Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
File: BE33817A69AE11EEBBC89D75C4F9AE02.roa (raw, json)
Hash identifier: gjnTsh5k1OZvGTpF1aNvAJoG372BB0dQ8oqKuH5rVM8=
Subject key identifier: 1C:7F:59:4B:FC:A3:9E:04:B4:83:45:75:AC:9C:D4:E1:BA:3B:EC:96
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 08BA
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
Signing time: Wed 18 Jun 2025 21:07:50 +0000
ROA not before: Wed 18 Jun 2025 21:07:50 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 10122
IP address blocks: 169.136.66.0/24 maxlen: 24
169.136.68.0/24 maxlen: 24
169.136.71.0/24 maxlen: 24
169.136.73.0/24 maxlen: 24
169.136.74.0/24 maxlen: 24
169.136.75.0/24 maxlen: 24
169.136.76.0/24 maxlen: 24
169.136.77.0/24 maxlen: 24
169.136.78.0/24 maxlen: 24
169.136.79.0/24 maxlen: 24
169.136.80.0/24 maxlen: 24
169.136.81.0/24 maxlen: 24
169.136.82.0/24 maxlen: 24
169.136.83.0/24 maxlen: 24
169.136.84.0/24 maxlen: 24
169.136.85.0/24 maxlen: 24
169.136.86.0/24 maxlen: 24
169.136.87.0/24 maxlen: 24
169.136.88.0/23 maxlen: 23
169.136.88.0/24 maxlen: 24
169.136.89.0/24 maxlen: 24
169.136.90.0/24 maxlen: 24
169.136.91.0/24 maxlen: 24
169.136.92.0/24 maxlen: 24
169.136.93.0/24 maxlen: 24
169.136.94.0/24 maxlen: 24
169.136.95.0/24 maxlen: 24
169.136.96.0/24 maxlen: 24
169.136.97.0/24 maxlen: 24
169.136.98.0/24 maxlen: 24
169.136.99.0/24 maxlen: 24
169.136.100.0/24 maxlen: 24
169.136.101.0/24 maxlen: 24
169.136.102.0/24 maxlen: 24
169.136.103.0/24 maxlen: 24
169.136.104.0/24 maxlen: 24
169.136.105.0/24 maxlen: 24
169.136.106.0/24 maxlen: 24
169.136.107.0/24 maxlen: 24
169.136.108.0/24 maxlen: 24
169.136.110.0/24 maxlen: 24
169.136.111.0/24 maxlen: 24
169.136.112.0/24 maxlen: 24
169.136.113.0/24 maxlen: 24
169.136.114.0/24 maxlen: 24
169.136.115.0/24 maxlen: 24
169.136.116.0/24 maxlen: 24
169.136.117.0/24 maxlen: 24
169.136.118.0/24 maxlen: 24
169.136.119.0/24 maxlen: 24
169.136.120.0/24 maxlen: 24
169.136.121.0/24 maxlen: 24
169.136.123.0/24 maxlen: 24
169.136.124.0/24 maxlen: 24
169.136.125.0/24 maxlen: 24
169.136.126.0/24 maxlen: 24
169.136.127.0/24 maxlen: 24
169.136.128.0/24 maxlen: 24
169.136.130.0/24 maxlen: 24
169.136.131.0/24 maxlen: 24
169.136.134.0/24 maxlen: 24
169.136.135.0/24 maxlen: 24
169.136.136.0/24 maxlen: 24
169.136.137.0/24 maxlen: 24
169.136.138.0/24 maxlen: 24
169.136.139.0/24 maxlen: 24
169.136.140.0/24 maxlen: 24
169.136.144.0/24 maxlen: 24
169.136.148.0/24 maxlen: 24
169.136.149.0/24 maxlen: 24
169.136.150.0/24 maxlen: 24
169.136.151.0/24 maxlen: 24
169.136.152.0/24 maxlen: 24
169.136.153.0/24 maxlen: 24
169.136.155.0/24 maxlen: 24
169.136.156.0/24 maxlen: 24
169.136.157.0/24 maxlen: 24
169.136.158.0/24 maxlen: 24
169.136.159.0/24 maxlen: 24
169.136.160.0/24 maxlen: 24
169.136.161.0/24 maxlen: 24
169.136.162.0/24 maxlen: 24
169.136.163.0/24 maxlen: 24
169.136.164.0/24 maxlen: 24
169.136.165.0/24 maxlen: 24
169.136.166.0/24 maxlen: 24
169.136.167.0/24 maxlen: 24
169.136.168.0/24 maxlen: 24
