Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
File:                     2F36F25EFEC911E88E78993AC4F9AE02.roa (raw, json)
Hash identifier:          N2n7O7lYsffKJwnYVJA9z3QDAVAgYmQzuDh7h3gOwG8=
Subject key identifier:   BA:BA:13:97:57:29:02:35:94:E6:92:33:B8:51:EE:74:6C:AF:73:B7
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2949
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:09:38 +0000
ROA not before:           Sat 26 Jul 2025 15:53:44 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138358
IP address blocks:        2402:9e80:28::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10569 (0x2949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:53:44 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48ef2-12f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:b9:b8:76:3d:be:09:d3:a2:11:d0:2f:16:
                    04:74:32:fd:95:be:b1:df:c9:14:37:98:48:74:fc:
                    12:89:df:bf:b9:7e:2b:b7:de:22:8c:07:c0:58:8e:
                    ed:09:02:6f:a0:e8:de:fc:73:06:65:70:09:c4:c1:
                    10:7e:13:30:80:bc:6e:5f:11:98:84:d7:46:ef:c2:
                    c4:19:97:39:a8:55:17:3a:c4:72:c5:84:a7:b1:87:
                    39:6d:5d:da:5e:0f:11:fb:c7:33:20:04:9d:39:80:
                    7f:3c:21:05:f9:3d:81:5c:ec:d4:e6:71:5a:0b:bf:
                    58:6e:3e:3e:7f:29:6b:97:30:b1:be:e5:4e:fe:29:
                    00:18:c5:de:11:9c:03:94:22:29:14:21:4b:cb:3d:
                    1d:64:fb:d4:59:42:a3:7b:c4:48:00:36:68:f9:d2:
                    ad:1f:35:80:40:44:87:1b:f7:7e:60:fd:80:53:31:
                    f5:47:ae:ce:9d:d7:c7:c4:d3:a1:3f:ba:94:17:a4:
                    cc:6a:43:b9:62:f6:9c:cb:cc:ce:a9:8b:e8:2f:a3:
                    4b:15:95:bd:0a:36:6f:b3:63:08:57:62:f4:da:b3:
                    7f:b1:46:c4:fa:d3:18:4b:4b:a3:45:3b:58:9d:ef:
                    e4:3a:b2:ea:50:27:50:a4:24:88:8a:9a:66:5f:bb:
                    0c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BA:13:97:57:29:02:35:94:E6:92:33:B8:51:EE:74:6C:AF:73:B7
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2F36F25EFEC911E88E78993AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:28::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:b0:11:5b:c7:83:58:59:ad:3b:46:98:4d:10:77:49:ab:2f:
         64:be:6d:4f:d6:d6:10:ee:ca:39:e3:08:46:af:76:0f:d7:e8:
         19:18:eb:52:70:3d:92:a1:87:ca:79:bb:e5:02:90:b0:a2:41:
         18:c9:6b:62:3c:1c:34:02:5b:8c:09:7f:34:60:98:ba:ed:cc:
         31:29:de:e5:69:80:2b:6a:cf:d6:e4:75:9a:17:a6:c4:ee:af:
         42:5d:ae:af:4d:c8:fb:30:0a:9f:07:1e:b6:07:42:3c:bd:aa:
         19:b9:d0:4d:1f:fb:64:03:9b:99:d2:23:fb:7d:90:1d:42:79:
         57:95:bb:61:32:0f:ba:40:a1:7c:5e:cb:e4:d4:d6:95:89:d5:
         67:43:cf:28:c9:46:9c:fe:51:a8:7c:c1:0b:a5:0c:45:48:af:
         10:67:c1:05:17:36:4c:28:71:bf:e5:1f:07:86:bf:69:74:4e:
         1f:47:00:e9:b7:28:42:11:09:93:4f:13:07:b4:e2:70:d8:1d:
         41:3a:4a:49:19:a5:26:ad:18:4e:11:2c:b2:55:44:a0:7f:65:
         3b:d5:39:ec:d8:a3:32:bd:da:86:6b:8f:ba:84:ad:89:4d:b2:
         aa:62:7d:fd:b0:11:f5:74:c2:01:01:6f:d3:41:59:bb:8a:cc:
         93:b5:19:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 23:43:59 2026 by rpki-client