Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9F711570F64511EAAF5AD93BC4F9AE02.roa
File:                     9F711570F64511EAAF5AD93BC4F9AE02.roa (raw, json)
Hash identifier:          tZ25jN331yUI50il8s8+D1Qhpp09joecWyHjTjFS2+w=
Subject key identifier:   DC:27:4D:9B:5C:88:46:30:F6:AC:11:39:17:A1:81:A6:B0:B8:F2:CE
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       29D8
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9F711570F64511EAAF5AD93BC4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:23:50 +0000
ROA not before:           Sun 30 Aug 2026 16:23:49 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134997
IP address blocks:        2402:9e80:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10712 (0x29d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug 30 16:23:49 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a945915-2f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:33:60:3e:6c:9f:db:b1:81:8e:21:e1:fc:
                    48:e5:65:d2:ba:55:5d:00:1a:80:4d:35:e1:c3:c5:
                    a1:5e:aa:0a:19:29:55:59:5a:1f:8f:aa:01:64:89:
                    0e:96:ce:f7:f0:87:70:43:b3:f9:3a:b2:27:f7:4b:
                    4c:12:2f:a8:d2:b9:d2:9d:48:57:63:9c:21:f1:32:
                    55:c3:13:ef:b6:b5:50:9d:f1:a1:e7:f7:a7:9f:0b:
                    72:98:e9:8e:3f:54:8d:3e:43:5d:cc:75:ca:d0:47:
                    8e:29:57:e7:1e:11:e4:f3:e1:89:5f:9b:b1:d6:d1:
                    7c:33:9c:cd:2f:76:2f:8d:5a:3e:64:d1:8a:8e:d8:
                    52:78:b2:3d:e4:8d:68:7f:2c:c7:8d:81:83:10:8f:
                    80:f8:58:e4:5a:4e:8b:0d:72:c3:53:29:8b:c9:43:
                    ee:d1:77:41:91:30:64:41:3c:79:20:3e:48:ea:fe:
                    d7:4a:ab:a1:22:90:94:ca:37:1e:a5:a6:e7:3a:37:
                    f4:20:f4:ec:a4:69:e1:1e:97:1e:3b:8e:9d:d6:ca:
                    12:fb:5b:7a:b7:bb:11:93:04:eb:6a:67:5d:1a:4f:
                    8d:7d:03:98:a1:9f:50:5f:38:42:e4:76:1e:aa:2c:
                    45:fc:81:12:29:d0:2f:80:44:48:fe:5c:8b:21:89:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:27:4D:9B:5C:88:46:30:F6:AC:11:39:17:A1:81:A6:B0:B8:F2:CE
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/9F711570F64511EAAF5AD93BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:e2:e0:d5:ea:d9:5d:48:77:ee:1c:6d:15:27:28:b6:8b:df:
         9b:19:05:0b:29:0e:60:8b:0e:8c:42:d0:9a:6b:2f:18:72:5f:
         42:00:d5:d3:72:df:fd:be:66:35:7a:51:03:e9:09:d0:10:14:
         4f:26:6e:48:ca:43:ac:42:b9:fb:dd:b5:50:0c:fe:c2:de:c8:
         b9:c7:08:d5:28:ab:27:f4:97:ef:72:fc:6b:4f:a8:ca:21:6f:
         28:6f:28:b8:8a:fb:37:3c:f6:16:fb:f9:cf:9e:39:9b:42:3f:
         69:22:aa:a1:35:36:1a:47:4f:da:ce:62:d3:1d:9c:0e:36:16:
         0c:a2:78:6e:5a:5a:42:77:73:2b:ae:ba:38:66:94:79:f7:2e:
         d8:72:18:41:bc:c5:bb:f5:11:0a:87:1d:c1:ed:43:b2:f2:b5:
         63:bc:19:28:49:85:dc:4b:fe:92:79:c8:67:05:32:41:22:62:
         cd:3d:d8:98:bc:63:f9:ca:b1:7a:1c:ad:24:e1:c8:a4:a4:cf:
         b6:36:5c:06:78:40:5d:94:53:62:32:36:88:2b:e5:9c:37:8e:
         f3:ce:ca:16:f4:fc:51:45:81:c9:14:67:57:43:08:00:5d:ae:
         f0:9c:0d:d0:7d:06:b3:cf:d1:bd:f1:7e:fd:c2:0b:d0:78:52:
         d1:b8:cc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:16 2026 by rpki-client