Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa
File:                     4239C32A61C211E9B8967426C4F9AE02.roa (raw, json)
Hash identifier:          1NhjYLrKh3Dj10+lLK05LstYyLgTQc+NG5kyigCtyMg=
Subject key identifier:   EA:23:D0:D8:81:7B:2C:3E:81:20:49:EC:9F:38:75:88:D5:97:62:64
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       294F
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:09:43 +0000
ROA not before:           Sat 26 Jul 2025 15:53:48 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138686
IP address blocks:        2402:e380:8c::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10575 (0x294f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:53:48 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48ef7-5be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:1b:9b:7d:20:ef:b1:8e:ac:94:47:62:84:
                    58:6e:06:99:43:41:51:81:31:77:de:51:d8:ab:14:
                    e9:c3:f4:2d:84:9c:bb:5f:44:92:2f:fb:9f:3e:99:
                    d2:16:59:0e:50:f9:af:f2:af:01:2a:6b:2e:ac:23:
                    f3:9d:92:4f:c0:f0:90:21:70:d7:c3:76:16:ce:88:
                    c0:ea:e2:a6:60:ac:3d:be:d6:60:35:c7:bd:b5:89:
                    6e:bb:a6:06:6d:63:0d:aa:e3:d1:12:52:fc:4b:c2:
                    35:90:05:99:5f:f5:0d:7e:52:6b:ab:31:8a:16:4d:
                    74:e1:4e:a5:ec:a5:ef:0b:61:35:42:16:05:09:a6:
                    5d:80:06:a8:60:a6:ab:a1:c8:0e:05:3d:32:26:9c:
                    d9:bd:e7:bc:a2:79:83:3e:a0:0c:24:cd:61:37:b3:
                    0a:f7:32:09:fb:5b:78:1e:e5:79:86:15:9b:2d:e1:
                    9e:4d:3b:91:d6:27:6d:56:77:2a:8c:bd:6b:0b:76:
                    3e:60:c4:3b:31:96:8a:20:df:41:ae:da:0d:53:34:
                    48:56:6e:fd:0f:6f:af:62:84:a7:3c:49:b8:ec:de:
                    2d:02:77:7a:d0:d5:dd:33:ea:d1:e8:ec:8b:56:f3:
                    79:48:0c:d1:28:1f:3d:8d:62:d9:d5:e7:aa:03:ab:
                    be:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:23:D0:D8:81:7B:2C:3E:81:20:49:EC:9F:38:75:88:D5:97:62:64
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e380:8c::/46

    Signature Algorithm: sha256WithRSAEncryption
         c4:fa:44:83:5b:4d:c7:a4:95:6f:0f:1c:c8:e0:d5:48:ca:73:
         51:88:4d:04:9a:c0:78:02:8c:7e:6d:4d:9c:eb:6d:e6:8c:dc:
         7a:52:2a:77:3c:05:01:82:34:fe:5b:67:7f:e3:b9:8f:5a:32:
         50:60:16:23:c0:77:da:40:ef:2b:46:bc:e8:1c:ad:7b:e5:59:
         43:be:8a:80:3b:39:d6:89:e9:eb:98:5e:e9:85:a4:cf:4d:9c:
         fd:ca:3f:54:a2:2f:f8:a5:c9:02:5c:c7:13:57:42:a6:55:44:
         d2:1a:7a:b4:5d:e1:e7:13:40:56:77:8e:b7:76:6b:59:c2:7e:
         c4:79:e7:df:20:7b:f6:fe:0d:1e:28:c7:be:f5:60:f3:b1:38:
         06:c9:ff:45:8a:49:ef:90:48:d9:36:52:9b:3a:f0:83:da:26:
         bd:dd:ea:0f:28:38:a3:53:2d:37:7d:c6:41:90:fa:69:30:6d:
         3d:fc:a4:e5:63:77:9a:5d:87:c2:5d:3e:9b:08:de:0f:21:7d:
         08:ed:59:99:ee:bd:5d:00:ac:64:4c:ab:41:51:7e:9f:25:f6:
         6b:a2:12:5e:98:8d:86:51:9f:9d:ae:0b:b6:57:20:48:0e:21:
         65:b1:4a:ae:d6:af:e3:5c:5f:00:4d:88:e3:4c:42:41:c8:e8:
         34:1c:b3:e8
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICKU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjUwNzI2MTU1MzQ4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGVmNy01YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArDobm30g77GOrJRHYoRYbgaZQ0FRgTF33lHYqxTpw/QthJy7X0SSL/ufPpnS
FlkOUPmv8q8BKmsurCPznZJPwPCQIXDXw3YWzojA6uKmYKw9vtZgNce9tYluu6YG
bWMNquPRElL8S8I1kAWZX/UNflJrqzGKFk104U6l7KXvC2E1QhYFCaZdgAaoYKar
ocgOBT0yJpzZvee8onmDPqAMJM1hN7MK9zIJ+1t4HuV5hhWbLeGeTTuR1idtVncq
jL1rC3Y+YMQ7MZaKIN9BrtoNUzRIVm79D2+vYoSnPEm47N4tAnd60NXdM+rR6OyL
VvN5SAzRKB89jWLZ1eeqA6u+/QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOoj0NiB
eyw+gSBJ7J84dYjVl2JkMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvNDIzOUMzMkE2
MUMyMTFFOUI4OTY3NDI2QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJALjgACMMA0GCSqGSIb3DQEBCwUAA4IBAQDE+kSDW03HpJVvDxzI
4NVIynNRiE0EmsB4Aox+bU2c623mjNx6Uip3PAUBgjT+W2d/47mPWjJQYBYjwHfa
QO8rRrzoHK175VlDvoqAOznWienrmF7phaTPTZz9yj9Uoi/4pckCXMcTV0KmVUTS
Gnq0XeHnE0BWd463dmtZwn7EeeffIHv2/g0eKMe+9WDzsTgGyf9FiknvkEjZNlKb
OvCD2ia93eoPKDijUy03fcZBkPppMG09/KTlY3eaXYfCXT6bCN4PIX0I7VmZ7r1d
AKxkTKtBUX6fJfZrohJemI2GUZ+drgu2VyBIDiFlsUqu1q/jXF8ATYjjTEJByOg0
HLPo
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:25 2026 by rpki-client