Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/311DA6AA78F611EFAFD81B5BC4F9AE02.roa
File:                     311DA6AA78F611EFAFD81B5BC4F9AE02.roa (raw, json)
Hash identifier:          4vuTCUAhfJT3HGv5tLVBeeb3AAx6C5qUisVfSfItWZ0=
Subject key identifier:   8E:08:4B:CD:04:8A:6B:F2:1C:AA:CF:2E:F6:75:E3:EA:D4:13:BA:7C
Certificate issuer:       /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial:       08F9
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/311DA6AA78F611EFAFD81B5BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:05:18 +0000
ROA not before:           Fri 22 Aug 2025 21:01:11 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140949
IP address blocks:        2001:df4:5280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
                          rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2297 (0x8f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
        Validity
            Not Before: Aug 22 21:01:11 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4479e-5a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f3:d1:4a:29:32:29:a5:0f:aa:5c:aa:50:37:
                    a0:90:34:f3:2d:d8:c6:15:8c:93:e2:f1:e9:7f:2d:
                    b3:90:0b:5e:a7:0c:fb:28:cb:43:4b:45:eb:7c:13:
                    22:ec:5b:02:49:68:46:45:30:01:39:81:2d:a2:94:
                    ce:1b:ec:eb:ca:b1:9d:75:7e:e9:d6:86:52:04:24:
                    93:bc:0d:83:c2:f7:54:f5:31:9b:ef:b5:db:19:7f:
                    ec:81:a4:e2:e5:4a:6c:83:c8:02:ce:d3:ef:89:f0:
                    8f:0b:3e:44:35:1d:e6:44:53:0b:33:10:c7:1a:b0:
                    62:d2:91:85:b2:3c:3b:ea:60:0b:79:32:92:28:08:
                    ff:3b:cd:f8:e0:27:b9:b7:3d:58:1d:b2:fe:55:52:
                    be:41:39:4f:10:e3:cb:81:aa:54:c1:e8:15:c4:58:
                    b2:f9:09:64:07:a9:2b:a5:c7:7c:fb:1b:1a:47:37:
                    71:22:56:60:f3:76:89:a4:7c:66:9d:d6:e0:55:d6:
                    f9:c0:ba:ee:99:fa:4b:e8:87:6e:6d:6b:95:f3:26:
                    4a:16:ee:71:7e:7c:ed:15:be:d5:53:ce:bf:4e:76:
                    59:45:e1:41:10:59:c0:14:4e:67:52:cf:a5:0a:2b:
                    a0:9b:d6:2f:8a:de:b1:28:72:00:6a:6c:21:fd:4e:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:08:4B:CD:04:8A:6B:F2:1C:AA:CF:2E:F6:75:E3:EA:D4:13:BA:7C
            X509v3 Authority Key Identifier:
                keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/311DA6AA78F611EFAFD81B5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:5280::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:7f:2f:4f:9e:8f:92:06:aa:4b:14:e6:89:7d:ba:99:ea:bd:
         69:5a:f6:ae:5f:cd:8a:8c:6e:b3:7c:b5:e4:4f:9e:7e:46:e4:
         02:3c:f8:f1:64:e1:78:cc:11:3a:ce:8f:68:e5:12:95:99:d1:
         9f:5c:98:6a:8f:c5:39:53:4a:40:9c:bc:4c:46:52:39:92:63:
         77:6c:5b:b3:80:18:a5:f9:43:60:74:bb:29:24:d1:41:65:0a:
         bf:13:c3:e5:9e:a5:93:83:f3:da:1b:23:9f:c7:b3:e9:d9:e0:
         ba:96:66:15:98:aa:f3:53:4b:d2:04:c2:0e:a2:d7:04:aa:31:
         b7:a5:61:82:72:4f:26:e1:43:34:73:4e:3a:db:78:e7:b4:cc:
         7b:58:aa:79:72:c4:5d:e2:23:6e:05:e7:07:f2:49:c3:ef:78:
         35:cd:96:e9:95:bd:89:90:76:5e:ac:3b:11:e9:ae:19:83:21:
         ba:48:64:f1:f2:87:c8:df:ea:43:3a:47:a5:f6:35:b0:ec:09:
         4d:40:3e:fa:a6:42:a5:1e:92:1f:2d:01:9f:f0:40:5e:ca:c3:
         39:a8:5c:1e:6b:f8:8f:88:b2:fc:57:2e:46:68:c5:11:37:82:
         c1:6a:dc:41:d8:44:98:72:e4:4e:b5:91:26:b8:38:e0:d3:a1:
         72:3a:66:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:46 2026 by rpki-client