Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BF048D74CCF711F1A5936D4EFB65CEF9.roa
File: BF048D74CCF711F1A5936D4EFB65CEF9.roa (raw, json)
Hash identifier: dT9oGJri3j+KigSbnqwp68xGrxoXzpDCs+OFmqDgo3o=
Subject key identifier: 59:60:2C:89:CD:66:01:6B:1B:14:5F:C1:2C:EB:C5:4E:BC:99:B7:04
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 09E0
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BF048D74CCF711F1A5936D4EFB65CEF9.roa
Signing time: Wed 21 Oct 2026 02:33:06 +0000
ROA not before: Wed 21 Oct 2026 02:33:06 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 10122
IP address blocks: 169.136.66.0/24 maxlen: 24
169.136.71.0/24 maxlen: 24
169.136.73.0/24 maxlen: 24
169.136.74.0/24 maxlen: 24
169.136.75.0/24 maxlen: 24
169.136.76.0/24 maxlen: 24
169.136.77.0/24 maxlen: 24
169.136.78.0/24 maxlen: 24
169.136.79.0/24 maxlen: 24
169.136.80.0/24 maxlen: 24
169.136.81.0/24 maxlen: 24
169.136.82.0/24 maxlen: 24
169.136.83.0/24 maxlen: 24
169.136.84.0/24 maxlen: 24
169.136.85.0/24 maxlen: 24
169.136.86.0/24 maxlen: 24
169.136.87.0/24 maxlen: 24
169.136.88.0/23 maxlen: 23
169.136.88.0/24 maxlen: 24
169.136.89.0/24 maxlen: 24
169.136.90.0/24 maxlen: 24
169.136.91.0/24 maxlen: 24
169.136.92.0/24 maxlen: 24
169.136.93.0/24 maxlen: 24
169.136.94.0/24 maxlen: 24
169.136.95.0/24 maxlen: 24
169.136.96.0/24 maxlen: 24
169.136.97.0/24 maxlen: 24
169.136.98.0/24 maxlen: 24
169.136.99.0/24 maxlen: 24
169.136.100.0/24 maxlen: 24
169.136.101.0/24 maxlen: 24
169.136.102.0/24 maxlen: 24
169.136.103.0/24 maxlen: 24
169.136.104.0/24 maxlen: 24
169.136.105.0/24 maxlen: 24
169.136.106.0/24 maxlen: 24
169.136.107.0/24 maxlen: 24
169.136.108.0/24 maxlen: 24
169.136.110.0/24 maxlen: 24
169.136.111.0/24 maxlen: 24
169.136.112.0/24 maxlen: 24
169.136.113.0/24 maxlen: 24
169.136.114.0/24 maxlen: 24
169.136.115.0/24 maxlen: 24
169.136.116.0/24 maxlen: 24
169.136.117.0/24 maxlen: 24
169.136.118.0/24 maxlen: 24
169.136.119.0/24 maxlen: 24
169.136.120.0/24 maxlen: 24
169.136.121.0/24 maxlen: 24
169.136.123.0/24 maxlen: 24
169.136.124.0/24 maxlen: 24
169.136.125.0/24 maxlen: 24
169.136.126.0/24 maxlen: 24
169.136.127.0/24 maxlen: 24
169.136.128.0/24 maxlen: 24
169.136.130.0/24 maxlen: 24
169.136.131.0/24 maxlen: 24
169.136.134.0/24 maxlen: 24
169.136.135.0/24 maxlen: 24
169.136.136.0/24 maxlen: 24
169.136.137.0/24 maxlen: 24
169.136.138.0/24 maxlen: 24
169.136.139.0/24 maxlen: 24
169.136.140.0/24 maxlen: 24
169.136.142.0/24 maxlen: 24
169.136.143.0/24 maxlen: 24
169.136.144.0/24 maxlen: 24
169.136.148.0/24 maxlen: 24
169.136.149.0/24 maxlen: 24
169.136.150.0/24 maxlen: 24
169.136.151.0/24 maxlen: 24
169.136.152.0/24 maxlen: 24
169.136.153.0/24 maxlen: 24
169.136.155.0/24 maxlen: 24
169.136.156.0/24 maxlen: 24
169.136.157.0/24 maxlen: 24
169.136.158.0/24 maxlen: 24
169.136.159.0/24 maxlen: 24
169.136.160.0/24 maxlen: 24
169.136.161.0/24 maxlen: 24
169.136.162.0/24 maxlen: 24
169.136.163.0/24 maxlen: 24
169.136.164.0/24 maxlen: 24
169.136.165.0/24 maxlen: 24
169.136.166.0/24 maxlen: 24
169.136.167.0/24 maxlen: 24
169.136.168.0/24 maxlen: 24
