Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/3404E194C47711EB9BD0E327C4F9AE02.roa
File:                     3404E194C47711EB9BD0E327C4F9AE02.roa (raw, json)
Hash identifier:          sPQBPOrok9/wSqeUbFCFCwhPAe/zCOJhXu6Gs7giSxo=
Subject key identifier:   B3:D3:02:15:A4:37:2E:81:AA:3C:5D:2A:99:84:4E:62:93:EE:B7:FE
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2A08
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/3404E194C47711EB9BD0E327C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:25:23 +0000
ROA not before:           Sun 30 Aug 2026 16:25:23 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     6921
IP address blocks:        2402:e380:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10760 (0x2a08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug 30 16:25:23 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a945973-6991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:04:fa:09:17:89:97:b7:7c:81:5c:13:38:
                    64:c8:d4:2a:d8:d9:54:bc:17:47:4a:85:18:8c:36:
                    c0:5f:a0:e8:21:e5:43:5c:09:62:26:d3:92:93:c9:
                    4a:62:c5:24:15:47:8c:62:4b:d7:0a:b0:56:04:b1:
                    34:0a:0e:83:8b:31:63:b8:eb:32:94:73:7a:c4:bb:
                    09:4e:cd:fd:e0:59:aa:5c:03:64:f7:2d:fa:cc:86:
                    5d:6e:fa:4d:38:83:a5:ab:8d:50:2e:c6:93:1d:d6:
                    bf:fd:cd:66:68:df:c7:f7:64:54:70:6a:e1:c8:32:
                    2c:65:b4:7d:50:06:8f:e2:99:c4:54:8f:b1:15:f6:
                    35:52:bf:70:77:e9:e2:e4:2e:74:a9:99:7b:59:e3:
                    98:aa:40:07:4a:0a:82:8a:98:bb:41:c3:ba:81:d9:
                    b4:45:c8:35:59:c7:18:74:1f:ee:56:4b:2a:a7:38:
                    37:04:df:21:a8:5b:b0:68:06:39:b9:3b:48:5a:e8:
                    85:e1:a4:22:d4:51:0d:dd:0c:95:fe:55:ef:f8:05:
                    62:24:0e:30:c1:f5:46:a7:5b:78:e6:7a:b0:89:e4:
                    42:3a:42:ee:15:11:e0:fa:40:e7:3d:da:68:a8:1f:
                    88:0d:14:87:ad:18:3b:a7:67:f5:08:31:5f:f0:7e:
                    21:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D3:02:15:A4:37:2E:81:AA:3C:5D:2A:99:84:4E:62:93:EE:B7:FE
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/3404E194C47711EB9BD0E327C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e380:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         62:73:ff:32:ad:0a:8f:ce:7f:ff:a4:ba:6a:5c:2b:af:ff:d8:
         1c:11:0e:8b:c3:c0:48:dd:c5:cb:1c:0b:5c:3d:22:6d:a7:9c:
         3d:56:d4:1b:99:53:25:4b:a7:46:c2:5a:b6:bf:b4:b4:b7:5a:
         47:1b:ec:5e:19:91:4e:1f:26:2f:9b:ab:f2:23:db:0a:d6:ac:
         1e:32:71:e0:b4:9f:26:21:36:fb:9d:41:cc:90:5a:76:48:59:
         fb:a6:48:a5:c3:10:50:f9:ad:51:f0:a8:9e:ee:5d:72:32:53:
         4a:3d:86:19:b1:2e:71:11:d8:b7:1c:d9:8b:0a:b6:3a:cd:8a:
         30:37:15:66:13:4d:be:57:37:5a:ca:fe:26:90:05:4a:50:c0:
         87:75:61:93:ef:86:2a:42:9a:a3:cc:1c:a4:2c:45:cb:e4:0a:
         90:10:0c:0d:8a:46:f8:b8:25:d4:a0:31:07:f5:67:7d:d6:75:
         ec:a8:af:0b:45:93:aa:f6:59:76:a4:15:cf:e5:36:33:0e:62:
         43:91:94:4b:2c:de:23:ef:81:b4:78:ac:13:96:55:df:c5:56:
         c3:79:44:97:aa:d1:f1:d8:a1:0f:37:26:55:b5:78:57:e2:7b:
         35:8c:3f:96:3e:e4:e7:13:19:bf:5b:40:d9:89:e3:f5:95:4c:
         1c:55:37:e4
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICKggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjYwODMwMTYyNTIzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0NTk3My02OTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAusEE+gkXiZe3fIFcEzhkyNQq2NlUvBdHSoUYjDbAX6DoIeVDXAliJtOSk8lK
YsUkFUeMYkvXCrBWBLE0Cg6DizFjuOsylHN6xLsJTs394FmqXANk9y36zIZdbvpN
OIOlq41QLsaTHda//c1maN/H92RUcGrhyDIsZbR9UAaP4pnEVI+xFfY1Ur9wd+ni
5C50qZl7WeOYqkAHSgqCipi7QcO6gdm0Rcg1WccYdB/uVksqpzg3BN8hqFuwaAY5
uTtIWuiF4aQi1FEN3QyV/lXv+AViJA4wwfVGp1t45nqwieRCOkLuFRHg+kDnPdpo
qB+IDRSHrRg7p2f1CDFf8H4hrwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFLPTAhWk
Ny6BqjxdKpmETmKT7rf+MB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMzQwNEUxOTRD
NDc3MTFFQjlCRDBFMzI3QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYFJALjgOAwDQYJKoZIhvcNAQELBQADggEBAGJz/zKtCo/Of/+kumpc
K6//2BwRDovDwEjdxcscC1w9Im2nnD1W1BuZUyVLp0bCWra/tLS3Wkcb7F4ZkU4f
Ji+bq/Ij2wrWrB4yceC0nyYhNvudQcyQWnZIWfumSKXDEFD5rVHwqJ7uXXIyU0o9
hhmxLnER2Lcc2YsKtjrNijA3FWYTTb5XN1rK/iaQBUpQwId1YZPvhipCmqPMHKQs
RcvkCpAQDA2KRvi4JdSgMQf1Z33WdeyorwtFk6r2WXakFc/lNjMOYkORlEss3iPv
gbR4rBOWVd/FVsN5RJeq0fHYoQ83JlW1eFfiezWMP5Y+5OcTGb9bQNmJ4/WVTBxV
N+Q=
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:57:12 2026 by rpki-client