Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/1E01B6A0543D11F186DD736CA5833773.roa
File: 1E01B6A0543D11F186DD736CA5833773.roa (raw, json)
Hash identifier: tKQG4OVdDdj4FPawULp/6JnWHU/v4Hs+sF2hw82P9C0=
Subject key identifier: DE:37:77:3F:6A:B6:98:EB:17:35:8D:CC:B2:51:9B:C9:4A:D2:57:6D
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0CA3
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/1E01B6A0543D11F186DD736CA5833773.roa
Signing time: Mon 27 Jul 2026 08:48:11 +0000
ROA not before: Mon 27 Jul 2026 08:48:11 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.128.224.0/19 maxlen: 19
43.128.241.0/24 maxlen: 24
43.129.32.0/20 maxlen: 20
43.129.48.0/20 maxlen: 20
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.130.224.0/19 maxlen: 19
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.133.0.0/19 maxlen: 19
43.133.128.0/20 maxlen: 20
43.133.144.0/20 maxlen: 20
43.133.160.0/19 maxlen: 19
43.133.192.0/19 maxlen: 19
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.134.128.0/18 maxlen: 18
43.134.138.0/24 maxlen: 24
43.134.139.0/24 maxlen: 24
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.221.0/24 maxlen: 24
43.152.74.0/23 maxlen: 23
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.221.0/24 maxlen: 24
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.140.0/24 maxlen: 24
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.94.0/23 maxlen: 23
101.32.96.0/20 maxlen: 20
101.32.102.0/23 maxlen: 23
101.32.104.0/21 maxlen: 21
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.52.0/22 maxlen: 22
101.33.114.0/23 maxlen: 24
124.156.208.0/20 maxlen: 20
124.156.224.0/20 maxlen: 20
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
150.109.140.0/22 maxlen: 22
150.109.192.0/20 maxlen: 20
150.109.192.0/21 maxlen: 21
150.109.192.0/23 maxlen: 23
150.109.200.0/22 maxlen: 22
150.109.204.0/23 maxlen: 23
150.109.206.0/24 maxlen: 24
150.109.207.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c000:f1c0::/44 maxlen: 44
240d:c000:f1f0::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3235 (0xca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Jul 27 08:48:11 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a671b4b-86c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:8c:3f:7e:61:cf:bc:59:4e:42:75:50:b4:
00:93:bf:9e:57:2f:7a:ea:4d:5a:76:8a:6c:09:92:
fa:4b:a3:6e:e3:6b:79:c2:80:6c:f5:50:79:21:84:
08:04:cc:70:bc:8e:5e:71:85:80:34:7e:cc:2a:28:
ab:6c:cc:5b:ac:2a:b4:7b:ad:f5:d1:06:65:d4:17:
6d:32:21:39:47:fe:ab:75:c9:3e:77:76:28:98:93:
3a:2c:bd:d4:ab:40:85:8c:06:9b:e0:ef:7b:91:4d:
63:31:f5:68:27:6c:8b:bb:51:0f:02:96:36:7a:55:
28:9d:48:f3:68:b8:13:94:99:89:01:4c:e1:1d:ee:
1e:9e:ca:05:df:2e:e3:15:c5:78:07:93:fd:42:d5:
31:4c:19:4f:f5:1d:c0:e1:de:74:b7:f8:0b:81:65:
89:e0:f4:cb:a5:40:ac:59:b6:04:ad:be:4a:a6:90:
3d:df:ff:44:60:6e:37:47:3e:71:69:6d:4d:1a:1d:
0d:f8:df:e7:63:18:31:f0:e7:1b:25:e2:46:bd:a0:
f2:35:bb:fe:30:cd:dc:f5:28:f0:27:45:39:af:be:
c7:65:31:98:f1:5c:1b:10:46:32:2c:36:2e:5f:27:
20:73:f2:1e:76:db:ed:13:78:62:ff:f1:65:6e:52:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:37:77:3F:6A:B6:98:EB:17:35:8D:CC:B2:51:9B:C9:4A:D2:57:6D
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/1E01B6A0543D11F186DD736CA5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0-43.128.255.255
43.129.32.0/19
43.130.0.0-43.130.191.255
43.130.224.0-43.131.63.255
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.133.31.255
43.133.128.0-43.133.223.255
43.134.0.0-43.134.191.255
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.74.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.167.255.255
43.172.0.0/15
101.32.94.0-101.32.111.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.52.0/22
101.33.114.0/23
124.156.208.0-124.156.239.255
150.109.90.0/23
150.109.140.0/22
150.109.192.0/20
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
7a:7f:93:24:b9:7c:d1:a7:7c:a4:41:ae:dd:ec:66:a7:c3:74:
bb:36:32:86:f9:88:fa:32:21:9c:6a:3b:86:5e:09:69:49:18:
4b:c9:5b:eb:24:d3:e3:ce:40:5a:5b:c0:ae:ae:25:41:46:88:
ce:88:3b:8a:14:5e:df:12:d2:32:ad:59:37:b6:1f:bf:42:3a:
20:1e:63:17:91:1c:6a:7b:62:0b:0b:af:fd:b3:a8:60:5b:fa:
78:bb:f1:ea:59:52:2c:61:45:97:85:dc:22:db:f7:af:a5:79:
f2:92:7b:70:8f:94:61:d8:d9:b1:f9:8b:fd:98:19:b3:e2:9a:
8a:cc:0b:8c:f9:74:2d:d7:32:f9:b6:51:ff:09:52:e8:2a:c6:
64:d1:bd:86:cb:e8:e6:6c:74:d3:b1:92:6a:85:20:36:50:18:
3f:ed:e4:3f:5f:c7:19:06:43:32:b6:ce:61:87:15:34:cb:10:
09:4e:0b:bf:4e:a7:a0:66:f7:86:86:26:dd:c2:91:b6:51:58:
91:4a:40:54:2b:1e:a4:00:88:b2:a1:ca:ad:bd:68:0c:0d:8b:
ac:52:c0:34:f7:f3:bd:80:1b:f6:a6:65:17:3f:6a:1f:9e:54:
65:65:44:df:d7:d6:08:f6:b1:6e:e3:2c:61:6f:4d:60:76:a9:
1f:62:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:16:14 2026 by rpki-client