Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/311DA6AA78F611EFAFD81B5BC4F9AE02.roa
File:                     311DA6AA78F611EFAFD81B5BC4F9AE02.roa (raw, json)
Hash identifier:          lKHm7fOEyQnbEFDovcw/YWluEFPm7R8A14zhn18wBDA=
Subject key identifier:   16:63:07:7F:EF:F2:1C:AB:A6:C3:1A:5D:73:97:63:DD:DE:40:C8:9E
Certificate issuer:       /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial:       0958
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/311DA6AA78F611EFAFD81B5BC4F9AE02.roa
Signing time:             Mon 24 Aug 2026 20:40:24 +0000
ROA not before:           Mon 24 Aug 2026 20:40:24 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140949
IP address blocks:        2001:df4:5280::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
                          rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392 (0x958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
        Validity
            Not Before: Aug 24 20:40:24 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8cac37-4730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9d:4e:70:08:1b:d5:c4:c6:c5:6c:d9:6f:e9:
                    cc:59:57:44:09:cd:0c:fc:c4:03:5c:7e:47:73:38:
                    ed:8b:bd:56:da:00:df:73:e4:43:5e:7a:c7:6e:28:
                    98:15:d2:6e:d3:d3:59:25:b5:61:34:0e:54:6a:5c:
                    56:a6:66:fd:52:ec:d5:0e:38:92:46:d0:f2:a5:bb:
                    2d:72:49:09:b4:a0:e2:d2:6f:bc:25:b3:d6:ff:65:
                    fe:df:90:3e:6a:d5:ce:1d:3d:47:c2:24:7e:b4:69:
                    ca:b3:81:1d:67:0d:b8:5a:40:39:b0:ef:a8:f3:73:
                    f1:b0:aa:f1:67:f0:cd:d5:94:ad:73:9b:d6:49:de:
                    8f:34:a2:62:f3:82:0a:46:37:a7:7e:2c:8d:fe:53:
                    c3:8e:01:cc:e5:e6:f6:14:49:14:f6:09:c7:e5:23:
                    7c:a1:63:aa:15:36:4f:9a:c3:21:7f:71:92:a4:22:
                    50:e6:e8:d9:a8:82:05:c0:cc:cd:ea:85:55:17:5d:
                    7b:1e:01:63:64:f3:f5:60:f5:54:c1:9b:ad:0b:ba:
                    58:b4:e2:7f:3d:1c:88:46:9e:09:4b:69:f9:55:ab:
                    e6:73:f4:d2:b0:6f:39:3d:06:dc:eb:58:29:13:bc:
                    04:87:ab:f3:37:35:c0:1e:15:3a:97:b1:b2:b1:ea:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:63:07:7F:EF:F2:1C:AB:A6:C3:1A:5D:73:97:63:DD:DE:40:C8:9E
            X509v3 Authority Key Identifier:
                keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/311DA6AA78F611EFAFD81B5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:5280::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:05:fa:5a:c4:b0:93:ed:43:25:2e:7b:24:f3:ef:d8:d5:69:
         c4:17:e9:8d:6d:29:63:22:42:14:f7:34:42:ca:6c:35:d5:52:
         c9:25:b5:f2:50:fd:34:25:b4:a3:60:25:1b:a9:0b:71:6d:53:
         75:45:c6:e8:dd:74:eb:4c:36:40:a0:9c:48:9e:65:e2:e3:2f:
         13:07:44:d4:de:ad:bf:e2:48:3f:db:c4:4f:b8:38:3c:62:6e:
         91:5a:d9:b4:ac:a2:c9:9b:3b:9d:13:8a:10:2c:da:7e:80:88:
         c4:dc:c7:02:9d:be:d4:3a:11:b4:19:27:95:d8:ed:29:0a:fa:
         e6:45:e0:0f:76:2a:5c:1b:f6:2a:8e:f1:38:d8:6d:5c:94:9f:
         42:50:a1:50:a2:8b:3a:85:2a:99:e6:93:bd:72:4e:ca:ef:20:
         78:46:24:24:9b:66:0c:43:29:01:dc:ac:9f:ac:b4:84:75:e3:
         a9:20:e3:f8:37:ee:74:a2:d1:e2:ad:83:d5:aa:2c:f7:d9:b7:
         40:dc:c6:c6:3e:ff:6c:9c:03:08:4c:d3:52:0e:cf:44:bb:18:
         53:8a:42:d9:c5:16:65:2d:05:f4:a2:58:8d:54:2f:c7:39:8d:
         0f:a5:bb:78:f5:05:d5:d1:63:06:ea:a5:50:6d:08:a0:d8:8e:
         bf:44:ab:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:17:42 2026 by rpki-client