Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/44A19870784F11E8A84DBE2EC4F9AE02.roa
File:                     44A19870784F11E8A84DBE2EC4F9AE02.roa (raw, json)
Hash identifier:          EVh1NgSrEVsoFwpszxgYyGmVKFXnuB2FU9n5UDA9t9k=
Subject key identifier:   88:7B:A3:B4:00:BB:61:68:D6:6D:FE:16:0F:05:82:88:0F:17:49:6B
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2BD8
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/44A19870784F11E8A84DBE2EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:23:26 +0000
ROA not before:           Fri 02 Jan 2026 16:13:35 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     38443
IP address blocks:        2405:9800:9c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11224 (0x2bd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:35 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4922d-cd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:2e:f7:42:fd:51:23:33:4e:fe:e8:ee:db:
                    75:51:5b:37:a3:e3:93:28:f2:b5:34:30:08:f3:9e:
                    50:bf:8f:c3:5a:54:ee:0f:07:84:df:36:66:24:a8:
                    76:71:51:37:53:5d:b1:3e:99:2f:56:27:98:22:63:
                    c8:68:a1:67:02:b8:2c:a4:5a:54:a9:fb:0f:a2:65:
                    41:21:43:84:f2:b7:09:01:34:fb:ae:fe:e9:88:c8:
                    42:71:49:e5:d6:1f:0b:ef:13:dd:3d:82:a6:89:cf:
                    ea:f3:28:cc:d5:0a:eb:a2:74:8b:42:74:75:45:d4:
                    40:50:ad:4e:67:4a:d4:65:8a:fa:ce:5c:d2:a9:64:
                    8e:20:35:05:10:c5:51:31:5b:24:24:57:61:30:c3:
                    2d:3e:52:65:9f:2e:24:b6:27:46:a5:91:62:2f:a5:
                    45:c7:34:e0:68:bd:ce:95:f3:fb:ef:e2:b4:23:33:
                    ef:16:e7:a8:0f:11:86:12:f7:da:dc:44:cc:55:64:
                    82:92:dc:c8:c5:51:ad:d5:51:05:47:a3:d3:52:ed:
                    3a:09:b8:8b:f2:6b:29:d1:57:71:7e:6f:3b:65:a7:
                    d6:5b:8a:19:e8:f2:ab:9f:01:6c:84:24:1f:0e:78:
                    fe:e0:61:04:03:9c:33:1f:68:53:54:11:31:37:23:
                    6b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7B:A3:B4:00:BB:61:68:D6:6D:FE:16:0F:05:82:88:0F:17:49:6B
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/44A19870784F11E8A84DBE2EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9800:9c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:0a:41:52:a3:dd:ab:e0:9c:ce:9f:22:d5:05:57:18:fb:08:
         0d:82:e4:6f:8e:c0:d6:21:b2:f4:ba:de:ff:0f:0e:8f:30:b2:
         67:ec:64:56:33:71:1c:1f:0d:08:71:8f:3a:55:93:51:e3:2a:
         2a:0f:92:ba:1c:b4:dd:59:59:9e:9e:d7:32:9c:4b:e5:84:40:
         e6:4b:71:24:84:45:75:7b:69:0f:8d:e6:e6:0f:6b:c8:d4:31:
         c7:0d:be:cc:a9:03:3e:69:07:8d:3f:35:a5:cd:8f:46:2c:9f:
         a9:e0:ac:ea:a3:63:e4:a4:22:23:0c:3d:34:1d:5a:f8:8c:bd:
         1a:42:ac:de:93:61:6d:d8:1b:dd:96:cf:87:f7:78:e1:8f:32:
         6d:1b:83:80:2e:9d:5a:b7:aa:c5:c5:29:b3:98:69:4c:7d:8c:
         4c:8c:1d:41:ed:c7:7a:72:02:b0:f6:d4:23:b4:df:e3:2b:8b:
         fd:63:66:14:ce:b6:d2:ff:fa:2e:71:28:c4:67:58:94:0c:db:
         fe:12:b2:fe:b4:b1:f6:b0:7c:a3:8d:c8:83:e5:7b:24:cc:79:
         58:b9:9f:94:d1:cd:13:b2:f8:6b:c1:53:58:e7:cf:1e:10:31:
         b6:7c:80:4e:3b:00:a4:03:eb:44:ca:82:bc:35:f7:43:60:fd:
         b2:c7:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:28 2026 by rpki-client