Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/BE82B5AE31C911EFA31A8D3AC4F9AE02.roa
File:                     BE82B5AE31C911EFA31A8D3AC4F9AE02.roa (raw, json)
Hash identifier:          TP1lZPycmwhzIV9eyCEIRMOWox0jw70KYaYid67Sq48=
Subject key identifier:   52:A4:16:70:DD:88:13:B7:20:EE:9D:95:B0:9D:C8:3E:1E:2A:90:8F
Certificate issuer:       /CN=A91504D6/serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
Certificate serial:       0148
Authority key identifier: EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/BE82B5AE31C911EFA31A8D3AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:05:18 +0000
ROA not before:           Wed 05 Nov 2025 05:20:19 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7575
IP address blocks:        131.181.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl
                          rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91504D6, serialNumber=EBAA4C44F24893714A1D5B360A2D7B2D8605B163
        Validity
            Not Before: Nov  5 05:20:19 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a5a72e-b4df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1c:97:06:8a:e0:4e:c9:f7:96:15:6c:a8:1a:
                    7d:04:9e:35:30:f1:84:4a:ab:7e:f7:5c:ec:8b:54:
                    d0:79:2a:83:d9:ae:28:fa:f1:f5:81:6a:ad:9a:8b:
                    03:4b:a4:35:d5:03:08:b2:17:e7:13:ba:64:f6:3c:
                    5a:93:e4:f7:ef:78:5a:ce:ec:2b:fa:98:03:8e:8d:
                    e8:1a:d1:40:0c:6f:48:2f:0c:67:e8:86:e0:b9:aa:
                    4f:d5:37:23:c8:c9:43:e6:d2:d1:1e:b5:43:d0:cc:
                    b8:5b:02:ff:7f:ce:5c:d5:ec:59:68:a9:7f:58:53:
                    8f:44:d9:df:9b:92:bd:0d:fa:ad:02:f6:9e:6e:3d:
                    be:04:63:6c:27:58:f9:e0:2b:38:62:38:c4:a4:79:
                    0c:1a:f0:97:bc:3a:d2:c5:61:21:a8:01:46:a0:17:
                    34:16:0f:f1:5d:6a:46:fe:cf:92:40:55:29:8d:ee:
                    6c:66:ff:6d:c9:43:e5:97:49:61:5f:71:cb:40:61:
                    3f:95:09:0c:7f:62:c5:82:a0:b0:18:98:cb:49:e8:
                    cd:db:b8:49:b4:ee:3d:5b:5a:18:d6:8b:dc:2a:76:
                    dc:5d:ec:37:76:d7:32:8e:ac:7f:77:82:9a:7a:bb:
                    44:41:6b:b1:30:02:18:74:44:d5:28:2f:d2:72:8e:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A4:16:70:DD:88:13:B7:20:EE:9D:95:B0:9D:C8:3E:1E:2A:90:8F
            X509v3 Authority Key Identifier:
                keyid:EB:AA:4C:44:F2:48:93:71:4A:1D:5B:36:0A:2D:7B:2D:86:05:B1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/66pMRPJIk3FKHVs2Ci17LYYFsWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/66pMRPJIk3FKHVs2Ci17LYYFsWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/AD0CAC1E31A911EFB6FB1D60C4F9AE02/BE82B5AE31C911EFA31A8D3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         24:15:97:dd:52:f5:68:4c:a3:ae:a5:a2:17:36:02:ad:b4:9d:
         ef:be:9e:64:62:6c:5f:7d:8d:26:7a:0c:c9:43:41:db:26:e6:
         50:99:af:74:a1:d2:1f:7b:26:99:05:e0:47:59:3e:de:7d:9f:
         7b:00:4a:ea:52:5b:96:37:c8:75:a0:d7:d1:36:97:2f:6e:90:
         6e:2f:18:59:eb:4a:d3:15:23:e3:62:25:4f:40:72:af:7a:f7:
         f5:dd:92:b6:57:7f:8a:aa:c3:7b:20:80:c8:4c:f1:8d:61:81:
         f7:5a:1b:9a:81:f8:77:a8:41:ca:04:de:3d:79:a6:32:71:af:
         09:a5:8d:bd:53:ca:c3:59:07:63:5a:9b:91:2e:1d:d2:fc:04:
         36:2a:98:3b:6e:03:51:fa:dd:d1:cd:24:7a:01:58:17:0d:cf:
         d9:ef:6e:6d:39:9b:0f:46:0e:6a:38:15:7a:c2:cc:6c:e3:7b:
         f7:85:39:93:8c:00:0e:53:a3:bb:44:37:d7:38:63:40:d3:a9:
         97:19:a0:bc:7c:37:29:f0:66:04:29:41:18:41:e4:dc:61:59:
         d8:12:34:7d:f4:82:2e:c4:12:e3:3f:c1:29:dc:23:95:c6:6b:
         69:47:01:49:e6:12:dd:a7:ff:57:53:d2:85:b5:4e:15:28:73:
         6a:b3:d5:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:38 2026 by rpki-client