Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/59DBAE3E318311F09059AF40C4F9AE02.roa
File: 59DBAE3E318311F09059AF40C4F9AE02.roa (raw, json)
Hash identifier: aVl556fzOpXZhCAQS6RzMi60L/5QSS92vYE3e8gw1zM=
Subject key identifier: 0F:E6:51:C5:66:8D:B0:10:F8:C1:13:E2:1A:D9:16:FC:93:AE:A3:D9
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0B38
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/59DBAE3E318311F09059AF40C4F9AE02.roa
Signing time: Tue 10 Jun 2025 22:10:06 +0000
ROA not before: Tue 10 Jun 2025 22:10:06 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.128.224.0/19 maxlen: 19
43.128.241.0/24 maxlen: 24
43.129.32.0/20 maxlen: 20
43.129.48.0/20 maxlen: 20
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.130.224.0/19 maxlen: 19
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.133.0.0/19 maxlen: 19
43.133.128.0/20 maxlen: 20
43.133.144.0/20 maxlen: 20
43.133.160.0/19 maxlen: 19
43.133.192.0/19 maxlen: 19
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.221.0/24 maxlen: 24
43.152.74.0/23 maxlen: 23
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.155.149.0/24 maxlen: 24
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.140.0/24 maxlen: 24
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.94.0/23 maxlen: 23
101.32.96.0/20 maxlen: 20
101.32.102.0/23 maxlen: 23
101.32.104.0/21 maxlen: 21
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.52.0/22 maxlen: 22
101.33.114.0/23 maxlen: 24
124.156.208.0/20 maxlen: 20
124.156.224.0/20 maxlen: 20
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
150.109.140.0/22 maxlen: 22
150.109.192.0/20 maxlen: 20
150.109.192.0/21 maxlen: 21
150.109.192.0/23 maxlen: 23
150.109.200.0/22 maxlen: 22
150.109.204.0/23 maxlen: 23
150.109.206.0/24 maxlen: 24
150.109.207.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:14::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Jun 2025 21:37:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2872 (0xb38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Jun 10 22:10:06 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6848ad3e-0a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:1b:3e:ab:33:4d:81:fc:3f:f9:29:9e:e5:
8b:32:8b:e9:7e:ba:df:72:0e:70:6d:95:10:5a:5e:
f2:62:0d:35:98:bf:2e:41:00:d3:65:14:72:a4:c8:
61:4b:02:43:f2:16:3a:8c:85:90:f7:64:8e:97:5b:
2d:eb:2f:49:bb:dd:9c:6f:28:86:34:24:17:8d:71:
3c:e2:cb:2e:0d:2d:df:38:b4:51:00:e0:2e:92:6f:
ee:1b:10:ed:dc:ca:f6:37:24:70:b8:ce:e5:17:bb:
04:99:83:91:16:08:d9:78:8a:2a:64:9a:1a:1a:68:
08:3f:95:66:dd:81:ff:41:de:5a:30:38:9e:5a:cc:
0e:f4:04:55:63:f5:7c:a4:b8:39:f3:36:d0:2e:36:
28:a0:42:a1:59:c3:f1:9f:50:ef:44:f7:de:ff:20:
c7:30:ca:88:90:71:40:60:44:6a:5c:e3:89:f6:ca:
e8:55:14:a1:1e:71:f7:da:55:ff:1d:ae:70:c0:5e:
ee:54:47:6f:74:7c:c1:e1:90:28:32:8e:58:44:cd:
ba:5c:88:b0:e1:2d:f7:5e:5e:69:c3:06:ac:19:84:
e0:57:72:7f:11:c6:aa:e1:73:1a:af:73:e4:36:f6:
e0:86:db:72:a7:53:d0:ae:ef:ad:1a:07:11:1e:ac:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E6:51:C5:66:8D:B0:10:F8:C1:13:E2:1A:D9:16:FC:93:AE:A3:D9
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/59DBAE3E318311F09059AF40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0-43.128.255.255
