Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5F92D6C0478F11E9A090265DC4F9AE02.roa
File:                     5F92D6C0478F11E9A090265DC4F9AE02.roa (raw, json)
Hash identifier:          kkd3iljXvgQGSyF4kDpi+M4poJA2wKc3N3yo1EiAAOU=
Subject key identifier:   42:B1:1F:16:C6:DF:E7:DD:68:91:F0:FF:9A:6B:24:FC:95:23:8C:2C
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2A23
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5F92D6C0478F11E9A090265DC4F9AE02.roa
Signing time:             Sun 06 Sep 2026 16:23:51 +0000
ROA not before:           Sun 06 Sep 2026 16:23:51 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     138685
IP address blocks:        2402:9e80:48::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10787 (0x2a23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Sep  6 16:23:51 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a9d9397-a092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6b:c2:2d:b5:45:2f:e9:31:49:22:c5:e6:22:
                    f5:63:91:e8:f1:ce:33:b0:eb:11:33:b3:40:d7:fc:
                    0c:13:34:34:9e:65:42:ce:6c:39:d8:e0:16:c0:04:
                    f7:aa:eb:54:8f:ed:09:c8:f6:82:4f:e0:7f:6e:0c:
                    a0:5a:7b:51:f8:59:e3:f2:a2:ea:ec:84:10:93:6a:
                    40:22:03:69:e6:82:fb:38:ae:49:2b:e1:69:37:8f:
                    a6:e3:d6:7e:72:ca:9e:1a:5c:b1:10:47:3d:c1:02:
                    8c:92:4e:18:6b:09:a8:5b:00:26:dd:94:9d:f0:a7:
                    03:9a:a2:11:fb:79:b0:a9:b5:c2:a6:46:76:c3:e5:
                    dc:29:0d:98:63:25:69:4f:ed:1a:a9:c2:37:5d:e0:
                    a2:61:3a:4a:cd:dc:69:97:eb:3a:19:61:4b:ee:ab:
                    4a:5a:2b:d1:3c:b2:c9:a1:f1:d5:f9:94:6e:a7:66:
                    b5:45:f4:55:07:1d:ab:89:ea:09:e0:d2:58:7b:6c:
                    cb:71:06:c0:15:2e:c4:8b:bd:0f:c2:ee:6d:5e:ac:
                    62:62:ab:e1:22:1a:c1:3f:c8:95:0f:a4:5f:18:10:
                    0d:12:b7:fb:15:24:96:95:4a:2a:e8:59:e5:00:ef:
                    cc:6d:21:99:11:90:c5:99:9d:4a:81:a5:ac:b5:ae:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B1:1F:16:C6:DF:E7:DD:68:91:F0:FF:9A:6B:24:FC:95:23:8C:2C
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/5F92D6C0478F11E9A090265DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:48::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:37:e1:3f:22:cf:b3:5c:e2:25:9e:85:ea:c1:27:72:fa:
         a9:66:0c:6e:c7:f7:f8:68:2b:4e:eb:6a:b7:94:4a:f7:ab:ea:
         37:30:b2:6f:8f:51:5a:7f:f4:94:d0:23:22:84:ce:3d:54:11:
         b5:c8:09:e4:aa:39:3c:37:d5:b0:27:ff:46:2a:3c:97:3d:ba:
         e8:63:82:46:14:45:bf:58:16:01:33:10:bd:f5:d1:0f:51:80:
         d8:b1:73:6f:98:db:8e:6c:c7:93:00:91:ad:36:4d:f8:58:65:
         99:b1:18:aa:ea:20:00:7a:3b:bf:81:3a:ea:9b:e2:10:8c:32:
         48:02:8c:c6:00:1b:49:e9:25:01:72:50:52:66:1e:59:2e:a6:
         38:ef:be:6b:a6:53:45:01:97:b8:81:1d:77:85:44:15:cc:b4:
         c6:44:26:24:d5:1b:76:e6:d9:24:d2:3f:2f:28:3e:a9:14:e2:
         ca:bc:54:40:a3:db:8c:f2:51:da:ce:f8:33:f3:43:a1:1e:56:
         3f:74:e5:62:2b:c6:a6:7c:f0:4d:d0:a9:03:07:5c:38:2e:61:
         ec:25:5c:72:ee:7e:6f:e6:d1:c5:21:b0:16:57:2b:92:ea:f9:
         0a:b8:ea:5d:21:cd:53:ea:a2:0a:25:47:7a:54:ee:e0:e3:5a:
         10:f8:6c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:22:00 2026 by rpki-client