Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
File: BE33817A69AE11EEBBC89D75C4F9AE02.roa (raw, json)
Hash identifier: ygq1dkv+uF4QDS+bggz98LoWciehSBzYRj/fw8Od03I=
Subject key identifier: C1:7D:D6:00:E2:FA:84:DC:99:89:93:E7:42:66:8F:D0:91:5C:94:4F
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 090C
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
Signing time: Tue 04 Nov 2025 09:12:29 +0000
ROA not before: Tue 04 Nov 2025 09:12:29 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 10122
IP address blocks: 169.136.66.0/24 maxlen: 24
169.136.68.0/24 maxlen: 24
169.136.71.0/24 maxlen: 24
169.136.73.0/24 maxlen: 24
169.136.74.0/24 maxlen: 24
169.136.75.0/24 maxlen: 24
169.136.76.0/24 maxlen: 24
169.136.77.0/24 maxlen: 24
169.136.78.0/24 maxlen: 24
169.136.79.0/24 maxlen: 24
169.136.80.0/24 maxlen: 24
169.136.81.0/24 maxlen: 24
169.136.82.0/24 maxlen: 24
169.136.83.0/24 maxlen: 24
169.136.84.0/24 maxlen: 24
169.136.85.0/24 maxlen: 24
169.136.86.0/24 maxlen: 24
169.136.87.0/24 maxlen: 24
169.136.88.0/23 maxlen: 23
169.136.88.0/24 maxlen: 24
169.136.89.0/24 maxlen: 24
169.136.90.0/24 maxlen: 24
169.136.91.0/24 maxlen: 24
169.136.92.0/24 maxlen: 24
169.136.93.0/24 maxlen: 24
169.136.94.0/24 maxlen: 24
169.136.95.0/24 maxlen: 24
169.136.96.0/24 maxlen: 24
169.136.97.0/24 maxlen: 24
169.136.98.0/24 maxlen: 24
169.136.99.0/24 maxlen: 24
169.136.100.0/24 maxlen: 24
169.136.101.0/24 maxlen: 24
169.136.102.0/24 maxlen: 24
169.136.103.0/24 maxlen: 24
169.136.104.0/24 maxlen: 24
169.136.105.0/24 maxlen: 24
169.136.106.0/24 maxlen: 24
169.136.107.0/24 maxlen: 24
169.136.108.0/24 maxlen: 24
169.136.110.0/24 maxlen: 24
169.136.111.0/24 maxlen: 24
169.136.112.0/24 maxlen: 24
169.136.113.0/24 maxlen: 24
169.136.114.0/24 maxlen: 24
169.136.115.0/24 maxlen: 24
169.136.116.0/24 maxlen: 24
169.136.117.0/24 maxlen: 24
169.136.118.0/24 maxlen: 24
169.136.119.0/24 maxlen: 24
169.136.120.0/24 maxlen: 24
169.136.121.0/24 maxlen: 24
169.136.123.0/24 maxlen: 24
169.136.124.0/24 maxlen: 24
169.136.125.0/24 maxlen: 24
169.136.126.0/24 maxlen: 24
169.136.127.0/24 maxlen: 24
169.136.128.0/24 maxlen: 24
169.136.130.0/24 maxlen: 24
169.136.131.0/24 maxlen: 24
169.136.134.0/24 maxlen: 24
169.136.135.0/24 maxlen: 24
169.136.136.0/24 maxlen: 24
169.136.137.0/24 maxlen: 24
169.136.138.0/24 maxlen: 24
169.136.139.0/24 maxlen: 24
169.136.140.0/24 maxlen: 24
169.136.143.0/24 maxlen: 24
169.136.144.0/24 maxlen: 24
169.136.148.0/24 maxlen: 24
169.136.149.0/24 maxlen: 24
169.136.150.0/24 maxlen: 24
169.136.151.0/24 maxlen: 24
169.136.152.0/24 maxlen: 24
169.136.153.0/24 maxlen: 24
169.136.155.0/24 maxlen: 24
169.136.156.0/24 maxlen: 24
169.136.157.0/24 maxlen: 24
169.136.158.0/24 maxlen: 24
169.136.159.0/24 maxlen: 24
169.136.160.0/24 maxlen: 24
169.136.161.0/24 maxlen: 24
169.136.162.0/24 maxlen: 24
169.136.163.0/24 maxlen: 24
169.136.164.0/24 maxlen: 24
169.136.165.0/24 maxlen: 24
169.136.166.0/24 maxlen: 24
169.136.167.0/24 maxlen: 24
169.136.168.0/24 maxlen: 24
169.136.169.0/24 maxlen: 24
