Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5F92D6C0478F11E9A090265DC4F9AE02.roa
File:                     5F92D6C0478F11E9A090265DC4F9AE02.roa (raw, json)
Hash identifier:          8MFxb6bCk9oo5XXTIg0qzJPoFJp2Ibsyu0jSH7kYEsE=
Subject key identifier:   E2:20:31:F6:37:B8:30:E9:7E:B3:DE:4B:00:AD:85:11:CD:2C:D9:15
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       29E8
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5F92D6C0478F11E9A090265DC4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:24:21 +0000
ROA not before:           Sun 30 Aug 2026 16:24:21 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138685
IP address blocks:        2402:9e80:48::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10728 (0x29e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug 30 16:24:21 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a945935-9110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:57:70:f0:cd:99:96:d9:ff:c2:75:ec:3b:87:
                    74:e4:e0:e0:cf:2a:7f:f3:3d:10:bb:80:98:6d:c5:
                    4f:7b:7a:61:a2:83:d1:09:23:8f:a6:89:fe:42:cf:
                    ad:0d:31:f2:71:f4:93:71:4d:b3:c2:3f:7a:3d:00:
                    89:61:bc:ff:27:06:24:f1:46:dd:43:1b:84:6b:dd:
                    ab:04:5d:63:57:c7:66:b9:5a:cc:f2:87:1a:f4:35:
                    87:09:74:3e:ce:46:35:d7:92:79:1a:38:e0:45:fd:
                    ed:3a:37:ea:6b:83:3d:20:c8:70:22:80:9a:93:fd:
                    58:04:c7:48:5d:35:ac:21:12:27:f2:5d:80:b8:31:
                    43:4d:ba:df:2c:17:02:f3:4a:a6:6d:4b:ee:2f:7f:
                    e7:09:9b:e3:bd:21:2e:dd:7b:38:6c:2b:82:15:12:
                    9b:83:fd:6d:fc:4e:9d:89:2a:92:7f:dd:0d:73:97:
                    d7:01:7a:f4:f8:65:1b:28:ca:ef:66:1f:4b:99:45:
                    ad:9a:96:82:75:f7:f0:9a:d2:4d:6d:ba:15:31:f3:
                    51:78:f9:b5:5f:d2:fa:f1:6c:df:c8:e4:91:56:ea:
                    69:eb:cc:0b:5b:88:e8:93:bc:a2:f7:43:22:5e:ce:
                    21:ed:13:77:aa:31:2c:9f:d6:0f:70:96:b3:a3:45:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:20:31:F6:37:B8:30:E9:7E:B3:DE:4B:00:AD:85:11:CD:2C:D9:15
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5F92D6C0478F11E9A090265DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:48::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:07:f8:4d:9e:95:c6:85:7d:36:66:27:70:31:78:7c:64:39:
         c5:05:a0:58:c7:ac:59:17:14:6e:ba:d9:ae:28:0b:89:d7:66:
         fd:d3:6c:a8:e6:12:d8:3f:63:d8:59:5c:6a:0d:be:47:d1:8e:
         de:41:35:4a:39:d4:20:67:f9:a6:35:3e:49:9d:8b:b6:12:6a:
         56:fa:8d:80:5b:d9:89:f9:4c:0c:88:d7:16:39:9b:dd:eb:24:
         65:c5:8a:c6:30:43:bc:a6:d0:a8:85:58:5c:34:82:3d:f1:cd:
         65:1f:4f:50:65:13:50:19:01:9e:39:f4:ba:c7:e6:11:a9:86:
         ac:21:49:2e:16:fc:fe:62:64:e7:0a:ea:40:54:95:65:2f:6a:
         4a:58:3b:1f:0e:15:91:b3:98:6f:31:94:0e:68:89:b3:3c:a8:
         e0:da:d8:85:57:74:cf:7a:78:ee:59:5f:ff:98:9b:00:7d:c9:
         04:d3:ea:63:09:a0:ec:cf:d2:33:d8:12:f9:d9:29:38:86:f6:
         e0:6f:b5:b9:15:f9:4c:34:70:eb:d9:00:26:ba:74:05:c4:db:
         b1:4f:bd:39:86:03:2a:09:b3:25:27:7e:0f:2a:16:02:cc:60:
         61:42:55:d6:01:47:f8:74:1f:ed:5b:ff:31:f9:78:32:ad:77:
         a4:66:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:16 2026 by rpki-client