Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/2579DD2AA4E911F18E8000426A11F970.roa
File:                     2579DD2AA4E911F18E8000426A11F970.roa (raw, json)
Hash identifier:          iULh2mhtbyN6/itGQQ04mR1L5lTg6b6a6WlOrWiAyQE=
Subject key identifier:   11:86:D1:E8:3F:2A:1D:29:24:00:68:79:72:DD:A2:CE:20:3A:B8:40
Certificate issuer:       /CN=A911F587/serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510
Certificate serial:       78
Authority key identifier: B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/2579DD2AA4E911F18E8000426A11F970.roa
Signing time:             Fri 11 Sep 2026 08:58:54 +0000
ROA not before:           Fri 11 Sep 2026 08:58:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     4049
IP address blocks:        2001:df5:e840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl
                          rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 08:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F587, serialNumber=B9FC5C14B2D27529D50E6E593DA8CB0AA87D6510
        Validity
            Not Before: Sep 11 08:58:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa3c2ce-3b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:f4:fb:8d:d4:3a:07:e9:38:6e:7d:76:b2:
                    ac:ea:c0:c7:f9:33:30:3e:53:a0:5c:85:b3:0a:d1:
                    25:09:32:f8:c9:cd:b2:bb:e4:b7:80:cf:13:b2:5a:
                    e0:06:c1:c1:59:65:33:7a:47:e0:a4:8f:8f:70:53:
                    67:1b:47:a7:d8:df:6b:6d:c1:6b:dc:86:57:79:33:
                    b0:bd:b6:94:48:0b:ac:af:ba:40:6f:8e:f3:0e:41:
                    ff:f9:c6:b3:f7:eb:90:9c:71:ab:ea:c5:14:3a:ad:
                    94:1c:71:68:3e:91:dd:6e:73:8a:30:8b:7d:0a:1f:
                    55:20:cb:db:53:84:32:3a:bc:24:8b:98:b8:69:00:
                    41:45:a5:ce:47:9b:34:1f:ff:52:81:26:cd:d6:42:
                    c6:3a:53:4e:da:77:31:b1:93:2c:a2:51:e2:24:2d:
                    8d:d3:74:3d:10:a8:65:61:5a:f8:19:66:7f:29:6d:
                    0f:5e:94:25:69:24:c3:86:2a:a5:e2:43:c2:dc:0e:
                    b0:97:20:25:5c:e7:40:7b:13:ef:cc:26:57:a0:6f:
                    df:e0:31:b8:e4:06:55:7c:33:84:9a:af:18:89:db:
                    05:dc:93:5d:70:77:d2:10:62:a4:e8:d4:ab:e3:f5:
                    b1:ee:b1:85:32:6c:2f:18:92:37:41:f4:e5:08:10:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:86:D1:E8:3F:2A:1D:29:24:00:68:79:72:DD:A2:CE:20:3A:B8:40
            X509v3 Authority Key Identifier:
                keyid:B9:FC:5C:14:B2:D2:75:29:D5:0E:6E:59:3D:A8:CB:0A:A8:7D:65:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufxcFLLSdSnVDm5ZPajLCqh9ZRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/C1BA1A22136E11F1AD791BA3313D8C67/2579DD2AA4E911F18E8000426A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:e840::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:9a:87:27:40:94:f2:35:b7:81:6e:d4:be:c3:fc:8f:72:19:
         62:9a:4a:ec:4b:70:0c:1b:b2:56:ff:d5:7a:39:f5:50:ec:ef:
         d6:75:8c:79:70:fb:8b:e8:f4:4e:8e:67:57:f8:40:ef:1f:96:
         59:35:d3:44:0a:6d:e0:f4:61:48:6d:f4:88:90:09:5f:29:43:
         ce:96:e4:40:b2:3a:08:7b:52:74:76:5f:c5:6a:f0:5d:b0:99:
         e7:71:ee:8c:f8:dc:63:e1:73:6d:7c:d8:4d:18:8f:25:71:9a:
         2e:7b:ed:8d:e7:7f:dc:27:c5:1e:74:30:8a:a3:7e:d7:ca:a2:
         89:61:93:81:69:46:2d:ad:ee:2c:f1:13:85:f6:7c:7d:91:1e:
         5b:80:88:8f:5d:12:d6:c4:9f:ad:d7:1e:0c:f5:6b:57:c5:73:
         27:20:01:e6:7a:1b:49:16:f2:1b:58:1d:16:25:77:31:e3:d1:
         2f:77:65:31:c5:3f:94:f8:ed:75:cb:4c:1a:cf:ff:be:92:f5:
         7d:b8:8d:34:80:45:e4:53:c4:1d:5b:ac:51:b0:41:9f:6f:e0:
         2a:d1:02:6d:25:36:30:9c:4a:a1:88:18:3f:50:2d:77:91:14:
         a8:cd:ca:62:7e:d3:f8:88:01:14:22:d7:0f:3c:9f:37:c8:0e:
         07:71:14:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:20:58 2026 by rpki-client