Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/1E01B6A0543D11F186DD736CA5833773.roa
File: 1E01B6A0543D11F186DD736CA5833773.roa (raw, json)
Hash identifier: fqheN6I7fsf14qKQtGN/L3I04g+a4+1Dq/8idQw73uE=
Subject key identifier: A6:94:29:1C:FF:A2:71:34:DC:0E:B8:BE:84:2E:FF:CF:B8:0D:9A:BD
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0C6B
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/1E01B6A0543D11F186DD736CA5833773.roa
Signing time: Wed 20 May 2026 11:14:50 +0000
ROA not before: Wed 20 May 2026 11:14:50 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.128.224.0/19 maxlen: 19
43.128.241.0/24 maxlen: 24
43.129.32.0/20 maxlen: 20
43.129.48.0/20 maxlen: 20
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.130.224.0/19 maxlen: 19
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.133.0.0/19 maxlen: 19
43.133.128.0/20 maxlen: 20
43.133.144.0/20 maxlen: 20
43.133.160.0/19 maxlen: 19
43.133.192.0/19 maxlen: 19
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.134.128.0/18 maxlen: 18
43.134.138.0/24 maxlen: 24
43.134.139.0/24 maxlen: 24
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.221.0/24 maxlen: 24
43.152.74.0/23 maxlen: 23
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.140.0/24 maxlen: 24
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.94.0/23 maxlen: 23
101.32.96.0/20 maxlen: 20
101.32.102.0/23 maxlen: 23
101.32.104.0/21 maxlen: 21
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.52.0/22 maxlen: 22
101.33.114.0/23 maxlen: 24
124.156.208.0/20 maxlen: 20
124.156.224.0/20 maxlen: 20
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
150.109.140.0/22 maxlen: 22
150.109.192.0/20 maxlen: 20
150.109.192.0/21 maxlen: 21
150.109.192.0/23 maxlen: 23
150.109.200.0/22 maxlen: 22
150.109.204.0/23 maxlen: 23
150.109.206.0/24 maxlen: 24
150.109.207.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c000:f1c0::/44 maxlen: 44
240d:c000:f1f0::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 21:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3179 (0xc6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: May 20 11:14:50 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6a0d97aa-8193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:c5:c4:e8:7b:da:81:38:ee:35:86:a5:a0:
7f:bc:43:1f:37:46:85:5b:f7:30:81:ab:44:75:c5:
8a:b0:0e:af:e1:dc:30:e1:56:01:4d:0c:7f:24:68:
cf:3b:37:1b:85:62:b3:0e:71:06:e4:a3:d8:a8:d6:
23:63:d0:56:05:f5:c5:57:76:79:3d:e4:c4:09:fe:
6f:40:36:5f:53:3e:e4:08:b7:9e:23:56:15:c3:70:
0b:b7:bb:16:54:6f:0e:c4:d3:98:fc:05:34:7c:1c:
91:c8:aa:57:a4:6c:32:a8:22:e7:55:b0:6f:74:ac:
54:50:94:59:41:21:8d:4c:4e:52:c9:21:22:c1:87:
b0:57:b4:b1:da:17:4a:30:85:b6:b0:f1:6f:4f:67:
bf:3d:56:47:80:65:8a:16:bd:e6:a2:e2:8d:54:9a:
2a:dd:9d:6e:87:3b:68:44:e1:66:ed:01:8a:a9:f2:
ca:bd:12:cc:b9:3d:bf:ce:3f:d5:7f:68:bb:3c:68:
f8:98:aa:bc:79:1d:b2:a5:1a:bc:81:61:f2:da:23:
66:25:8b:eb:36:58:02:42:14:61:7c:f7:36:f2:42:
9b:6b:f8:cb:3e:60:f4:1c:d7:55:1c:c6:86:c8:bb:
08:89:03:f7:36:01:31:e1:c1:c7:d2:97:c2:74:96:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:94:29:1C:FF:A2:71:34:DC:0E:B8:BE:84:2E:FF:CF:B8:0D:9A:BD
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/1E01B6A0543D11F186DD736CA5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0-43.128.255.255
43.129.32.0/19
43.130.0.0-43.130.191.255
43.130.224.0-43.131.63.255
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.133.31.255
43.133.128.0-43.133.223.255
43.134.0.0-43.134.191.255
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.74.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.167.255.255
43.172.0.0/15
101.32.94.0-101.32.111.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.52.0/22
101.33.114.0/23
124.156.208.0-124.156.239.255
150.109.90.0/23
150.109.140.0/22
150.109.192.0/20
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
72:0b:03:ae:93:3b:0a:8f:06:aa:4f:49:62:75:54:d1:5e:ae:
3e:28:3f:bf:fd:2d:d6:17:ce:b4:63:f3:f1:34:e6:3f:37:43:
58:af:47:7b:06:4c:86:de:0c:83:e1:ca:6a:f5:d9:85:e9:90:
8b:12:4f:78:7e:bb:5c:95:30:01:99:17:c3:05:5b:5a:00:04:
6b:1b:d1:78:13:09:ad:cb:96:6e:33:9a:64:f0:6a:66:63:f6:
6b:b1:83:2b:a0:f6:53:2b:1e:3d:a0:84:2f:06:6b:03:3e:ae:
be:94:33:d7:ba:b4:70:61:f2:a9:5f:83:df:1c:e0:4d:6e:7f:
ca:d7:6f:6a:f0:f3:06:20:e7:bc:21:44:d2:41:4a:2f:18:f6:
23:4e:f8:09:af:7e:17:06:80:eb:26:63:66:d7:29:95:b0:42:
c3:46:e1:e5:da:37:bd:ba:d0:a9:cb:b1:0e:d2:b9:ec:ab:25:
c6:33:9a:e0:3c:c2:84:58:5c:09:7d:ea:2e:43:5f:20:3e:d7:
b8:b4:38:a7:10:10:a6:95:c7:9b:bc:30:82:71:97:3b:9e:67:
73:11:4c:04:9e:0e:75:f0:c0:3c:60:d9:87:ae:f2:16:54:c9:
9f:6e:2d:a4:3a:e1:d7:cb:9e:1e:50:07:d8:10:8d:83:a5:6d:
57:57:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:01:27 2026 by rpki-client