Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/BE430FFA699011EE96387F19C4F9AE02.roa
File:                     BE430FFA699011EE96387F19C4F9AE02.roa (raw, json)
Hash identifier:          nwAVGj9pFy222zqjuMW5VtHya2o6VVMIrsOdD04utTg=
Subject key identifier:   15:99:CB:71:E0:F7:74:1B:67:D3:AF:73:33:40:2D:57:8E:DC:C5:08
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       330F
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/BE430FFA699011EE96387F19C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:10:47 +0000
ROA not before:           Wed 30 Apr 2025 15:52:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141180
IP address blocks:        115.108.58.0/24 maxlen: 24
                          115.108.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13071 (0x330f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Apr 30 15:52:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48f37-b365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:5f:de:d7:dc:b8:72:0f:eb:54:67:16:dd:
                    ed:d1:b4:43:1e:f9:19:b1:ce:53:36:ff:13:ed:a9:
                    7a:5d:e1:c6:bf:19:e5:bb:ab:2a:e7:0c:43:9c:fa:
                    cc:54:67:26:fb:39:2f:37:6f:94:67:f4:b5:bc:a2:
                    62:c4:43:84:f2:73:8d:e9:84:bc:44:53:97:1b:f4:
                    5f:51:3e:64:65:27:0e:24:76:99:d0:70:a2:27:25:
                    c2:9f:77:9f:97:c5:d2:f4:79:3f:44:a6:01:d9:84:
                    5c:32:d5:58:ad:26:a1:45:16:88:88:cf:95:02:6f:
                    30:c1:6e:92:ab:be:63:8b:9f:16:11:ec:04:48:62:
                    e9:f7:8b:64:5b:50:4a:0b:be:b4:9c:5e:6d:45:4a:
                    c9:d6:8a:ba:33:eb:5e:0d:03:3a:b0:64:bd:91:ad:
                    b5:f6:d7:42:5d:ce:6a:b5:8d:ed:bb:73:ea:f2:76:
                    fe:7d:d9:3e:b8:d2:84:a4:12:4e:a8:8b:0a:23:62:
                    94:30:8c:1a:05:be:78:13:88:9a:1c:3a:b4:8c:b4:
                    42:5a:c4:e2:e0:16:c9:d8:c4:e5:3c:18:a0:88:ce:
                    74:28:46:f3:85:43:4b:d7:92:dc:fd:7a:74:79:07:
                    83:27:42:ec:9d:e4:46:4e:f1:ba:c0:a7:bd:63:0d:
                    16:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:99:CB:71:E0:F7:74:1B:67:D3:AF:73:33:40:2D:57:8E:DC:C5:08
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/BE430FFA699011EE96387F19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.108.58.0/24
                  115.108.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:63:80:db:ae:6e:b6:b4:c3:2f:63:fb:23:a7:f3:c9:1c:8f:
         3a:de:40:96:50:bf:6b:a7:a4:0c:bf:dc:74:70:10:cc:f8:2c:
         5c:c3:75:a1:a6:60:0b:ea:f6:ea:78:33:6a:8c:ae:52:fa:a0:
         56:77:4e:7d:75:84:a5:bb:ba:5f:05:13:9f:0d:bd:df:bf:41:
         e2:b3:4e:f9:1c:a7:03:dc:57:b9:b9:be:ea:7b:87:12:a5:db:
         c4:7d:c8:b0:e1:9a:5f:f5:7b:77:aa:a7:a4:15:6e:e6:42:83:
         00:41:0e:06:48:16:3e:c8:85:96:9d:82:bc:19:cf:67:f4:82:
         34:41:6e:73:07:7e:24:62:4e:84:86:a3:30:38:92:b2:2e:19:
         d0:85:2a:72:17:56:e3:dd:69:fe:ff:17:ac:4f:82:3b:c0:02:
         22:e2:d0:44:55:e3:85:e8:81:d7:49:58:14:27:0c:c5:d2:70:
         e9:34:2b:4c:5a:a8:aa:c6:1b:d3:18:0c:e9:73:1a:70:a7:e6:
         b0:6a:8d:90:ab:14:ae:9c:c5:0b:00:05:6d:54:94:4b:b4:a1:
         22:fa:ea:a7:11:a0:84:90:83:36:59:58:3a:21:f7:30:75:02:
         02:d9:3a:e1:50:6c:a4:c1:ec:68:e6:bd:78:a2:3f:59:47:ff:
         0e:79:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:12 2026 by rpki-client