Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/99E3B47E230D11EBACAFB634C4F9AE02.roa
File:                     99E3B47E230D11EBACAFB634C4F9AE02.roa (raw, json)
Hash identifier:          OXmE1mOd8/P1IQtBEEIz2QqDe9msRnAajE6FOxB4CXg=
Subject key identifier:   1E:F1:BD:C8:F0:F3:45:CA:39:A1:8D:9B:4C:10:B0:65:C4:1E:DC:42
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2A28
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/99E3B47E230D11EBACAFB634C4F9AE02.roa
Signing time:             Sun 06 Sep 2026 16:24:02 +0000
ROA not before:           Sun 06 Sep 2026 16:24:02 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139677
IP address blocks:        2402:9e80:58::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10792 (0x2a28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Sep  6 16:24:02 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a9d93a2-70f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:0b:8b:42:ce:53:4e:49:f9:2e:86:0e:3b:
                    7e:73:f5:9f:23:52:f2:c1:c7:96:84:29:bc:14:8c:
                    cc:b3:2f:0d:52:60:fd:4e:2f:62:c3:f2:60:b2:a4:
                    a8:72:b8:35:95:31:2a:07:f7:93:9e:95:92:f8:98:
                    f6:df:60:de:85:29:7e:b8:80:88:5c:b9:88:4f:01:
                    c6:29:14:08:6a:73:7d:53:0f:fe:26:fa:7e:06:99:
                    83:28:ad:de:8d:80:cf:78:25:74:b3:ca:91:05:32:
                    cb:a4:9e:58:65:a5:cd:b5:d4:33:ed:96:67:2b:ef:
                    b6:f4:0a:d3:a0:c9:0c:ea:ce:66:55:a5:d6:e7:05:
                    7a:43:44:21:b4:c7:0b:53:a3:72:b4:4f:fc:ad:c2:
                    a3:bc:fe:dc:57:13:43:75:bb:1c:0d:37:36:0f:55:
                    10:d3:f9:95:bb:72:a8:06:10:67:cd:69:df:6f:32:
                    f6:e7:48:23:75:32:77:fd:ac:a6:d2:46:92:be:5f:
                    0e:bc:61:9d:1b:dd:c6:fe:ed:c4:e9:f6:57:3b:8e:
                    2b:16:26:4f:49:ed:f5:64:59:02:3d:68:7e:5e:86:
                    11:56:c8:cd:6c:ad:df:c3:4e:51:9e:3a:bd:38:f3:
                    5a:28:1b:07:3a:69:a6:57:3f:ee:44:a3:8c:14:36:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F1:BD:C8:F0:F3:45:CA:39:A1:8D:9B:4C:10:B0:65:C4:1E:DC:42
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/99E3B47E230D11EBACAFB634C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:58::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:23:88:ab:21:07:d3:5c:76:70:6f:2d:bd:b5:b6:8e:b1:51:
         8b:fd:d8:db:15:5c:9b:b7:1d:3f:16:86:4c:e4:8f:2a:b7:28:
         52:b6:e1:f4:83:df:c1:ed:07:b3:fb:b1:36:88:22:d2:09:25:
         0d:b3:9e:76:9a:6d:7a:99:3d:ba:53:59:50:74:3c:6d:20:20:
         5a:58:01:ac:5c:b8:46:a3:34:0e:2e:9c:c7:0c:cf:43:94:11:
         a4:4a:e5:2c:8e:b3:21:da:b7:4a:c9:02:4a:74:9e:09:c8:dd:
         b8:89:15:ba:63:73:28:21:30:1c:33:e5:d4:f1:e4:f1:89:8d:
         89:ac:e7:a8:e6:64:16:20:30:3f:69:ee:89:4c:31:7b:fa:af:
         64:ba:c9:b0:46:0c:f1:ec:63:38:47:f0:16:0f:c8:4c:79:e1:
         f4:20:55:07:1a:84:47:dc:8e:a8:db:e7:b3:1f:48:01:1c:dc:
         0a:50:39:0b:f7:eb:42:68:17:33:12:9c:45:e2:2d:62:0d:4a:
         ad:db:54:29:e7:f5:6a:76:1d:fb:dd:18:bd:eb:5b:1a:58:fa:
         6d:69:4a:0b:23:86:ba:35:d6:62:30:f4:ca:5f:72:28:9e:dd:
         58:42:3d:79:57:6c:60:e4:9d:e2:29:14:9e:43:49:08:44:2a:
         b8:95:62:16
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICKigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjYwOTA2MTYyNDAyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTlkOTNhMi03MGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuUgLi0LOU05J+S6GDjt+c/WfI1LywceWhCm8FIzMsy8NUmD9Ti9iw/JgsqSo
crg1lTEqB/eTnpWS+Jj232DehSl+uICIXLmITwHGKRQIanN9Uw/+Jvp+BpmDKK3e
jYDPeCV0s8qRBTLLpJ5YZaXNtdQz7ZZnK++29ArToMkM6s5mVaXW5wV6Q0QhtMcL
U6NytE/8rcKjvP7cVxNDdbscDTc2D1UQ0/mVu3KoBhBnzWnfbzL250gjdTJ3/aym
0kaSvl8OvGGdG93G/u3E6fZXO44rFiZPSe31ZFkCPWh+XoYRVsjNbK3fw05Rnjq9
OPNaKBsHOmmmVz/uRKOMFDYyDQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFB7xvcjw
80XKOaGNm0wQsGXEHtxCMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvOTlFM0I0N0Uy
MzBEMTFFQkFDQUZCNjM0QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAKegABYMA0GCSqGSIb3DQEBCwUAA4IBAQB1I4irIQfTXHZwby29
tbaOsVGL/djbFVybtx0/FoZM5I8qtyhStuH0g9/B7Qez+7E2iCLSCSUNs552mm16
mT26U1lQdDxtICBaWAGsXLhGozQOLpzHDM9DlBGkSuUsjrMh2rdKyQJKdJ4JyN24
iRW6Y3MoITAcM+XU8eTxiY2JrOeo5mQWIDA/ae6JTDF7+q9kusmwRgzx7GM4R/AW
D8hMeeH0IFUHGoRH3I6o2+ezH0gBHNwKUDkL9+tCaBczEpxF4i1iDUqt21Qp5/Vq
dh373Ri961saWPptaUoLI4a6NdZiMPTKX3Iont1YQj15V2xg5J3iKRSeQ0kIRCq4
lWIW
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:49:04 2026 by rpki-client