Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
File: BE33817A69AE11EEBBC89D75C4F9AE02.roa (raw, json)
Hash identifier: SNPBwQUb1RKoaTQTNrfH32vnIjaOv9HeTlrUpVnkMgc=
Subject key identifier: DC:02:E3:8A:FA:5D:F1:F9:B5:13:84:26:BD:68:85:B5:C7:F2:34:5A
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 0845
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
Signing time: Mon 18 Nov 2024 10:13:36 +0000
ROA not before: Mon 18 Nov 2024 10:13:36 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 10122
IP address blocks: 169.136.66.0/24 maxlen: 24
169.136.68.0/24 maxlen: 24
169.136.71.0/24 maxlen: 24
169.136.73.0/24 maxlen: 24
169.136.74.0/24 maxlen: 24
169.136.75.0/24 maxlen: 24
169.136.76.0/24 maxlen: 24
169.136.77.0/24 maxlen: 24
169.136.78.0/24 maxlen: 24
169.136.79.0/24 maxlen: 24
169.136.80.0/24 maxlen: 24
169.136.81.0/24 maxlen: 24
169.136.82.0/24 maxlen: 24
169.136.83.0/24 maxlen: 24
169.136.84.0/24 maxlen: 24
169.136.85.0/24 maxlen: 24
169.136.86.0/24 maxlen: 24
169.136.87.0/24 maxlen: 24
169.136.88.0/23 maxlen: 23
169.136.88.0/24 maxlen: 24
169.136.89.0/24 maxlen: 24
169.136.90.0/24 maxlen: 24
169.136.91.0/24 maxlen: 24
169.136.92.0/24 maxlen: 24
169.136.93.0/24 maxlen: 24
169.136.94.0/24 maxlen: 24
169.136.95.0/24 maxlen: 24
169.136.96.0/24 maxlen: 24
169.136.97.0/24 maxlen: 24
169.136.98.0/24 maxlen: 24
169.136.99.0/24 maxlen: 24
169.136.100.0/24 maxlen: 24
169.136.101.0/24 maxlen: 24
169.136.102.0/24 maxlen: 24
169.136.103.0/24 maxlen: 24
169.136.104.0/24 maxlen: 24
169.136.105.0/24 maxlen: 24
169.136.106.0/24 maxlen: 24
169.136.107.0/24 maxlen: 24
169.136.108.0/24 maxlen: 24
169.136.110.0/24 maxlen: 24
169.136.111.0/24 maxlen: 24
169.136.112.0/24 maxlen: 24
169.136.113.0/24 maxlen: 24
169.136.114.0/24 maxlen: 24
169.136.115.0/24 maxlen: 24
169.136.116.0/24 maxlen: 24
169.136.117.0/24 maxlen: 24
169.136.118.0/24 maxlen: 24
169.136.119.0/24 maxlen: 24
169.136.120.0/24 maxlen: 24
169.136.121.0/24 maxlen: 24
169.136.123.0/24 maxlen: 24
169.136.124.0/24 maxlen: 24
169.136.125.0/24 maxlen: 24
169.136.126.0/24 maxlen: 24
169.136.127.0/24 maxlen: 24
169.136.128.0/24 maxlen: 24
169.136.130.0/24 maxlen: 24
169.136.131.0/24 maxlen: 24
169.136.134.0/24 maxlen: 24
169.136.135.0/24 maxlen: 24
169.136.136.0/24 maxlen: 24
169.136.137.0/24 maxlen: 24
169.136.138.0/24 maxlen: 24
169.136.139.0/24 maxlen: 24
169.136.140.0/24 maxlen: 24
169.136.144.0/24 maxlen: 24
169.136.148.0/24 maxlen: 24
169.136.149.0/24 maxlen: 24
