Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/315BBC4AA21C11E8B669A00BC4F9AE02.roa
File:                     315BBC4AA21C11E8B669A00BC4F9AE02.roa (raw, json)
Hash identifier:          LpdzSuDeoE2B3rwI8B9U0HKryXE9hEduR6jE6gfu2oM=
Subject key identifier:   95:8B:97:28:09:54:00:53:90:FD:FE:86:6D:87:F7:82:34:C2:24:C8
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2A01
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/315BBC4AA21C11E8B669A00BC4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:25:10 +0000
ROA not before:           Sun 30 Aug 2026 16:25:10 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     23764
IP address blocks:        2402:e380:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10753 (0x2a01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug 30 16:25:10 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a945966-c2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:c2:d0:98:4c:73:d9:a6:93:fc:9c:9d:2f:
                    28:7e:b8:52:ed:38:3f:d6:e7:96:4b:78:e0:d5:65:
                    84:3f:f2:51:ca:d5:1e:fc:c9:63:95:23:75:71:31:
                    f3:7b:69:f2:76:72:67:07:f8:2a:b9:aa:70:c6:3b:
                    9e:25:5d:87:c1:6e:ae:c8:08:21:d7:e2:6e:d1:54:
                    2d:19:c7:58:a3:9a:32:28:e6:5f:c8:1d:d7:67:0b:
                    f0:4e:5b:61:11:f6:3d:71:a1:93:7c:b2:04:36:12:
                    7b:c0:9a:9a:f2:0b:b0:99:a0:60:29:d0:94:63:e3:
                    e0:74:d8:ab:ea:d9:5c:c0:eb:44:2a:a3:c3:7a:15:
                    e9:ea:b2:cf:d7:2f:fa:a9:fe:4e:83:62:96:44:6d:
                    e8:1b:3b:62:38:3c:d9:e5:a3:b3:0a:d8:7a:b1:1a:
                    bc:e0:5e:6c:7c:1c:ba:8b:a4:d6:10:1f:1e:74:8b:
                    29:e1:15:7f:cd:2c:55:27:fa:73:82:6c:a8:6b:19:
                    ab:b0:9e:21:7a:40:03:02:f5:eb:81:42:8d:ab:d2:
                    3b:73:c5:b8:d2:ee:2d:02:b9:b3:84:fd:b9:cd:8a:
                    98:28:74:c9:0a:e6:07:e7:a0:a8:4e:a6:69:a2:a2:
                    4d:8a:21:7f:44:b5:1c:cb:0c:1a:3c:11:7c:b7:4f:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8B:97:28:09:54:00:53:90:FD:FE:86:6D:87:F7:82:34:C2:24:C8
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/315BBC4AA21C11E8B669A00BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e380:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:fc:c3:c5:97:5b:8c:68:49:0b:9f:99:52:29:3c:5e:3b:67:
         8a:9c:67:61:35:eb:a2:40:62:d0:2e:4c:8c:e1:64:98:df:f9:
         3d:70:7a:d3:0e:a8:3c:23:aa:19:66:2f:db:67:5a:cf:20:51:
         2b:04:59:1f:23:35:48:44:5e:16:f7:80:df:a6:2d:35:24:d0:
         ea:84:0a:8c:28:4d:b6:7b:ea:c5:30:64:c9:07:cb:5a:fc:c4:
         27:26:cc:73:93:b3:62:3d:24:fe:68:e0:bd:d8:aa:7f:d4:d4:
         21:52:90:1b:1d:87:80:57:4c:71:59:0d:d5:e8:f6:4c:2e:39:
         05:22:11:94:59:ff:e9:2d:22:5f:9b:e4:50:0f:0a:46:4f:9b:
         f7:af:1a:5b:b7:bf:38:8e:8c:da:42:5c:f1:2f:17:ba:97:4d:
         79:f4:65:95:0d:85:99:c2:b6:87:43:c8:92:f8:ef:d8:e6:f5:
         73:eb:fc:62:fd:52:38:79:12:f0:f0:92:23:12:94:12:0c:ea:
         a8:da:17:b1:5f:72:c4:ec:46:e0:63:f3:04:b9:44:d0:18:f3:
         09:8d:47:c6:a4:be:7a:7d:ec:71:ae:e6:08:f2:1c:dd:ca:44:
         f0:7f:f1:63:5c:d8:db:2a:fa:38:e1:bb:84:90:51:6c:8c:d3:
         c9:93:b3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:07:39 2026 by rpki-client