169.136.169.0/24 maxlen: 24
169.136.170.0/24 maxlen: 24
169.136.171.0/24 maxlen: 24
169.136.172.0/24 maxlen: 24
169.136.173.0/24 maxlen: 24
169.136.174.0/24 maxlen: 24
169.136.175.0/24 maxlen: 24
169.136.176.0/24 maxlen: 24
169.136.177.0/24 maxlen: 24
169.136.178.0/24 maxlen: 24
169.136.179.0/24 maxlen: 24
169.136.180.0/24 maxlen: 24
169.136.181.0/24 maxlen: 24
169.136.182.0/24 maxlen: 24
169.136.183.0/24 maxlen: 24
169.136.184.0/24 maxlen: 24
169.136.185.0/24 maxlen: 24
169.136.186.0/24 maxlen: 24
169.136.187.0/24 maxlen: 24
169.136.188.0/24 maxlen: 24
169.136.189.0/24 maxlen: 24
169.136.190.0/24 maxlen: 24
169.136.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2528 (0x9e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Oct 21 02:33:06 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6ad82462-3f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:94:08:ef:95:d6:58:ed:35:e4:7d:36:19:
20:92:c7:73:72:9b:b1:42:9a:f2:4d:c3:bc:22:fd:
be:ab:ed:60:29:fc:09:d1:ed:bb:e7:34:7b:da:94:
7a:1d:7b:ae:bb:26:ec:99:56:bc:7a:40:cf:bb:1d:
0d:de:a7:ad:30:01:ce:41:e6:cb:a7:95:a6:4e:4f:
eb:26:ae:15:14:20:8b:07:30:d7:7f:ff:ff:c4:f3:
af:74:0b:1b:a8:35:5b:4a:77:1a:d8:70:6c:17:fd:
33:de:cb:ad:05:7b:44:89:a5:0c:9a:63:3a:fc:46:
ee:73:62:c7:c2:d1:86:ac:b0:85:38:38:c5:da:b9:
57:c5:f2:58:19:18:c7:f7:60:69:b9:83:93:2a:6c:
28:43:7f:eb:27:07:b5:91:94:50:a5:ee:5a:b0:86:
1c:6d:7d:f7:cd:01:54:98:83:b1:4d:c5:00:e0:60:
05:3f:1d:88:56:d6:24:7e:f3:6f:8c:26:d0:77:c3:
05:69:20:ff:6e:83:32:da:f2:06:ae:3a:d5:b2:64:
ef:51:90:20:a4:3d:dc:ce:a9:98:92:e1:6d:e5:83:
ca:3d:ed:9f:38:35:40:9e:d2:1b:74:c6:19:f9:3d:
33:da:f8:0a:a7:ed:0c:c6:ca:32:30:7e:7d:2f:1a:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:60:2C:89:CD:66:01:6B:1B:14:5F:C1:2C:EB:C5:4E:BC:99:B7:04
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BF048D74CCF711F1A5936D4EFB65CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
169.136.66.0/24
169.136.71.0/24
169.136.73.0-169.136.108.255
169.136.110.0-169.136.121.255
169.136.123.0-169.136.128.255
169.136.130.0/23
169.136.134.0-169.136.140.255
169.136.142.0-169.136.144.255
169.136.148.0-169.136.153.255
169.136.155.0-169.136.191.255
Signature Algorithm: sha256WithRSAEncryption
59:ef:9c:27:cb:1c:d2:d7:29:29:a0:be:34:6e:61:24:53:ab:
8c:4b:61:cf:b9:ad:0e:1d:7b:1d:5a:0a:a5:7e:0f:71:f5:0a:
4a:4d:39:3b:9f:ff:40:4d:7d:c7:13:dd:8e:3c:56:92:68:ee:
c9:08:55:a8:5d:7f:b6:eb:f2:4d:f7:86:f1:3d:25:a2:b7:8d:
2a:53:aa:00:b7:54:11:05:60:80:1b:b7:ed:78:ed:52:c2:bc:
94:b7:27:3e:40:18:67:8f:b3:52:d3:ed:03:ef:5b:93:f9:9b:
3f:7e:f7:1d:09:43:84:72:60:e1:71:64:fe:22:50:7b:0c:68:
c5:23:e2:23:23:b7:93:f1:6e:e5:ff:cc:df:cb:af:cd:4d:4a:
6a:76:ef:5c:99:57:9a:4d:5b:c0:ca:5d:0f:ff:25:69:bb:70:
53:de:76:19:b3:6c:d2:0c:e5:7f:de:1b:f1:f2:e3:96:7d:f7:
eb:09:ae:7a:9e:55:d0:10:d6:37:14:18:ff:f4:1e:04:9e:3c:
71:70:64:9b:68:f4:3d:48:ba:32:67:86:46:8f:96:9e:3f:ed:
3a:32:16:6f:12:d3:ec:7d:88:e5:4f:f3:07:2a:67:3a:37:b7:
74:ff:c6:10:4f:fd:5c:7c:cf:18:5b:96:95:de:1b:7a:08:6e:
11:e0:ee:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:48 2026 by rpki-client