Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1DB9AEFAE5EE11EABA8AEC34C4F9AE02.roa
File:                     1DB9AEFAE5EE11EABA8AEC34C4F9AE02.roa (raw, json)
Hash identifier:          WmTnWIPsZp2UcbFbQSrNh3JjtjUu/r34W9RYX4KGK50=
Subject key identifier:   AE:31:77:FB:BB:BC:1A:84:1E:71:C3:4D:2D:DA:A5:C7:72:7D:10:07
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2892
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1DB9AEFAE5EE11EABA8AEC34C4F9AE02.roa
Signing time:             Sat 26 Jul 2025 15:54:17 +0000
ROA not before:           Sat 26 Jul 2025 15:54:17 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     43603
IP address blocks:        2402:9e80:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10386 (0x2892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:54:17 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6884fa28-ee49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:92:15:ad:40:8b:c0:a6:f0:c2:87:af:da:
                    26:f7:5b:0f:10:d0:4f:f6:c6:95:c9:5c:63:03:6a:
                    54:e5:34:ce:c4:c8:ec:7f:8c:84:d9:74:51:a7:47:
                    a6:a6:25:4a:58:d9:d1:1a:e1:ed:10:05:8c:58:c2:
                    d0:b8:c8:ca:c0:f7:25:a6:e7:f8:fb:be:ab:07:88:
                    d8:54:83:6c:6c:d5:76:ac:3e:fd:8d:7c:d8:5b:f3:
                    f0:df:64:f5:cc:8b:8d:fd:c0:38:28:d0:81:c6:97:
                    8c:4d:3a:33:47:fd:80:10:43:43:e8:49:f8:27:6a:
                    b7:05:04:df:89:95:a7:17:53:8c:37:3e:7d:6b:04:
                    20:1a:d8:14:13:a4:b0:0a:4a:9e:c3:e3:f6:7b:88:
                    78:c2:86:0d:83:7d:b4:0e:f7:b7:e4:d1:09:77:16:
                    26:2a:1f:91:c6:62:82:cc:ef:6e:aa:50:91:eb:9c:
                    86:d2:f1:67:7e:04:c2:9f:c0:92:31:6d:80:80:77:
                    f1:79:57:8b:dc:d3:b5:9c:73:ee:9d:7a:0c:7a:65:
                    d0:6c:d3:e1:7f:b2:64:3d:19:2a:31:29:9b:cf:31:
                    e4:62:62:95:c1:ba:bd:23:8f:0f:ba:89:6c:a7:0a:
                    02:4d:15:31:64:ab:dc:44:35:1f:95:34:eb:c1:39:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:31:77:FB:BB:BC:1A:84:1E:71:C3:4D:2D:DA:A5:C7:72:7D:10:07
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/1DB9AEFAE5EE11EABA8AEC34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:24:7f:7e:3a:98:fe:90:cc:8f:98:ed:41:7e:6c:0c:cc:3a:
         12:2d:88:41:64:f2:1b:d5:65:d8:19:6e:6b:38:29:98:af:7f:
         de:82:30:35:9e:2f:ec:cd:4a:4d:f6:a2:3b:f0:0d:01:b4:25:
         32:e8:a5:a0:58:53:45:b6:e4:e8:23:8b:64:44:5b:e1:b1:aa:
         6a:b0:cc:33:51:a8:61:03:ae:a1:2b:3e:83:55:91:f2:52:7e:
         4c:94:7d:f1:cb:60:93:17:5a:27:f3:cc:8b:46:6f:ae:f5:4c:
         20:6c:a2:8c:c3:01:c3:77:73:b8:a3:9a:5d:53:36:98:3a:2a:
         0c:01:5e:55:e4:d3:54:5a:15:29:25:4d:e4:10:0d:9a:48:06:
         57:a3:52:a7:71:ca:67:63:b3:71:ba:7c:a1:c5:b8:05:57:22:
         7a:ef:d0:b8:49:ec:9b:de:e8:17:ab:0c:96:9b:47:d3:3f:cb:
         1e:cf:31:c6:ec:85:48:c3:07:05:7c:75:d4:e5:7a:07:3d:0e:
         e8:01:4d:71:7d:fb:03:a2:eb:ed:51:39:27:34:4e:eb:17:a2:
         9d:4c:0e:d1:68:06:7c:ad:06:59:8c:35:74:76:de:aa:86:28:
         cf:3c:c7:69:55:9a:d4:39:5c:c5:38:14:b2:12:f5:f8:cc:61:
         f0:00:ee:bc
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICKJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjUwNzI2MTU1NDE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODg0ZmEyOC1lZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv5eSFa1Ai8Cm8MKHr9om91sPENBP9saVyVxjA2pU5TTOxMjsf4yE2XRRp0em
piVKWNnRGuHtEAWMWMLQuMjKwPclpuf4+76rB4jYVINsbNV2rD79jXzYW/Pw32T1
zIuN/cA4KNCBxpeMTTozR/2AEEND6En4J2q3BQTfiZWnF1OMNz59awQgGtgUE6Sw
Ckqew+P2e4h4woYNg320Dve35NEJdxYmKh+RxmKCzO9uqlCR65yG0vFnfgTCn8CS
MW2AgHfxeVeL3NO1nHPunXoMemXQbNPhf7JkPRkqMSmbzzHkYmKVwbq9I48Puols
pwoCTRUxZKvcRDUflTTrwTlzdQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFK4xd/u7
vBqEHnHDTS3apcdyfRAHMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvMURCOUFFRkFF
NUVFMTFFQUJBOEFFQzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkAp6AAAIwDQYJKoZIhvcNAQELBQADggEBANIkf346mP6Q
zI+Y7UF+bAzMOhItiEFk8hvVZdgZbms4KZivf96CMDWeL+zNSk32ojvwDQG0JTLo
paBYU0W25Ogji2REW+GxqmqwzDNRqGEDrqErPoNVkfJSfkyUffHLYJMXWifzzItG
b671TCBsoozDAcN3c7ijml1TNpg6KgwBXlXk01RaFSklTeQQDZpIBlejUqdxymdj
s3G6fKHFuAVXInrv0LhJ7Jve6BerDJabR9M/yx7PMcbshUjDBwV8ddTlegc9DugB
TXF9+wOi6+1ROSc0TusXop1MDtFoBnytBlmMNXR23qqGKM88x2lVmtQ5XMU4FLIS
9fjMYfAA7rw=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:39 2025 by rpki-client