Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa
File:                     4239C32A61C211E9B8967426C4F9AE02.roa (raw, json)
Hash identifier:          jh8juQC/YzeXis/yI4SK9w9tKqQzN6Hlqyx9/4h+Hg4=
Subject key identifier:   07:C8:D1:0F:2F:F4:EA:E8:B5:D9:F3:24:89:4C:01:F0:C5:3E:89:0C
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       29E9
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:24:23 +0000
ROA not before:           Sun 30 Aug 2026 16:24:23 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138686
IP address blocks:        2402:e380:8c::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10729 (0x29e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug 30 16:24:23 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a945937-e62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:a9:e7:f4:25:f4:f1:f9:3a:38:47:67:b8:
                    bb:a9:0d:29:44:d9:1f:b8:e4:a5:7a:e2:cd:10:00:
                    a1:b7:e0:e1:d3:16:bc:30:a7:10:d1:9d:d6:d4:01:
                    54:ca:66:61:07:23:e9:62:e1:d8:ab:7a:ed:f5:a5:
                    ed:0a:2f:23:f4:ae:32:d9:c4:56:fe:e9:bf:02:f1:
                    ac:31:22:d5:71:40:29:f0:a7:86:f0:36:f9:eb:9e:
                    e0:21:f9:08:68:19:03:87:e6:37:d8:04:24:e6:a4:
                    e9:13:be:f1:2e:f7:59:7c:e1:3d:a0:da:1f:a1:f9:
                    78:eb:0e:f8:7d:eb:0e:ae:0d:c0:d9:fa:32:20:57:
                    e2:c1:1c:51:00:23:87:25:4a:3b:66:9f:df:85:54:
                    5b:27:04:38:ff:0f:36:ad:6b:72:9d:79:8b:d5:aa:
                    7c:06:89:26:36:a2:6b:a5:16:72:6d:89:5d:04:24:
                    3e:20:56:0a:c4:ae:37:80:d9:8d:54:0d:01:65:f8:
                    bf:c6:56:18:b6:c1:42:a3:09:a1:2f:7c:75:bb:9a:
                    1a:80:14:c6:11:62:09:22:44:ad:13:14:b1:96:82:
                    6d:55:0c:07:ac:70:09:f2:09:25:ea:f2:5f:22:44:
                    fd:cb:4c:45:06:27:ca:11:4c:da:c1:93:a7:10:80:
                    07:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C8:D1:0F:2F:F4:EA:E8:B5:D9:F3:24:89:4C:01:F0:C5:3E:89:0C
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e380:8c::/46

    Signature Algorithm: sha256WithRSAEncryption
         77:5b:62:e9:86:76:b7:63:0b:52:24:fb:5d:e5:44:34:18:97:
         f5:b3:21:68:9b:60:7b:33:2e:23:5f:b5:15:53:37:f8:66:8e:
         39:ae:a9:b2:44:97:94:7a:06:e6:e0:61:11:f7:ce:9d:c4:40:
         70:b4:b4:62:3d:8b:8a:9e:cf:48:fb:ec:75:fa:77:5e:cd:6a:
         b9:ad:a2:48:60:55:d0:ca:4b:73:6f:b0:9e:a7:9a:13:a1:26:
         dd:27:fa:b2:53:cf:c6:36:a9:01:ac:f3:4d:79:09:1d:89:cb:
         07:ca:d8:7b:9f:17:d5:ca:cd:4a:4e:c7:97:bd:0c:2a:db:67:
         8c:05:8d:01:b0:95:d6:f6:be:c2:67:32:d0:df:af:ef:39:f4:
         e4:6a:c7:12:46:30:f0:17:03:e0:dd:cd:c3:a3:c8:35:cb:78:
         e0:e1:2a:c9:7b:5a:b7:61:e0:69:39:32:18:5c:50:7f:6b:e1:
         51:b0:21:64:b4:d0:d6:0e:78:ce:fb:93:88:0f:eb:32:ae:38:
         10:8f:5e:f0:95:68:da:69:02:08:7c:39:e9:e4:27:e9:0a:ac:
         cd:82:b9:25:9f:7d:b9:a0:4d:e2:06:f1:c9:ea:82:cc:d8:e7:
         52:e2:da:d9:98:ff:98:c1:e2:a1:3f:09:3a:fd:97:6d:7e:f8:
         d2:d1:b8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:53:17 2026 by rpki-client