Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B8D1EFFECFF111F085D0CF76C4F9AE02.roa
File: B8D1EFFECFF111F085D0CF76C4F9AE02.roa (raw, json)
Hash identifier: s77Ei8EC37Djt+pew6TOMR9zQCEM+rq8eyiOuZgQork=
Subject key identifier: 8F:2A:CC:7A:E0:73:1A:4B:8F:C0:9A:DE:35:C1:F6:89:33:EA:63:A7
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0C34
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B8D1EFFECFF111F085D0CF76C4F9AE02.roa
Signing time: Tue 17 Mar 2026 11:36:15 +0000
ROA not before: Tue 17 Mar 2026 11:36:15 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.128.224.0/19 maxlen: 19
43.128.241.0/24 maxlen: 24
43.129.32.0/20 maxlen: 20
43.129.48.0/20 maxlen: 20
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.130.224.0/19 maxlen: 19
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.133.0.0/19 maxlen: 19
43.133.128.0/20 maxlen: 20
43.133.144.0/20 maxlen: 20
43.133.160.0/19 maxlen: 19
43.133.192.0/19 maxlen: 19
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.134.128.0/18 maxlen: 18
43.134.138.0/24 maxlen: 24
43.134.139.0/24 maxlen: 24
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.221.0/24 maxlen: 24
43.152.74.0/23 maxlen: 23
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.155.149.0/24 maxlen: 24
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.140.0/24 maxlen: 24
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.94.0/23 maxlen: 23
101.32.96.0/20 maxlen: 20
101.32.102.0/23 maxlen: 23
101.32.104.0/21 maxlen: 21
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.52.0/22 maxlen: 22
101.33.114.0/23 maxlen: 24
124.156.208.0/20 maxlen: 20
124.156.224.0/20 maxlen: 20
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
150.109.140.0/22 maxlen: 22
150.109.192.0/20 maxlen: 20
150.109.192.0/21 maxlen: 21
150.109.192.0/23 maxlen: 23
150.109.200.0/22 maxlen: 22
150.109.204.0/23 maxlen: 23
150.109.206.0/24 maxlen: 24
150.109.207.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c000:f1c0::/44 maxlen: 44
240d:c000:f1f0::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:14:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3124 (0xc34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Mar 17 11:36:15 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69b93caf-eea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:69:1e:10:b6:bc:4f:32:8a:93:2d:0f:39:
c9:a0:15:65:65:09:b3:9f:0d:7f:2e:39:7a:bf:68:
7f:83:53:33:40:78:b8:bd:b3:ef:76:9d:95:ea:9f:
28:54:32:76:73:d1:e5:66:13:17:58:bc:ad:be:ef:
45:13:6e:1a:5c:d9:e4:2d:40:65:4a:c3:94:1f:3f:
ec:74:da:77:27:58:a9:2b:6d:b4:28:6a:de:27:d5:
98:9a:6d:fe:ec:f2:fa:7b:ff:52:d2:44:4e:67:85:
50:9e:d0:c2:bf:ad:dd:17:fa:42:63:ac:4f:0f:65:
10:bf:5f:37:61:9e:4c:68:08:ed:f3:80:0c:24:ab:
89:ab:fe:ad:42:1a:31:3a:4b:5f:f3:99:c2:44:3a:
38:af:06:ff:1d:e5:9f:bd:7d:3a:f2:40:82:87:c9:
cc:9f:32:83:10:4f:06:12:45:01:83:fe:e2:00:06:
05:3c:88:b8:ac:35:63:1f:9c:6a:67:4e:ad:c2:ef:
31:e0:0f:8e:b3:bc:91:19:d5:4b:b1:74:f8:8f:fa:
b9:82:06:f6:40:7c:04:8e:15:a9:33:48:0a:84:e8:
82:15:3a:9a:4c:58:95:64:aa:f0:18:d7:c5:fa:04:
36:c5:76:ac:37:f0:6b:78:3a:5e:49:0f:11:68:48:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2A:CC:7A:E0:73:1A:4B:8F:C0:9A:DE:35:C1:F6:89:33:EA:63:A7
