Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/0E7E95E63C8B11F186364B569C833773.roa
File:                     0E7E95E63C8B11F186364B569C833773.roa (raw, json)
Hash identifier:          5t+Odc3kzlHJOT49HQha5G542XKsnZRtShbX2b003G0=
Subject key identifier:   FA:F5:9A:C8:20:D6:3A:BB:F1:41:BB:67:71:56:27:BF:7A:B0:F0:54
Certificate issuer:       /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial:       1300
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/0E7E95E63C8B11F186364B569C833773.roa
Signing time:             Mon 20 Apr 2026 08:25:16 +0000
ROA not before:           Mon 20 Apr 2026 08:25:16 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55784
IP address blocks:        182.50.184.0/23 maxlen: 24
                          182.50.186.0/24 maxlen: 24
                          182.50.187.0/24 maxlen: 24
                          182.50.188.0/22 maxlen: 24
                          203.190.222.0/24 maxlen: 24
                          2402:d00::/32 maxlen: 32
                          2402:d00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
                          rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4864 (0x1300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
        Validity
            Not Before: Apr 20 08:25:16 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69e5e2ec-5277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:01:f0:a1:a6:7a:e5:f2:7e:5e:e9:be:b4:
                    de:e7:34:9c:3f:87:26:24:9f:89:f0:23:af:94:e0:
                    b9:87:3e:0c:53:23:c4:73:a4:23:cb:dd:6c:e7:3e:
                    20:36:72:e2:02:80:1a:3a:7a:31:c9:31:77:42:b3:
                    8d:8d:bd:25:1d:38:03:9c:84:54:06:42:ec:01:32:
                    d0:dc:5c:95:47:09:58:7a:d7:9c:1d:87:da:c9:c3:
                    84:1b:e0:ee:9f:66:6a:69:d7:3a:2b:89:c5:b7:77:
                    db:46:4b:9b:a5:3d:d3:9e:dd:e1:e1:72:b1:8b:a5:
                    2e:66:62:18:ee:8c:a1:c5:55:2c:59:90:53:f4:cf:
                    4f:45:fb:6e:b1:35:bb:37:80:64:ee:3d:cf:e4:fa:
                    d2:0e:3b:52:66:3c:d1:3e:36:2a:fe:27:ed:65:e2:
                    90:c3:37:96:e3:2d:07:be:ff:b2:fa:ad:80:79:8f:
                    f1:33:33:08:e0:64:66:b0:97:d6:97:6c:77:99:fd:
                    43:7d:49:64:43:ff:9c:c0:a2:1e:d8:e1:18:5a:fa:
                    3c:b3:1e:62:f1:54:a6:09:f3:e3:bc:b2:20:2c:da:
                    da:1a:68:82:b2:92:ec:ab:6f:8a:84:fc:d9:3c:df:
                    9d:1a:2f:eb:63:86:87:75:ee:da:42:07:08:16:69:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F5:9A:C8:20:D6:3A:BB:F1:41:BB:67:71:56:27:BF:7A:B0:F0:54
            X509v3 Authority Key Identifier:
                keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/0E7E95E63C8B11F186364B569C833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.184.0/21
                  203.190.222.0/24
                IPv6:
                  2402:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:0a:a2:b4:7e:0d:ec:94:03:9a:b8:74:50:45:76:af:fe:ac:
         6e:93:d5:d4:31:6f:c5:0f:95:d6:8f:ba:e1:00:b1:7b:73:af:
         01:53:82:ff:78:23:7d:b6:fb:e5:4e:25:89:6f:15:13:68:98:
         a1:fe:5a:9a:53:80:c6:8f:2f:c2:ae:ba:05:11:0c:f3:3a:23:
         39:16:7a:5b:ed:74:75:9f:a0:f4:88:1c:4e:b8:d6:5e:29:06:
         57:9f:4e:a4:12:18:55:14:2e:30:30:91:19:aa:ad:fa:e6:e4:
         35:10:0d:78:24:92:ac:f2:8b:22:9f:d4:5a:4f:dd:83:1e:cd:
         32:af:44:50:18:31:c2:b8:62:b1:fc:2c:b9:22:d3:65:df:19:
         cd:86:ec:5b:76:8c:42:1b:c6:28:b8:bf:4d:b9:da:c1:1d:e8:
         9d:c9:1f:02:63:58:e3:86:1f:01:62:cd:db:4c:de:df:97:79:
         3a:ce:78:89:3c:b7:27:34:78:6b:d8:4a:af:bd:40:f7:6e:f5:
         bf:3c:76:23:b5:2a:d2:04:fd:f6:6c:14:ce:d8:39:dc:0e:b0:
         8b:69:63:e7:01:27:8f:fd:cd:48:13:7d:5b:41:42:c0:08:9b:
         fc:0e:81:b9:6f:b5:41:6f:27:b1:2d:48:39:92:29:ab:42:dc:
         1d:57:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:49 2026 by rpki-client