Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/BBB1B36C387911F18844C9F1B7833773.roa
File:                     BBB1B36C387911F18844C9F1B7833773.roa (raw, json)
Hash identifier:          sySn8z7CtimAbBeWbFVeZLj6Bb/UV3HDRIyOYd+GVX0=
Subject key identifier:   BC:D3:23:32:C2:37:48:B6:EB:67:A5:13:E9:DC:AC:4E:F4:5A:06:0D
Certificate issuer:       /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
Certificate serial:       39
Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/BBB1B36C387911F18844C9F1B7833773.roa
Signing time:             Wed 15 Apr 2026 03:18:12 +0000
ROA not before:           Wed 15 Apr 2026 03:18:12 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     131310
IP address blocks:        160.30.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl
                          rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
        Validity
            Not Before: Apr 15 03:18:12 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69df0374-e835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:01:14:93:80:46:f4:a1:fe:33:49:20:99:
                    b8:c1:70:33:a4:96:31:8c:1c:5a:dc:13:db:11:33:
                    a2:cd:6d:f2:10:38:e4:e0:de:d1:be:32:95:f3:2a:
                    79:5c:b5:73:df:34:e7:13:6a:d1:d7:bd:82:8c:6e:
                    76:d7:c2:52:75:7f:87:b0:cb:2e:0a:42:fc:65:b1:
                    2c:ee:51:c2:ca:f2:84:e2:09:e3:8e:72:06:c9:0c:
                    9e:a8:24:e3:fb:53:a0:dd:ab:98:f8:f2:2d:05:93:
                    80:8f:dd:f2:79:54:d4:62:de:09:57:d6:22:82:aa:
                    fb:8c:f4:93:a5:93:d6:64:d2:cf:82:99:1a:0c:8f:
                    5b:13:32:75:57:6c:c0:b7:f2:2d:19:30:99:9c:d8:
                    22:50:18:22:32:61:99:0e:3c:de:1a:be:d8:de:0f:
                    78:69:37:50:c1:08:91:11:6b:dc:34:0f:f0:23:60:
                    f5:5a:fb:40:2e:2a:a2:59:3e:ab:a1:58:f3:ef:b9:
                    0c:19:34:57:5a:a1:11:ce:96:e4:de:cd:71:8a:42:
                    77:30:e1:85:05:c4:4e:15:c2:02:26:06:cf:3d:3a:
                    c1:ed:61:eb:0a:5d:fc:71:a7:bb:c1:95:58:27:6b:
                    bd:55:b7:1d:be:3f:fc:13:b4:b1:e7:9a:c6:3d:a9:
                    77:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D3:23:32:C2:37:48:B6:EB:67:A5:13:E9:DC:AC:4E:F4:5A:06:0D
            X509v3 Authority Key Identifier:
                keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/BBB1B36C387911F18844C9F1B7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:0c:2b:98:09:0f:f0:99:45:f0:79:85:87:57:fd:8c:44:91:
         bc:c3:ba:21:50:d4:10:53:1c:d6:02:44:47:05:55:2d:b4:9e:
         bf:7e:1f:a3:08:bd:64:3e:d0:1a:ef:8b:74:04:3b:ed:a1:3f:
         f0:d5:e0:25:26:f8:c4:00:9c:47:2e:eb:84:a7:91:85:12:e7:
         57:71:82:05:b5:b8:1b:02:c0:32:21:a7:f2:11:14:ee:4c:9d:
         cc:f8:03:e0:19:b1:1b:02:4c:f3:6d:a2:3b:63:1f:6f:d5:e7:
         10:65:0d:83:b3:aa:45:6c:43:17:a7:89:91:10:30:9a:3d:c9:
         d2:c0:04:41:c7:6c:df:8a:2d:73:f6:1e:88:c5:9f:35:fe:81:
         56:ff:a4:9e:11:1f:ed:c2:8d:3a:fc:63:ea:83:92:6e:1d:7c:
         8c:39:92:1f:f4:9e:24:ba:56:8b:4b:c3:86:91:56:28:bf:9f:
         aa:d5:71:62:6a:94:d7:34:12:91:3d:3e:08:e8:23:31:41:91:
         12:a7:8d:09:87:d2:a2:a3:68:78:38:49:28:e8:a5:ff:63:25:
         e4:f1:90:87:e5:02:f8:c0:1a:38:80:d1:4f:82:1f:85:fd:95:
         b5:01:4d:d4:16:1f:5e:7e:e1:23:a5:f3:05:5e:2f:e2:0f:b1:
         9b:59:3a:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:04 2026 by rpki-client