Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/5CBF3F2A540B11F1B7C20C5592833773.roa
File: 5CBF3F2A540B11F1B7C20C5592833773.roa (raw, json)
Hash identifier: 1RR4rXrGdgVkusSgQXAk0hFyo7p3RZsSCUOiYGlL9OQ=
Subject key identifier: A4:8C:08:2D:87:10:6A:42:33:59:20:8E:16:69:1D:55:F3:25:88:F3
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0DFF
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/5CBF3F2A540B11F1B7C20C5592833773.roa
Signing time: Wed 20 May 2026 05:18:40 +0000
ROA not before: Wed 20 May 2026 05:18:40 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 38322
IP address blocks: 42.152.0.0/14 maxlen: 14
42.153.4.0/24 maxlen: 24
42.153.6.0/24 maxlen: 24
42.153.7.0/24 maxlen: 24
42.153.8.0/24 maxlen: 24
42.153.9.0/24 maxlen: 24
42.153.10.0/24 maxlen: 24
42.153.11.0/24 maxlen: 24
42.153.16.0/24 maxlen: 24
42.153.19.0/24 maxlen: 24
42.153.20.0/24 maxlen: 24
42.153.21.0/24 maxlen: 24
42.153.22.0/24 maxlen: 24
42.153.23.0/24 maxlen: 24
42.153.24.0/24 maxlen: 24
42.153.25.0/24 maxlen: 24
42.153.26.0/24 maxlen: 24
42.153.28.0/24 maxlen: 24
42.153.29.0/24 maxlen: 24
42.153.32.0/24 maxlen: 24
42.153.33.0/24 maxlen: 24
42.153.34.0/24 maxlen: 24
42.153.35.0/24 maxlen: 24
42.153.36.0/24 maxlen: 24
42.153.37.0/24 maxlen: 24
42.153.38.0/24 maxlen: 24
42.153.39.0/24 maxlen: 24
42.153.40.0/24 maxlen: 24
42.153.41.0/24 maxlen: 24
42.153.42.0/24 maxlen: 24
42.153.43.0/24 maxlen: 24
42.153.44.0/24 maxlen: 24
42.153.45.0/24 maxlen: 24
42.153.46.0/24 maxlen: 24
42.153.47.0/24 maxlen: 24
42.153.48.0/24 maxlen: 24
42.153.49.0/24 maxlen: 24
42.153.50.0/24 maxlen: 24
42.153.51.0/24 maxlen: 24
42.153.52.0/24 maxlen: 24
42.153.53.0/24 maxlen: 24
42.153.54.0/24 maxlen: 24
42.153.55.0/24 maxlen: 24
42.153.56.0/24 maxlen: 24
42.153.57.0/24 maxlen: 24
42.153.58.0/24 maxlen: 24
42.153.59.0/24 maxlen: 24
42.153.60.0/24 maxlen: 24
42.153.61.0/24 maxlen: 24
42.153.62.0/24 maxlen: 24
42.153.63.0/24 maxlen: 24
42.153.89.0/24 maxlen: 24
42.153.95.0/24 maxlen: 24
42.153.96.0/24 maxlen: 24
42.153.128.0/24 maxlen: 24
42.153.129.0/24 maxlen: 24
42.153.130.0/24 maxlen: 24
42.153.131.0/24 maxlen: 24
42.153.132.0/24 maxlen: 24
42.153.133.0/24 maxlen: 24
42.153.134.0/24 maxlen: 24
42.153.135.0/24 maxlen: 24
42.153.136.0/24 maxlen: 24
42.153.137.0/24 maxlen: 24
42.153.138.0/24 maxlen: 24
42.153.139.0/24 maxlen: 24
42.153.140.0/24 maxlen: 24
42.153.141.0/24 maxlen: 24
