Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
File: BE33817A69AE11EEBBC89D75C4F9AE02.roa (raw, json)
Hash identifier: TwMUHvA3vWv9zFduSTekp60I17PPmAq4drJ/AVIK7t4=
Subject key identifier: 3F:C5:EC:4B:2B:B5:10:4E:DF:4E:9C:A1:4D:E5:11:F9:9C:4C:47:9B
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 0953
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:41:34 +0000
ROA not before: Tue 04 Nov 2025 09:12:29 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 10122
IP address blocks: 169.136.66.0/24 maxlen: 24
169.136.68.0/24 maxlen: 24
169.136.71.0/24 maxlen: 24
169.136.73.0/24 maxlen: 24
169.136.74.0/24 maxlen: 24
169.136.75.0/24 maxlen: 24
169.136.76.0/24 maxlen: 24
169.136.77.0/24 maxlen: 24
169.136.78.0/24 maxlen: 24
169.136.79.0/24 maxlen: 24
169.136.80.0/24 maxlen: 24
169.136.81.0/24 maxlen: 24
169.136.82.0/24 maxlen: 24
169.136.83.0/24 maxlen: 24
169.136.84.0/24 maxlen: 24
169.136.85.0/24 maxlen: 24
169.136.86.0/24 maxlen: 24
169.136.87.0/24 maxlen: 24
169.136.88.0/23 maxlen: 23
169.136.88.0/24 maxlen: 24
169.136.89.0/24 maxlen: 24
169.136.90.0/24 maxlen: 24
169.136.91.0/24 maxlen: 24
169.136.92.0/24 maxlen: 24
169.136.93.0/24 maxlen: 24
169.136.94.0/24 maxlen: 24
169.136.95.0/24 maxlen: 24
169.136.96.0/24 maxlen: 24
169.136.97.0/24 maxlen: 24
169.136.98.0/24 maxlen: 24
169.136.99.0/24 maxlen: 24
169.136.100.0/24 maxlen: 24
169.136.101.0/24 maxlen: 24
169.136.102.0/24 maxlen: 24
169.136.103.0/24 maxlen: 24
169.136.104.0/24 maxlen: 24
169.136.105.0/24 maxlen: 24
169.136.106.0/24 maxlen: 24
169.136.107.0/24 maxlen: 24
169.136.108.0/24 maxlen: 24
169.136.110.0/24 maxlen: 24
169.136.111.0/24 maxlen: 24
169.136.112.0/24 maxlen: 24
169.136.113.0/24 maxlen: 24
169.136.114.0/24 maxlen: 24
169.136.115.0/24 maxlen: 24
169.136.116.0/24 maxlen: 24
169.136.117.0/24 maxlen: 24
169.136.118.0/24 maxlen: 24
169.136.119.0/24 maxlen: 24
169.136.120.0/24 maxlen: 24
169.136.121.0/24 maxlen: 24
169.136.123.0/24 maxlen: 24
169.136.124.0/24 maxlen: 24
169.136.125.0/24 maxlen: 24
169.136.126.0/24 maxlen: 24
169.136.127.0/24 maxlen: 24
169.136.128.0/24 maxlen: 24
169.136.130.0/24 maxlen: 24
169.136.131.0/24 maxlen: 24
169.136.134.0/24 maxlen: 24
169.136.135.0/24 maxlen: 24
169.136.136.0/24 maxlen: 24
169.136.137.0/24 maxlen: 24
169.136.138.0/24 maxlen: 24
169.136.139.0/24 maxlen: 24
169.136.140.0/24 maxlen: 24
169.136.143.0/24 maxlen: 24
169.136.144.0/24 maxlen: 24
169.136.148.0/24 maxlen: 24
169.136.149.0/24 maxlen: 24
169.136.150.0/24 maxlen: 24
169.136.151.0/24 maxlen: 24
169.136.152.0/24 maxlen: 24
169.136.153.0/24 maxlen: 24
169.136.155.0/24 maxlen: 24
169.136.156.0/24 maxlen: 24
169.136.157.0/24 maxlen: 24
169.136.158.0/24 maxlen: 24
169.136.159.0/24 maxlen: 24
169.136.160.0/24 maxlen: 24
169.136.161.0/24 maxlen: 24
169.136.162.0/24 maxlen: 24
169.136.163.0/24 maxlen: 24
169.136.164.0/24 maxlen: 24
169.136.165.0/24 maxlen: 24
169.136.166.0/24 maxlen: 24
169.136.167.0/24 maxlen: 24
169.136.168.0/24 maxlen: 24
