Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/1E01B6A0543D11F186DD736CA5833773.roa
File: 1E01B6A0543D11F186DD736CA5833773.roa (raw, json)
Hash identifier: LUPw4QKMp6U0UApan6G60nuVThud2l0m1JhxBVhMRTY=
Subject key identifier: 28:E6:C6:9D:B1:79:61:70:FC:A3:2E:8B:3B:5F:2E:EB:93:88:09:7B
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0C95
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/1E01B6A0543D11F186DD736CA5833773.roa
Signing time: Thu 16 Jul 2026 22:22:54 +0000
ROA not before: Thu 16 Jul 2026 22:22:54 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.128.224.0/19 maxlen: 19
43.128.241.0/24 maxlen: 24
43.129.32.0/20 maxlen: 20
43.129.48.0/20 maxlen: 20
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.130.224.0/19 maxlen: 19
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.133.0.0/19 maxlen: 19
43.133.128.0/20 maxlen: 20
43.133.144.0/20 maxlen: 20
43.133.160.0/19 maxlen: 19
43.133.192.0/19 maxlen: 19
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.134.128.0/18 maxlen: 18
43.134.138.0/24 maxlen: 24
43.134.139.0/24 maxlen: 24
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.221.0/24 maxlen: 24
43.152.74.0/23 maxlen: 23
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.140.0/24 maxlen: 24
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.94.0/23 maxlen: 23
101.32.96.0/20 maxlen: 20
101.32.102.0/23 maxlen: 23
101.32.104.0/21 maxlen: 21
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.52.0/22 maxlen: 22
101.33.114.0/23 maxlen: 24
124.156.208.0/20 maxlen: 20
124.156.224.0/20 maxlen: 20
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
150.109.140.0/22 maxlen: 22
150.109.192.0/20 maxlen: 20
150.109.192.0/21 maxlen: 21
150.109.192.0/23 maxlen: 23
150.109.200.0/22 maxlen: 22
150.109.204.0/23 maxlen: 23
150.109.206.0/24 maxlen: 24
150.109.207.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c000:f1c0::/44 maxlen: 44
240d:c000:f1f0::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 21:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3221 (0xc95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Jul 16 22:22:54 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5959be-2488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:d6:32:ea:fa:bb:9a:1f:ca:d2:55:40:3e:
cd:3e:46:ff:4f:60:cf:90:b0:26:18:36:84:aa:58:
0d:e1:c8:7a:96:38:f0:9d:2d:ac:a6:94:bf:cf:ca:
7f:03:0f:c9:ca:cc:52:a7:b4:4d:51:dd:0e:55:61:
9e:c8:2f:75:0e:63:fe:f7:35:1c:36:ee:27:7d:7a:
af:99:3c:dc:dd:4d:e2:d6:f1:8a:10:36:d4:b0:5d:
53:82:d9:a0:0d:b0:cc:17:4e:61:70:79:36:9c:ea:
2e:49:e0:97:37:29:61:6d:b5:ef:23:c1:c8:e6:e0:
d8:2b:fa:00:38:83:21:d6:f6:eb:a4:e4:9f:9c:81:
4b:38:62:89:09:a5:8d:62:7c:5d:bb:1a:4b:20:47:
b8:79:ae:a7:0f:08:fd:cc:c2:b8:2a:08:74:e4:52:
e9:60:88:04:3d:70:57:10:b3:41:8c:31:05:aa:bf:
a4:54:72:6f:81:9e:7d:28:5c:9e:94:7f:5d:92:24:
d2:58:e4:36:55:1e:25:ab:f4:cf:e3:8c:78:d5:62:
de:35:a0:18:c4:7a:f6:64:43:f5:ae:84:9a:17:6f:
af:1b:2c:76:6e:87:11:37:4b:e6:63:a9:68:d6:ee:
7a:7e:80:21:bc:85:84:3b:a4:43:5c:7c:f5:69:fe:
ed:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E6:C6:9D:B1:79:61:70:FC:A3:2E:8B:3B:5F:2E:EB:93:88:09:7B
