Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B8D1EFFECFF111F085D0CF76C4F9AE02.roa
File: B8D1EFFECFF111F085D0CF76C4F9AE02.roa (raw, json)
Hash identifier: HUQUUIa3JTbhzjl+kzm7+2BBxPdE0gxUwosqJf+QgLY=
Subject key identifier: 86:8F:76:42:23:2E:4F:0C:E3:B2:2C:D7:B1:B4:F5:A6:FB:67:74:84
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0C24
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B8D1EFFECFF111F085D0CF76C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:48:52 +0000
ROA not before: Fri 09 Jan 2026 03:27:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.128.224.0/19 maxlen: 19
43.128.241.0/24 maxlen: 24
43.129.32.0/20 maxlen: 20
43.129.48.0/20 maxlen: 20
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.130.224.0/19 maxlen: 19
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.133.0.0/19 maxlen: 19
43.133.128.0/20 maxlen: 20
43.133.144.0/20 maxlen: 20
43.133.160.0/19 maxlen: 19
43.133.192.0/19 maxlen: 19
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.134.128.0/18 maxlen: 18
43.134.138.0/24 maxlen: 24
43.134.139.0/24 maxlen: 24
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.221.0/24 maxlen: 24
43.152.74.0/23 maxlen: 23
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.155.149.0/24 maxlen: 24
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.140.0/24 maxlen: 24
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.94.0/23 maxlen: 23
101.32.96.0/20 maxlen: 20
101.32.102.0/23 maxlen: 23
101.32.104.0/21 maxlen: 21
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.52.0/22 maxlen: 22
101.33.114.0/23 maxlen: 24
124.156.208.0/20 maxlen: 20
124.156.224.0/20 maxlen: 20
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
150.109.140.0/22 maxlen: 22
150.109.192.0/20 maxlen: 20
150.109.192.0/21 maxlen: 21
150.109.192.0/23 maxlen: 23
150.109.200.0/22 maxlen: 22
150.109.204.0/23 maxlen: 23
150.109.206.0/24 maxlen: 24
150.109.207.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c000:f1f0::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 21:15:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3108 (0xc24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Jan 9 03:27:47 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a48a14-d161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:0f:5e:c4:f2:21:7c:79:16:a0:02:fe:ce:
86:52:ca:4b:bf:d5:c8:46:71:26:68:1b:ff:32:a9:
ed:ed:88:1d:06:be:1a:42:cf:0a:0e:06:8c:1b:a9:
72:42:0e:a1:e0:ca:45:d3:63:04:e0:f2:52:24:e7:
94:3b:bf:f9:87:76:94:55:00:48:9d:45:29:bc:ca:
6b:3b:b9:41:c6:86:88:5c:70:fe:ad:0b:23:5c:6b:
b5:70:42:dd:28:f1:09:52:6f:05:d3:9a:12:cd:cd:
8e:1a:c2:84:e3:78:99:03:62:26:9a:2b:3b:01:c9:
43:b3:8d:bf:eb:0a:bb:19:9f:ee:b0:38:dc:75:ee:
e5:4d:2b:bb:aa:79:3d:62:83:7c:6f:b1:bc:9f:e6:
d6:b9:6c:1a:e6:25:8e:7f:4d:eb:31:eb:70:b2:25:
96:54:4f:a0:31:c6:79:23:64:51:c5:ef:d0:c6:09:
8e:bd:e9:e2:87:89:9d:97:48:0e:11:d9:5c:ea:6a:
08:5b:4e:16:c8:4b:c8:66:2e:a0:bd:76:74:47:1d:
7b:19:9a:2a:8c:d0:18:9a:c1:70:2e:7e:8e:d5:b9:
7b:ba:6d:1c:c7:a4:06:33:81:36:f6:9e:d2:63:5b:
de:59:71:c3:90:61:da:40:a4:0e:be:d7:8b:96:d6:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8F:76:42:23:2E:4F:0C:E3:B2:2C:D7:B1:B4:F5:A6:FB:67:74:84
