Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/BEBA0144251011F1AF69A29DBE833773.roa
File:                     BEBA0144251011F1AF69A29DBE833773.roa (raw, json)
Hash identifier:          /JZvZ1urnfcPcC1nbFisB4WBkPyXg+Maa+h4MhEN9vI=
Subject key identifier:   78:99:ED:9E:75:54:50:0A:13:22:37:C9:15:B2:EB:9D:6D:75:88:ED
Certificate issuer:       /CN=A91D1C2E/serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
Certificate serial:       44
Authority key identifier: 40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/BEBA0144251011F1AF69A29DBE833773.roa
Signing time:             Thu 11 Jun 2026 11:41:37 +0000
ROA not before:           Thu 11 Jun 2026 11:41:37 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     133139
IP address blocks:        58.97.148.0/24 maxlen: 24
                          58.97.150.0/24 maxlen: 24
                          58.97.151.0/24 maxlen: 24
                          58.97.152.0/24 maxlen: 24
                          58.97.153.0/24 maxlen: 24
                          58.97.154.0/24 maxlen: 24
                          58.97.156.0/22 maxlen: 24
                          202.86.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1C2E, serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
        Validity
            Not Before: Jun 11 11:41:37 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2a9ef1-61aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:2b:d0:34:38:34:96:5f:48:a2:dc:a4:bb:
                    55:00:1b:57:ce:93:3b:d9:10:68:97:37:f9:ad:ba:
                    93:04:a8:5f:51:4a:41:fb:e0:d2:e9:62:7b:39:ba:
                    18:10:00:85:aa:c7:4d:da:26:83:32:58:9a:cf:cb:
                    4a:33:37:27:89:54:66:7b:79:b3:d8:8a:0a:92:4d:
                    11:57:66:11:bf:57:3b:f2:da:96:2f:32:2e:8c:fd:
                    8e:c2:6d:96:d9:16:18:d5:97:f9:8c:f4:5c:18:2e:
                    bd:81:46:6a:68:fd:13:1d:8c:d0:47:bc:c6:ab:b6:
                    05:76:b3:c7:db:94:1b:e9:06:3a:7b:d8:3a:e9:f1:
                    0e:6b:49:7d:1e:94:1f:fd:49:b8:70:cd:77:91:07:
                    27:2e:e9:ad:30:90:e4:31:71:d7:43:75:f1:3a:7b:
                    38:7a:7e:2d:7c:b4:07:94:87:23:51:fc:3c:ac:0f:
                    15:fd:b8:de:78:4d:32:95:65:79:1b:6c:18:fa:38:
                    f3:16:63:a5:cb:ae:4a:2b:9f:12:bc:7c:91:3f:f6:
                    3c:bd:9c:c1:b5:c1:10:dd:65:f7:67:7b:c1:d2:d8:
                    22:e7:75:ea:0f:ba:d8:72:cc:a1:3a:2c:dd:6a:0b:
                    e8:db:9a:3b:fd:f2:f5:5c:4b:a6:0a:c1:52:7a:cf:
                    5d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:99:ED:9E:75:54:50:0A:13:22:37:C9:15:B2:EB:9D:6D:75:88:ED
            X509v3 Authority Key Identifier:
                keyid:40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/BEBA0144251011F1AF69A29DBE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.148.0/24
                  58.97.150.0-58.97.154.255
                  58.97.156.0/22
                  202.86.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:19:19:df:89:a6:6b:ae:5f:19:70:4d:8f:b5:d0:e8:dc:56:
         0e:16:ee:f8:cc:40:7b:83:12:91:13:e1:8a:27:87:92:dd:e4:
         60:25:bf:cd:0a:66:5d:0c:43:5e:83:18:40:91:34:9e:2e:27:
         24:70:27:9b:e6:e2:64:9d:1b:02:80:10:74:66:09:69:b9:9c:
         fa:48:74:20:05:c3:de:32:39:ac:64:cd:8e:55:68:53:c3:a0:
         2e:29:fa:9b:b1:01:1b:a3:59:6c:db:84:47:32:af:73:d9:95:
         58:ad:70:39:4b:15:97:75:a8:58:68:be:a7:df:d9:ba:00:4c:
         8f:1b:cd:5f:d4:c9:6e:7b:c0:14:25:d8:d6:f9:87:58:30:b4:
         3f:5f:51:32:3d:d3:3a:f3:4c:04:34:cd:bf:7e:c6:1d:64:3b:
         78:15:44:18:80:ed:81:60:15:d5:85:6b:7e:e8:eb:40:92:a3:
         ea:3e:19:3e:19:b3:2d:cd:0b:0f:66:8b:d3:13:92:6e:ef:ba:
         87:6d:7c:b6:5d:c8:33:b3:64:26:32:e4:f3:6a:1b:fc:96:59:
         2e:67:e2:3b:88:23:be:73:be:ee:45:06:32:26:bb:68:db:80:
         67:a1:f9:04:ef:2d:0c:d7:fd:41:f3:b8:b1:2f:ac:db:af:96:
         78:7d:c3:23
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MUMyRTExMC8GA1UEBRMoNDBDODU1OTAwRUJFQjREREVFMTE5QzgwOEU0NTlBQUZE
Rjc1QjU4NDAeFw0yNjA2MTExMTQxMzdaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMmE5ZWYxLTYxYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+PCvQNDg0ll9Iotyku1UAG1fOkzvZEGiXN/mtupMEqF9RSkH74NLpYns5uhgQ
AIWqx03aJoMyWJrPy0ozNyeJVGZ7ebPYigqSTRFXZhG/Vzvy2pYvMi6M/Y7CbZbZ
FhjVl/mM9FwYLr2BRmpo/RMdjNBHvMartgV2s8fblBvpBjp72Drp8Q5rSX0elB/9
SbhwzXeRBycu6a0wkOQxcddDdfE6ezh6fi18tAeUhyNR/DysDxX9uN54TTKVZXkb
bBj6OPMWY6XLrkornxK8fJE/9jy9nMG1wRDdZfdne8HS2CLndeoPuthyzKE6LN1q
C+jbmjv98vVcS6YKwVJ6z13ZAgMBAAGjggJ6MIICdjAdBgNVHQ4EFgQUeJntnnVU
UAoTIjfJFbLrnW11iO0wHwYDVR0jBBgwFoAUQMhVkA6+tN3uEZyAjkWar991tYQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxQzJFL0E0NDg0N0I4MjRE
ODExRjE5NzFGRTEwNEFDODMzNzczL1FNaFZrQTYtdE4zdUVaeUFqa1dhcjk5MXRZ
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUU1oVmtBNi10TjN1RVp5QWprV2FyOTkxdFlRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUMyRS9BNDQ4NDdCODI0RDgxMUYxOTcxRkUxMDRBQzgzMzc3My9CRUJBMDE0NDI1
MTAxMUYxQUY2OUEyOURCRTgzMzc3My5yb2EwOQYIKwYBBQUHAQcBAf8EKjAoMCYE
AgABMCADBAA6YZQwDAMEATphlgMEADphmgMEAjphnAMEA8pWGDANBgkqhkiG9w0B
AQsFAAOCAQEARRkZ34mma65fGXBNj7XQ6NxWDhbu+MxAe4MSkRPhiieHkt3kYCW/
zQpmXQxDXoMYQJE0ni4nJHAnm+biZJ0bAoAQdGYJabmc+kh0IAXD3jI5rGTNjlVo
U8OgLin6m7EBG6NZbNuERzKvc9mVWK1wOUsVl3WoWGi+p9/ZugBMjxvNX9TJbnvA
FCXY1vmHWDC0P19RMj3TOvNMBDTNv37GHWQ7eBVEGIDtgWAV1YVrfujrQJKj6j4Z
PhmzLc0LD2aL0xOSbu+6h218tl3IM7NkJjLk82ob/JZZLmfiO4gjvnO+7kUGMia7
aNuAZ6H5BO8tDNf9QfO4sS+s26+WeH3DIw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:43 2026 by rpki-client