Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/54EA0F76D36B11EBADF6AD2CC4F9AE02.roa
File:                     54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (raw, json)
Hash identifier:          67lyQNjbiYHBIBW9WpGHspfkkZM/Tc9EOPndYw2IyM0=
Subject key identifier:   E0:71:4A:28:0A:77:E5:CA:4F:D6:29:B5:E1:48:C0:64:AD:0A:5E:60
Certificate issuer:       /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial:       12E0
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/54EA0F76D36B11EBADF6AD2CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:50:02 +0000
ROA not before:           Wed 10 Dec 2025 16:39:37 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55784
IP address blocks:        182.50.184.0/24 maxlen: 24
                          182.50.187.0/24 maxlen: 24
                          182.50.188.0/22 maxlen: 24
                          203.190.222.0/24 maxlen: 24
                          2402:d00::/32 maxlen: 32
                          2402:d00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
                          rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4832 (0x12e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
        Validity
            Not Before: Dec 10 16:39:37 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47c4a-8a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:b9:bc:f8:e8:d9:17:8c:74:9c:77:52:01:
                    c0:0b:22:cd:31:a9:46:4e:43:4e:65:3d:e6:5b:79:
                    43:7f:2e:d5:f5:7e:56:30:3b:3b:79:33:01:2f:02:
                    83:d6:4b:c9:ed:56:f4:bc:15:0c:c0:c7:8a:0c:47:
                    04:0c:73:96:21:28:7b:ae:ad:3c:a4:a6:c2:6b:02:
                    cb:ab:4b:e0:bf:eb:9a:83:5b:a9:68:ef:29:49:58:
                    bc:af:b2:a7:21:8e:c0:69:d8:46:a9:fb:cb:b2:cb:
                    f2:26:95:c7:49:72:45:86:bf:30:89:50:00:5f:4d:
                    f1:50:ff:a7:a6:7a:5a:f4:bc:ef:99:90:12:03:87:
                    2c:02:51:12:3f:98:35:83:14:20:bc:47:81:c6:37:
                    94:52:57:c8:42:61:3f:bf:cd:ee:25:08:6a:1d:47:
                    a2:23:89:5c:b9:ce:fe:a9:a9:38:dc:cd:7d:d3:1d:
                    10:8d:48:48:3a:51:61:d3:55:1a:10:c1:75:a0:d1:
                    00:fc:98:5e:66:dc:ff:48:7c:95:d5:27:92:63:73:
                    f6:ad:aa:5e:55:59:6a:df:f5:a9:6f:4b:fd:c2:21:
                    e0:92:8f:cf:21:7b:cb:a0:0f:55:30:e6:35:be:2a:
                    1f:e6:5e:f1:33:d0:53:6d:f7:47:4b:59:3f:9e:c8:
                    9d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:71:4A:28:0A:77:E5:CA:4F:D6:29:B5:E1:48:C0:64:AD:0A:5E:60
            X509v3 Authority Key Identifier:
                keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/54EA0F76D36B11EBADF6AD2CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.184.0/24
                  182.50.187.0-182.50.191.255
                  203.190.222.0/24
                IPv6:
                  2402:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:17:ef:49:d3:3d:49:7b:d1:37:41:dd:96:57:ce:78:91:c9:
         90:bb:44:2b:07:98:7f:dd:32:4e:04:ed:f0:73:43:16:4d:87:
         35:12:8c:45:b6:2d:9d:81:02:4c:36:95:9a:eb:04:0c:49:ab:
         02:29:38:41:da:21:c3:09:cf:8c:77:b1:69:62:51:71:2b:cf:
         72:3c:4f:8e:36:07:c9:4d:1e:6c:80:35:03:96:2e:90:71:03:
         9f:ff:cb:b1:c6:3f:ed:66:f7:0b:c1:44:8f:5e:a1:d9:eb:e0:
         8a:c0:19:4d:ee:1a:2f:cb:de:3d:46:d3:3b:f3:aa:94:04:69:
         59:bd:a0:43:14:e0:63:61:3c:1c:74:da:21:c0:92:38:c6:f3:
         14:35:79:e1:ed:97:86:19:bc:61:ca:5e:33:ed:8f:17:c5:82:
         ff:b1:5e:93:6b:47:98:d0:8e:38:bd:d0:e7:45:f5:ab:1e:a1:
         7a:bd:f9:ce:24:b2:33:99:02:9a:8c:bd:18:65:56:54:6c:b1:
         d4:13:8b:af:27:5e:ec:8c:e4:58:d7:9e:9f:2d:d2:dc:41:bc:
         56:df:60:8f:a1:0d:f7:4e:90:d3:e3:e8:66:17:77:2d:62:78:
         07:b8:f0:d6:9d:f3:b2:bd:23:bf:f2:6b:80:94:4d:92:ae:48:
         49:15:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:12 2026 by rpki-client