Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/59DBAE3E318311F09059AF40C4F9AE02.roa
File: 59DBAE3E318311F09059AF40C4F9AE02.roa (raw, json)
Hash identifier: x6AlTag+vzKCmDKqGXv54q6QtFNcizuUHHhpQA1RvzM=
Subject key identifier: EB:11:9C:1D:A3:F6:98:79:48:2B:CA:4D:C0:CA:D1:E6:AD:15:36:40
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0B21
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/59DBAE3E318311F09059AF40C4F9AE02.roa
Signing time: Thu 15 May 2025 11:54:27 +0000
ROA not before: Thu 15 May 2025 11:54:27 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.128.224.0/19 maxlen: 19
43.128.241.0/24 maxlen: 24
43.129.32.0/20 maxlen: 20
43.129.48.0/20 maxlen: 20
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.130.224.0/19 maxlen: 19
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.133.0.0/19 maxlen: 19
43.133.128.0/20 maxlen: 20
43.133.144.0/20 maxlen: 20
43.133.160.0/19 maxlen: 19
43.133.192.0/19 maxlen: 19
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.221.0/24 maxlen: 24
43.152.74.0/23 maxlen: 23
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.155.149.0/24 maxlen: 24
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.140.0/24 maxlen: 24
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.94.0/23 maxlen: 23
101.32.96.0/20 maxlen: 20
101.32.102.0/23 maxlen: 23
101.32.104.0/21 maxlen: 21
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.52.0/22 maxlen: 22
101.33.114.0/23 maxlen: 24
124.156.208.0/20 maxlen: 20
124.156.224.0/20 maxlen: 20
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
150.109.140.0/22 maxlen: 22
150.109.192.0/20 maxlen: 20
150.109.192.0/21 maxlen: 21
150.109.192.0/23 maxlen: 23
150.109.200.0/22 maxlen: 22
150.109.204.0/23 maxlen: 23
150.109.206.0/24 maxlen: 24
150.109.207.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:14::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Jun 2025 21:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2849 (0xb21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: May 15 11:54:27 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6825d5f2-0b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:3d:c0:20:52:e6:71:4f:53:67:7f:44:5d:
a6:06:fc:bc:bc:e0:65:56:10:dc:92:8c:2c:66:8c:
41:8e:5f:6e:5b:50:2b:c2:c5:d5:ff:1c:fc:df:e7:
73:85:75:c1:cb:a7:05:84:2a:26:d5:21:45:97:d2:
11:c9:c0:ae:5e:7e:ac:7e:49:0a:81:5e:03:be:1f:
d9:b7:4d:f8:55:5a:e3:54:b0:3f:f2:d2:2e:08:33:
c7:e5:d4:aa:78:41:e4:48:5f:2b:53:e5:c4:5c:10:
dc:e5:d4:81:08:f7:30:bb:71:fe:f6:86:20:7e:32:
8f:4e:94:f9:20:4a:20:d0:c2:e9:17:59:f6:49:e6:
ba:67:6c:84:5f:5c:63:6f:ee:d5:92:6f:08:1b:d6:
58:d7:47:74:b9:27:c7:77:a8:b8:45:b6:e1:1e:05:
ac:58:36:67:61:11:29:fb:85:98:43:38:06:32:9e:
68:ab:d7:e4:9a:a1:b0:25:7b:78:7a:1d:ea:45:c7:
07:f3:d8:9e:0f:48:db:a8:f8:ac:d4:b4:11:24:32:
d4:6e:94:84:90:47:e7:07:19:0e:e9:c4:7b:ef:bc:
f6:a1:40:83:f4:4d:fa:d0:01:77:c9:69:7e:92:ed:
13:f4:01:dd:46:bc:33:36:1b:ff:19:6a:d6:28:2c:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:11:9C:1D:A3:F6:98:79:48:2B:CA:4D:C0:CA:D1:E6:AD:15:36:40
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/59DBAE3E318311F09059AF40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0-43.128.255.255
43.129.32.0/19
43.130.0.0-43.130.191.255
43.130.224.0-43.131.63.255
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.133.31.255
43.133.128.0-43.133.223.255
43.134.0.0/17
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.74.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.167.255.255
43.172.0.0/15
101.32.94.0-101.32.111.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.52.0/22
101.33.114.0/23
124.156.208.0-124.156.239.255
150.109.90.0/23
150.109.140.0/22
150.109.192.0/20
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
81:c0:69:97:cb:79:86:df:88:31:3d:6b:d5:ac:bc:3c:a8:c0:
b2:d7:af:75:12:08:50:d2:af:50:b9:1d:21:5f:09:db:b1:dc:
29:84:8f:6a:58:3f:ae:9f:a4:d1:88:3a:3d:ef:66:e4:e9:4d:
bc:12:c1:74:49:71:c4:27:bc:37:6d:d4:10:0f:91:e0:1e:4e:
77:91:6d:79:58:82:67:93:e6:70:1a:62:2d:cc:70:96:54:b8:
6a:51:e9:a9:32:d6:41:dc:8d:39:75:87:83:fb:ba:c9:40:78:
aa:ff:b8:00:f6:8a:1d:e2:fc:74:5d:95:f7:d4:40:23:1e:db:
c4:30:54:a7:d1:71:2b:f6:83:d2:2e:76:85:04:fd:71:67:31:
c6:60:84:7c:3d:a7:82:75:11:52:29:70:aa:ca:fa:94:0b:19:
bf:2d:24:7f:f9:20:5a:03:b4:de:32:eb:90:19:f5:de:50:17:
e6:a2:4e:1a:87:d1:a6:27:b1:48:10:2c:bd:69:29:5a:96:3d:
3d:da:21:10:5a:f9:c4:ec:4b:a4:5e:4d:4e:6f:c4:92:e8:57:
10:9a:6f:a7:07:1b:12:89:f1:44:17:71:b8:46:b1:e3:f5:58:
52:03:b0:2d:8a:48:46:38:85:6e:53:fe:a7:98:5f:c7:c1:18:
d6:e3:48:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 05:21:03 2025 by rpki-client