43.129.32.0/19
43.130.0.0-43.130.191.255
43.130.224.0-43.131.63.255
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.133.31.255
43.133.128.0-43.133.223.255
43.134.0.0/17
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.74.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.167.255.255
43.172.0.0/15
101.32.94.0-101.32.111.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.52.0/22
101.33.114.0/23
124.156.208.0-124.156.239.255
150.109.90.0/23
150.109.140.0/22
150.109.192.0/20
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
3b:dd:1e:53:ed:47:82:38:af:04:b0:dc:37:fd:cb:72:4a:a7:
3c:6b:49:f9:4f:a9:59:ef:8e:a8:cf:6e:8c:2e:19:a9:e1:6e:
2f:ad:ec:54:f0:9f:d3:bc:ab:7d:27:c5:a2:f1:96:f2:aa:37:
62:52:87:4b:8c:97:f4:80:df:2e:c4:11:ed:f9:06:9d:4b:01:
65:24:74:f6:43:ab:e7:3f:ca:10:8a:69:da:03:37:a6:6e:4e:
26:33:37:a6:a7:9d:d8:3a:d3:7a:13:dd:a6:64:d3:b1:2e:24:
f8:ce:52:9d:8d:73:1d:d8:b5:cd:43:6b:e0:5a:ae:47:1d:63:
83:ff:8e:08:a9:66:59:e7:06:62:bd:b5:d1:62:0f:13:60:47:
eb:67:a2:fa:75:f8:ab:26:b4:b8:fb:1b:0a:1a:9e:07:55:dd:
9c:72:e9:39:c3:90:5d:34:e1:07:49:03:bb:3f:4e:50:bc:0b:
98:b9:d6:c7:62:71:97:77:bb:8b:2a:9d:10:89:94:a4:1c:7d:
56:78:ad:d8:2a:66:8a:9d:fd:6d:eb:19:18:14:e5:c4:15:31:
be:fc:1e:9d:f6:2d:cb:42:df:2e:82:a5:64:b2:28:8e:d7:39:
9c:f7:2a:74:45:a0:d2:5d:17:db:c7:54:2c:c6:67:c0:21:fa:
86:8e:d4:6c
-----BEGIN CERTIFICATE-----
MIIGqzCCBZOgAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5
NTA2QTU5QkQwHhcNMjUwNjEwMjIxMDA2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQ4YWQzZS0wYTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0sbPqszTYH8P/kpnuWLMovpfrrfcg5wbZUQWl7yYg01mL8uQQDTZRRypMhh
SwJD8hY6jIWQ92SOl1st6y9Ju92cbyiGNCQXjXE84ssuDS3fOLRRAOAukm/uGxDt
3Mr2NyRwuM7lF7sEmYORFgjZeIoqZJoaGmgIP5Vm3YH/Qd5aMDieWswO9ARVY/V8
pLg58zbQLjYooEKhWcPxn1DvRPfe/yDHMMqIkHFAYERqXOOJ9sroVRShHnH32lX/
Ha5wwF7uVEdvdHzB4ZAoMo5YRM26XIiw4S33Xl5pwwasGYTgV3J/Ecaq4XMar3Pk
Nvbghttyp1PQru+tGgcRHqxQJwIDAQABo4IDzzCCA8swHQYDVR0OBBYEFA/mUcVm
jbAQ+MET4hrZFvyTrqPZMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvNTlEQkFFM0Uz
MTgzMTFGMDkwNTlBRjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFXBggrBgEFBQcBBwEB
/wSCAUYwggFCMIIBMAQCAAEwggEoMAsDBAErgN4DAwArgAMEBSuBIDALAwMBK4ID
BAYrgoAwDAMEBSuC4AMEBiuDAAMEBSuD4DAMAwQCK4QMAwQCK4QQMAwDBAIrhBwD
BAIrhCADBAIrhCgDBAIrhDQDBAArhEQwDAMEBSuEYAMEBSuFADAMAwQHK4WAAwQF
K4XAAwQHK4YAAwQAK4c6AwQAK4e7AwQFK4fAMAwDBAErmEoDBAIrmFADBAErmFwD
BAUrmGAwCwMEBiuYwAMDAyugAwMBK6wwDAMEAWUgXgMEBGUgYAMEAGUgjAMEAWUh
BDAMAwQAZSERAwQCZSEQAwQBZSEaAwQBZSEeAwQAZSEpAwQCZSE0AwQBZSFyMAwD
BAR8nNADBAR8nOADBAGWbVoDBAKWbYwDBASWbcAwDAQCAAIwBgMEACQNwDANBgkq
hkiG9w0BAQsFAAOCAQEAO90eU+1HgjivBLDcN/3LckqnPGtJ+U+pWe+OqM9ujC4Z
qeFuL63sVPCf07yrfSfFovGW8qo3YlKHS4yX9IDfLsQR7fkGnUsBZSR09kOr5z/K
EIpp2gM3pm5OJjM3pqed2DrTehPdpmTTsS4k+M5SnY1zHdi1zUNr4FquRx1jg/+O
CKlmWecGYr210WIPE2BH62ei+nX4qya0uPsbChqeB1XdnHLpOcOQXTThB0kDuz9O
ULwLmLnWx2Jxl3e7iyqdEImUpBx9Vnit2Cpmip39besZGBTlxBUxvvwenfYty0Lf
LoKlZLIojtc5nPcqdEWg0l0X28dULMZnwCH6ho7UbA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 19:54:42 2025 by rpki-client