Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
File: BE33817A69AE11EEBBC89D75C4F9AE02.roa (raw, json)
Hash identifier: RfCFLymN4ZhMZVFr84inHmETvl0bVDY8V0QLa8tHpq8=
Subject key identifier: 02:2E:3F:AD:86:17:DB:51:AC:12:0A:1B:D8:89:62:4B:83:C1:5E:AC
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 0969
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
Signing time: Wed 01 Apr 2026 08:40:47 +0000
ROA not before: Wed 01 Apr 2026 08:40:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 10122
IP address blocks: 169.136.66.0/24 maxlen: 24
169.136.68.0/24 maxlen: 24
169.136.71.0/24 maxlen: 24
169.136.73.0/24 maxlen: 24
169.136.74.0/24 maxlen: 24
169.136.75.0/24 maxlen: 24
169.136.76.0/24 maxlen: 24
169.136.77.0/24 maxlen: 24
169.136.78.0/24 maxlen: 24
169.136.79.0/24 maxlen: 24
169.136.80.0/24 maxlen: 24
169.136.81.0/24 maxlen: 24
169.136.82.0/24 maxlen: 24
169.136.83.0/24 maxlen: 24
169.136.84.0/24 maxlen: 24
169.136.85.0/24 maxlen: 24
169.136.86.0/24 maxlen: 24
169.136.87.0/24 maxlen: 24
169.136.88.0/23 maxlen: 23
169.136.88.0/24 maxlen: 24
169.136.89.0/24 maxlen: 24
169.136.90.0/24 maxlen: 24
169.136.91.0/24 maxlen: 24
169.136.92.0/24 maxlen: 24
169.136.93.0/24 maxlen: 24
169.136.94.0/24 maxlen: 24
169.136.95.0/24 maxlen: 24
169.136.96.0/24 maxlen: 24
169.136.97.0/24 maxlen: 24
169.136.98.0/24 maxlen: 24
169.136.99.0/24 maxlen: 24
169.136.100.0/24 maxlen: 24
169.136.101.0/24 maxlen: 24
169.136.102.0/24 maxlen: 24
169.136.103.0/24 maxlen: 24
169.136.104.0/24 maxlen: 24
169.136.105.0/24 maxlen: 24
169.136.106.0/24 maxlen: 24
169.136.107.0/24 maxlen: 24
169.136.108.0/24 maxlen: 24
169.136.110.0/24 maxlen: 24
169.136.111.0/24 maxlen: 24
169.136.112.0/24 maxlen: 24
169.136.113.0/24 maxlen: 24
169.136.114.0/24 maxlen: 24
169.136.115.0/24 maxlen: 24
169.136.116.0/24 maxlen: 24
169.136.117.0/24 maxlen: 24
169.136.118.0/24 maxlen: 24
169.136.119.0/24 maxlen: 24
169.136.120.0/24 maxlen: 24
169.136.121.0/24 maxlen: 24
169.136.123.0/24 maxlen: 24
169.136.124.0/24 maxlen: 24
169.136.125.0/24 maxlen: 24
169.136.126.0/24 maxlen: 24
169.136.127.0/24 maxlen: 24
169.136.128.0/24 maxlen: 24
169.136.130.0/24 maxlen: 24
169.136.131.0/24 maxlen: 24
169.136.134.0/24 maxlen: 24
169.136.135.0/24 maxlen: 24
169.136.136.0/24 maxlen: 24
169.136.137.0/24 maxlen: 24
169.136.138.0/24 maxlen: 24
169.136.139.0/24 maxlen: 24
169.136.140.0/24 maxlen: 24
169.136.142.0/24 maxlen: 24
169.136.143.0/24 maxlen: 24
169.136.144.0/24 maxlen: 24
169.136.148.0/24 maxlen: 24
169.136.149.0/24 maxlen: 24
169.136.150.0/24 maxlen: 24
169.136.151.0/24 maxlen: 24
169.136.152.0/24 maxlen: 24
169.136.153.0/24 maxlen: 24
169.136.155.0/24 maxlen: 24
169.136.156.0/24 maxlen: 24
169.136.157.0/24 maxlen: 24
169.136.158.0/24 maxlen: 24
169.136.159.0/24 maxlen: 24
169.136.160.0/24 maxlen: 24
169.136.161.0/24 maxlen: 24
169.136.162.0/24 maxlen: 24
169.136.163.0/24 maxlen: 24
169.136.164.0/24 maxlen: 24
169.136.165.0/24 maxlen: 24
169.136.166.0/24 maxlen: 24
169.136.167.0/24 maxlen: 24
