Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6BF06690D18111EE9F4F1C6BC4F9AE02.roa
File:                     6BF06690D18111EE9F4F1C6BC4F9AE02.roa (raw, json)
Hash identifier:          v/TnpqgoV17cBgo+hPE8y0qfBQmgnkTO/JnYxFY9AZg=
Subject key identifier:   14:51:F6:23:89:F8:AD:16:69:EE:0C:5A:39:35:49:ED:EA:C7:6B:C5
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2942
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6BF06690D18111EE9F4F1C6BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:09:32 +0000
ROA not before:           Sat 26 Jul 2025 15:53:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136557
IP address blocks:        2402:9e80:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10562 (0x2942)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:53:37 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48eec-487b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:61:6d:68:89:c1:b2:a1:1a:d1:bf:d9:1e:
                    27:3c:92:82:b6:27:b8:b5:88:bb:ba:5d:93:f5:07:
                    5d:2b:b1:79:d9:2f:f1:d8:c6:d8:fc:d7:23:be:f2:
                    e8:34:9d:70:44:9b:34:9e:0b:3e:9f:0b:31:41:14:
                    e0:60:95:eb:48:41:c8:7d:d7:0d:bb:02:81:cc:56:
                    72:be:b0:b0:b4:40:1d:1a:7a:97:d9:29:0c:91:38:
                    58:ea:1c:28:35:2a:87:66:64:66:46:9b:95:01:62:
                    cc:c9:89:85:a9:32:7b:bf:75:a4:a9:e6:84:68:f8:
                    57:8b:0d:ad:84:05:d1:f3:e6:71:1e:83:ca:5e:62:
                    68:3d:39:88:95:32:83:d1:ee:87:05:38:bb:cb:1a:
                    8e:3e:2c:fe:34:19:7d:96:d3:2d:97:72:69:3b:b1:
                    a4:bb:bb:58:13:b8:1b:38:1e:41:17:9f:e3:18:d3:
                    cd:5d:09:85:08:af:6e:20:ff:ec:31:54:58:cb:76:
                    b0:ec:31:ea:21:2c:c1:6e:6d:03:18:38:94:a7:fd:
                    6a:f0:34:cf:56:49:82:5a:31:64:b2:10:09:6e:d7:
                    fc:02:34:32:e7:f7:da:eb:14:cb:fd:db:75:76:6d:
                    0a:4f:2d:4d:9b:e7:37:80:df:c1:62:b4:81:32:70:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:51:F6:23:89:F8:AD:16:69:EE:0C:5A:39:35:49:ED:EA:C7:6B:C5
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/6BF06690D18111EE9F4F1C6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:30:bf:fa:1f:a5:bc:38:c0:04:48:88:3d:23:49:21:b1:a7:
         a7:6f:c7:a4:6f:94:65:49:a1:5d:76:10:6f:ae:63:e3:40:87:
         b2:ff:7a:6b:90:14:e6:bd:54:f6:ad:79:3f:14:23:e1:d6:a3:
         52:84:0f:c4:e8:94:62:ff:de:e6:d2:c9:e1:5b:b2:9b:2a:12:
         a9:4a:64:01:8c:ef:36:39:c5:18:57:75:35:c1:86:28:80:7d:
         dd:d6:e5:c9:ec:a6:d7:9e:95:be:37:63:f1:05:62:3c:26:ef:
         6c:d8:14:b5:64:d2:73:06:4b:00:64:71:11:48:62:8f:bf:d5:
         ba:c1:56:1a:52:ba:94:6f:34:6e:a8:4f:57:31:db:49:11:d2:
         c4:b1:b8:05:d9:1b:7e:6a:12:2c:f1:d9:4c:f5:78:de:38:95:
         5f:5c:cb:e7:d2:00:9a:bd:63:b8:93:c6:ed:27:85:01:cd:ae:
         b5:5a:0a:95:43:f4:8d:12:4d:ca:3b:9b:fe:20:fd:c6:ec:13:
         94:66:e6:e4:d6:47:f9:d6:83:1a:02:7d:a2:8f:16:6c:5e:32:
         3d:fd:97:a4:88:2a:5a:10:24:bd:d7:2b:64:67:28:13:bd:79:
         f9:a1:0c:c3:29:b3:70:9c:5a:32:61:f6:9e:45:cb:24:e6:28:
         fc:74:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:32 2026 by rpki-client