42.153.142.0/24 maxlen: 24
42.153.143.0/24 maxlen: 24
42.153.144.0/24 maxlen: 24
42.153.145.0/24 maxlen: 24
42.153.146.0/24 maxlen: 24
42.153.147.0/24 maxlen: 24
42.153.148.0/24 maxlen: 24
42.153.149.0/24 maxlen: 24
42.153.150.0/24 maxlen: 24
42.153.151.0/24 maxlen: 24
42.153.152.0/24 maxlen: 24
42.153.153.0/24 maxlen: 24
42.153.154.0/24 maxlen: 24
42.153.155.0/24 maxlen: 24
42.153.156.0/24 maxlen: 24
42.153.157.0/24 maxlen: 24
42.153.158.0/24 maxlen: 24
42.153.159.0/24 maxlen: 24
122.255.96.0/19 maxlen: 19
2401:3c00:8::/46 maxlen: 46
2401:3c00:14::/46 maxlen: 46
2401:3c00:18::/46 maxlen: 46
2401:3c00:48::/46 maxlen: 46
2401:3c00:54::/46 maxlen: 46
2401:3c00:58::/46 maxlen: 46
2401:3c00:a4::/48 maxlen: 48
2401:3c00:a5::/48 maxlen: 48
2401:3c00:a6::/48 maxlen: 48
2401:3c00:a7::/48 maxlen: 48
2401:3c00:a8::/48 maxlen: 48
2401:3c00:a9::/48 maxlen: 48
2401:3c00:c0::/46 maxlen: 46
2401:3c00:c0:5::/64 maxlen: 64
2401:3c00:d8::/48 maxlen: 48
2401:3c00:d9::/48 maxlen: 48
2401:3c00:da::/48 maxlen: 48
2401:3c00:db::/48 maxlen: 48
2401:3c00:dc::/48 maxlen: 48
2401:3c00:100::/43 maxlen: 43
2401:3c00:120::/43 maxlen: 43
2401:3c00:180::/43 maxlen: 43
2401:3c00:1a0::/43 maxlen: 43
2401:3c00:260::/48 maxlen: 48
2401:3c00:261::/48 maxlen: 48
2401:3c00:262::/48 maxlen: 48
2401:3c00:280::/48 maxlen: 48
2401:3c00:281::/48 maxlen: 48
2401:3c00:290::/48 maxlen: 48
2401:3c00:291::/48 maxlen: 48
2401:3c00:292::/48 maxlen: 48
2401:3c00:293::/48 maxlen: 48
2401:3c00:294::/48 maxlen: 48
2401:3c00:295::/48 maxlen: 48
2401:3c00:2a0::/48 maxlen: 48
2401:3c00:2a1::/48 maxlen: 48
2401:3c00:2a2::/48 maxlen: 48
2401:3c00:2a3::/48 maxlen: 48
2401:3c00:2a4::/48 maxlen: 48
2401:3c00:2a5::/48 maxlen: 48
2401:3c00:2b0::/48 maxlen: 48
2401:3c00:2b1::/48 maxlen: 48
2401:3c00:2b2::/48 maxlen: 48
2401:3c00:2b3::/48 maxlen: 48
2401:3c00:2b4::/48 maxlen: 48
2401:3c00:2b5::/48 maxlen: 48
2401:3c00:2c0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 18:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3583 (0xdff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: May 20 05:18:40 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a0d4430-4d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:84:b1:32:f9:72:c5:7f:99:ea:b6:d7:13:
c4:b0:16:b4:2c:1d:5f:f9:58:06:c4:ca:a0:56:9e:
e3:06:a5:1f:0d:cf:1f:53:1e:42:07:ca:9b:5e:80:
46:fc:bd:aa:8d:ee:96:eb:13:7e:b9:43:29:e9:2b:
da:f4:cc:8a:11:5e:d9:75:b6:0e:f4:6a:d4:70:6a:
28:3e:b6:e6:96:e6:18:e4:58:f1:6e:88:28:a0:ba:
b0:67:3e:6f:56:ca:b0:6e:dc:7c:ed:39:3e:26:14:
5a:c3:c6:5c:ba:42:8c:bd:3b:4f:90:c7:03:7e:36:
fc:24:d9:aa:8d:73:50:44:92:29:9a:59:34:2d:ab:
79:ab:b9:a6:13:42:0b:55:86:d7:be:b9:02:93:fa:
c6:c0:d2:cc:db:0b:63:36:1a:fa:3f:70:39:77:09:
e4:26:f9:20:30:51:56:bf:6f:5f:c6:e5:85:92:50:
2e:9b:9e:cc:d0:06:95:63:7a:b8:0e:36:6b:44:b5:
f8:c5:fa:e5:2c:3d:a6:b7:47:2b:2b:59:13:65:ea:
35:6e:75:36:9f:13:5a:88:38:19:2c:f8:bd:bc:8e:
2c:f0:cd:c1:92:cf:90:70:29:21:4b:7c:de:d6:89:
a6:b5:cf:85:30:b4:52:c9:c1:59:cd:24:2d:b7:41:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8C:08:2D:87:10:6A:42:33:59:20:8E:16:69:1D:55:F3:25:88:F3
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/5CBF3F2A540B11F1B7C20C5592833773.roa
sbgp-ipAddrBlock: critical
IPv4:
42.152.0.0/14
122.255.96.0/19
IPv6:
2401:3c00:8::/46
2401:3c00:14::-2401:3c00:1b:ffff:ffff:ffff:ffff:ffff
2401:3c00:48::/46
2401:3c00:54::-2401:3c00:5b:ffff:ffff:ffff:ffff:ffff
2401:3c00:a4::-2401:3c00:a9:ffff:ffff:ffff:ffff:ffff
2401:3c00:c0::/46
2401:3c00:d8::-2401:3c00:dc:ffff:ffff:ffff:ffff:ffff
2401:3c00:100::/42
2401:3c00:180::/42
2401:3c00:260::-2401:3c00:262:ffff:ffff:ffff:ffff:ffff
2401:3c00:280::/47
2401:3c00:290::-2401:3c00:295:ffff:ffff:ffff:ffff:ffff
2401:3c00:2a0::-2401:3c00:2a5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2b0::-2401:3c00:2b5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2c0::/42
Signature Algorithm: sha256WithRSAEncryption
2f:c4:e8:30:54:8d:39:f5:cc:ea:a1:3e:30:2b:27:72:2c:12:
52:a5:c3:a9:21:b7:6f:fa:cd:34:73:ec:78:2b:6a:53:de:d5:
2c:10:b4:eb:b5:03:aa:8d:0a:08:98:c1:97:c3:98:f2:db:44:
6c:0b:fb:22:f6:c3:22:8a:18:9b:32:96:0f:de:9b:b4:25:f1:
89:aa:5d:ef:b6:42:ee:90:60:f1:19:26:9f:c5:9c:44:db:01:
45:02:c1:0e:a2:ec:21:a3:0c:97:7e:08:2a:e9:53:9a:47:5b:
f6:89:8f:2e:1c:93:19:3f:c6:4e:9a:7a:d7:e1:62:ab:71:aa:
bf:7f:91:a6:66:fc:c5:e3:6b:02:79:7a:f0:48:60:85:9d:f7:
ef:57:43:28:f3:25:98:50:e1:50:18:b5:ac:0c:64:58:01:ba:
76:4d:91:41:18:31:26:77:a6:14:f5:71:20:05:8a:33:d7:59:
f0:6d:ad:f2:3e:ac:9b:12:d6:f5:43:7d:fe:8d:cf:e7:e0:43:
da:e6:7a:c5:54:0a:d9:ed:16:19:27:9d:43:65:03:aa:a4:f5:
98:04:5f:69:cf:db:14:f2:ab:4e:c4:3b:b6:52:cf:32:86:eb:
64:49:30:51:4f:8f:82:21:58:c7:9e:db:5c:db:b2:4c:7d:eb:
33:d0:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 20:11:32 2026 by rpki-client