Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/BB142084A77811F1AF0DC2223E11F970.roa
File: BB142084A77811F1AF0DC2223E11F970.roa (raw, json)
Hash identifier: XMc9r+I8/TZNHbcApT8CaBfpQOB8jdoiqTsaangB8Vg=
Subject key identifier: 99:16:CD:0B:15:69:04:29:24:FC:2C:77:81:D0:F4:08:9B:80:83:74
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0CE5
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/BB142084A77811F1AF0DC2223E11F970.roa
Signing time: Tue 20 Oct 2026 03:02:30 +0000
ROA not before: Tue 20 Oct 2026 03:02:30 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.12.0/23 maxlen: 23
43.128.198.0/23 maxlen: 23
43.128.222.0/23 maxlen: 23
43.128.224.0/19 maxlen: 19
43.128.234.0/23 maxlen: 23
43.128.241.0/24 maxlen: 24
43.129.32.0/20 maxlen: 20
43.129.48.0/20 maxlen: 20
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.130.224.0/19 maxlen: 19
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.133.0.0/19 maxlen: 19
43.133.128.0/20 maxlen: 20
43.133.144.0/20 maxlen: 20
43.133.160.0/19 maxlen: 19
43.133.192.0/19 maxlen: 19
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.134.128.0/18 maxlen: 18
43.134.138.0/24 maxlen: 24
43.134.139.0/24 maxlen: 24
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.196.0/23 maxlen: 23
43.135.221.0/24 maxlen: 24
43.152.74.0/23 maxlen: 23
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.152.250.0/23 maxlen: 23
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.108.0/23 maxlen: 23
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.155.194.0/23 maxlen: 23
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.84.0/23 maxlen: 23
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.221.0/24 maxlen: 24
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.140.0/24 maxlen: 24
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.94.0/23 maxlen: 23
101.32.96.0/20 maxlen: 20
101.32.102.0/23 maxlen: 23
101.32.104.0/21 maxlen: 21
101.32.140.0/24 maxlen: 24
101.32.150.0/23 maxlen: 23
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.42.0/23 maxlen: 23
101.33.52.0/22 maxlen: 22
101.33.114.0/23 maxlen: 24
124.156.96.0/23 maxlen: 23
124.156.208.0/20 maxlen: 20
124.156.224.0/20 maxlen: 20
150.109.10.0/23 maxlen: 23
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
150.109.140.0/22 maxlen: 22
150.109.160.0/23 maxlen: 23
150.109.192.0/20 maxlen: 20
150.109.192.0/21 maxlen: 21
150.109.192.0/23 maxlen: 23
150.109.200.0/22 maxlen: 22
150.109.204.0/23 maxlen: 23
150.109.206.0/24 maxlen: 24
150.109.207.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c000:f1c0::/44 maxlen: 44
240d:c000:f1d0::/44 maxlen: 44
240d:c000:f1f0::/44 maxlen: 44
240d:c000:f3f0::/44 maxlen: 48
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 21:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3301 (0xce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Oct 20 03:02:30 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6ad6d9c5-fb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:5a:ef:92:74:1d:25:db:3a:5d:e8:8e:1a:
05:3f:39:ff:dd:67:4e:2b:3c:30:3c:54:be:c8:43:
89:9b:e5:ec:04:d0:ad:dc:71:65:49:13:b6:dc:c9:
ce:c2:ff:ee:e1:fd:6a:a7:62:61:89:3a:c3:9b:f1:
16:3b:9f:43:c8:ed:8a:be:d9:25:01:ac:37:12:97:
32:ba:0f:4f:20:d9:9f:aa:60:ef:d8:3a:22:6c:86:
4d:d0:ea:07:05:9b:77:3e:6d:5b:53:66:95:d9:d3:
fa:d5:1e:5d:49:91:99:d0:09:e8:1f:43:4f:12:28:
48:a2:83:07:04:25:e7:d6:fe:b6:89:e4:c4:84:e6:
c0:5a:0f:4d:13:71:4f:e4:73:9d:94:6e:58:10:b1:
74:7d:3c:2f:b7:a6:8f:de:a1:a2:4d:6b:7f:c1:cd:
16:a0:cd:c9:98:82:59:f4:96:17:03:5f:89:b9:3f:
79:0f:b2:96:c6:5f:14:e7:cf:46:fd:a3:a4:b0:45:
18:d9:32:28:3e:4d:e7:62:02:64:e3:57:b1:d4:0b:
8a:f8:67:90:e8:a8:e4:b7:c7:b7:0a:96:b7:0f:d4:
8f:26:a0:8f:f6:16:3d:39:e0:b5:35:14:06:23:ed:
91:a7:47:c1:26:22:42:93:83:e8:f4:1a:28:be:b8:
29:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:CD:0B:15:69:04:29:24:FC:2C:77:81:D0:F4:08:9B:80:83:74
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/BB142084A77811F1AF0DC2223E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.128.12.0/23
43.128.198.0/23
43.128.222.0-43.128.255.255
43.129.32.0/19
43.130.0.0-43.130.191.255
43.130.224.0-43.131.63.255
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.133.31.255
43.133.128.0-43.133.223.255
43.134.0.0-43.134.191.255
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.74.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.167.255.255
43.172.0.0/15
101.32.94.0-101.32.111.255
101.32.140.0/24
101.32.150.0/23
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0-101.33.43.255
101.33.52.0/22
101.33.114.0/23
124.156.96.0/23
124.156.208.0-124.156.239.255
150.109.10.0/23
150.109.90.0/23
150.109.140.0/22
150.109.160.0/23
150.109.192.0/20
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
1b:22:c5:0a:00:d5:ab:bb:0d:73:ce:c7:5c:a8:c4:72:ea:e0:
78:ec:ba:c1:88:9d:25:69:71:27:03:5e:d7:87:22:51:d4:c8:
cf:90:9a:d6:df:f6:03:d7:0d:fe:fe:2d:d2:09:ac:c9:bd:b7:
8d:1d:2b:15:37:5e:07:27:83:65:0f:3d:0c:76:15:50:92:67:
eb:b7:ef:7a:f4:13:b8:23:44:02:f4:5f:50:a4:f6:d8:c1:da:
06:d7:be:27:27:72:fa:69:dc:a5:86:b5:4a:30:28:13:92:34:
15:0c:c6:09:66:62:36:30:b5:dd:fc:eb:45:f9:7e:5d:13:2f:
84:c6:44:ab:f5:ce:52:4d:9a:96:bd:e3:ab:96:63:60:a8:b0:
da:2e:df:31:44:50:7a:58:3c:0b:9b:59:ac:f7:32:f8:5a:f6:
2a:a3:ad:71:00:ca:ca:84:f0:d9:f5:8e:44:89:4d:cc:9d:88:
6f:10:0a:3f:35:02:05:2e:57:ba:2a:87:8a:f6:df:04:a2:0a:
59:4b:45:92:84:93:83:12:20:02:3e:e8:a6:79:32:23:75:04:
a2:11:e4:01:fe:14:4d:b4:8f:ff:83:e7:f4:48:21:25:7c:cc:
97:ba:09:23:f6:7f:98:f4:5f:8b:b1:79:da:03:e6:dc:3d:a8:
2a:3b:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 21:18:37 2026 by rpki-client