Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1968CADACCCA11EA86EC0A0DC4F9AE02.roa
File:                     1968CADACCCA11EA86EC0A0DC4F9AE02.roa (raw, json)
Hash identifier:          4YwUQhJTDWjalWYZWhvDTmeV5yu0GH7bVHs2sdEB9k0=
Subject key identifier:   31:F4:4D:EE:9F:0D:C6:E9:C1:94:1C:D1:71:63:DB:7C:F1:72:81:F3
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2955
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1968CADACCCA11EA86EC0A0DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:09:48 +0000
ROA not before:           Sat 26 Jul 2025 15:53:54 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140934
IP address blocks:        2402:9e80:23::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10581 (0x2955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:53:54 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48efc-4037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:10:8b:31:67:f8:f5:93:3e:c5:80:71:c2:35:
                    7a:a5:d3:d1:e0:00:80:12:26:13:0f:1f:fe:42:cf:
                    90:a0:a4:0b:43:99:07:67:93:9b:e2:21:27:1b:6b:
                    48:b5:f6:1a:b9:51:70:41:ce:74:3a:5b:f9:fe:6d:
                    1d:b4:e4:25:91:4c:28:12:3e:87:e5:df:74:d7:ae:
                    8e:fc:a0:e4:0a:55:71:41:98:88:07:ec:52:6f:5a:
                    ab:d0:9d:84:d0:a3:af:8e:30:ab:f4:bc:2c:10:4c:
                    1c:35:a7:cb:01:8d:3d:74:2e:90:91:0e:f6:7b:ca:
                    57:0d:94:66:bd:01:f0:91:b8:f3:bd:53:2d:0f:9c:
                    6b:01:80:10:f8:1c:d6:13:dc:6f:4e:51:ba:15:6b:
                    7c:09:81:7a:b6:57:c3:05:9d:07:fd:08:57:09:29:
                    01:e6:23:02:06:06:74:e3:2e:45:2a:f3:df:5e:74:
                    46:3d:bc:bc:5a:a7:df:2a:fe:d4:ea:9f:ce:c7:12:
                    8c:08:22:83:b1:64:20:1a:e9:14:1b:ae:59:98:67:
                    63:8c:0e:7e:94:8f:4f:ff:38:83:a0:32:12:8a:2c:
                    31:36:45:aa:75:7b:6d:31:13:c6:5f:9e:01:ce:13:
                    0a:18:b9:27:41:f1:c0:82:47:d8:dd:79:f3:dc:53:
                    87:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F4:4D:EE:9F:0D:C6:E9:C1:94:1C:D1:71:63:DB:7C:F1:72:81:F3
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1968CADACCCA11EA86EC0A0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:23::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:04:98:99:49:65:11:88:97:cf:18:5e:b5:03:ea:03:95:b7:
         94:93:08:78:d7:ed:76:5c:21:7f:9d:be:2f:33:ea:96:1b:b6:
         81:75:fe:63:2c:c5:ac:7c:3c:97:8b:61:5c:b7:96:ad:2a:cd:
         fd:fa:91:34:b9:a5:e5:f4:bb:ef:a7:86:a3:17:57:ab:8c:d8:
         00:3d:9e:43:27:69:79:7f:2d:c0:00:69:2c:df:26:e1:25:a4:
         44:d4:91:56:1c:7c:b0:45:a3:5e:47:9e:3d:91:a9:48:db:8c:
         c1:19:d2:2b:54:86:ba:ca:d2:a6:70:0c:bb:87:cb:2f:35:14:
         92:6b:bf:df:61:83:ea:08:2b:8e:08:39:36:60:ef:16:32:dd:
         1a:fe:db:ea:3a:65:61:d8:7e:c3:08:12:a4:d2:da:36:28:e5:
         83:ba:bc:22:32:e8:22:44:d0:7d:56:8b:7f:66:c6:8f:50:e6:
         0b:a8:87:e2:b0:1b:83:ea:33:c1:73:2c:ed:ff:c0:d3:9b:37:
         94:e5:42:8b:b4:5c:da:54:30:1c:15:bf:11:14:d9:0e:51:d4:
         ee:06:27:55:d4:31:f1:d0:ab:c4:0a:f3:53:49:f9:a1:5f:25:
         15:50:c7:5d:5e:0c:6e:37:ca:ce:5b:77:f4:c1:4b:b0:48:b8:
         ad:f2:d3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:44 2026 by rpki-client