Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E21558BE41C511E8BEC06D36C4F9AE02.roa
File:                     E21558BE41C511E8BEC06D36C4F9AE02.roa (raw, json)
Hash identifier:          r4x9AFhojnh/vBEh+d6d2dRuQx2UfWsU7MIBY5YtwfQ=
Subject key identifier:   9C:56:5B:34:39:08:7E:2A:4C:2C:3F:9C:D9:16:39:6E:90:3C:5B:09
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2944
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E21558BE41C511E8BEC06D36C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:09:34 +0000
ROA not before:           Sat 26 Jul 2025 15:53:39 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136985
IP address blocks:        2402:e380:17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10564 (0x2944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:53:39 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48eed-5b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:9f:d9:0a:9b:6d:cc:4e:3c:ef:78:f2:24:
                    d6:00:6f:b7:d5:72:7e:95:a5:27:0a:d7:e2:a8:d1:
                    04:b8:18:c7:a5:d8:71:34:94:0c:7a:c5:70:f7:14:
                    7b:7a:9e:f2:ab:bf:04:2f:03:10:bc:ee:20:67:39:
                    88:fd:5c:72:87:cf:b1:76:0a:18:10:21:80:9f:34:
                    13:97:c0:a2:fc:a8:66:f3:0f:3c:9b:31:3b:61:2b:
                    6b:b4:2a:45:b9:26:af:f9:f4:46:2e:d1:fe:48:3e:
                    15:b0:f9:d0:2a:32:a2:26:ab:9e:cd:ac:a8:a6:f8:
                    ea:06:75:12:a0:e5:22:99:20:6c:8e:e5:d8:d6:97:
                    e7:a5:15:45:0e:42:e7:c4:29:fe:7b:80:7f:fb:b2:
                    6a:bd:db:24:6b:23:3e:ba:ac:3a:ad:a5:6d:f2:46:
                    14:4f:ba:a8:bd:69:14:5f:39:06:6f:ae:1e:6b:47:
                    84:3a:55:f2:81:2e:6a:3d:1c:d0:f0:c6:04:95:aa:
                    81:be:d8:de:54:da:98:4b:f8:1c:d6:5b:49:a4:29:
                    a1:d5:fa:3f:9b:3b:5d:c4:9f:d9:fb:f8:38:cf:85:
                    68:96:c7:bd:47:bc:cc:f1:a8:c0:44:8e:6a:bd:28:
                    39:b1:a2:c8:b3:b5:15:78:37:7f:de:93:14:6e:1e:
                    be:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:56:5B:34:39:08:7E:2A:4C:2C:3F:9C:D9:16:39:6E:90:3C:5B:09
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/E21558BE41C511E8BEC06D36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e380:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:5e:b9:37:b3:83:30:f9:41:31:f3:12:8f:c0:53:ef:f4:df:
         21:16:ae:4c:33:85:e0:0c:40:b7:60:80:10:c7:af:ca:93:d3:
         6f:92:47:43:12:34:cd:f9:8a:b6:bc:cb:4f:7e:82:71:cf:af:
         03:d1:f6:a4:d0:a1:cf:b8:92:92:cb:e7:7c:61:2e:f2:7a:36:
         7d:49:fe:f8:e2:82:da:72:0c:72:f6:74:62:14:b2:30:6d:20:
         86:0e:83:02:93:f4:a8:e0:0b:8f:d1:e5:50:44:c1:dc:24:35:
         05:8f:93:ae:b1:b1:bf:36:ac:07:4a:71:d0:b3:8c:26:f1:4b:
         09:8f:19:eb:61:1f:f9:95:da:92:ad:76:ab:01:e9:64:ba:cb:
         8f:08:ec:44:08:c2:8f:04:d4:6b:03:85:00:c3:3d:95:7c:f7:
         1e:b9:3d:fb:a3:59:08:a3:5a:1d:32:74:79:95:fa:66:28:bc:
         b7:df:e7:70:a3:d6:15:4e:8d:6a:07:44:78:bf:2a:e4:b9:8a:
         5c:c9:f9:e2:62:c1:53:b5:13:41:4b:93:86:6b:42:7d:a2:74:
         d4:25:4c:47:d5:78:81:f8:f7:14:38:68:42:c8:04:bf:07:ec:
         98:70:7e:b5:70:61:4f:9b:3a:9b:e0:92:1b:fb:48:46:84:5a:
         fe:58:3e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:51 2026 by rpki-client