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B8D1EFFECFF111F085D0CF76C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0-43.128.255.255
43.129.32.0/19
43.130.0.0-43.130.191.255
43.130.224.0-43.131.63.255
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.133.31.255
43.133.128.0-43.133.223.255
43.134.0.0-43.134.191.255
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.74.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.167.255.255
43.172.0.0/15
101.32.94.0-101.32.111.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.52.0/22
101.33.114.0/23
124.156.208.0-124.156.239.255
150.109.90.0/23
150.109.140.0/22
150.109.192.0/20
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
cb:1d:ef:e9:dd:27:3c:12:78:d6:a7:f8:a4:96:ce:53:97:e7:
f3:bb:86:27:c2:cf:b9:5d:fa:f0:96:8b:f0:48:43:c9:77:8c:
74:f5:6a:d9:26:9b:b3:84:2b:de:d9:17:01:c7:6c:97:b7:72:
f3:fb:00:1b:76:97:49:57:76:b2:3e:0b:3e:05:61:af:ef:62:
a6:f5:a7:69:b2:11:f8:66:52:b5:e4:2a:dc:ae:b9:3b:9a:18:
1b:bf:03:2c:b7:da:17:c0:d4:86:19:87:e8:71:d5:48:77:67:
0a:88:da:0f:ea:e8:f0:69:08:47:ec:fb:01:10:87:ee:89:8c:
7b:bf:8f:e6:1e:d2:23:10:38:37:51:a9:2a:1b:2a:2c:84:73:
20:69:c1:0f:49:50:3d:6b:e4:8a:13:24:87:d2:b4:81:32:2a:
1e:47:00:fd:77:fa:4d:0c:f6:6d:29:e7:ac:ea:cf:4f:9f:a3:
2a:fa:22:1f:19:63:3e:01:f3:9c:17:a8:c1:9a:e4:04:e7:1a:
6c:08:03:0f:50:84:7a:10:41:c0:f7:06:d0:ed:a0:30:47:69:
2a:d8:fe:c7:db:54:b9:08:41:ac:01:4e:e9:06:a2:bc:c6:b0:
51:3d:8c:17:33:2a:f1:62:0b:30:7c:9f:89:fb:ae:d4:02:a9:
4b:a5:a9:55
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5
NTA2QTU5QkQwHhcNMjYwMTA5MDMyNzQ3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGExNC1kMTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq1kPXsTyIXx5FqAC/s6GUspLv9XIRnEmaBv/Mqnt7YgdBr4aQs8KDgaMG6ly
Qg6h4MpF02ME4PJSJOeUO7/5h3aUVQBInUUpvMprO7lBxoaIXHD+rQsjXGu1cELd
KPEJUm8F05oSzc2OGsKE43iZA2Immis7AclDs42/6wq7GZ/usDjcde7lTSu7qnk9
YoN8b7G8n+bWuWwa5iWOf03rMetwsiWWVE+gMcZ5I2RRxe/QxgmOvenih4mdl0gO
Edlc6moIW04WyEvIZi6gvXZ0Rx17GZoqjNAYmsFwLn6O1bl7um0cx6QGM4E29p7S
Y1veWXHDkGHaQKQOvteLltYdhQIDAQABo4IDoTCCA50wHQYDVR0OBBYEFIaPdkIj
Lk8M47Is17G09ab7Z3SEMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvQjhEMUVGRkVD
RkYxMTFGMDg1RDBDRjc2QzRGOUFFMDIucm9hMIIBXgYIKwYBBQUHAQcBAf8EggFN
MIIBSTCCATcEAgABMIIBLzALAwQBK4DeAwMAK4ADBAUrgSAwCwMDASuCAwQGK4KA
MAwDBAUrguADBAYrgwADBAUrg+AwDAMEAiuEDAMEAiuEEDAMAwQCK4QcAwQCK4Qg
AwQCK4QoAwQCK4Q0AwQAK4REMAwDBAUrhGADBAUrhQAwDAMEByuFgAMEBSuFwDAL
AwMBK4YDBAYrhoADBAArhzoDBAArh7sDBAUrh8AwDAMEASuYSgMEAiuYUAMEASuY
XAMEBSuYYDALAwQGK5jAAwMDK6ADAwErrDAMAwQBZSBeAwQEZSBgAwQAZSCMAwQB
ZSEEMAwDBABlIREDBAJlIRADBAFlIRoDBAFlIR4DBABlISkDBAJlITQDBAFlIXIw
DAMEBHyc0AMEBHyc4AMEAZZtWgMEApZtjAMEBJZtwDAMBAIAAjAGAwQAJA3AMA0G
CSqGSIb3DQEBCwUAA4IBAQDLHe/p3Sc8EnjWp/ikls5Tl+fzu4Ynws+5Xfrwlovw
SEPJd4x09WrZJpuzhCve2RcBx2yXt3Lz+wAbdpdJV3ayPgs+BWGv72Km9adpshH4
ZlK15Crcrrk7mhgbvwMst9oXwNSGGYfocdVId2cKiNoP6ujwaQhH7PsBEIfuiYx7
v4/mHtIjEDg3UakqGyoshHMgacEPSVA9a+SKEySH0rSBMioeRwD9d/pNDPZtKees
6s9Pn6Mq+iIfGWM+AfOcF6jBmuQE5xpsCAMPUIR6EEHA9wbQ7aAwR2kq2P7H21S5
CEGsAU7pBqK8xrBRPYwXMyrxYgswfJ+J+67UAqlLpalV
-----END CERTIFICATE-----
Generated at Sat Mar 7 11:20:58 2026 by rpki-client