Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
File: BE33817A69AE11EEBBC89D75C4F9AE02.roa (raw, json)
Hash identifier: VEN7PHjgXJ17sdBlfk+R1gfjCu4511OjPAUhn66pLqw=
Subject key identifier: E0:33:A2:1F:11:AB:B5:76:25:9F:9F:90:73:7A:23:9F:8B:FF:37:0E
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 0995
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
Signing time: Wed 10 Jun 2026 21:24:19 +0000
ROA not before: Wed 10 Jun 2026 21:24:19 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 10122
IP address blocks: 169.136.66.0/24 maxlen: 24
169.136.68.0/24 maxlen: 24
169.136.71.0/24 maxlen: 24
169.136.73.0/24 maxlen: 24
169.136.74.0/24 maxlen: 24
169.136.75.0/24 maxlen: 24
169.136.76.0/24 maxlen: 24
169.136.77.0/24 maxlen: 24
169.136.78.0/24 maxlen: 24
169.136.79.0/24 maxlen: 24
169.136.80.0/24 maxlen: 24
169.136.81.0/24 maxlen: 24
169.136.82.0/24 maxlen: 24
169.136.83.0/24 maxlen: 24
169.136.84.0/24 maxlen: 24
169.136.85.0/24 maxlen: 24
169.136.86.0/24 maxlen: 24
169.136.87.0/24 maxlen: 24
169.136.88.0/23 maxlen: 23
169.136.88.0/24 maxlen: 24
169.136.89.0/24 maxlen: 24
169.136.90.0/24 maxlen: 24
169.136.91.0/24 maxlen: 24
169.136.92.0/24 maxlen: 24
169.136.93.0/24 maxlen: 24
169.136.94.0/24 maxlen: 24
169.136.95.0/24 maxlen: 24
169.136.96.0/24 maxlen: 24
169.136.97.0/24 maxlen: 24
169.136.98.0/24 maxlen: 24
169.136.99.0/24 maxlen: 24
169.136.100.0/24 maxlen: 24
169.136.101.0/24 maxlen: 24
169.136.102.0/24 maxlen: 24
169.136.103.0/24 maxlen: 24
169.136.104.0/24 maxlen: 24
169.136.105.0/24 maxlen: 24
169.136.106.0/24 maxlen: 24
169.136.107.0/24 maxlen: 24
169.136.108.0/24 maxlen: 24
169.136.110.0/24 maxlen: 24
169.136.111.0/24 maxlen: 24
169.136.112.0/24 maxlen: 24
169.136.113.0/24 maxlen: 24
169.136.114.0/24 maxlen: 24
169.136.115.0/24 maxlen: 24
169.136.116.0/24 maxlen: 24
169.136.117.0/24 maxlen: 24
169.136.118.0/24 maxlen: 24
169.136.119.0/24 maxlen: 24
169.136.120.0/24 maxlen: 24
169.136.121.0/24 maxlen: 24
169.136.123.0/24 maxlen: 24
169.136.124.0/24 maxlen: 24
169.136.125.0/24 maxlen: 24
169.136.126.0/24 maxlen: 24
169.136.127.0/24 maxlen: 24
169.136.128.0/24 maxlen: 24
169.136.130.0/24 maxlen: 24
169.136.131.0/24 maxlen: 24
169.136.134.0/24 maxlen: 24
169.136.135.0/24 maxlen: 24
169.136.136.0/24 maxlen: 24
169.136.137.0/24 maxlen: 24
169.136.138.0/24 maxlen: 24
169.136.139.0/24 maxlen: 24
169.136.140.0/24 maxlen: 24
169.136.142.0/24 maxlen: 24
169.136.143.0/24 maxlen: 24
169.136.144.0/24 maxlen: 24
169.136.148.0/24 maxlen: 24
169.136.149.0/24 maxlen: 24
169.136.150.0/24 maxlen: 24
169.136.151.0/24 maxlen: 24
169.136.152.0/24 maxlen: 24
169.136.153.0/24 maxlen: 24
169.136.155.0/24 maxlen: 24
169.136.156.0/24 maxlen: 24
169.136.157.0/24 maxlen: 24
169.136.158.0/24 maxlen: 24
169.136.159.0/24 maxlen: 24
169.136.160.0/24 maxlen: 24
169.136.161.0/24 maxlen: 24
169.136.162.0/24 maxlen: 24
169.136.163.0/24 maxlen: 24
169.136.164.0/24 maxlen: 24
169.136.165.0/24 maxlen: 24
169.136.166.0/24 maxlen: 24
169.136.167.0/24 maxlen: 24
