Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E2D385AA41C511E8BEC06D36C4F9AE02.roa
File:                     E2D385AA41C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier:          +6QSF2TYGXENLZiKz9nJFC0VPcVd8PqcY0M2mR+T7K8=
Subject key identifier:   A4:8E:85:8B:52:27:EB:C6:05:61:C3:A6:CD:16:84:C4:78:5E:BD:9C
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       29DF
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E2D385AA41C511E8BEC06D36C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:24:03 +0000
ROA not before:           Sun 30 Aug 2026 16:24:03 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137033
IP address blocks:        2402:9e80:15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10719 (0x29df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug 30 16:24:03 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a945923-40c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:c3:64:52:8a:eb:e3:b5:45:0b:f2:30:f8:
                    8f:98:c2:66:fe:0a:40:b4:a7:b6:94:ef:d3:74:a3:
                    b6:6c:1a:98:5e:54:4b:ee:59:e7:17:a2:5d:c4:f0:
                    2b:be:59:b4:c8:f3:70:c0:2e:bb:07:13:82:4a:cb:
                    9a:30:0c:0d:6a:84:40:33:3c:aa:85:da:20:08:e6:
                    11:b0:c2:bf:6a:55:db:8f:9e:e7:c5:24:2b:19:62:
                    55:02:97:67:6f:2a:ef:33:bf:bb:c6:e1:c1:2c:88:
                    44:de:3b:fd:dd:03:07:96:76:90:0d:2d:64:fa:d5:
                    ec:16:52:d8:f6:a0:87:99:7e:4e:16:f1:e3:b0:f9:
                    2e:a9:23:11:83:d0:26:9a:02:1f:ff:a7:7c:d9:50:
                    a0:49:1a:45:2c:3a:f7:fa:af:28:7b:1c:2d:95:25:
                    27:c5:1a:84:8c:07:c2:7f:88:49:78:a2:97:7e:04:
                    b4:6b:88:0a:96:68:0a:85:76:91:bb:93:12:77:49:
                    90:3e:37:3e:ff:53:e2:98:56:fd:7d:02:bf:76:f6:
                    e1:52:91:ba:1c:fb:66:b0:ef:72:5d:67:af:18:51:
                    bf:d1:1d:aa:09:56:b3:52:75:d1:e8:cb:27:af:59:
                    0a:68:d2:f1:2f:d5:68:2b:a8:38:93:f3:23:f7:f2:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8E:85:8B:52:27:EB:C6:05:61:C3:A6:CD:16:84:C4:78:5E:BD:9C
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E2D385AA41C511E8BEC06D36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:88:98:f3:7e:65:5b:1c:7a:6f:09:04:e3:0a:91:40:37:
         a3:02:fd:5d:dd:23:2a:c8:a5:ec:2b:d0:75:c4:8d:0e:34:eb:
         a8:9c:48:b1:91:e6:2d:30:77:0a:17:71:16:73:9a:2e:e4:e6:
         b4:14:ae:34:3e:fa:48:c7:f3:9b:fa:7e:94:21:6d:b4:07:ff:
         e7:ed:ee:3c:a8:3e:93:0b:3a:91:b6:d8:2c:4c:2c:fb:a0:25:
         7d:ba:b0:5f:b2:a3:dd:a1:de:e4:50:3d:aa:9d:af:4e:7d:02:
         60:9f:c9:32:a9:1f:44:04:84:69:85:14:24:91:60:73:96:29:
         9d:c4:f9:ab:32:94:d0:a2:d5:af:0d:b9:37:9f:af:c5:ce:d9:
         26:24:9c:c3:b4:09:41:85:b4:94:f7:12:a3:bd:7a:aa:1d:3f:
         eb:72:3a:ed:81:c9:11:17:ec:5e:5f:09:e3:e2:bf:9e:59:ff:
         9d:6e:da:55:b2:8f:7b:e1:7c:77:1b:30:aa:66:1f:48:20:51:
         fe:10:b0:62:21:6e:cf:c6:29:84:c9:16:37:d8:4a:dd:e7:b5:
         f0:d4:80:04:33:0d:aa:f1:61:39:35:d5:45:9e:94:03:b7:53:
         29:94:8d:63:24:1c:b0:d3:eb:af:c5:7a:0a:6d:a4:d8:cb:ab:
         37:d1:03:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:21:32 2026 by rpki-client