Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
File:                     EB263BE4DBF011EBA6E54586C4F9AE02.roa (raw, json)
Hash identifier:          aolUGBMBuOiTQrabFR5p4Usnc+cD2G421hLPnzbONMM=
Subject key identifier:   1C:EC:DE:29:33:B8:02:CA:1F:F9:B0:A7:6A:F7:32:2C:29:65:7C:81
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       295B
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:09:53 +0000
ROA not before:           Sat 26 Jul 2025 15:54:01 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     142561
IP address blocks:        2402:9e80:200::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10587 (0x295b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 26 15:54:01 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48f01-7864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:34:c5:14:d8:e4:aa:53:19:6e:c4:b6:aa:72:
                    ce:81:78:a9:36:81:ae:5a:72:65:54:ba:69:73:53:
                    91:40:5f:f3:62:83:67:ce:37:da:0b:8e:0c:96:0b:
                    9e:fa:0e:e0:f5:e3:e4:b6:c6:00:17:a6:37:7c:24:
                    e8:88:d7:8d:a2:12:0e:da:63:63:7a:a1:26:16:49:
                    90:d7:c2:8f:67:1b:65:64:e4:8b:8e:c9:35:17:63:
                    6f:0f:0e:99:80:99:d7:7c:49:c5:a0:cc:44:67:68:
                    65:e6:5c:e0:22:cb:cc:bb:d0:1a:be:6b:b3:9f:06:
                    a6:bf:6d:4c:74:a6:54:79:14:b6:ef:31:ee:82:2a:
                    c3:ef:92:f9:33:30:7a:3a:1e:19:c4:ea:19:b5:22:
                    d1:b0:02:e9:7a:eb:b5:75:bf:53:25:d0:a7:2f:0c:
                    4a:67:2e:39:64:ab:34:9c:e3:b7:ad:ca:af:e6:19:
                    79:32:91:30:47:77:44:98:27:51:52:33:4a:c0:3d:
                    df:94:20:4c:41:5e:fa:6f:48:e1:23:0f:1a:19:fb:
                    ec:b6:0d:62:4b:28:58:a2:1b:25:41:87:d1:cc:8c:
                    2b:23:02:32:29:6f:61:4f:e1:4a:6b:18:d7:8a:f8:
                    15:53:ed:4b:9e:ea:69:e3:53:5b:0c:7c:4a:d0:7f:
                    10:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EC:DE:29:33:B8:02:CA:1F:F9:B0:A7:6A:F7:32:2C:29:65:7C:81
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/EB263BE4DBF011EBA6E54586C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         64:64:51:04:b9:36:23:ce:46:61:05:33:c2:2c:aa:1f:94:9b:
         dd:07:c2:74:8a:51:24:c8:6d:88:10:48:24:71:76:ff:c9:c1:
         60:e6:4a:17:0f:8d:11:fc:75:33:75:50:8d:b0:83:ea:a5:52:
         65:f6:32:de:49:99:e5:89:da:0c:d5:43:c2:ac:c6:e3:35:e4:
         d9:8f:c7:f2:ef:7a:28:01:e8:c6:96:5e:ca:d6:1a:7d:72:df:
         c9:30:0c:36:88:cb:68:65:b7:ef:09:53:f3:4f:11:48:57:27:
         e7:33:9e:5f:c7:3e:4d:19:c8:42:d0:37:f6:aa:0e:90:48:52:
         38:75:ea:84:30:58:23:aa:32:0c:ef:22:da:1f:01:44:fe:4f:
         58:05:b0:84:d4:76:6f:59:df:de:82:cb:e3:90:21:b7:90:4a:
         5e:37:e7:df:9f:e7:a4:94:e3:63:bb:24:3e:bf:3e:e9:41:24:
         a8:69:9c:8c:f2:f2:76:3a:6d:91:1d:df:65:c4:f9:7e:86:75:
         da:eb:24:4b:f7:22:40:d8:53:11:7f:56:c3:11:48:4b:79:2f:
         97:5a:85:3e:52:a1:c2:9e:ab:81:d9:c7:8d:be:3c:b1:e5:df:
         7b:b4:32:2b:9d:00:a8:6d:24:c6:06:bb:7f:b9:98:14:a2:8c:
         e7:db:b3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:39:20 2026 by rpki-client