169.136.169.0/24 maxlen: 24
169.136.170.0/24 maxlen: 24
169.136.171.0/24 maxlen: 24
169.136.172.0/24 maxlen: 24
169.136.173.0/24 maxlen: 24
169.136.174.0/24 maxlen: 24
169.136.175.0/24 maxlen: 24
169.136.176.0/24 maxlen: 24
169.136.177.0/24 maxlen: 24
169.136.178.0/24 maxlen: 24
169.136.179.0/24 maxlen: 24
169.136.180.0/24 maxlen: 24
169.136.181.0/24 maxlen: 24
169.136.182.0/24 maxlen: 24
169.136.183.0/24 maxlen: 24
169.136.184.0/24 maxlen: 24
169.136.185.0/24 maxlen: 24
169.136.186.0/24 maxlen: 24
169.136.187.0/24 maxlen: 24
169.136.188.0/24 maxlen: 24
169.136.189.0/24 maxlen: 24
169.136.190.0/24 maxlen: 24
169.136.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2387 (0x953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Nov 4 09:12:29 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47a4e-1c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:28:04:2f:f1:f8:78:c8:24:d1:60:e8:b4:
52:3d:54:98:2c:c1:ca:9d:1c:f3:9f:12:f4:7f:8a:
02:d4:f1:65:f3:8e:d6:17:4c:55:96:a3:9f:f6:9c:
59:15:63:0f:d9:0b:61:f0:3f:a7:e8:cd:f0:ca:d5:
43:23:8e:f4:09:75:cf:2d:fb:f0:9b:98:a1:56:1a:
e8:69:74:9b:03:8c:f1:7e:7b:66:5c:4d:d8:7d:fa:
4c:23:5c:22:76:ac:58:12:f8:c0:6f:c2:26:c4:8d:
90:2d:bf:de:20:07:fe:1e:8f:70:1c:6e:79:4b:a6:
d6:f1:c4:d6:22:f9:ca:c2:1d:f8:9b:80:ab:10:e5:
d2:e0:67:6e:63:c9:93:d4:57:00:eb:55:e4:7a:ff:
40:74:6c:1c:96:5d:8a:29:a0:d6:c3:1c:d0:85:6b:
e6:41:e4:7d:3b:95:f1:0d:61:48:d2:a7:08:32:27:
7b:b1:69:7a:62:1e:c1:1b:5b:7b:ab:a6:5e:0b:7f:
4c:6d:7c:36:12:45:a9:82:7f:0a:9b:cb:2b:28:0a:
26:b7:34:36:b7:df:42:e6:69:60:7a:93:e2:c6:0c:
54:f3:41:d4:6b:dc:d9:ca:7f:ec:b8:1a:0f:2f:c6:
b7:5f:be:f8:c5:68:18:a6:df:3f:d6:43:19:46:61:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C5:EC:4B:2B:B5:10:4E:DF:4E:9C:A1:4D:E5:11:F9:9C:4C:47:9B
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
169.136.66.0/24
169.136.68.0/24
169.136.71.0/24
169.136.73.0-169.136.108.255
169.136.110.0-169.136.121.255
169.136.123.0-169.136.128.255
169.136.130.0/23
169.136.134.0-169.136.140.255
169.136.143.0-169.136.144.255
169.136.148.0-169.136.153.255
169.136.155.0-169.136.191.255
Signature Algorithm: sha256WithRSAEncryption
01:4e:f1:a3:d4:81:b0:66:7a:e5:ca:6d:25:37:34:af:8b:03:
f9:98:d7:9b:e4:64:de:47:54:b2:d6:01:86:d6:d2:a1:13:af:
69:be:0b:9f:a7:49:31:e3:7f:3f:dd:1e:55:b8:e2:4b:cd:61:
09:ae:0e:f2:9d:a6:e5:46:36:a6:14:f4:c1:30:de:f0:bb:93:
7f:0e:79:19:9e:54:a3:9b:60:07:71:1f:df:7d:7c:fe:08:52:
28:48:9a:4c:97:66:89:37:f3:fc:af:8f:73:c3:7c:61:04:95:
2a:47:99:eb:e2:d5:f3:0e:92:9b:78:b3:f2:a2:6f:8e:16:69:
8a:85:59:05:a3:23:9b:93:fa:be:44:1b:ba:22:99:6f:a8:27:
0c:c4:db:47:a1:ae:36:e7:2c:db:6e:48:4c:28:7e:5f:f2:15:
43:f4:4e:22:33:d9:36:fc:d7:24:14:1d:db:57:d8:9d:70:c2:
f4:5c:f2:81:e1:c8:86:0a:81:d0:75:c9:4a:58:32:ff:e2:5f:
31:41:0c:45:64:a5:c9:1f:1f:87:bf:43:9d:b0:87:3f:bf:1e:
c5:09:53:5e:69:67:51:dc:d6:07:66:3b:f2:24:e1:38:a5:d3:
cf:5b:80:37:1b:b1:cc:75:a9:d4:be:99:6f:20:b5:ea:84:58:
64:e5:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:21 2026 by rpki-client