen: 48
2405:9800:c92e::/48 maxlen: 48
2405:9800:f00f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11383 (0x2c77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Aug 11 16:50:50 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a7b52ea-819c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:99:78:03:4a:ed:38:18:dd:eb:38:ea:fc:
fd:ed:7e:7d:24:b4:66:90:bc:5e:9b:4a:33:97:b0:
df:03:5f:2e:24:55:cd:43:77:7f:e7:0f:28:b6:99:
2e:9a:60:ab:6b:d5:75:db:de:33:35:d6:51:87:fd:
9e:d5:68:bc:0d:35:d3:ed:a7:02:70:54:1f:d9:d4:
b9:29:aa:4e:19:80:98:ea:b6:8d:ed:98:39:5e:5d:
78:9e:9e:42:98:53:0c:a9:50:e2:09:cb:6a:6e:98:
00:21:d1:d1:6b:a0:80:41:72:2a:fa:e3:1b:e5:74:
24:22:be:8e:45:18:ff:7d:d8:20:b8:b9:32:07:ce:
1d:35:76:c4:ca:9c:a8:df:87:89:7b:e5:dd:c0:d5:
2e:84:50:19:1e:fb:bd:74:a2:42:2c:dd:22:0d:87:
bb:9a:f0:52:c2:10:13:18:96:a9:35:48:52:82:ce:
e7:e5:9c:b6:b4:b9:44:ed:90:14:b3:8c:aa:a2:a3:
0f:96:64:8b:79:83:f0:df:32:b4:82:e1:86:6e:f4:
1f:15:e8:51:b5:56:46:c9:c5:9e:c6:d1:9b:48:95:
37:5b:2d:06:2c:4d:84:32:f5:72:ff:b8:65:56:1b:
1f:25:46:90:cc:33:fe:9b:c1:0b:cf:6a:2b:c4:06:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C3:E9:DB:D7:54:01:D1:71:59:D3:C6:48:BE:A7:0A:33:58:8D:95
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/5DF74F48956211F1AC3F97E96811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
49.0.64.0/18
49.229.0.0-49.231.255.255
58.64.0.0/17
58.136.0.0/16
103.3.64.0/22
110.49.113.0/24
115.178.56.0/22
119.31.0.0/17
182.232.0.0/16
202.80.224.0/19
IPv6:
2001:df2:400::/48
2001:44c8::/32
2405:9800::/32
Signature Algorithm: sha256WithRSAEncryption
62:65:dc:87:7b:9a:5c:2a:84:2a:b1:d2:dc:90:ef:31:f6:e7:
9f:6d:70:e3:42:8a:d1:e7:bf:a1:b2:e8:03:e7:6b:2a:35:71:
df:86:fe:f4:e4:24:82:d7:1a:c0:2b:d0:5b:20:e9:bc:bb:ef:
82:c0:1a:d9:18:77:c3:0e:7a:7d:21:54:f2:54:90:ff:9b:71:
00:f2:71:f2:76:95:cb:49:84:b7:66:3b:9d:f5:7b:0f:82:fc:
c5:18:0f:2e:18:67:8a:ef:3c:f2:53:14:6b:05:ab:f9:20:3f:
9d:94:a4:3b:47:0b:d6:c0:f8:8a:e0:f4:3b:cf:6c:30:f2:b2:
bc:57:0b:29:ee:df:14:f2:a3:5a:48:0b:c5:87:53:8e:3b:8c:
36:0e:f9:42:1b:cf:61:6e:86:e4:13:53:56:37:d7:ae:0c:ac:
f3:e9:e7:90:65:0d:47:d4:81:97:e9:2f:7d:c3:0d:be:a9:e9:
dd:4a:27:de:40:3e:67:c1:cf:98:f4:d8:69:05:8d:d6:4c:78:
f7:1e:6a:6b:b3:6f:26:a3:73:c5:fa:67:04:7b:60:7c:a4:69:
16:17:2c:84:0e:a2:7a:15:2e:42:0b:d8:02:a0:04:da:bc:9e:
65:2a:a7:15:db:0e:63:eb:b6:07:75:d8:b9:63:e9:f8:62:37:
d5:6e:87:24
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICLHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwODExMTY1MDUwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdiNTJlYS04MTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0OZeANK7TgY3es46vz97X59JLRmkLxem0ozl7DfA18uJFXNQ3d/5w8otpku
mmCra9V1294zNdZRh/2e1Wi8DTXT7acCcFQf2dS5KapOGYCY6raN7Zg5Xl14np5C
mFMMqVDiCctqbpgAIdHRa6CAQXIq+uMb5XQkIr6ORRj/fdgguLkyB84dNXbEypyo
34eJe+XdwNUuhFAZHvu9dKJCLN0iDYe7mvBSwhATGJapNUhSgs7n5Zy2tLlE7ZAU
s4yqoqMPlmSLeYPw3zK0guGGbvQfFehRtVZGycWextGbSJU3Wy0GLE2EMvVy/7hl
VhsfJUaQzDP+m8ELz2orxAb3JwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFBHD6dvX
VAHRcVnTxki+pwozWI2VMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvNURGNzRGNDg5
NTYyMTFGMUFDM0Y5N0U5NjgxMUY5NzAucm9hMHgGCCsGAQUFBwEHAQH/BGkwZzBG
BAIAATBAAwQGMQBAMAoDAwAx5QMDAzHgAwQHOkAAAwMAOogDBAJnA0ADBABuMXED
BAJzsjgDBAd3HwADAwC26AMEBcpQ4DAdBAIAAjAXAwcAIAEN8gQAAwUAIAFEyAMF
ACQFmAAwDQYJKoZIhvcNAQELBQADggEBAGJl3Id7mlwqhCqx0tyQ7zH2559tcONC
itHnv6Gy6APnayo1cd+G/vTkJILXGsAr0Fsg6by774LAGtkYd8MOen0hVPJUkP+b
cQDycfJ2lctJhLdmO531ew+C/MUYDy4YZ4rvPPJTFGsFq/kgP52UpDtHC9bA+Irg
9DvPbDDysrxXCynu3xTyo1pIC8WHU447jDYO+UIbz2FuhuQTU1Y3164MrPPp55Bl
DUfUgZfpL33DDb6p6d1KJ95APmfBz5j02GkFjdZMePceamuzbyajc8X6ZwR7YHyk
aRYXLIQOonoVLkIL2AKgBNq8nmUqpxXbDmPrtgd12Llj6fhiN9VuhyQ=
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:20:27 2026 by rpki-client