Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/350965D2992511EC94DB646EC4F9AE02.roa
File:                     350965D2992511EC94DB646EC4F9AE02.roa (raw, json)
Hash identifier:          3czB/JOm3bKKTNURVbsz5N4X/mBHJO3xVvgq1dFwIKs=
Subject key identifier:   A7:F0:3E:5F:1F:28:49:CE:7D:70:07:CF:60:00:90:2E:6A:04:AB:16
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       29FA
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/350965D2992511EC94DB646EC4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:24:56 +0000
ROA not before:           Sun 30 Aug 2026 16:24:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     149500
IP address blocks:        2402:9e80:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10746 (0x29fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug 30 16:24:56 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a945958-0cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:52:59:28:cb:a2:74:86:d4:db:93:b4:e5:
                    ed:08:80:de:3a:cf:c1:37:58:43:db:88:8c:f8:ca:
                    5a:e2:69:f4:e5:0c:4e:56:a5:72:db:4f:38:dc:d9:
                    8d:3e:dc:d1:0a:b3:6c:a0:d2:29:0f:8f:d0:0a:a8:
                    b2:ef:5e:54:b4:13:b2:a2:eb:b5:e6:3b:76:b9:87:
                    df:22:8c:b7:7a:df:4c:4d:9d:94:41:b1:a0:25:ef:
                    ec:01:fe:93:2a:0c:79:60:5a:92:4b:86:e2:cf:2d:
                    9e:20:fb:4d:a5:29:47:14:5e:fb:97:18:79:4b:64:
                    51:22:a2:a4:3a:33:f5:fd:d3:84:08:1c:f9:28:64:
                    a5:bd:0e:8c:1d:a8:82:77:a5:75:6b:6a:00:15:23:
                    a7:ae:70:18:22:c4:82:48:c1:49:9c:42:78:8a:a7:
                    23:64:d7:68:81:9e:b9:a6:b3:f4:ed:b0:54:65:ab:
                    a6:4a:bf:89:8d:6d:5f:aa:ba:6e:eb:c5:83:04:1a:
                    a1:62:29:4b:99:de:a7:c9:c1:ec:bc:92:b8:c6:0c:
                    1e:4d:05:bf:8f:33:de:c3:68:a4:21:a4:e4:fb:63:
                    85:9c:f1:b6:e8:12:40:05:7e:f7:9b:52:10:f1:11:
                    ce:74:80:68:56:2e:d9:06:f8:4e:8d:8a:a9:82:f3:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F0:3E:5F:1F:28:49:CE:7D:70:07:CF:60:00:90:2E:6A:04:AB:16
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/350965D2992511EC94DB646EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:d0:0a:e2:97:70:78:00:16:8e:10:3b:b3:ca:7a:64:84:0c:
         78:d5:2c:a7:5c:b3:2f:56:11:da:51:7a:5a:93:70:d0:98:62:
         4c:7c:ed:88:d4:2b:36:6f:2f:a7:c6:97:dc:46:b3:a7:9e:11:
         7b:4b:f0:29:4a:45:47:92:e6:43:84:8a:b6:b4:8c:39:5a:1b:
         5c:3b:a9:95:89:82:ff:ba:b1:62:f7:e5:b2:6c:54:45:c2:b6:
         ce:26:17:ad:37:87:1e:92:9b:41:87:d6:b3:62:cf:fd:f6:65:
         3c:64:d3:a6:ca:4d:d2:d6:84:bf:8f:21:55:d0:83:5c:1b:94:
         3c:32:fd:aa:20:b4:d7:f3:f0:55:e5:24:fd:f7:99:d7:34:85:
         b8:ab:fe:a6:fd:89:a2:09:f9:1e:a7:ca:e6:20:cf:f7:f2:c6:
         84:ea:d8:3a:35:02:cb:d1:1f:f5:23:ea:ff:af:81:c6:63:f8:
         60:53:91:71:e3:ce:31:9e:d2:80:10:7a:d2:bf:65:86:38:5c:
         9b:bf:e0:cb:7e:1d:0c:e2:e2:d1:84:2d:a1:60:6b:2f:b2:88:
         8d:c4:43:2c:21:a2:d2:d7:7f:90:cb:18:a1:7c:59:fc:fc:3c:
         39:a6:15:ba:cc:e8:23:c0:3c:5b:35:f8:9f:1a:fb:10:2e:f5:
         9b:28:bf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:37:33 2026 by rpki-client