Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa
File:                     4239C32A61C211E9B8967426C4F9AE02.roa (raw, json)
Hash identifier:          M6Sy3SglKcPxsnxM4liHoeGyJdLKdsl3jAc7ncNbPQE=
Subject key identifier:   1C:65:EB:8E:F6:EA:0F:7D:83:65:DE:48:1B:E5:9C:89:32:FC:C3:84
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2A24
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa
Signing time:             Sun 06 Sep 2026 16:23:54 +0000
ROA not before:           Sun 06 Sep 2026 16:23:54 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     138686
IP address blocks:        2402:e380:8c::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10788 (0x2a24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Sep  6 16:23:54 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a9d9399-2c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:88:d8:b2:c6:d3:e6:65:c8:c5:dd:1e:33:c0:
                    d3:1d:62:26:24:55:8e:4f:98:92:33:ae:49:9e:2c:
                    86:7f:8b:71:d0:7b:81:d4:de:4a:67:b8:c1:20:29:
                    13:45:26:07:c5:cc:3e:8b:8a:20:66:0d:e9:57:6f:
                    b1:ed:66:8e:cf:41:84:53:88:ec:e5:0e:3a:8a:5e:
                    fe:2b:2a:31:c1:f5:c3:87:be:9d:71:b2:2d:7e:58:
                    29:8d:a7:69:8c:a3:88:ce:f0:03:63:19:78:6e:ad:
                    7d:0c:63:1a:98:05:bd:52:e7:16:58:2b:27:2d:e7:
                    b5:0a:1c:7e:6e:83:20:4c:c4:f1:0a:90:ea:71:70:
                    d6:b7:77:a7:85:e8:4a:8e:8e:d6:e0:4a:e9:f3:5f:
                    56:56:87:39:1b:1c:73:8f:71:5d:4d:d3:0a:c4:c8:
                    6b:85:ab:91:bc:a3:51:5d:71:b1:4d:4b:46:d5:f0:
                    ba:65:4b:a3:23:16:62:45:92:4d:6f:3e:b7:24:8b:
                    00:eb:b9:a4:11:08:1e:39:a0:56:2f:ef:fe:4c:50:
                    3d:76:8f:a5:9a:cb:e2:16:0b:1a:30:37:c9:26:3a:
                    0f:1b:87:5e:7b:58:0e:00:bb:d5:94:cc:e5:6b:12:
                    bd:0a:ee:99:e6:36:64:3c:7e:75:14:bc:6c:30:73:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:65:EB:8E:F6:EA:0F:7D:83:65:DE:48:1B:E5:9C:89:32:FC:C3:84
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/4239C32A61C211E9B8967426C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e380:8c::/46

    Signature Algorithm: sha256WithRSAEncryption
         02:f4:99:54:7d:74:c2:f9:51:44:c2:c5:d5:cb:3e:35:0b:bc:
         18:3e:12:98:f4:31:7c:f0:6b:be:97:45:9b:1b:47:9d:7f:80:
         43:30:7b:03:c1:83:26:a1:e2:1f:9f:7e:e7:a5:7c:de:c3:1e:
         31:c3:ca:2a:f0:d9:04:72:03:2d:e0:ee:e2:92:aa:f4:ec:15:
         d5:09:1c:8c:a2:a2:e4:d5:a1:93:2c:28:99:17:da:80:95:82:
         c1:fd:a3:50:3c:2c:2c:14:2e:70:63:49:a9:e8:df:be:92:13:
         f0:a0:a5:ba:22:64:12:8d:96:8b:80:a2:a2:45:3e:7f:e2:7e:
         14:32:f0:8b:30:04:20:0c:66:68:ad:43:4f:70:08:5d:78:eb:
         79:8b:69:98:34:e1:36:a1:90:c4:b5:bf:98:fd:4f:aa:02:27:
         49:bb:55:90:a3:e6:9a:4d:a7:8f:c7:5c:19:c0:98:d9:c2:36:
         6d:8d:4d:7f:db:19:92:5a:60:52:5a:7b:2f:77:b0:28:98:51:
         3b:72:d2:af:d2:b8:ba:46:7e:33:f9:65:d6:b7:12:4b:5c:94:
         ae:61:9a:9d:cb:b9:98:36:17:46:95:4d:69:65:99:ba:c0:f4:
         99:8e:7e:a1:69:27:f4:1f:35:4c:09:68:8c:93:22:03:35:05:
         27:06:34:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:58:23 2026 by rpki-client