169.136.168.0/24 maxlen: 24
169.136.169.0/24 maxlen: 24
169.136.170.0/24 maxlen: 24
169.136.171.0/24 maxlen: 24
169.136.172.0/24 maxlen: 24
169.136.173.0/24 maxlen: 24
169.136.174.0/24 maxlen: 24
169.136.175.0/24 maxlen: 24
169.136.176.0/24 maxlen: 24
169.136.177.0/24 maxlen: 24
169.136.178.0/24 maxlen: 24
169.136.179.0/24 maxlen: 24
169.136.180.0/24 maxlen: 24
169.136.181.0/24 maxlen: 24
169.136.182.0/24 maxlen: 24
169.136.183.0/24 maxlen: 24
169.136.184.0/24 maxlen: 24
169.136.185.0/24 maxlen: 24
169.136.186.0/24 maxlen: 24
169.136.187.0/24 maxlen: 24
169.136.188.0/24 maxlen: 24
169.136.189.0/24 maxlen: 24
169.136.190.0/24 maxlen: 24
169.136.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409 (0x969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Apr 1 08:40:47 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69ccda0e-40d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:12:4b:a3:ce:8c:f7:a8:a6:4b:fc:f9:85:
a2:0c:da:92:12:97:00:55:ee:c8:f3:0f:1c:f6:96:
9e:54:98:1c:93:92:83:da:a4:81:86:e6:84:2b:19:
cf:79:c0:cd:a8:69:bf:45:c2:96:89:d2:4d:ab:ab:
7c:bb:17:92:e8:04:04:a9:21:b7:63:e6:29:8e:99:
ba:32:40:ae:27:57:8e:1d:01:ce:88:f8:f7:88:d0:
dc:a5:ff:47:ec:12:8e:70:a3:b5:7c:49:9e:42:3f:
99:82:be:94:fc:d5:f9:b6:1c:11:57:1b:d6:6f:cd:
32:54:13:54:c9:ce:df:5a:9f:f2:6e:c3:6e:0e:8f:
35:82:6e:f1:a9:b0:05:df:3f:94:17:a3:a2:eb:80:
26:3d:d0:e0:87:9d:08:88:c0:df:7c:d5:9f:b6:b4:
8b:95:0e:aa:e4:6d:cc:72:57:43:d4:77:1f:4c:5d:
12:20:ef:9b:b6:51:cc:98:c4:9b:b1:dc:dc:08:68:
70:23:5d:a6:1c:b3:00:f9:a5:30:d2:37:59:41:76:
09:7d:3c:b6:66:50:4b:8e:cb:b2:e6:ff:be:53:16:
6b:30:af:3d:c2:2a:71:b0:89:d4:ff:a0:65:f9:8c:
4e:b3:57:a2:b9:9c:6b:de:2b:b7:72:a8:9a:7f:bd:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2E:3F:AD:86:17:DB:51:AC:12:0A:1B:D8:89:62:4B:83:C1:5E:AC
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
169.136.66.0/24
169.136.68.0/24
169.136.71.0/24
169.136.73.0-169.136.108.255
169.136.110.0-169.136.121.255
169.136.123.0-169.136.128.255
169.136.130.0/23
169.136.134.0-169.136.140.255
169.136.142.0-169.136.144.255
169.136.148.0-169.136.153.255
169.136.155.0-169.136.191.255
Signature Algorithm: sha256WithRSAEncryption
92:5d:f1:31:9e:99:33:38:ff:93:aa:a7:68:90:0c:b6:43:31:
e4:66:66:54:cf:09:78:cf:a7:00:2d:8c:77:d5:db:8f:6d:47:
c1:d7:cc:b5:c8:18:dd:c3:53:cf:4c:a0:6a:bc:91:27:cc:3a:
d7:53:79:c8:04:3e:f4:11:4a:bc:25:b1:5f:af:e9:66:3a:a3:
be:61:92:44:e0:a2:12:f5:3a:e0:25:36:00:22:d6:6c:89:de:
fb:3c:3a:45:c4:cf:d3:9a:aa:1f:25:76:ba:4a:aa:e2:3b:4f:
8b:28:3b:23:94:a1:04:75:4f:35:89:ad:6d:aa:62:4b:dc:54:
87:da:cc:bc:09:d6:d7:d3:99:dc:84:04:e4:45:5a:3b:c3:5a:
7f:fe:4c:fd:fa:9d:b5:ac:9e:91:28:1e:0e:88:ab:54:19:3c:
00:9f:27:16:65:92:de:98:36:10:a1:b7:ee:36:d1:96:8e:8b:
6d:a6:74:ab:e2:4d:ca:b1:e1:10:6f:e8:ff:62:d0:b2:10:88:
bc:03:f7:9f:6a:5a:da:2b:cc:22:3c:ab:0c:e1:92:93:8f:57:
9c:ca:c9:50:6a:e8:94:ff:0d:11:ac:7c:6c:2e:76:97:ff:1c:
d1:6f:0f:26:c2:5c:c5:a7:be:0f:79:ac:b4:19:c1:8f:05:aa:
33:14:f9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:30 2026 by rpki-client