Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4969EFD6A34711EA996BB179C4F9AE02.roa
File:                     4969EFD6A34711EA996BB179C4F9AE02.roa (raw, json)
Hash identifier:          LoOPincGiqJLUbv+Kni+9482R+Co4GqUr720dF3sgQ0=
Subject key identifier:   10:12:36:0E:A3:0A:30:55:B4:93:1A:D0:80:D8:31:74:18:D7:B7:70
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       29EE
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4969EFD6A34711EA996BB179C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:24:33 +0000
ROA not before:           Sun 30 Aug 2026 16:24:33 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     140686
IP address blocks:        2402:9e80:15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10734 (0x29ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug 30 16:24:33 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a945941-5da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0d:fa:02:49:1f:f2:ad:eb:c0:94:aa:b4:cb:
                    36:ec:cd:53:2e:ee:37:cb:ad:15:b8:3c:c2:8d:e1:
                    d9:07:cd:3a:4a:24:f6:ac:85:83:4a:fc:c0:a5:0a:
                    eb:51:2e:f8:ed:1b:38:4b:b6:b8:7f:31:db:6d:a8:
                    2b:2e:1e:55:72:9f:a2:6d:0c:51:c7:97:fb:84:b0:
                    70:1c:11:f6:bc:e8:36:9a:72:68:d0:7c:b7:b7:b1:
                    3a:a6:bf:2b:86:d9:57:91:5f:f8:7a:66:14:c1:80:
                    ae:e7:a7:56:cc:cc:9b:29:fa:e6:3a:77:cb:b9:1d:
                    81:37:61:11:67:c0:42:49:2d:a4:bc:59:53:ea:59:
                    1d:d9:9a:89:c5:d5:52:16:6b:59:82:f4:f1:93:9b:
                    bf:7f:ea:3c:f5:07:8d:26:72:8f:40:5d:b6:14:44:
                    83:5c:8c:f3:fd:ba:44:66:a9:0a:d4:58:2d:82:fd:
                    c0:65:a9:9b:f0:fc:85:6e:d5:1a:df:a7:6c:8c:68:
                    2d:07:6e:ab:7b:e4:a4:0d:49:08:ce:99:8a:58:2e:
                    ef:90:92:2b:d8:1e:4d:34:f4:c2:bf:06:ab:f5:84:
                    c6:50:46:5f:c7:6e:75:e0:9d:60:c4:1b:73:60:c7:
                    db:18:b7:44:a0:36:e1:72:99:4e:64:c2:87:ad:51:
                    fb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:12:36:0E:A3:0A:30:55:B4:93:1A:D0:80:D8:31:74:18:D7:B7:70
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4969EFD6A34711EA996BB179C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:3b:52:30:5a:aa:46:4d:8e:ed:a0:cd:c6:12:a5:d7:18:27:
         cd:e4:5c:35:fa:40:c5:fd:45:d6:de:0a:db:80:41:91:18:c8:
         8b:51:c6:6f:21:4a:c8:2d:f7:5a:56:64:fb:f0:44:29:9c:c6:
         28:fc:5d:09:05:7e:5b:0c:99:9b:07:c7:21:04:a8:89:ea:7a:
         51:b5:34:c7:b7:0f:c9:6a:4e:05:f9:50:32:8e:e9:71:a1:34:
         85:05:36:18:5d:b7:0a:75:86:e7:cd:6b:28:d7:6a:d2:61:fb:
         63:61:cb:2c:b7:fb:89:ff:c6:38:27:92:a5:13:cf:35:19:ee:
         b1:44:8a:4b:16:1e:25:73:6b:62:15:3b:bf:81:60:e1:25:b5:
         96:e3:11:82:ca:92:7e:01:12:a4:bb:fe:ca:27:3c:b8:c3:76:
         25:75:55:2c:9a:0a:37:ec:34:62:49:fe:80:29:bf:a6:7c:de:
         1a:44:f5:4c:fe:2d:71:d3:06:23:d6:0e:9c:32:a2:e9:fc:44:
         bd:9c:f4:ca:02:1e:29:d6:81:0e:57:77:64:2e:95:59:66:21:
         e3:76:16:fd:3f:b8:cd:a3:c2:f8:1d:e8:96:1e:e9:fd:b6:ca:
         3d:1e:77:a0:44:58:a6:df:5c:2f:5c:5b:9f:ac:d1:13:7b:5c:
         4e:5b:f4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:09:22 2026 by rpki-client