Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/3404E194C47711EB9BD0E327C4F9AE02.roa
File:                     3404E194C47711EB9BD0E327C4F9AE02.roa (raw, json)
Hash identifier:          PxFVviosW3UG3IGtw+SpLYiS9VZVb2yiv+rm8evHIGI=
Subject key identifier:   B4:D9:79:07:BC:17:16:16:1F:18:E9:71:07:96:0D:DA:B0:11:D9:45
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       296D
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/3404E194C47711EB9BD0E327C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:10:09 +0000
ROA not before:           Sat 26 Jul 2025 15:54:19 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     6921
IP address blocks:        2402:e380:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10605 (0x296d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:54:19 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48f11-ba9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:18:22:e0:48:68:89:dc:76:45:27:58:08:
                    a5:69:49:6f:8e:3d:a4:c4:30:1e:a1:92:ba:7a:b8:
                    2e:fb:b0:c5:77:d0:09:9a:c1:40:00:7a:3f:b8:0b:
                    37:1b:ab:1f:d9:60:89:02:97:40:2d:f4:c9:2e:fa:
                    01:ce:d1:d5:99:da:7c:4d:38:09:1c:4e:c6:3a:db:
                    09:57:9d:b7:dd:c7:17:78:0b:5c:37:c8:e3:fd:5b:
                    01:23:19:03:d3:8f:a9:61:94:d3:35:e5:67:03:ab:
                    31:ce:94:4e:c1:ae:b0:3b:1d:b7:eb:02:76:fc:26:
                    59:d9:71:e3:5d:69:b1:ed:88:4b:e2:9d:ea:83:a9:
                    e2:30:34:d3:d6:19:9f:5a:80:a0:41:0f:75:13:bd:
                    7b:e5:1b:25:21:58:cd:20:c4:0b:dc:07:8c:f4:22:
                    7b:4c:17:5d:4b:42:03:fd:6e:31:bc:d3:b2:27:59:
                    58:f9:f5:89:89:53:9a:40:c3:b7:3c:70:a8:af:0b:
                    1e:f9:59:42:63:4f:69:08:8f:31:75:89:5f:d8:b7:
                    cd:65:e1:e9:49:05:0e:3d:59:fe:6d:45:f2:3f:bc:
                    7d:3e:e5:fa:01:fc:d8:53:af:0a:a8:da:d3:b7:05:
                    fb:f8:f3:3f:e1:2e:e6:99:23:f5:f9:cd:00:5b:c1:
                    eb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D9:79:07:BC:17:16:16:1F:18:E9:71:07:96:0D:DA:B0:11:D9:45
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/3404E194C47711EB9BD0E327C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e380:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         03:25:6b:67:03:09:8a:97:ac:4c:ac:40:f9:1d:1e:6f:0b:31:
         a4:61:0e:7b:66:06:27:42:af:91:d5:27:19:06:9d:bf:50:93:
         95:33:c4:c2:cd:95:df:26:ab:42:ae:57:1e:98:05:1f:23:5a:
         7e:00:16:f4:12:2e:ed:c7:ff:29:8d:0c:be:bb:2f:7e:be:eb:
         7c:44:8c:dd:a4:a1:88:27:0f:b8:54:c9:a6:f8:16:a7:6a:c0:
         f9:56:0d:7c:47:0c:13:05:3b:7d:49:48:f8:03:83:6a:76:55:
         98:e7:8a:a1:bd:43:34:22:5d:80:f4:61:13:cb:ae:97:e6:15:
         10:00:45:5b:ae:fa:44:59:f9:40:73:1b:59:4e:29:99:76:b8:
         6d:8b:23:9d:08:3d:f0:08:5f:f2:05:6f:17:bc:26:a0:07:c8:
         94:2e:8d:01:83:83:19:8d:7e:ec:6c:49:d7:b1:1b:41:ba:b6:
         c7:ef:aa:ee:a3:25:70:5c:52:ff:1b:1e:d5:97:2f:3e:e1:94:
         30:b9:fc:f0:46:f9:c1:d2:d2:9c:89:9c:3f:42:8c:0b:2b:66:
         ec:57:3c:51:d8:f4:7b:45:3e:5e:27:61:f6:9a:b2:79:7c:3b:
         bf:00:6b:31:e4:fc:98:79:7d:1d:fc:1b:36:1f:6f:f2:12:1d:
         56:84:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:09 2026 by rpki-client