Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/BE29D45EE48611F0890F621E446F56BC.roa
File:                     BE29D45EE48611F0890F621E446F56BC.roa (raw, json)
Hash identifier:          d3VPTSZ6btUCblGgVqIc+wg7sZhOUG6AwILUFxY7MxQ=
Subject key identifier:   06:73:63:80:3F:4B:EC:AA:7D:FA:6F:12:A0:66:2F:81:00:51:85:C7
Certificate issuer:       /CN=A9182509/serialNumber=B34D90F4337437F9776EF07495ED6BFA3A0DE2B2
Certificate serial:       24
Authority key identifier: B3:4D:90:F4:33:74:37:F9:77:6E:F0:74:95:ED:6B:FA:3A:0D:E2:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/BE29D45EE48611F0890F621E446F56BC.roa
Signing time:             Sun 01 Mar 2026 05:48:39 +0000
ROA not before:           Mon 29 Dec 2025 07:19:41 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     154471
IP address blocks:        2001:df6:82c0::/48 maxlen: 49
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.crl
                          rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182509, serialNumber=B34D90F4337437F9776EF07495ED6BFA3A0DE2B2
        Validity
            Not Before: Dec 29 07:19:41 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a3d337-d3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:60:ee:0b:a9:b0:f7:1f:a7:7b:86:27:63:
                    06:ed:1d:b7:df:d9:0e:60:b0:b3:7f:9d:d9:1d:bd:
                    e6:bc:db:d4:d9:ef:8e:fe:95:e4:b9:53:99:8e:ed:
                    a9:e0:ad:39:2b:d8:9f:a6:54:d3:ca:48:e4:0d:5e:
                    ec:1f:54:57:f6:b6:b8:dd:0e:87:06:71:29:6a:50:
                    74:1d:22:c2:34:c7:a2:0d:7d:5a:75:17:56:fe:61:
                    7f:14:a7:0b:12:13:f1:2d:c6:13:cb:11:02:89:7f:
                    0f:1c:f4:31:a1:08:ed:ff:62:b8:a1:5a:44:02:46:
                    c8:c2:67:04:95:ca:76:e0:c6:5b:af:66:ca:92:e8:
                    db:77:4d:f1:c1:52:18:00:eb:ed:24:e1:17:75:bb:
                    74:34:34:da:14:da:e1:0c:a8:cd:fe:d7:1e:90:d5:
                    66:93:03:d0:d8:36:9e:e2:fe:ab:95:e6:c3:0c:62:
                    68:94:05:01:a6:47:fd:d2:c7:9f:ca:11:ec:3f:f6:
                    4a:f4:4f:2c:da:63:3e:a2:30:81:e2:a5:15:5d:3b:
                    30:75:01:a7:8d:18:24:d6:05:92:be:eb:22:6a:94:
                    7a:f8:8e:42:82:37:3e:08:aa:cf:a3:a9:77:64:d9:
                    de:82:c3:a6:9a:01:66:62:d9:9a:79:53:62:a7:bc:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:73:63:80:3F:4B:EC:AA:7D:FA:6F:12:A0:66:2F:81:00:51:85:C7
            X509v3 Authority Key Identifier:
                keyid:B3:4D:90:F4:33:74:37:F9:77:6E:F0:74:95:ED:6B:FA:3A:0D:E2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/s02Q9DN0N_l3bvB0le1r-joN4rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s02Q9DN0N_l3bvB0le1r-joN4rI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/A498B65EE48111F0AC467BC1426F56BC/BE29D45EE48611F0890F621E446F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:82c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:5c:8a:e4:9e:a9:b0:58:21:40:59:c4:72:93:e6:e0:e4:be:
         22:89:80:bc:55:c6:f3:1a:ec:ad:79:5e:9f:2c:d6:4a:f2:2d:
         56:a1:98:94:2f:65:38:42:e7:40:59:12:f1:09:21:f9:f5:df:
         11:58:cc:97:b6:80:38:dd:b6:88:a6:0f:50:1b:ee:94:dc:ab:
         9c:6b:7f:ce:17:5d:b6:71:e5:cc:08:af:02:28:70:11:67:a7:
         52:fd:b7:21:32:0b:30:7b:2e:ff:e3:97:8c:f8:13:c1:ce:34:
         e1:ac:39:ce:15:d1:38:0b:bf:1d:90:64:2a:0d:87:22:3e:27:
         cc:87:92:23:8e:b6:a5:97:cf:66:f1:a5:4d:e8:f2:98:24:aa:
         d6:2d:11:ff:73:ba:ba:5f:5c:20:2c:c4:43:03:78:30:70:83:
         47:cf:d8:f9:62:55:98:c9:e4:e5:42:b3:da:b8:6a:c4:0c:25:
         16:ea:19:33:6f:c2:e9:f0:4d:f1:85:09:cb:ac:58:90:70:bd:
         c3:7a:55:87:b1:d2:f3:cb:b3:b4:9d:4c:39:ee:45:01:ed:c9:
         38:0e:91:34:df:7a:ab:ff:13:0a:44:a5:fe:22:70:3d:76:5b:
         3c:05:87:05:05:d3:df:b1:6e:f5:16:e5:ac:e9:27:af:e7:87:
         ce:d5:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:13:27 2026 by rpki-client