Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/411624587D2511ECA2A43549C4F9AE02.roa
File:                     411624587D2511ECA2A43549C4F9AE02.roa (raw, json)
Hash identifier:          LIRzk0xle2pP6Ijz+PJiS/esbUDKV5hOTYxbOeCadFM=
Subject key identifier:   B9:6D:98:95:6B:75:17:8D:08:71:BF:21:20:DD:92:9D:77:C9:57:C9
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2A40
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/411624587D2511ECA2A43549C4F9AE02.roa
Signing time:             Sun 06 Sep 2026 16:24:47 +0000
ROA not before:           Sun 06 Sep 2026 16:24:47 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38136
IP address blocks:        2402:9e80:a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10816 (0x2a40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Sep  6 16:24:47 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a9d93ce-7489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:24:d7:76:fd:78:80:9e:f3:9d:23:e3:d4:
                    20:83:93:14:7e:a2:62:42:45:6d:9e:d7:f2:5d:38:
                    8c:2f:c0:fb:78:18:ee:52:e9:98:90:58:de:0a:50:
                    ad:45:7c:a4:0f:ef:25:1b:4d:c3:70:1d:1f:62:d6:
                    d4:b5:88:3b:66:db:1c:a5:d2:db:d1:76:dc:02:88:
                    1f:a7:54:02:da:c3:46:05:26:63:d1:f8:0e:95:7f:
                    36:5c:2c:e8:ba:6e:2d:a1:19:ee:ea:ab:41:60:36:
                    0d:9c:97:f7:da:d8:d3:ad:cf:0f:0f:93:ac:ea:4f:
                    a4:38:78:67:9b:d0:c9:a0:4e:c3:b0:2f:bf:a3:e5:
                    01:8b:00:3f:af:c1:c0:24:e9:7f:10:24:f6:c6:c9:
                    4e:2f:64:13:93:2f:e8:34:be:89:45:f9:e7:65:6b:
                    4f:64:14:2f:85:50:4d:d3:54:95:72:ca:02:b3:3f:
                    fc:7b:0c:db:54:8d:5b:74:b9:16:db:63:fe:80:92:
                    ab:6e:11:32:aa:39:33:34:b3:c7:61:4a:55:b0:b4:
                    08:eb:65:f3:47:9b:24:f2:fb:57:bc:97:d9:b4:4c:
                    ce:eb:58:b5:a0:e1:07:fd:c7:db:a1:fc:e2:29:9b:
                    bf:f0:56:b2:af:54:ad:a2:b3:ec:d3:79:37:0d:82:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6D:98:95:6B:75:17:8D:08:71:BF:21:20:DD:92:9D:77:C9:57:C9
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/411624587D2511ECA2A43549C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:6a:4d:5c:af:34:9e:f0:13:36:4b:ba:78:e8:6a:b8:74:22:
         17:ff:13:d9:cc:52:18:50:88:77:8e:7d:8e:13:4a:8f:cb:23:
         d8:3b:7d:ee:db:5a:3f:07:14:12:f6:7c:6a:d8:06:75:44:d1:
         c6:a6:0c:a7:8f:37:54:ee:5d:78:9b:59:92:e5:96:53:7a:20:
         25:6c:78:9d:32:9c:de:74:4f:da:9c:b5:c1:7d:74:cd:7b:0b:
         d6:fb:7c:49:c5:7f:7a:00:31:1c:86:26:03:19:11:fc:d8:1d:
         30:b7:6b:24:29:af:b9:de:65:b5:40:4b:6e:1f:d3:9b:da:fe:
         5b:a4:4b:fb:ad:12:5a:88:9f:76:07:5f:df:41:4f:1d:64:83:
         98:ba:9e:2e:4f:47:a1:89:b2:ff:2f:bd:1e:96:2e:a5:90:2a:
         c1:f6:9a:38:75:b8:bb:17:7f:ac:47:1b:4a:35:26:50:98:10:
         ac:40:96:37:d5:26:d8:e7:61:1f:0e:93:05:2c:aa:b9:68:71:
         dc:ce:07:8b:30:e9:7e:70:3d:86:d5:b5:36:bb:12:3a:ec:0f:
         88:92:8b:62:16:37:77:f1:8a:f9:07:78:82:22:96:44:f9:11:
         70:3f:84:d2:47:3f:d5:73:f6:0b:97:f8:5f:11:cc:af:3b:ae:
         3a:47:15:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:10:47 2026 by rpki-client