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B8D1EFFECFF111F085D0CF76C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0-43.128.255.255
43.129.32.0/19
43.130.0.0-43.130.191.255
43.130.224.0-43.131.63.255
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.133.31.255
43.133.128.0-43.133.223.255
43.134.0.0-43.134.191.255
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.74.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.167.255.255
43.172.0.0/15
101.32.94.0-101.32.111.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.52.0/22
101.33.114.0/23
124.156.208.0-124.156.239.255
150.109.90.0/23
150.109.140.0/22
150.109.192.0/20
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
71:17:f2:72:6f:4c:2f:90:0a:fb:29:e3:6f:06:61:59:04:60:
43:c4:d6:d1:d9:7a:25:57:b1:39:a7:25:ee:f6:7f:3b:db:5d:
40:53:d7:15:cf:1a:7b:f5:a3:b9:39:21:d2:22:cf:d3:a9:9a:
10:79:c9:34:ba:ce:95:e1:84:1a:c6:aa:1f:bd:31:9f:c5:c0:
98:27:0c:e0:6d:24:3e:7a:ea:f7:8d:50:bf:51:4e:fe:84:a0:
13:aa:97:03:6c:d0:91:10:aa:93:6e:a2:f0:3a:fa:3f:e5:b6:
7c:d4:00:f8:bb:3f:07:1d:7d:2b:f7:c7:4e:c8:c5:32:ae:8a:
31:0c:e2:8f:f8:dc:6c:1c:aa:23:cf:42:ce:e8:c9:83:85:87:
c9:3e:8e:72:f5:a1:8a:f3:11:48:08:4b:ad:ab:6b:cf:fe:fb:
14:32:3c:ee:65:52:5c:bb:74:b4:81:a1:c4:c0:b3:ce:44:e6:
a2:4d:df:bd:77:58:af:ab:7d:d0:5c:35:92:46:ae:a8:e2:59:
a7:e9:00:16:c5:f4:be:3d:6a:71:19:b1:4b:28:f3:42:cb:b1:
64:e1:19:b7:70:f2:55:7f:6d:49:41:91:45:06:b7:88:bc:e7:
e2:eb:6a:ad:89:73:b8:66:85:a8:c9:6d:81:88:2f:c7:08:66:
d6:ba:dc:9c
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgICDDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5
NTA2QTU5QkQwHhcNMjYwMzE3MTEzNjE1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWI5M2NhZi1lZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0PxpHhC2vE8yipMtDznJoBVlZQmznw1/Ljl6v2h/g1MzQHi4vbPvdp2V6p8o
VDJ2c9HlZhMXWLytvu9FE24aXNnkLUBlSsOUHz/sdNp3J1ipK220KGreJ9WYmm3+
7PL6e/9S0kROZ4VQntDCv63dF/pCY6xPD2UQv183YZ5MaAjt84AMJKuJq/6tQhox
Oktf85nCRDo4rwb/HeWfvX068kCCh8nMnzKDEE8GEkUBg/7iAAYFPIi4rDVjH5xq
Z06twu8x4A+Os7yRGdVLsXT4j/q5ggb2QHwEjhWpM0gKhOiCFTqaTFiVZKrwGNfF
+gQ2xXasN/BreDpeSQ8RaEh8OQIDAQABo4IDoTCCA50wHQYDVR0OBBYEFI8qzHrg
cxpLj8Ca3jXB9okz6mOnMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvQjhEMUVGRkVD
RkYxMTFGMDg1RDBDRjc2QzRGOUFFMDIucm9hMIIBXgYIKwYBBQUHAQcBAf8EggFN
MIIBSTCCATcEAgABMIIBLzALAwQBK4DeAwMAK4ADBAUrgSAwCwMDASuCAwQGK4KA
MAwDBAUrguADBAYrgwADBAUrg+AwDAMEAiuEDAMEAiuEEDAMAwQCK4QcAwQCK4Qg
AwQCK4QoAwQCK4Q0AwQAK4REMAwDBAUrhGADBAUrhQAwDAMEByuFgAMEBSuFwDAL
AwMBK4YDBAYrhoADBAArhzoDBAArh7sDBAUrh8AwDAMEASuYSgMEAiuYUAMEASuY
XAMEBSuYYDALAwQGK5jAAwMDK6ADAwErrDAMAwQBZSBeAwQEZSBgAwQAZSCMAwQB
ZSEEMAwDBABlIREDBAJlIRADBAFlIRoDBAFlIR4DBABlISkDBAJlITQDBAFlIXIw
DAMEBHyc0AMEBHyc4AMEAZZtWgMEApZtjAMEBJZtwDAMBAIAAjAGAwQAJA3AMA0G
CSqGSIb3DQEBCwUAA4IBAQBxF/Jyb0wvkAr7KeNvBmFZBGBDxNbR2XolV7E5pyXu
9n87211AU9cVzxp79aO5OSHSIs/TqZoQeck0us6V4YQaxqofvTGfxcCYJwzgbSQ+
eur3jVC/UU7+hKATqpcDbNCREKqTbqLwOvo/5bZ81AD4uz8HHX0r98dOyMUyroox
DOKP+NxsHKojz0LO6MmDhYfJPo5y9aGK8xFICEutq2vP/vsUMjzuZVJcu3S0gaHE
wLPOROaiTd+9d1ivq33QXDWSRq6o4lmn6QAWxfS+PWpxGbFLKPNCy7Fk4Rm3cPJV
f21JQZFFBreIvOfi62qtiXO4ZoWoyW2BiC/HCGbWutyc
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:52:25 2026 by rpki-client