Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E03999C441C511E8BEC06D36C4F9AE02.roa
File:                     E03999C441C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier:          Z+sZ6rIwtd6AVtieT3J0e/3fKRevWPcIIeUehAoJbEI=
Subject key identifier:   86:C0:E3:B1:D3:46:0B:E5:CF:B2:AA:A7:F6:EB:3B:43:22:78:C0:EF
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       29DA
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E03999C441C511E8BEC06D36C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:23:54 +0000
ROA not before:           Sun 30 Aug 2026 16:23:54 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135605
IP address blocks:        2402:9e80:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10714 (0x29da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug 30 16:23:54 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a94591a-0cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:ce:6f:6f:28:27:b6:e5:cd:21:9c:3e:e0:
                    bf:cf:5b:bd:f3:82:de:b8:0a:18:e7:24:ea:d0:82:
                    d6:d1:fb:19:ce:4b:55:dc:12:be:25:16:08:a9:96:
                    3b:97:e2:78:eb:58:fd:88:0c:e8:e7:e0:f8:e8:ee:
                    36:c3:b4:9a:97:ee:57:bc:bb:9c:a6:7c:8d:95:d1:
                    d7:ee:dd:e0:88:0a:19:34:3e:79:5b:b3:88:e1:37:
                    9e:8c:13:c9:9a:ee:e2:13:97:66:39:da:79:47:3f:
                    a7:5d:6d:fa:ba:d9:fd:2e:17:12:58:ce:44:b6:8e:
                    4a:08:34:60:f3:b4:b9:df:33:21:9c:11:74:5c:6d:
                    f3:a8:4f:0f:87:14:a5:64:f0:fb:1e:b1:f2:11:8b:
                    ee:5f:9e:aa:3d:b3:ff:d6:3f:b8:e3:b7:50:0a:4f:
                    12:ce:6f:62:3c:ba:9c:1f:9a:2e:65:4e:1d:c6:ab:
                    98:87:47:a1:53:a7:fa:13:7c:99:15:eb:39:05:4a:
                    d9:f4:1e:22:20:73:2d:c2:39:d4:08:9c:79:ae:42:
                    b7:7d:bb:e3:f2:bc:d4:84:2a:e9:a5:ad:6a:c9:4d:
                    d2:ed:06:1c:80:cc:24:5b:98:e1:ba:e8:22:b4:9a:
                    fd:72:9e:80:21:fc:88:54:1e:9c:a9:81:10:b9:d3:
                    c5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C0:E3:B1:D3:46:0B:E5:CF:B2:AA:A7:F6:EB:3B:43:22:78:C0:EF
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E03999C441C511E8BEC06D36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:85:93:5e:e4:44:7e:c7:a7:03:a1:7b:33:ca:fe:46:77:6f:
         65:a8:af:82:7f:74:30:0c:57:fd:8c:f0:40:47:96:77:26:a6:
         49:e8:3b:78:37:8a:85:6a:53:e5:ad:e1:a8:b1:97:58:f9:44:
         32:42:39:b6:09:3e:be:d3:f6:f8:9c:9a:64:be:ef:05:1e:e1:
         f3:d4:36:58:13:5e:6b:ba:f8:5a:2b:ee:e1:03:a2:a4:0e:5e:
         74:3c:b1:90:29:e2:e9:ea:44:eb:49:ac:e0:1b:b4:61:df:c4:
         94:f6:04:d9:1f:55:2e:8e:90:8b:77:8e:4c:5d:23:b3:e0:0c:
         c0:a0:c3:11:55:5b:bd:4e:f0:3e:32:4d:ea:89:f2:98:86:b3:
         fe:61:d0:40:44:5f:2e:6b:c0:95:a4:26:56:a1:2c:74:9a:fb:
         82:9e:eb:16:03:f4:85:9f:61:11:9e:08:4c:b7:47:6b:e7:38:
         44:6d:ff:14:26:15:36:f4:ed:21:72:fd:9b:ef:18:db:ca:7f:
         9d:ba:c4:45:14:0b:50:73:83:15:1a:07:c4:a9:15:5f:fa:44:
         6e:9d:a8:e4:eb:f6:7c:70:50:f0:7e:3c:07:d8:2a:93:40:3d:
         da:b4:34:49:61:73:97:8f:9a:27:8c:59:63:3e:dc:86:2a:65:
         f0:e6:ba:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:25:37 2026 by rpki-client