169.136.168.0/24 maxlen: 24
169.136.169.0/24 maxlen: 24
169.136.170.0/24 maxlen: 24
169.136.171.0/24 maxlen: 24
169.136.172.0/24 maxlen: 24
169.136.173.0/24 maxlen: 24
169.136.174.0/24 maxlen: 24
169.136.175.0/24 maxlen: 24
169.136.176.0/24 maxlen: 24
169.136.177.0/24 maxlen: 24
169.136.178.0/24 maxlen: 24
169.136.179.0/24 maxlen: 24
169.136.180.0/24 maxlen: 24
169.136.181.0/24 maxlen: 24
169.136.182.0/24 maxlen: 24
169.136.183.0/24 maxlen: 24
169.136.184.0/24 maxlen: 24
169.136.185.0/24 maxlen: 24
169.136.186.0/24 maxlen: 24
169.136.187.0/24 maxlen: 24
169.136.188.0/24 maxlen: 24
169.136.189.0/24 maxlen: 24
169.136.190.0/24 maxlen: 24
169.136.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2453 (0x995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Jun 10 21:24:19 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a29d603-ca0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:8c:8f:60:07:6e:db:48:53:23:a7:bf:ec:
61:7d:4d:27:2a:f7:a5:05:62:bd:54:34:1a:8d:44:
08:d6:b6:79:a2:1f:86:bc:86:95:e8:b1:e8:4f:db:
11:5e:e1:1e:5f:95:45:36:6d:d6:8c:4b:fd:6f:39:
ed:13:a9:15:c1:b1:09:c6:f6:5f:27:d6:f2:ea:48:
eb:b7:d9:0f:89:7b:8c:e6:33:cc:73:31:f0:e0:88:
a4:ee:d7:42:70:ab:6d:ea:38:75:c9:84:ca:a3:42:
b6:58:13:56:cc:21:4c:1e:c8:12:26:5e:a5:51:65:
d6:ae:12:29:f1:4c:e6:69:55:28:9b:f0:51:4d:18:
f0:6f:2e:31:89:6d:a3:50:28:f1:1f:48:c9:6b:51:
c4:71:aa:5c:40:12:22:ba:9d:2b:42:fd:25:35:9f:
ea:da:4e:0c:48:d2:df:74:90:42:9c:17:b1:b3:4e:
c2:59:2c:f9:28:be:0e:8f:5b:04:45:e7:6e:f4:96:
dc:b3:15:07:95:9d:6a:f4:74:84:5f:ee:3f:1c:af:
5c:70:01:5c:30:4c:1d:cc:f1:51:cc:fe:cd:7a:52:
d3:a2:9c:40:3d:83:f9:42:13:d1:e1:4a:d1:01:16:
62:a3:01:32:25:79:f7:df:ee:c2:27:40:31:2b:aa:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:33:A2:1F:11:AB:B5:76:25:9F:9F:90:73:7A:23:9F:8B:FF:37:0E
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
169.136.66.0/24
169.136.68.0/24
169.136.71.0/24
169.136.73.0-169.136.108.255
169.136.110.0-169.136.121.255
169.136.123.0-169.136.128.255
169.136.130.0/23
169.136.134.0-169.136.140.255
169.136.142.0-169.136.144.255
169.136.148.0-169.136.153.255
169.136.155.0-169.136.191.255
Signature Algorithm: sha256WithRSAEncryption
28:d6:5f:ba:94:c6:a3:bc:4a:e3:af:9f:00:a9:e5:32:6e:f1:
87:34:0f:7f:1c:31:74:ef:2a:45:44:0f:26:12:85:11:67:89:
6c:0d:e8:3f:71:41:bf:18:13:79:c4:b7:43:d4:50:07:dd:f3:
03:f0:0a:07:51:a0:fb:65:76:60:56:52:4f:3f:af:1b:68:c0:
2b:a6:bd:b9:61:c3:df:3b:c6:52:2b:96:f0:54:56:b2:31:cb:
82:60:ac:6f:51:93:70:e9:66:5b:75:e8:61:a6:a2:71:c3:c9:
26:e1:b8:91:28:17:2f:49:56:89:b9:fe:3e:5b:30:52:66:3c:
d6:7e:9b:df:b9:78:dc:d3:4e:fb:7a:df:63:49:06:2d:24:97:
5a:ba:7d:1f:7b:06:c4:67:2e:4a:ac:1d:ed:bb:ed:be:64:37:
28:b2:58:14:e6:f6:c2:aa:2d:1e:20:95:84:b6:6c:a8:24:ff:
4d:11:7b:36:70:32:86:5a:50:05:a2:3c:86:e5:ab:72:c8:f3:
5f:ba:ab:f9:c2:14:f9:8d:5c:2f:4c:79:59:ad:6c:81:c1:e9:
0f:95:2c:0a:98:48:ea:d1:d2:89:ed:8e:17:be:9c:2b:fd:cc:
b3:1c:69:6b:c6:34:64:06:ec:50:e5:39:06:29:c4:86:c5:18:
29:18:fc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:46:20 2026 by rpki-client