Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/59DBAE3E318311F09059AF40C4F9AE02.roa
File: 59DBAE3E318311F09059AF40C4F9AE02.roa (raw, json)
Hash identifier: 4E5Jq86BgJpIy8fM4gcOoeAcJIuBNxvyb7xjH5Wa4XY=
Subject key identifier: DD:20:44:8A:B8:50:46:B0:B8:0D:83:C8:F8:5A:B7:8E:18:F9:C4:3F
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0BB5
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/59DBAE3E318311F09059AF40C4F9AE02.roa
Signing time: Wed 29 Oct 2025 02:42:38 +0000
ROA not before: Wed 29 Oct 2025 02:42:38 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.128.224.0/19 maxlen: 19
43.128.241.0/24 maxlen: 24
43.129.32.0/20 maxlen: 20
43.129.48.0/20 maxlen: 20
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.130.224.0/19 maxlen: 19
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.133.0.0/19 maxlen: 19
43.133.128.0/20 maxlen: 20
43.133.144.0/20 maxlen: 20
43.133.160.0/19 maxlen: 19
43.133.192.0/19 maxlen: 19
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.134.128.0/18 maxlen: 18
43.134.138.0/24 maxlen: 24
43.134.139.0/24 maxlen: 24
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.221.0/24 maxlen: 24
43.152.74.0/23 maxlen: 23
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.155.149.0/24 maxlen: 24
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.140.0/24 maxlen: 24
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.94.0/23 maxlen: 23
101.32.96.0/20 maxlen: 20
101.32.102.0/23 maxlen: 23
101.32.104.0/21 maxlen: 21
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.52.0/22 maxlen: 22
101.33.114.0/23 maxlen: 24
124.156.208.0/20 maxlen: 20
124.156.224.0/20 maxlen: 20
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
150.109.140.0/22 maxlen: 22
150.109.192.0/20 maxlen: 20
150.109.192.0/21 maxlen: 21
150.109.192.0/23 maxlen: 23
150.109.200.0/22 maxlen: 22
150.109.204.0/23 maxlen: 23
150.109.206.0/24 maxlen: 24
150.109.207.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:14::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:40:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2997 (0xbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Oct 29 02:42:38 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69017f1d-a2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:bd:ee:ef:24:80:93:0a:e7:d1:fb:39:de:
3e:f7:cc:79:68:ba:5e:8b:3c:22:65:85:51:53:ca:
df:fd:0e:68:53:e0:62:2e:ee:53:bd:06:e2:5f:3d:
d9:e0:bb:27:01:32:4c:d1:b8:0e:13:e0:8b:76:59:
70:fe:5c:dd:48:58:fb:37:91:dc:be:ea:48:80:ba:
8a:3d:9e:19:b5:b6:86:70:3e:47:ad:d6:dd:49:a7:
48:3f:09:fc:ca:dc:51:62:5f:89:15:c4:94:77:05:
b0:ba:40:14:e3:27:18:f2:79:6d:cc:3b:5c:bd:2d:
00:72:14:9c:ff:bd:90:46:1a:92:88:cc:b1:cf:54:
3f:4f:09:f4:ed:4f:44:df:06:ec:fc:70:e1:68:59:
d2:33:cc:8e:9b:9d:7f:17:c3:92:62:cb:b2:79:99:
b5:ae:03:43:3e:42:10:e6:4e:f3:77:be:3d:79:6d:
25:aa:cf:a9:78:d6:52:04:af:3c:88:9b:ba:83:57:
27:f3:4f:e5:cf:4e:30:45:5c:78:03:9e:62:4b:d4:
c1:8d:79:72:2d:38:76:ff:0f:f1:8c:66:30:97:32:
1d:8d:ba:d6:8a:a4:e1:d1:6d:83:87:42:dd:1f:a6:
cd:b5:c0:9a:e1:15:1d:03:fe:90:3c:fe:8b:83:de:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:44:8A:B8:50:46:B0:B8:0D:83:C8:F8:5A:B7:8E:18:F9:C4:3F
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/59DBAE3E318311F09059AF40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0-43.128.255.255
43.129.32.0/19
43.130.0.0-43.130.191.255
43.130.224.0-43.131.63.255
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.133.31.255
43.133.128.0-43.133.223.255
43.134.0.0-43.134.191.255
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.74.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.167.255.255
43.172.0.0/15
101.32.94.0-101.32.111.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.52.0/22
101.33.114.0/23
124.156.208.0-124.156.239.255
150.109.90.0/23
150.109.140.0/22
150.109.192.0/20
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
40:21:5f:a0:5a:1d:dd:de:e3:e0:bf:c3:df:b3:e0:08:70:6a:
07:45:cc:62:6c:30:b9:e1:61:5a:a3:c7:4a:bf:04:76:89:9b:
bb:18:dd:60:8a:4d:c2:d5:2f:3d:73:7c:04:5a:82:c7:3c:a8:
01:2e:85:69:67:66:34:0e:2a:c1:86:9b:7e:ef:16:f1:32:71:
45:fc:2e:72:0c:69:0f:6b:bb:23:e4:e7:4f:b4:7a:6d:74:eb:
4e:27:62:1f:83:74:ae:92:d3:1a:15:13:04:9d:ee:e8:92:b8:
ea:40:2c:b2:87:e2:d9:77:77:4c:36:50:52:ce:aa:94:b1:e9:
d6:1c:f7:13:b9:09:4f:39:f6:00:c3:b9:d6:43:f1:3c:6e:d6:
3b:96:38:6b:cb:72:ac:99:71:b8:06:15:b8:15:31:06:0b:aa:
aa:f5:9b:80:4d:97:33:7c:bb:08:d7:05:2d:58:4b:a3:32:19:
10:24:d0:d0:79:81:c7:db:be:bb:f3:1f:8a:c9:23:f5:60:65:
f0:42:93:04:3c:57:df:49:23:0a:ff:dd:db:4e:4f:fa:6a:86:
12:6b:04:58:03:61:64:f7:9d:05:8d:75:ce:e3:f4:1f:7d:b3:
83:19:5d:91:c7:53:19:9a:0f:2b:a9:ef:3f:e2:96:69:06:c2:
da:3a:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:38:13 2025 by rpki-client