Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/50527DFCD27811EBB9B4BB66C4F9AE02.roa
File:                     50527DFCD27811EBB9B4BB66C4F9AE02.roa (raw, json)
Hash identifier:          tRkNCgsP5n6ReD2T37OXxipjBxrChMgEw5cpV/Dxb/w=
Subject key identifier:   FB:6A:6A:AD:B2:D0:2B:17:AE:41:B8:FC:D9:67:B3:F3:D8:76:FC:2B
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2A2F
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/50527DFCD27811EBB9B4BB66C4F9AE02.roa
Signing time:             Sun 06 Sep 2026 16:24:15 +0000
ROA not before:           Sun 06 Sep 2026 16:24:15 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     142540
IP address blocks:        2402:9e80:71::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10799 (0x2a2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Sep  6 16:24:15 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a9d93af-1709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:24:12:ac:6a:38:9c:02:c6:59:4a:e2:c6:1f:
                    37:c7:52:17:04:a7:41:f3:1f:2b:b1:a4:ad:00:1f:
                    a1:36:60:e0:cb:69:ac:b4:a9:71:ef:ff:4b:14:24:
                    2e:de:7b:84:8c:86:75:3f:48:ee:f9:be:55:1c:31:
                    f1:aa:4c:07:1d:bd:11:92:88:08:95:c4:8e:a6:1c:
                    51:c9:10:2d:bb:0d:31:be:1e:8e:d0:ec:b8:bb:e1:
                    c3:62:6f:8e:36:50:d3:b7:24:e1:3b:2e:6b:c9:f1:
                    52:cd:a0:e0:09:c5:a9:15:46:80:1b:32:23:7c:a4:
                    ab:e6:4d:03:72:42:40:1a:43:86:fa:d4:e3:d2:be:
                    3c:52:a7:4a:b1:f9:b0:86:ad:97:77:f5:47:7a:c5:
                    22:0c:2f:51:06:6b:03:63:81:8a:d0:e8:d0:0b:29:
                    48:89:20:c3:c9:89:b1:01:ef:45:14:57:db:6c:e6:
                    61:77:94:d5:2e:27:ef:f3:c2:22:e4:d9:ab:96:d6:
                    59:ad:0b:e6:9c:73:29:45:25:98:38:1b:7e:9b:a2:
                    19:49:a9:b0:d9:a8:0f:e0:43:ad:80:79:76:62:e0:
                    86:08:be:27:ea:a3:ea:ef:12:b8:53:55:f3:56:dc:
                    c6:76:9d:a0:fd:15:52:17:cf:b0:8c:77:45:06:cc:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6A:6A:AD:B2:D0:2B:17:AE:41:B8:FC:D9:67:B3:F3:D8:76:FC:2B
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/50527DFCD27811EBB9B4BB66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:44:33:6a:d9:eb:34:6d:6f:70:4f:1e:83:f9:a2:3b:12:
         12:9a:2f:bd:4b:da:37:fd:ac:02:31:d2:29:cf:ff:dd:4a:1a:
         d0:4d:5a:54:28:04:fc:6b:ad:b9:85:ea:9f:3e:9b:18:0d:36:
         f9:08:44:2c:1f:75:9f:f5:db:c0:9d:5a:08:19:1b:d1:0a:7c:
         4c:89:28:36:00:d1:bb:39:3b:5c:fd:e4:4b:bd:21:20:5a:51:
         67:2a:90:5b:c3:d5:b1:94:10:33:ac:7d:7a:8d:11:12:31:4b:
         19:29:bf:b1:64:de:32:db:57:10:8f:a6:e2:aa:db:1f:c7:67:
         ee:e8:e3:d9:1b:0d:65:28:88:20:33:67:ad:f7:d1:fb:22:13:
         d6:a5:31:07:3b:1c:b8:b0:18:31:14:48:12:60:2d:ed:44:63:
         99:08:4e:80:04:ec:a4:82:7f:13:10:b3:44:ab:62:9a:f0:51:
         a9:c4:09:82:c5:ea:26:86:c9:c2:70:f3:34:85:65:29:e5:8d:
         c4:ab:ad:ba:23:0a:0a:7f:a2:20:d9:c4:dc:4a:9f:a0:51:5e:
         bb:12:9f:f8:37:17:d1:b8:96:65:62:fc:f4:70:93:69:7d:b5:
         44:56:7f:6f:71:b8:bc:b6:b0:33:2d:cb:6f:2c:20:72:9d:66:
         4e:c9:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:40:36 2026 by rpki-client