Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/32D4E44AC47711EB9BD0E327C4F9AE02.roa
File:                     32D4E44AC47711EB9BD0E327C4F9AE02.roa (raw, json)
Hash identifier:          0As20P9qiXLpSHNjw2CAbwVM5XbTdOyQpSIcuEcoJ8s=
Subject key identifier:   DF:7E:2A:F3:7E:E8:5D:6C:B2:09:DD:59:8C:92:C2:DC:D6:12:8C:7C
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2A39
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/32D4E44AC47711EB9BD0E327C4F9AE02.roa
Signing time:             Sun 06 Sep 2026 16:24:34 +0000
ROA not before:           Sun 06 Sep 2026 16:24:34 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     201106
IP address blocks:        2402:e380:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10809 (0x2a39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Sep  6 16:24:34 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a9d93c2-7a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:21:16:b3:e9:ff:64:f9:5a:cf:bc:13:d2:
                    8c:4a:74:b1:b9:db:a2:7b:3f:0a:44:fb:74:1e:68:
                    a3:ff:d3:f1:dd:f7:a6:13:dc:20:39:49:5b:4d:b9:
                    42:db:cc:ec:7b:23:44:99:d1:d5:15:0b:98:d0:78:
                    2e:2c:27:cd:1c:04:21:89:fa:d1:6f:c1:d3:6f:14:
                    eb:d5:57:10:bb:68:a0:8f:73:f8:dd:76:18:fc:b3:
                    ee:38:4b:e1:e5:58:94:b2:8b:1f:bf:4e:19:9d:5a:
                    5d:1b:c9:f8:b4:b0:cb:70:0b:a3:d7:fa:0d:2e:e5:
                    ad:15:e8:02:ef:27:f0:3b:1a:4a:91:92:38:e2:de:
                    29:e5:4e:c7:d3:f6:3a:6b:a7:b5:71:80:b0:ee:21:
                    b4:95:a4:4e:3c:cb:50:2a:5d:ce:6a:43:b4:7d:88:
                    1f:66:a5:70:1a:41:a6:dc:f7:cf:a3:11:7a:5c:39:
                    55:be:07:e4:27:cf:84:16:41:2f:9c:9c:9f:af:43:
                    30:3c:16:10:01:44:d3:48:e4:7e:e4:55:4e:33:6f:
                    c6:2c:d0:6f:18:ea:84:63:60:d6:a5:d4:dd:6c:2d:
                    6f:50:38:74:ee:af:93:5f:43:08:d8:25:a8:32:94:
                    b0:0a:94:c8:46:f3:46:d1:8a:b6:46:e8:25:98:88:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7E:2A:F3:7E:E8:5D:6C:B2:09:DD:59:8C:92:C2:DC:D6:12:8C:7C
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/32D4E44AC47711EB9BD0E327C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e380:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         05:e7:36:f0:50:84:62:2b:6e:43:fa:41:50:ae:c0:19:dc:8d:
         5a:be:2a:65:ed:0b:72:6e:03:ab:98:ee:5a:9c:72:7c:75:26:
         f7:e9:3d:36:de:45:bb:0b:e6:f0:15:7b:1b:ff:cb:7c:d6:11:
         77:e0:d8:20:47:6a:89:ee:96:e3:bf:eb:df:9a:a0:39:e5:d9:
         c4:63:37:aa:33:84:b0:7c:09:5a:0a:be:b0:64:dc:9f:32:33:
         d0:ad:70:97:b4:f6:c8:ca:c1:64:ee:89:fa:7b:51:f4:7b:5d:
         1f:09:67:6c:d6:78:bc:86:66:a0:e2:cd:0d:55:71:bc:e4:78:
         6e:08:b6:97:8a:19:58:51:9f:d9:24:84:1e:e1:3b:b3:d0:51:
         56:99:c2:b1:f6:0e:d2:59:8a:9e:c4:15:17:b7:15:6c:0e:58:
         3d:47:3e:00:dd:9b:4c:d8:24:67:e8:21:eb:cc:bd:57:d4:2b:
         48:a5:c7:88:2a:8a:40:7f:0c:38:e5:c1:2f:33:d3:f1:40:cf:
         41:c9:ee:5e:93:fc:8e:24:e2:59:9d:15:ff:05:5c:fa:fe:2c:
         d9:55:73:a7:7c:31:e2:0e:b7:da:b5:4d:4e:36:76:ab:8a:5a:
         06:81:77:17:03:8c:84:ee:7a:6e:8b:a5:36:95:af:d4:33:8b:
         ed:19:b8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:23:34 2026 by rpki-client