169.136.150.0/24 maxlen: 24
169.136.151.0/24 maxlen: 24
169.136.152.0/24 maxlen: 24
169.136.153.0/24 maxlen: 24
169.136.155.0/24 maxlen: 24
169.136.156.0/24 maxlen: 24
169.136.157.0/24 maxlen: 24
169.136.158.0/24 maxlen: 24
169.136.159.0/24 maxlen: 24
169.136.160.0/24 maxlen: 24
169.136.161.0/24 maxlen: 24
169.136.162.0/24 maxlen: 24
169.136.163.0/24 maxlen: 24
169.136.164.0/24 maxlen: 24
169.136.165.0/24 maxlen: 24
169.136.166.0/24 maxlen: 24
169.136.167.0/24 maxlen: 24
169.136.168.0/24 maxlen: 24
169.136.169.0/24 maxlen: 24
169.136.170.0/24 maxlen: 24
169.136.171.0/24 maxlen: 24
169.136.172.0/24 maxlen: 24
169.136.173.0/24 maxlen: 24
169.136.174.0/24 maxlen: 24
169.136.175.0/24 maxlen: 24
169.136.176.0/24 maxlen: 24
169.136.177.0/24 maxlen: 24
169.136.178.0/24 maxlen: 24
169.136.179.0/24 maxlen: 24
169.136.180.0/24 maxlen: 24
169.136.181.0/24 maxlen: 24
169.136.182.0/24 maxlen: 24
169.136.183.0/24 maxlen: 24
169.136.184.0/24 maxlen: 24
169.136.185.0/24 maxlen: 24
169.136.186.0/24 maxlen: 24
169.136.187.0/24 maxlen: 24
169.136.188.0/24 maxlen: 24
169.136.189.0/24 maxlen: 24
169.136.190.0/24 maxlen: 24
169.136.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Nov 18 10:13:36 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=673b1350-dca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:12:2e:9f:d2:c9:ed:30:27:b5:0d:ce:51:
5f:71:a1:4d:42:d1:0d:f1:bb:45:1b:68:cf:b9:35:
d2:0e:a6:79:19:72:a0:28:1b:8c:27:59:b4:fd:3e:
ff:c0:49:7f:82:39:03:57:20:49:ad:88:54:80:d3:
de:fd:a1:63:71:7d:ee:15:ba:2f:9e:01:8c:c2:00:
c1:ab:c8:40:cd:34:6f:4d:90:5e:68:16:fc:57:6a:
45:a0:fd:c4:81:17:f9:60:14:cf:c5:77:bb:3e:ce:
f8:56:27:ac:57:ba:6b:24:eb:78:c6:57:d7:cb:39:
3c:b1:24:17:98:92:50:81:34:8c:6c:76:ef:99:9a:
2e:c7:59:c0:e5:52:1b:25:0a:15:76:c8:b7:cc:c5:
30:86:dd:99:a3:c6:11:fe:c3:aa:09:f9:88:c0:1c:
d3:5c:f6:dc:a1:45:60:5c:2a:93:33:46:ab:38:49:
86:9f:4c:3c:0f:dd:24:22:a0:71:be:0a:62:0a:9d:
67:aa:23:de:c3:7e:4f:66:04:f2:a8:d4:22:97:e3:
fc:17:19:f6:7f:74:96:ee:c6:bc:8a:0e:1b:00:61:
c6:42:1b:14:33:ce:17:51:e2:93:78:b6:30:6f:56:
54:33:c9:8e:3a:d6:d4:db:23:90:f9:0a:63:a1:3e:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:02:E3:8A:FA:5D:F1:F9:B5:13:84:26:BD:68:85:B5:C7:F2:34:5A
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/BE33817A69AE11EEBBC89D75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.136.66.0/24
169.136.68.0/24
169.136.71.0/24
169.136.73.0-169.136.108.255
169.136.110.0-169.136.121.255
169.136.123.0-169.136.128.255