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/1E01B6A0543D11F186DD736CA5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0-43.128.255.255
43.129.32.0/19
43.130.0.0-43.130.191.255
43.130.224.0-43.131.63.255
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.133.31.255
43.133.128.0-43.133.223.255
43.134.0.0-43.134.191.255
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.74.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.167.255.255
43.172.0.0/15
101.32.94.0-101.32.111.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.52.0/22
101.33.114.0/23
124.156.208.0-124.156.239.255
150.109.90.0/23
150.109.140.0/22
150.109.192.0/20
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
da:ff:8b:d2:90:62:74:be:ba:1b:ee:82:72:24:b8:aa:39:17:
91:b5:cf:4f:41:df:d6:b7:62:44:04:5d:e8:e3:06:49:6f:b7:
7d:df:66:31:63:7b:80:a4:2f:2c:37:c7:da:cd:6c:5b:2a:8f:
95:f1:dc:ac:2c:39:f8:4a:da:b4:dc:0a:10:1b:86:18:8d:58:
09:73:98:98:e3:fc:b1:1e:81:c8:76:72:e3:9d:17:9d:b5:64:
cd:ac:71:f7:89:b7:f1:af:66:7f:3a:a9:57:cf:e8:54:9b:ae:
06:ce:8c:2c:d9:f0:d5:21:b1:dd:9c:f7:df:06:63:37:c0:62:
d2:d2:fb:b1:78:46:9c:8a:db:37:eb:7a:7a:ca:1b:bf:72:1e:
ec:57:81:84:61:99:6f:40:ce:3b:f3:50:cf:19:c6:50:96:c3:
a8:dc:a9:1e:5d:17:b1:b9:6f:22:0f:d9:b9:9b:7a:d2:71:3b:
b7:55:56:df:04:c3:38:1c:e9:dc:06:31:04:c0:8e:d9:78:23:
cc:9e:c3:7d:f1:2a:2b:4f:53:f6:54:9f:c5:c5:6e:42:9c:30:
7f:7a:ae:b8:be:d4:85:fe:79:6b:32:36:ff:61:b0:85:ae:7a:
ee:62:45:ec:07:60:5e:58:33:df:8f:b2:29:4d:78:b2:22:f5:
03:96:dd:bb
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5
NTA2QTU5QkQwHhcNMjYwNzE2MjIyMjU0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU5NTliZS0yNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkHDWMur6u5ofytJVQD7NPkb/T2DPkLAmGDaEqlgN4ch6ljjwnS2sppS/z8p/
Aw/JysxSp7RNUd0OVWGeyC91DmP+9zUcNu4nfXqvmTzc3U3i1vGKEDbUsF1Tgtmg
DbDMF05hcHk2nOouSeCXNylhbbXvI8HI5uDYK/oAOIMh1vbrpOSfnIFLOGKJCaWN
YnxduxpLIEe4ea6nDwj9zMK4Kgh05FLpYIgEPXBXELNBjDEFqr+kVHJvgZ59KFye
lH9dkiTSWOQ2VR4lq/TP44x41WLeNaAYxHr2ZEP1roSaF2+vGyx2bocRN0vmY6lo
1u56foAhvIWEO6RDXHz1af7tswIDAQABo4IDoTCCA50wHQYDVR0OBBYEFCjmxp2x
eWFw/KMuiztfLuuTiAl7MB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvMUUwMUI2QTA1
NDNEMTFGMTg2REQ3MzZDQTU4MzM3NzMucm9hMIIBXgYIKwYBBQUHAQcBAf8EggFN
MIIBSTCCATcEAgABMIIBLzALAwQBK4DeAwMAK4ADBAUrgSAwCwMDASuCAwQGK4KA
MAwDBAUrguADBAYrgwADBAUrg+AwDAMEAiuEDAMEAiuEEDAMAwQCK4QcAwQCK4Qg
AwQCK4QoAwQCK4Q0AwQAK4REMAwDBAUrhGADBAUrhQAwDAMEByuFgAMEBSuFwDAL
AwMBK4YDBAYrhoADBAArhzoDBAArh7sDBAUrh8AwDAMEASuYSgMEAiuYUAMEASuY
XAMEBSuYYDALAwQGK5jAAwMDK6ADAwErrDAMAwQBZSBeAwQEZSBgAwQAZSCMAwQB
ZSEEMAwDBABlIREDBAJlIRADBAFlIRoDBAFlIR4DBABlISkDBAJlITQDBAFlIXIw
DAMEBHyc0AMEBHyc4AMEAZZtWgMEApZtjAMEBJZtwDAMBAIAAjAGAwQAJA3AMA0G
CSqGSIb3DQEBCwUAA4IBAQDa/4vSkGJ0vrob7oJyJLiqOReRtc9PQd/Wt2JEBF3o
4wZJb7d932YxY3uApC8sN8fazWxbKo+V8dysLDn4Stq03AoQG4YYjVgJc5iY4/yx
HoHIdnLjnRedtWTNrHH3ibfxr2Z/OqlXz+hUm64Gzows2fDVIbHdnPffBmM3wGLS
0vuxeEacits363p6yhu/ch7sV4GEYZlvQM4781DPGcZQlsOo3KkeXRexuW8iD9m5
m3rScTu3VVbfBMM4HOncBjEEwI7ZeCPMnsN98SorT1P2VJ/FxW5CnDB/eq64vtSF
/nlrMjb/YbCFrnruYkXsB2BeWDPfj7IpTXiyIvUDlt27
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:11:35 2026 by rpki-client