Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E1944C7441C511E8BEC06D36C4F9AE02.roa
File:                     E1944C7441C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier:          qF8E1eWvHketirEtVUtwOn0zx7ZW9lvD5fXEF7tNeG8=
Subject key identifier:   0C:75:DF:9C:3F:99:6F:C5:9C:79:C5:2A:D1:E6:8D:DE:79:0F:C1:12
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2A18
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E1944C7441C511E8BEC06D36C4F9AE02.roa
Signing time:             Sun 06 Sep 2026 16:23:31 +0000
ROA not before:           Sun 06 Sep 2026 16:23:31 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136559
IP address blocks:        2402:9e80:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10776 (0x2a18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Sep  6 16:23:31 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a9d9382-e328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:1c:60:9f:99:95:5c:e9:44:1d:59:ba:f6:
                    39:f6:89:51:2f:be:fb:74:05:64:60:df:9e:0b:c2:
                    d4:89:5d:13:55:ee:63:bf:5a:cb:4d:7e:84:1b:0f:
                    80:74:c6:82:72:4f:54:35:c5:ce:92:06:e3:b1:33:
                    40:4c:e4:c5:19:88:05:61:aa:c2:f1:1c:ab:03:a7:
                    f3:33:47:e4:02:5a:0b:21:0b:89:79:89:14:98:7b:
                    e6:31:ad:a2:1e:ab:b7:cb:3e:07:86:74:c0:78:a5:
                    a6:12:1d:13:87:29:32:03:29:f0:65:cd:02:ec:10:
                    e3:9f:12:78:e7:af:c3:5f:84:f7:c3:14:6a:d2:96:
                    be:ca:74:16:81:62:b2:7f:63:e3:40:6d:32:78:ff:
                    14:db:a5:2a:7c:af:c1:ea:25:8b:20:c0:99:89:7d:
                    2c:15:ab:8b:01:f7:d3:90:28:47:c8:4d:06:95:7e:
                    6b:8c:fa:dc:e0:d3:59:cf:28:ed:b8:21:8c:86:17:
                    98:59:1f:23:a4:36:80:2d:e5:09:90:eb:1b:be:74:
                    48:eb:1f:a7:9d:7b:42:6e:d4:b4:d7:79:a0:fc:f0:
                    8e:74:25:6e:4e:bf:e6:8d:0e:21:b1:37:ba:74:15:
                    72:2f:77:2f:de:18:2c:5a:20:af:db:c5:35:b9:57:
                    47:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:75:DF:9C:3F:99:6F:C5:9C:79:C5:2A:D1:E6:8D:DE:79:0F:C1:12
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E1944C7441C511E8BEC06D36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         d8:7d:4e:53:72:32:62:a3:4b:68:9a:8a:61:db:d8:d5:45:d5:
         34:d2:62:6f:56:30:87:ed:4e:02:c2:e7:c5:48:a6:1c:34:3e:
         ec:3b:a5:cc:db:a0:31:20:a9:39:fd:c4:d8:70:9e:a4:03:24:
         f0:b4:6e:79:5d:09:09:35:d2:72:9c:53:4f:94:1e:76:1f:1d:
         25:c0:f9:45:41:4e:bb:79:26:08:09:5a:29:50:6c:a0:51:d1:
         c7:e9:6b:ce:bd:32:32:27:dc:39:ab:f3:85:86:ba:69:8c:a8:
         c1:1b:b5:83:2a:47:7b:50:4e:31:a8:9f:09:93:52:24:7b:4a:
         bf:87:b6:79:83:10:86:4e:7e:c8:83:76:df:b6:26:75:d4:da:
         6d:7b:01:ab:c9:9d:2f:bf:b4:10:65:36:ba:8a:f4:20:c1:a2:
         fa:8d:54:28:d3:8e:6b:5e:b8:0e:2b:ea:86:44:aa:bb:c1:9c:
         7f:22:ea:68:1f:77:f8:91:c3:61:ad:2d:60:a4:82:d7:39:80:
         78:e4:4d:0d:bf:de:35:a6:f8:36:79:3e:ef:a6:da:03:9f:3a:
         40:0e:39:0f:eb:3e:93:cc:7e:fb:e9:d4:28:11:8a:aa:f9:f0:
         74:92:16:68:8c:e9:ef:20:33:67:46:5b:28:36:43:fa:09:76:
         60:2d:d5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:40:47 2026 by rpki-client