Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E0CC264A41C511E8BEC06D36C4F9AE02.roa
File:                     E0CC264A41C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier:          Bucszp07uQWdokjG39lkxngjuQURq7L+Jkp1OeL9G4s=
Subject key identifier:   A7:A9:24:22:86:8A:9B:11:FC:03:F0:A6:AD:34:44:9A:6B:AB:A2:B1
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2941
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E0CC264A41C511E8BEC06D36C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:09:31 +0000
ROA not before:           Sat 26 Jul 2025 15:53:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135646
IP address blocks:        2402:e380:15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10561 (0x2941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:53:37 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48eeb-a1e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:19:78:f1:58:06:b1:8f:7d:1c:13:09:b1:
                    53:02:e8:0c:95:a5:8b:bc:66:cd:3f:b0:2c:2a:f5:
                    c5:46:49:cd:50:49:2a:9d:8e:73:25:87:5b:fa:2e:
                    6f:7d:af:b3:51:f4:31:cb:68:04:52:b5:64:ac:37:
                    50:07:e8:bb:01:6a:b6:6d:39:c8:e2:d9:57:36:ae:
                    d7:97:6d:5b:23:b2:59:b2:fb:53:93:f0:26:ae:f5:
                    ce:15:02:70:2e:85:0d:3b:e4:09:c6:83:f7:7b:0b:
                    f3:c8:1d:8d:36:a7:53:f8:a9:2d:68:4e:f8:59:3b:
                    0c:18:f4:40:cd:13:5c:91:9b:7e:df:ea:a9:95:80:
                    30:77:e0:2c:fb:1f:31:22:d2:73:0e:2b:e6:e4:9c:
                    62:d3:5e:3c:16:9d:78:b4:99:15:c0:f2:96:21:f6:
                    96:a7:95:ac:5b:96:c7:a5:ce:e5:5d:2a:bf:4a:ac:
                    5d:c0:13:8f:c8:17:74:c2:1d:15:17:9f:c5:2e:55:
                    9e:13:58:a6:ad:f4:a0:d0:a9:e0:6e:f8:69:ae:32:
                    69:26:18:f7:f4:0f:43:36:56:5c:55:72:f0:1e:db:
                    ab:7b:40:f9:69:8a:92:37:6a:30:59:3f:90:b5:4c:
                    03:1f:2e:55:e7:e7:cc:c2:d5:6b:ab:87:9c:70:aa:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A9:24:22:86:8A:9B:11:FC:03:F0:A6:AD:34:44:9A:6B:AB:A2:B1
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E0CC264A41C511E8BEC06D36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e380:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:34:81:a4:64:55:51:07:87:ce:ef:f6:c1:56:3c:f9:e2:
         05:a7:90:f6:02:93:fa:a5:d4:b3:1e:f4:4f:49:0a:cd:7d:7f:
         8e:cd:f0:63:fa:1b:8f:2f:e4:97:92:ef:34:46:04:8b:ae:12:
         9b:43:36:56:1b:b3:60:37:fe:2a:27:0b:d9:d6:b4:b5:28:07:
         25:28:64:e7:ad:89:06:99:e6:a9:82:76:a2:fb:71:75:ca:31:
         d5:bd:bb:8b:c9:20:1b:c7:2d:51:2d:ef:3d:68:d6:b5:45:e7:
         91:ec:57:04:68:74:bd:bc:cf:b9:76:41:d8:0e:f9:3d:bf:59:
         c9:55:5d:bd:43:84:9a:4a:c2:44:df:ba:8c:3a:22:90:4c:5e:
         a7:35:70:62:ef:65:a6:f0:66:98:2b:11:fa:19:da:42:79:a2:
         d9:82:b2:09:36:d8:b6:0d:6d:ac:f5:e4:3a:a3:4c:05:49:b9:
         c5:7f:3f:29:0d:cc:81:dd:97:0e:2e:06:88:18:05:1b:13:0c:
         b7:58:66:3d:cc:9f:50:38:e6:d6:de:a4:bb:f1:3b:10:ab:13:
         58:b5:67:7e:f4:e5:d7:cc:7a:a3:1d:f2:c5:f2:67:c7:e4:d2:
         9f:0e:b1:c6:b4:7f:fd:ee:a4:b0:e9:1b:94:4b:d8:6b:c7:37:
         8e:4d:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:28 2026 by rpki-client