169.136.130.0/23
169.136.134.0-169.136.140.255
169.136.144.0/24
169.136.148.0-169.136.153.255
169.136.155.0-169.136.191.255
Signature Algorithm: sha256WithRSAEncryption
83:3e:e5:b6:58:6a:69:ff:71:48:ed:a5:70:c1:c3:bb:2f:e4:
0a:b0:15:e5:09:dd:75:24:e8:92:cd:65:2c:5b:81:b5:68:b8:
cb:3b:cc:c6:65:05:32:f7:bd:2d:8b:c4:9d:6c:f2:85:59:0b:
e5:4f:9f:06:5d:21:61:7e:a7:51:a7:ac:74:d5:a0:60:ba:50:
f5:5f:e3:80:5f:9f:63:65:65:f5:a2:33:65:ff:e2:eb:bb:79:
31:4a:45:f3:c4:3f:06:4e:ee:75:4f:b8:bc:d3:fe:07:1d:84:
c5:ee:a3:b7:1a:c6:2b:66:f3:f9:23:d5:d2:d3:c1:f7:4a:48:
f9:34:5f:59:07:d2:51:d0:eb:97:fc:2c:33:d8:b3:93:00:cc:
76:74:61:d4:27:79:48:16:8c:54:bf:f3:95:7c:21:3c:fb:c3:
94:87:19:ad:84:f6:15:83:5e:74:43:61:ac:9b:8e:e2:0a:4d:
1e:4a:a3:69:ab:b4:56:15:0f:e9:d5:9c:82:e8:3b:9a:94:59:
1f:cd:60:ed:d7:ac:77:88:1c:d0:e8:bf:37:45:ab:51:83:5c:
f0:fc:ba:72:5a:c5:79:c1:31:a4:b1:a4:5d:ce:ea:a4:2e:09:
43:17:b9:9c:52:df:66:70:8d:f2:34:57:de:d2:07:e9:63:1e:
18:93:10:d8
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5
RTlBQ0RCODgwHhcNMjQxMTE4MTAxMzM2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzNiMTM1MC1kY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvEESLp/Sye0wJ7UNzlFfcaFNQtEN8btFG2jPuTXSDqZ5GXKgKBuMJ1m0/T7/
wEl/gjkDVyBJrYhUgNPe/aFjcX3uFbovngGMwgDBq8hAzTRvTZBeaBb8V2pFoP3E
gRf5YBTPxXe7Ps74ViesV7prJOt4xlfXyzk8sSQXmJJQgTSMbHbvmZoux1nA5VIb
JQoVdsi3zMUwht2Zo8YR/sOqCfmIwBzTXPbcoUVgXCqTM0arOEmGn0w8D90kIqBx
vgpiCp1nqiPew35PZgTyqNQil+P8Fxn2f3SW7sa8ig4bAGHGQhsUM84XUeKTeLYw
b1ZUM8mOOtbU2yOQ+QpjoT6bgQIDAQABo4IDAjCCAv4wHQYDVR0OBBYEFNwC44r6
XfH5tROEJr1ohbXH8jRaMB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1
RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REY5M0EvRjdERkE3MkVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvQkUzMzgxN0E2
OUFFMTFFRUJCQzg5RDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYsGCCsGAQUFBwEHAQH/
BHwwejB4BAIAATByAwQAqYhCAwQAqYhEAwQAqYhHMAwDBACpiEkDBACpiGwwDAME
AamIbgMEAamIeDAMAwQAqYh7AwQAqYiAAwQBqYiCMAwDBAGpiIYDBACpiIwDBACp
iJAwDAMEAqmIlAMEAamImDAMAwQAqYibAwQGqYiAMA0GCSqGSIb3DQEBCwUAA4IB
AQCDPuW2WGpp/3FI7aVwwcO7L+QKsBXlCd11JOiSzWUsW4G1aLjLO8zGZQUy970t
i8SdbPKFWQvlT58GXSFhfqdRp6x01aBgulD1X+OAX59jZWX1ojNl/+Lru3kxSkXz
xD8GTu51T7i80/4HHYTF7qO3GsYrZvP5I9XS08H3Skj5NF9ZB9JR0OuX/Cwz2LOT
AMx2dGHUJ3lIFoxUv/OVfCE8+8OUhxmthPYVg150Q2Gsm47iCk0eSqNpq7RWFQ/p
1ZyC6DualFkfzWDt16x3iBzQ6L83RatRg1zw/LpyWsV5wTGksaRdzuqkLglDF7mc
Ut9mcI3yNFfe0gfpYx4YkxDY
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-fra.rpki-client.org