Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2E6B58ECFEC911E88E78993AC4F9AE02.roa
File:                     2E6B58ECFEC911E88E78993AC4F9AE02.roa (raw, json)
Hash identifier:          NUtNgiC4rMEw4ib//0uPvqnLnrgXMVVZWZRhDLc0s7s=
Subject key identifier:   14:70:F3:E0:ED:30:D0:F5:6F:34:ED:EF:27:7E:D5:82:A6:DE:8F:40
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2948
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2E6B58ECFEC911E88E78993AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:09:37 +0000
ROA not before:           Sat 26 Jul 2025 15:53:42 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138333
IP address blocks:        2402:9e80:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10568 (0x2948)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:53:42 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48ef1-0b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:fa:92:cb:dc:bf:0e:aa:df:fa:e4:8f:b5:
                    6a:b7:9b:1c:1d:96:ea:b6:d7:48:d2:45:28:14:2a:
                    ff:be:03:da:c0:f0:16:f0:95:0c:82:59:79:e1:3f:
                    7b:33:81:ac:d1:a2:dd:d3:3e:50:14:c1:6b:6c:f9:
                    04:72:fd:da:aa:7a:41:d7:ad:60:a1:d2:95:9e:27:
                    dd:48:8c:45:2a:df:d6:a6:3a:ec:d2:72:e4:3b:37:
                    41:11:5a:2d:3d:ec:56:ff:29:40:e0:33:60:18:23:
                    b6:ed:b0:18:d8:18:c4:ea:b8:4f:b2:39:78:df:09:
                    d1:fb:1d:0d:ef:48:fc:7e:d6:e9:09:fe:86:62:bc:
                    44:46:2b:72:ab:9f:6b:23:d8:0d:95:24:37:bf:f3:
                    07:6a:6a:2e:06:57:41:58:1d:20:ae:e6:08:62:88:
                    c8:2d:21:20:bc:dd:d8:08:ca:0e:3b:03:2d:9c:38:
                    ee:3c:97:11:a9:c3:fd:14:95:02:f1:3a:6e:e6:21:
                    de:8c:6d:5a:f9:07:48:dd:e7:4e:6a:fb:e9:1e:d9:
                    3f:1e:b9:68:f8:3c:76:b7:0c:43:c6:9a:af:fc:24:
                    de:b7:e5:47:63:ba:8f:a5:4c:f1:c5:c9:f0:ad:7e:
                    c8:7f:fa:a3:37:0e:9a:07:e5:dc:b8:d0:93:80:cb:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:70:F3:E0:ED:30:D0:F5:6F:34:ED:EF:27:7E:D5:82:A6:DE:8F:40
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/2E6B58ECFEC911E88E78993AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:a7:eb:e8:d9:ac:0a:e7:f0:42:6a:bf:51:fd:36:47:24:
         2b:a5:a7:0f:09:99:8e:99:08:ca:9d:87:bc:ff:30:59:f0:90:
         86:6c:40:c9:22:2e:45:7d:26:b8:7f:eb:f2:6a:41:ee:c6:75:
         79:23:82:d8:b2:53:c8:0d:5e:1f:2b:29:71:49:0d:f3:4f:66:
         a7:ac:34:a7:c8:4a:a6:c3:14:42:d1:f9:4d:dd:5f:40:bd:1b:
         47:89:6c:bb:93:d7:d5:a7:d1:3c:ba:a3:57:0b:21:44:46:f7:
         2b:cb:2d:5a:7c:de:c0:ec:17:22:ee:16:fd:2b:cb:13:ef:06:
         c7:62:89:f7:67:c2:d1:da:9c:99:6d:0e:e8:81:4f:5d:99:8d:
         cb:7d:4c:71:3d:66:a5:6f:5a:89:ec:20:db:ae:90:f7:60:33:
         df:17:d6:df:14:e5:d4:6f:96:0b:4f:fa:0d:71:47:42:84:47:
         f0:01:02:9f:56:f1:16:21:10:0f:b9:15:62:cd:7b:2b:81:98:
         52:55:77:1a:55:67:30:47:1c:85:ea:0e:e4:9b:bf:06:54:bf:
         0f:94:a0:bc:a3:16:11:3f:29:d7:dd:1c:a5:2d:ac:79:9e:ef:
         76:ce:3a:6c:c6:97:5e:41:84:5e:9f:73:cd:d6:a6:c5:31:1f:
         c0:16:ca:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:04 2026 by rpki-client