169.136.169.0/24 maxlen: 24
169.136.170.0/24 maxlen: 24
169.136.171.0/24 maxlen: 24
169.136.172.0/24 maxlen: 24
169.136.173.0/24 maxlen: 24
169.136.174.0/24 maxlen: 24
169.136.175.0/24 maxlen: 24
169.136.176.0/24 maxlen: 24
169.136.177.0/24 maxlen: 24
169.136.178.0/24 maxlen: 24
169.136.179.0/24 maxlen: 24
169.136.180.0/24 maxlen: 24
169.136.181.0/24 maxlen: 24
169.136.182.0/24 maxlen: 24
169.136.183.0/24 maxlen: 24
169.136.184.0/24 maxlen: 24
169.136.185.0/24 maxlen: 24
169.136.186.0/24 maxlen: 24
169.136.187.0/24 maxlen: 24
169.136.188.0/24 maxlen: 24
169.136.189.0/24 maxlen: 24
169.136.190.0/24 maxlen: 24
169.136.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 21:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Jun 18 21:07:50 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68532aa6-46f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:5c:30:d6:3b:f6:5f:78:fb:d6:fb:db:5b:
df:dc:b4:df:9f:5e:f1:f6:10:55:17:48:74:4d:1c:
33:bd:9a:3e:1a:bc:9c:d8:0c:a2:ba:6e:ef:fc:92:
4d:f5:99:96:3d:b7:1b:a5:92:77:2f:1a:f5:dc:cf:
fd:ef:03:84:73:21:41:db:11:b9:69:34:c4:64:ef:
4c:7b:5f:f9:d5:ed:51:66:18:81:31:70:4c:f1:ab:
9a:28:4f:81:09:6d:e8:7d:e9:43:6a:73:27:30:1b:
c3:62:d6:9b:13:0c:2c:98:e5:05:73:7c:50:83:67:
d5:2c:07:cf:cd:49:72:73:d7:28:bc:5d:c2:59:d7:
af:d3:a5:59:65:64:ab:c8:1c:e7:f4:82:ee:9d:97:
09:34:89:11:f0:58:3f:c7:2d:7a:f0:53:13:d8:71:
e5:46:42:16:52:cd:ca:ec:05:18:3e:75:4d:b0:85:
c9:3f:ae:75:35:f6:b8:e8:5f:92:1c:d9:43:e7:38:
a5:77:d7:5f:13:f5:8a:8c:40:33:f3:c3:d2:df:ba:
f1:a3:01:e5:c3:40:58:aa:8f:5a:23:63:7f:12:c0:
66:57:f7:11:0c:80:74:ea:8e:82:24:ca:51:c7:73:
d2:f3:8e:30:91:79:64:be:7e:60:30:2e:6c:50:fb:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7F:59:4B:FC:A3:9E:04:B4:83:45:75:AC:9C:D4:E1:BA:3B:EC:96
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.136.66.0/24
169.136.68.0/24
169.136.71.0/24
169.136.73.0-169.136.108.255
169.136.110.0-169.136.121.255
169.136.123.0-169.136.128.255
169.136.130.0/23
169.136.134.0-169.136.140.255
169.136.144.0/24
169.136.148.0-169.136.153.255
169.136.155.0-169.136.191.255
Signature Algorithm: sha256WithRSAEncryption
1e:ab:ce:d5:52:bf:66:49:76:55:80:97:07:2e:4f:a9:49:eb:
99:85:57:5c:8e:08:c0:20:de:fc:71:92:36:77:8b:29:5e:6a:
44:80:ee:81:a9:34:94:76:0a:eb:9f:83:a5:fd:b6:c4:2d:01:
64:3d:40:92:c8:d4:f5:d5:d7:58:20:a1:06:da:8f:cd:19:78:
62:ef:2f:92:6f:ef:c6:88:5c:65:1d:28:47:0c:c1:5b:b4:6a:
66:78:96:bc:b4:5b:f4:a9:06:4f:24:cb:fc:15:00:98:37:44:
e4:c1:c7:4e:9c:c5:da:3c:00:ba:15:3d:0f:81:53:ae:7a:b4:
6f:d9:f7:af:5f:36:66:f3:87:c0:53:85:d8:2e:3f:27:af:d0:
df:23:c1:a3:0e:d1:9b:06:58:c0:c3:9d:05:9e:6f:8f:52:dd:
4c:77:4d:19:f5:7f:b9:ef:ee:ad:e3:5b:ae:3d:1a:3d:9f:50:
83:16:01:c5:3c:d4:2a:f0:ad:1a:3a:6c:b2:4a:b4:69:41:ef:
4a:5d:2d:1f:6c:91:7d:57:68:e9:1f:cb:61:f2:25:39:e2:29:
ed:4b:2b:47:2e:83:33:65:eb:3d:8f:ba:76:24:35:51:70:92:
d5:8c:c6:17:a8:fc:dc:70:2d:59:13:1c:7d:0c:64:3f:69:5a:
f1:28:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:20:45 2025 by rpki-client