169.136.170.0/24 maxlen: 24
169.136.171.0/24 maxlen: 24
169.136.172.0/24 maxlen: 24
169.136.173.0/24 maxlen: 24
169.136.174.0/24 maxlen: 24
169.136.175.0/24 maxlen: 24
169.136.176.0/24 maxlen: 24
169.136.177.0/24 maxlen: 24
169.136.178.0/24 maxlen: 24
169.136.179.0/24 maxlen: 24
169.136.180.0/24 maxlen: 24
169.136.181.0/24 maxlen: 24
169.136.182.0/24 maxlen: 24
169.136.183.0/24 maxlen: 24
169.136.184.0/24 maxlen: 24
169.136.185.0/24 maxlen: 24
169.136.186.0/24 maxlen: 24
169.136.187.0/24 maxlen: 24
169.136.188.0/24 maxlen: 24
169.136.189.0/24 maxlen: 24
169.136.190.0/24 maxlen: 24
169.136.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:39:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2316 (0x90c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Nov 4 09:12:29 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6909c37c-01cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:f3:7c:bb:d9:3b:8d:0d:1c:00:59:10:96:
53:d6:55:8b:88:77:e0:0c:c6:f1:32:7e:82:ed:d1:
87:6d:0a:3b:9e:da:79:31:75:58:27:0a:53:35:03:
20:76:cf:bc:79:f1:95:f3:0e:06:58:62:63:58:f1:
30:7d:c7:3b:b2:7b:69:1a:df:f0:63:33:da:ef:50:
48:a0:ef:ab:b3:95:b1:ba:5c:61:3f:e6:b4:94:31:
3a:98:4c:aa:9b:47:ac:6d:10:24:9d:1b:74:2a:ae:
37:d0:75:b4:73:f3:c4:4e:dc:b9:62:30:1e:24:a0:
be:4d:e5:c9:2c:dc:c7:87:0a:94:60:d4:6b:b6:eb:
59:df:29:bd:08:01:8b:a3:28:fe:0b:af:17:7d:40:
ee:f1:23:5f:0e:7f:61:e1:32:ce:80:4b:33:4c:46:
22:d7:f2:e2:83:5d:65:a0:a6:2a:ec:e6:b1:e1:65:
c9:ca:7b:25:3b:a3:8a:27:b7:4f:9c:9d:9b:7d:62:
36:ac:21:27:9c:b3:e2:9e:a8:c5:ab:d0:96:78:2d:
05:50:d8:53:9f:54:78:e4:65:52:ca:68:dc:21:c7:
78:16:07:c8:c1:11:bb:02:1b:b9:27:6b:48:79:38:
ae:3e:0b:b3:69:c4:2a:d6:1d:a7:9d:77:17:97:a0:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7D:D6:00:E2:FA:84:DC:99:89:93:E7:42:66:8F:D0:91:5C:94:4F
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.136.66.0/24
169.136.68.0/24
169.136.71.0/24
169.136.73.0-169.136.108.255
169.136.110.0-169.136.121.255
169.136.123.0-169.136.128.255
169.136.130.0/23
169.136.134.0-169.136.140.255
169.136.143.0-169.136.144.255
169.136.148.0-169.136.153.255
169.136.155.0-169.136.191.255
Signature Algorithm: sha256WithRSAEncryption
17:73:98:8d:7f:64:91:80:aa:f4:35:9e:61:05:0f:37:07:3e:
df:a0:d9:fb:78:66:a3:a9:11:78:e5:e8:1b:54:ee:e0:86:27:
68:0c:db:4c:d3:4e:09:6e:16:b4:bb:fa:bd:5b:09:e2:b5:3a:
2d:cc:17:10:c2:ad:23:8e:27:d1:7d:96:c5:0e:08:44:01:d6:
c5:11:8b:d2:ad:05:ee:9d:a7:61:e9:ca:e3:a6:97:88:8d:e8:
29:2c:6b:7f:82:36:fd:20:50:36:ce:dc:bb:ed:dd:64:85:db:
d2:c5:c4:47:94:c5:ef:fd:0a:a6:92:8c:93:83:14:17:d3:02:
d7:3a:2b:69:c1:d8:7d:c3:6b:5c:db:ba:56:81:6e:4c:29:2a:
d5:4c:a6:1b:e3:a1:b7:ef:92:a1:ec:c6:4d:c0:82:a1:8b:1d:
1b:70:1f:dc:62:bc:de:a9:a9:df:3b:f7:0f:14:e7:1a:be:5f:
88:84:0c:64:75:10:df:a4:28:0d:e2:66:47:5e:9b:a9:10:0e:
59:d5:4f:51:ab:0d:32:af:51:95:cc:33:f7:77:eb:5e:cc:bc:
81:f8:e7:cf:5f:ca:f4:8b:00:39:ae:7e:79:03:3c:37:2c:b5:
9c:de:fa:f4:7b:aa:8f:cc:91:c6:4f:50:81:83:86:5b:df:c5:
b0:87:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:24:36 2025 by rpki-client