Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/95E2EDBAB16C11F1A82DDA415E11F970.roa
File:                     95E2EDBAB16C11F1A82DDA415E11F970.roa (raw, json)
Hash identifier:          F4HsiDo3VynafZmrPWnH3iu8bLrDggJWw++1g655dPk=
Subject key identifier:   F9:59:7E:35:37:51:B3:C9:FF:C6:70:E5:07:97:FE:DB:2E:93:93:9E
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2CC5
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/95E2EDBAB16C11F1A82DDA415E11F970.roa
Signing time:             Wed 16 Sep 2026 01:18:55 +0000
ROA not before:           Wed 16 Sep 2026 01:18:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138685
IP address blocks:        2403:6200:7602::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11461 (0x2cc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Sep 16 01:18:55 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6aa9ee7f-8d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:81:0a:30:d7:0c:9d:96:0c:fd:25:57:da:
                    78:ed:46:1a:21:83:6c:cc:c6:bf:cd:20:9b:94:49:
                    a7:3c:be:87:05:5e:2f:fc:96:c7:49:43:77:29:c4:
                    4c:b5:a8:b0:35:43:e2:27:a6:b4:cd:ec:6f:86:4a:
                    29:fe:c7:53:84:fc:cc:b1:d9:7e:48:b2:f7:80:7b:
                    22:69:61:83:b3:42:3e:43:19:06:4e:1d:1f:cc:76:
                    a2:88:2f:b8:5a:c4:c4:24:a2:5a:c6:b9:60:9b:3c:
                    05:d4:f3:40:54:97:bf:3a:61:d3:4d:ad:c1:a0:77:
                    6c:3e:55:fe:03:34:1a:55:54:5f:b1:94:f1:a7:d9:
                    92:d5:40:b9:05:d6:53:69:bf:b9:21:9f:bc:d8:cc:
                    f4:ac:8d:c7:d7:4a:4f:5e:8e:a2:e2:62:e5:42:22:
                    ed:e6:c7:a5:e2:7d:13:fd:30:5f:1b:6f:cf:ce:14:
                    17:a1:e7:1a:ee:1c:c1:05:88:0d:b0:15:aa:85:0e:
                    2d:ea:a4:14:e6:bf:b0:92:24:76:17:16:03:5b:68:
                    11:75:9d:47:c7:77:3f:0f:63:e5:d7:51:96:a1:b6:
                    25:4b:b2:3a:a7:29:9c:79:c5:97:98:b5:fb:81:33:
                    7a:bf:d7:19:50:72:c7:2a:ac:2c:bf:77:68:5e:cc:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:59:7E:35:37:51:B3:C9:FF:C6:70:E5:07:97:FE:DB:2E:93:93:9E
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/95E2EDBAB16C11F1A82DDA415E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:6200:7602::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:23:0e:ad:04:24:c1:8a:b5:62:09:49:a5:f2:92:80:c3:f2:
         a2:d1:9e:4f:6d:72:e9:d5:7d:8d:5b:86:40:e2:78:b0:f3:8b:
         2e:54:75:29:8e:db:e5:21:20:2f:4e:19:7a:86:bc:6b:53:04:
         72:fd:56:b9:1b:7d:ed:16:38:48:a1:33:72:6c:b4:94:ce:3b:
         36:4d:eb:6b:95:f2:ff:82:be:80:77:68:ca:fc:8f:fd:98:66:
         3c:2a:55:c8:15:91:d2:83:e0:80:06:f9:ec:d8:6e:52:1c:a1:
         83:79:02:72:01:b1:f6:f1:27:3d:b2:c3:4a:81:8a:8c:b0:be:
         ed:00:ba:4d:63:35:3b:6f:5c:1f:b9:68:a2:18:cc:57:cd:58:
         51:bc:2e:67:8e:3b:1f:85:c1:48:4c:2f:bf:eb:51:13:fa:56:
         38:87:ff:69:97:df:24:38:8e:13:e8:05:5c:b8:a6:a3:1f:65:
         c2:e6:f5:de:63:17:08:90:70:04:47:68:58:2b:a1:2f:43:ba:
         16:0a:32:41:a0:e7:2f:f0:9a:85:cf:c6:d1:61:ef:b2:17:2b:
         e7:36:e3:6e:98:22:2b:bf:8e:c8:da:25:84:8d:fe:85:70:dd:
         ff:79:23:1c:88:d1:e7:c8:3a:15:da:53:0d:c8:b4:5b:86:b2:
         61:4a:4f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:24:44 2026 by rpki-client