Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/723720464ABE11EFA87EE85BC4F9AE02.roa
File:                     723720464ABE11EFA87EE85BC4F9AE02.roa (raw, json)
Hash identifier:          bYg8Dnd7GdjGYmMqKVZYgdK67dqMYGrhDZAhZPRHKBs=
Subject key identifier:   D5:35:5E:F9:B0:89:C4:6E:B4:BC:0C:9B:E1:6E:75:A0:D0:9E:C0:7A
Certificate issuer:       /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial:       019B
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/723720464ABE11EFA87EE85BC4F9AE02.roa
Signing time:             Mon 31 Aug 2026 04:54:01 +0000
ROA not before:           Mon 31 Aug 2026 04:54:01 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153169
IP address blocks:        2001:df4:13c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
                          rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 04:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
        Validity
            Not Before: Aug 31 04:54:01 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9508e9-1af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:c9:e3:03:1c:83:5a:6f:ad:12:d8:7b:f9:
                    cb:d4:dc:e5:1e:19:5c:56:d2:9a:bb:fc:1b:19:fa:
                    34:cd:21:c1:9f:06:6e:70:0c:b5:08:68:81:b1:75:
                    fe:ef:2c:2b:fd:6d:33:55:49:1b:9f:1e:a0:34:4e:
                    35:47:a5:98:07:55:cd:d2:62:2c:99:14:5a:22:27:
                    63:f7:7f:9c:64:9b:25:b6:dc:8d:09:b9:58:78:3b:
                    96:13:02:78:ea:fe:54:85:ce:8b:d0:9f:d3:b1:40:
                    e6:3e:95:90:8f:53:86:de:36:52:ad:a1:e1:16:8b:
                    43:67:ae:e1:fb:47:51:22:1d:76:a7:4c:da:e2:b9:
                    86:d4:01:8f:74:77:b9:3f:1a:cb:8f:51:23:39:00:
                    55:6f:2c:3a:93:bc:eb:b3:c6:28:db:f7:bb:0d:57:
                    fe:7b:c8:57:7f:d3:ef:b0:09:a9:8e:7e:71:f1:9f:
                    24:a6:3c:a4:07:d5:90:b0:54:10:c7:28:3c:bc:bf:
                    1a:53:f7:cb:e7:f3:ab:8a:54:75:e2:91:a8:9e:0f:
                    f2:ef:ff:cf:54:f7:43:68:9c:33:01:04:87:8c:35:
                    32:b5:0e:41:78:9b:75:97:e7:02:39:32:30:95:aa:
                    46:d6:35:68:2c:81:c8:8f:50:e7:40:42:53:28:93:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:35:5E:F9:B0:89:C4:6E:B4:BC:0C:9B:E1:6E:75:A0:D0:9E:C0:7A
            X509v3 Authority Key Identifier:
                keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/723720464ABE11EFA87EE85BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:13c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:84:b8:48:62:77:0d:df:04:02:77:5a:6a:79:15:5b:4d:b0:
         35:b3:d4:ca:1b:62:ca:e0:cd:35:17:a2:1f:d7:6e:62:47:e2:
         ed:82:59:26:06:03:15:64:6e:5d:df:94:d4:05:ae:d0:b6:28:
         47:91:3f:5d:4c:2b:aa:e2:4c:42:28:84:7c:1d:cb:1e:49:87:
         d0:76:98:1f:f5:13:94:ab:f8:47:68:4f:91:b4:9a:ab:7c:39:
         6e:b1:90:35:5f:06:cc:98:ba:ac:7c:32:b3:56:c2:62:ec:ae:
         62:ba:3d:5e:06:94:bc:4c:08:62:f5:68:61:c7:da:11:f5:b6:
         57:c1:03:de:f7:f6:41:0d:21:ca:a3:40:17:dc:6f:9c:53:d0:
         57:b3:6f:bb:58:69:7b:06:c2:bf:c1:44:0e:98:3f:98:fc:6a:
         6a:60:98:d2:28:3b:5b:71:cf:05:de:0f:27:4b:60:9a:40:37:
         5d:4b:c7:ac:38:0c:c6:90:96:cd:8d:34:d0:18:b0:aa:d3:01:
         91:0c:e0:ed:f9:51:2e:c2:ba:61:1f:b3:6e:b6:12:a8:de:9a:
         ab:95:80:0a:1d:0d:88:fd:19:66:63:57:2d:6d:11:55:89:c7:
         09:18:70:d0:58:eb:13:31:07:09:62:75:6d:06:46:25:70:27:
         86:26:28:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:46:01 2026 by rpki-client