Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa
File:                     2FD48F5AA21C11E8B669A00BC4F9AE02.roa (raw, json)
Hash identifier:          SAwQN6ifIP2cPppQSUtY0XXCxLxp5svKdCHYpGA7rek=
Subject key identifier:   80:22:D3:B5:2C:D7:6C:05:55:E0:22:F9:B6:E2:FF:81:A0:AB:DB:EC
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       29E0
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:24:05 +0000
ROA not before:           Sun 30 Aug 2026 16:24:05 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137219
IP address blocks:        2402:9e80:24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10720 (0x29e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug 30 16:24:05 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a945924-73d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:fe:de:8e:a0:02:3f:f8:5e:9f:73:32:7d:
                    4b:af:5a:8b:d9:37:9d:cc:3e:07:0a:ea:5d:26:a4:
                    31:fa:30:71:c4:a4:f9:77:cb:f5:5a:d0:5c:d1:80:
                    4d:81:29:23:24:56:78:c3:18:e2:26:51:16:b9:a1:
                    ea:c4:db:35:78:b3:87:b3:84:e1:6f:f8:3e:39:be:
                    f8:07:be:bc:d9:e6:18:29:fd:6f:60:f4:31:34:72:
                    1b:10:f0:d6:09:99:8b:e8:7f:cd:36:46:33:94:34:
                    38:b7:60:2c:50:3e:2a:d8:5f:fc:b8:76:9f:f3:ac:
                    88:22:5f:82:67:ce:e8:62:74:29:3b:fc:4d:bf:e7:
                    47:b9:6c:13:93:de:6c:83:bf:c2:2c:7c:fb:2e:fe:
                    1a:71:f2:41:23:1a:4c:44:e5:c5:3e:6b:14:db:71:
                    ea:b1:c1:39:80:88:a2:ab:fa:d5:05:74:87:96:46:
                    2a:6e:59:1f:b6:f3:ed:b0:36:08:28:71:af:2f:44:
                    ab:24:62:9c:d0:c2:ce:76:61:7e:12:38:bb:25:d6:
                    4b:dc:f1:84:1f:ed:ab:0b:10:a0:5c:89:44:ab:6b:
                    fd:5c:41:7b:24:b6:12:c9:09:c9:69:ac:4e:de:15:
                    df:67:5b:31:79:69:4b:9c:e7:66:ca:59:2b:df:0b:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:22:D3:B5:2C:D7:6C:05:55:E0:22:F9:B6:E2:FF:81:A0:AB:DB:EC
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2FD48F5AA21C11E8B669A00BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:6f:76:7e:c7:d7:42:03:df:de:db:40:f4:30:25:dd:8d:ba:
         8e:54:26:bc:65:fe:3b:8e:c0:f4:4c:fc:7f:96:de:e7:4f:f0:
         2d:9d:03:5b:28:43:b1:8c:8e:6e:6e:46:16:2e:31:cd:17:21:
         f3:61:53:90:f0:c1:df:c1:fb:a3:2b:b7:9b:4b:b1:84:9e:14:
         28:4f:7f:08:4a:c9:b5:91:f4:39:cf:a7:1c:a0:01:c2:b5:47:
         ae:6f:e3:9b:29:11:0c:8a:27:87:d1:23:f6:b9:cf:f3:60:b7:
         b5:fe:7a:fe:32:65:b7:b7:c3:d8:b3:85:77:74:5d:1c:71:c8:
         55:ad:23:6a:0e:64:c4:fc:05:66:0c:7d:3e:6b:09:72:c2:0b:
         1e:8f:dc:79:1e:62:5f:4c:9b:c6:86:f7:16:87:da:f6:f1:60:
         ae:70:1d:97:e0:48:3b:b2:da:31:f4:15:d4:53:73:af:1d:37:
         22:27:47:a8:7d:7e:4b:b5:d0:05:6b:14:a1:75:ec:a6:42:d9:
         9b:a3:1c:c0:99:96:0d:68:eb:4a:c3:fb:f0:37:61:75:08:05:
         0e:ba:23:bb:3e:bd:f7:66:2d:86:c8:84:f5:06:65:40:ba:1b:
         f9:1b:31:9b:b3:95:0b:d1:b3:50:04:9f:9f:5e:db:82:84:26:
         b5:7e:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:02 2026 by rpki-client