Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/BB142084A77811F1AF0DC2223E11F970.roa
File: BB142084A77811F1AF0DC2223E11F970.roa (raw, json)
Hash identifier: sMMlBcu5caAUjy52snyuk+pp0k0djieJLhvCkhI7qRg=
Subject key identifier: DE:15:15:71:DE:46:24:C6:DA:3E:4A:61:82:D8:3C:CF:64:96:47:6B
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0CC3
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/BB142084A77811F1AF0DC2223E11F970.roa
Signing time: Thu 03 Sep 2026 09:20:40 +0000
ROA not before: Thu 03 Sep 2026 09:20:40 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.12.0/23 maxlen: 23
43.128.198.0/23 maxlen: 23
43.128.222.0/23 maxlen: 23
43.128.224.0/19 maxlen: 19
43.128.234.0/23 maxlen: 23
43.128.241.0/24 maxlen: 24
43.129.32.0/20 maxlen: 20
43.129.48.0/20 maxlen: 20
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.130.224.0/19 maxlen: 19
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.133.0.0/19 maxlen: 19
43.133.128.0/20 maxlen: 20
43.133.144.0/20 maxlen: 20
43.133.160.0/19 maxlen: 19
43.133.192.0/19 maxlen: 19
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.134.128.0/18 maxlen: 18
43.134.138.0/24 maxlen: 24
43.134.139.0/24 maxlen: 24
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.196.0/23 maxlen: 23
43.135.221.0/24 maxlen: 24
43.152.74.0/23 maxlen: 23
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.152.250.0/23 maxlen: 23
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.108.0/23 maxlen: 23
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.155.194.0/23 maxlen: 23
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.84.0/23 maxlen: 23
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.221.0/24 maxlen: 24
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.140.0/24 maxlen: 24
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.94.0/23 maxlen: 23
101.32.96.0/20 maxlen: 20
101.32.102.0/23 maxlen: 23
101.32.104.0/21 maxlen: 21
101.32.140.0/24 maxlen: 24
101.32.150.0/23 maxlen: 23
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.42.0/23 maxlen: 23
101.33.52.0/22 maxlen: 22
101.33.114.0/23 maxlen: 24
124.156.96.0/23 maxlen: 23
124.156.208.0/20 maxlen: 20
124.156.224.0/20 maxlen: 20
150.109.10.0/23 maxlen: 23
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
150.109.140.0/22 maxlen: 22
150.109.160.0/23 maxlen: 23
150.109.192.0/20 maxlen: 20
150.109.192.0/21 maxlen: 21
150.109.192.0/23 maxlen: 23
150.109.200.0/22 maxlen: 22
150.109.204.0/23 maxlen: 23
150.109.206.0/24 maxlen: 24
150.109.207.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c000:f1c0::/44 maxlen: 44
240d:c000:f1d0::/44 maxlen: 44
240d:c000:f1f0::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 21:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3267 (0xcc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Sep 3 09:20:40 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a993be8-cf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:01:a5:10:19:7c:19:b4:a7:e9:2b:12:a5:
83:9f:47:dd:8e:89:07:7e:65:7c:f4:ff:6a:ab:b9:
d9:7d:43:d1:d1:d9:93:fb:88:7a:44:b9:53:4a:6d:
97:85:fb:be:c4:ed:8f:fb:6b:c4:37:bc:ca:c7:36:
92:e2:1c:7b:c5:80:47:54:ae:80:64:ea:36:12:d8:
8d:9e:a2:f1:45:e5:43:4f:da:99:8f:bb:e4:fe:e4:
07:70:fc:a0:aa:4f:18:2e:6b:e6:73:33:d8:3e:cf:
0a:02:67:7d:dc:26:c6:fb:7a:0c:b5:85:02:b8:06:
e8:6d:bc:4c:39:a9:81:49:b7:db:c2:c4:a3:7c:55:
f6:e8:77:ab:7d:11:88:9f:ce:4e:9d:80:bf:09:8c:
e3:b0:f7:8b:98:97:43:0c:4e:2f:8a:e5:5a:67:28:
a8:a3:62:60:e2:3b:b7:8d:cf:25:bb:22:e4:b6:4e:
9d:c5:ea:6e:47:31:bf:f4:58:71:d4:ad:a4:4a:e5:
f4:6d:fb:e4:f3:54:2d:f7:ed:0d:72:7e:f6:31:76:
f2:f4:d6:f8:bb:b2:3f:08:81:42:ba:c7:6d:24:7a:
1b:51:ec:a8:2c:ee:01:e0:5f:37:b5:68:a9:5a:0e:
ab:65:64:8c:12:fb:e3:92:52:61:b4:9b:de:c1:8a:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:15:15:71:DE:46:24:C6:DA:3E:4A:61:82:D8:3C:CF:64:96:47:6B
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/BB142084A77811F1AF0DC2223E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.128.12.0/23
43.128.198.0/23
43.128.222.0-43.128.255.255
43.129.32.0/19
43.130.0.0-43.130.191.255
43.130.224.0-43.131.63.255
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.133.31.255
43.133.128.0-43.133.223.255
43.134.0.0-43.134.191.255
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.74.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.167.255.255
43.172.0.0/15
101.32.94.0-101.32.111.255
101.32.140.0/24
101.32.150.0/23
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0-101.33.43.255
101.33.52.0/22
101.33.114.0/23
124.156.96.0/23
124.156.208.0-124.156.239.255
150.109.10.0/23
150.109.90.0/23
150.109.140.0/22
150.109.160.0/23
150.109.192.0/20
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
17:89:42:b6:65:f6:15:ff:e9:e1:f0:c3:0e:96:70:02:75:fb:
0d:47:c7:4e:f3:36:3c:5e:71:de:66:37:11:4d:43:25:79:94:
52:88:16:86:f9:28:6c:13:14:12:ad:3e:99:f3:11:66:49:e0:
6f:b1:d0:d4:83:8e:75:67:7b:e8:ff:40:ec:76:b2:53:6d:04:
cf:c3:b8:12:c4:8a:92:b2:5f:18:52:fc:f7:fe:63:cd:ae:4c:
e5:21:a4:32:93:e5:48:46:13:c8:cf:79:b9:28:a7:04:f7:85:
43:dc:f4:e9:b8:68:9e:45:6e:01:e0:14:47:ed:aa:cb:b0:2d:
87:5a:d3:2f:48:e3:69:dc:9c:43:4c:b2:19:03:18:a3:93:66:
29:11:b0:7d:19:1a:87:ed:27:52:c6:9c:02:42:ef:9f:03:bc:
7c:99:fa:1a:83:10:b6:e5:4f:e7:fd:9f:74:0a:a3:67:e1:2b:
b7:c1:49:1e:e2:12:bb:c1:35:c7:c0:e6:74:ef:ba:8e:35:69:
af:7b:91:5a:02:3c:0e:5a:9f:97:88:ee:5b:22:b3:0a:da:6b:
67:f4:15:34:78:2c:50:a9:20:ba:f9:67:fa:40:8f:ee:40:3e:
6e:a0:2c:8e:8e:5b:c9:c6:b6:85:55:35:8a:51:5b:12:b3:1e:
7c:05:15:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:56:35 2026 by rpki-client