Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/50527DFCD27811EBB9B4BB66C4F9AE02.roa
File:                     50527DFCD27811EBB9B4BB66C4F9AE02.roa (raw, json)
Hash identifier:          obTqIdU8CqBWYcQhFmX82GPkzKN1uHrMLlrdhUuCn5Q=
Subject key identifier:   8D:1F:43:C5:0B:B4:55:68:05:96:EB:AF:F0:AA:C9:7A:5C:8E:57:B7
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       295A
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/50527DFCD27811EBB9B4BB66C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:09:52 +0000
ROA not before:           Sat 26 Jul 2025 15:54:00 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     142540
IP address blocks:        2402:9e80:71::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10586 (0x295a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:54:00 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48f00-54f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:2f:d2:a8:28:a6:5d:ed:52:d9:4c:04:32:
                    07:6f:65:bf:70:44:e1:8b:36:d5:ec:c6:24:84:2d:
                    d3:f6:94:a9:4d:0d:69:28:3c:5f:e4:b5:86:10:84:
                    2e:db:f3:c6:58:cb:fa:94:0a:d8:84:a3:06:fc:88:
                    8c:b4:77:be:ca:a4:12:dc:40:41:d5:59:33:6b:19:
                    98:e3:67:09:2d:fc:ca:72:20:e3:88:4f:32:93:13:
                    66:f6:5f:e1:aa:b4:10:20:c5:be:d7:aa:35:85:4e:
                    5c:98:2a:af:47:ba:a9:a0:3d:ac:d3:f0:2b:e6:e7:
                    98:b8:e6:06:98:2c:46:1f:54:8b:b6:31:06:98:40:
                    af:b6:15:77:e8:06:c5:53:24:36:c1:08:d3:81:de:
                    5b:a0:53:05:94:09:2e:01:57:fd:d0:2c:ad:6b:8c:
                    d2:df:db:e7:c4:72:90:ac:c2:5c:2c:90:15:bc:a5:
                    11:6c:c0:37:de:db:4a:6c:91:c4:94:b3:32:b1:56:
                    6c:24:ff:17:31:be:c9:9c:cb:e0:bf:ea:89:65:bb:
                    4f:0c:9a:07:7d:7e:6b:80:41:bb:98:5e:2a:41:19:
                    6a:9c:b3:f8:a2:37:05:11:17:b6:0b:9c:be:e4:d7:
                    dd:56:36:3d:5e:67:fe:a4:f4:d5:00:09:03:56:0a:
                    b5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1F:43:C5:0B:B4:55:68:05:96:EB:AF:F0:AA:C9:7A:5C:8E:57:B7
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/50527DFCD27811EBB9B4BB66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:2e:e7:26:d6:dd:21:6f:b1:31:75:53:1c:b2:d2:22:c8:3a:
         d7:44:db:24:6e:f4:2f:79:1b:a3:4c:d8:17:28:4b:6c:54:43:
         0d:cd:c8:d3:75:68:eb:ac:ff:fb:4f:3c:81:ab:66:14:b9:60:
         4b:84:43:0e:2b:d0:8a:ba:b9:eb:cf:dd:d9:4f:6e:38:2a:6f:
         17:b2:75:2c:4c:68:ca:80:f0:79:3f:1c:ea:a1:97:47:5e:0f:
         f2:d8:ba:4d:40:38:14:85:77:02:d4:84:3a:83:cc:5c:ed:74:
         e4:7d:43:a8:22:e2:5b:4b:fb:69:a1:b4:4f:d7:ec:dc:08:d2:
         b6:34:0f:87:e2:cd:3f:8f:98:e8:63:0e:e9:40:f5:0d:5d:fe:
         4d:c2:b0:7e:aa:ba:61:21:c4:6e:fc:22:84:fc:3a:12:b7:9f:
         da:6a:15:a9:68:05:97:aa:7f:86:f9:7a:fc:32:67:c0:97:fc:
         bc:c3:86:20:8a:86:e4:5f:47:88:7b:b8:12:fd:94:e5:4b:3b:
         1c:d9:13:a1:3b:d3:7d:1c:5c:f3:95:6e:7b:c1:ed:fb:17:fc:
         df:ab:12:a9:0c:4d:58:39:01:12:9a:23:ec:e3:36:ce:e1:77:
         0b:bc:20:e5:27:ad:07:9e:68:3c:bc:f8:df:3f:9a:8b:d3:b5:
         5c:49:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:40 2026 by rpki-client