Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/228647E8639E11ECA24A0411C4F9AE02.roa
File:                     228647E8639E11ECA24A0411C4F9AE02.roa (raw, json)
Hash identifier:          DJw7MMriFOtNP1+Lgm7nUr7qhk+XVZ23woCVC23Rw5o=
Subject key identifier:   C6:27:C4:EC:96:44:59:F1:2A:DC:87:16:31:2D:04:48:6B:E4:92:13
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2BDF
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/228647E8639E11ECA24A0411C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:23:31 +0000
ROA not before:           Fri 02 Jan 2026 16:13:42 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     45255
IP address blocks:        49.231.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11231 (0x2bdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:42 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a49233-765f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:46:44:fb:25:d1:8b:23:ff:34:6b:3c:70:54:
                    38:8f:bc:61:ea:9a:81:d5:f2:07:b7:d5:9d:5d:28:
                    84:b7:5f:db:2f:58:87:f4:d6:de:86:bc:42:b3:f6:
                    95:39:f5:69:ff:ea:ef:df:95:30:d9:73:85:b1:1e:
                    81:ef:ba:9f:c3:ad:de:f2:82:d8:a3:75:03:58:f8:
                    dd:ee:e5:60:81:3b:d9:95:9e:f5:08:b1:09:dc:d9:
                    85:8b:61:3d:b7:27:24:1e:cf:49:d6:88:91:9a:33:
                    ab:74:5f:36:24:72:3d:0d:a5:31:90:31:88:21:61:
                    03:8a:43:33:c7:1a:e3:d7:c4:94:f8:8d:22:69:2b:
                    a1:09:88:af:0d:51:eb:b6:d8:24:ef:de:13:d2:77:
                    4e:c5:9c:27:a1:c4:dc:62:38:ae:29:7c:11:4f:43:
                    9e:8f:41:11:c8:26:3a:4a:58:3b:c6:a5:d8:86:85:
                    c9:b6:f3:b0:39:78:6a:a2:bc:ad:3a:9d:b1:f9:55:
                    c4:d7:2e:29:5c:7a:ef:67:a6:14:97:44:41:3b:b6:
                    17:56:cc:79:07:44:7c:1f:b8:95:8c:22:ff:5c:04:
                    8a:1d:f8:bf:58:c2:46:56:a2:de:8d:48:2d:f0:8f:
                    c9:4e:9d:28:bf:e6:d2:a3:59:19:5e:15:5f:f8:5f:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:27:C4:EC:96:44:59:F1:2A:DC:87:16:31:2D:04:48:6B:E4:92:13
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/228647E8639E11ECA24A0411C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.231.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:08:93:34:b0:c6:f2:9b:18:16:ba:a3:eb:ab:e5:18:1d:47:
         d4:e6:10:87:8e:7e:23:64:a6:9e:e0:25:37:3c:3c:3d:b8:bc:
         86:2b:ce:bd:6d:12:13:fc:ea:ae:74:92:4d:d3:01:16:36:ae:
         c0:4f:43:32:ca:03:9e:19:6d:3f:79:ff:db:13:63:73:77:16:
         d4:43:8c:81:22:f9:60:3b:9a:99:90:9d:a2:ab:ab:c0:d6:a0:
         2e:16:8b:6e:4e:6b:a2:ed:0d:dd:62:d1:fc:48:1d:4c:89:f3:
         c9:81:13:df:50:14:71:05:c3:bc:2b:ae:2f:91:50:8c:1f:0c:
         a0:15:8c:f3:24:7a:00:85:b6:62:02:c2:0d:58:4f:3e:26:01:
         ff:e7:5d:ba:31:b2:c4:a9:e0:35:2c:da:5c:da:3e:46:1d:2a:
         8b:ac:a2:a5:ea:cb:12:d9:5b:b3:35:97:f8:85:da:2f:c2:22:
         55:e2:d4:f9:ef:cf:1c:86:47:ce:10:c0:78:31:97:c7:6f:28:
         15:45:b6:48:4a:ca:9f:82:d2:fa:51:de:5e:ae:fb:bd:db:79:
         2c:6f:4d:52:d3:a1:db:85:ed:df:57:6c:43:08:21:26:7d:ef:
         bc:d1:b2:25:7f:eb:5e:21:5d:50:4b:9c:0f:5d:37:7c:06:23:
         bf:07:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:50 2026 by rpki-client