Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/BBB1B36C387911F18844C9F1B7833773.roa
File:                     BBB1B36C387911F18844C9F1B7833773.roa (raw, json)
Hash identifier:          g44nuac42VEKAhWsBCldyvOnD6f/+kC+uVBfxYPxmbg=
Subject key identifier:   37:C6:A1:66:59:24:A3:9A:0A:2D:A6:A2:12:6F:F1:5F:37:F0:C1:29
Certificate issuer:       /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
Certificate serial:       97
Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/BBB1B36C387911F18844C9F1B7833773.roa
Signing time:             Fri 09 Oct 2026 08:56:41 +0000
ROA not before:           Fri 09 Oct 2026 08:56:41 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     131310
IP address blocks:        160.30.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl
                          rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
        Validity
            Not Before: Oct  9 08:56:41 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac8ac49-8600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:61:6b:d6:6e:6d:cd:99:91:63:ad:7b:d4:
                    38:3f:c8:5a:34:43:3f:dc:0c:9e:2d:34:2c:9f:68:
                    8b:0e:89:fa:40:6a:d8:05:41:91:42:22:15:71:28:
                    d6:29:0a:3c:f2:be:5a:4d:a2:e5:7e:f2:4c:45:ac:
                    b2:49:06:31:ad:30:2b:07:25:cf:7a:cf:be:a8:a3:
                    d8:c1:38:88:70:6c:3a:dd:13:15:ce:0a:a5:3d:f3:
                    14:31:06:eb:b3:63:9b:ef:29:40:e7:62:26:ea:88:
                    9f:90:9c:24:70:ba:12:71:13:41:8f:34:95:d3:66:
                    02:c3:24:c6:57:ab:c9:72:a1:e9:a2:18:29:0e:5c:
                    30:82:e6:44:01:76:d8:45:ce:f8:ac:a0:1d:cb:28:
                    4c:b0:38:74:b4:a6:88:59:40:e8:b0:c6:8d:88:bd:
                    2c:f8:62:1f:8d:1e:0e:ee:3b:8d:01:54:f2:98:a4:
                    d6:2d:38:c8:e9:68:10:3d:08:bd:63:62:03:f9:d7:
                    30:3f:91:5a:d9:8d:b4:ed:f6:28:5f:ee:3b:a5:fd:
                    c6:b3:6f:1a:e4:fc:e9:cf:a5:14:8b:69:7a:21:19:
                    2e:a6:53:37:b0:c7:50:bc:a2:25:d7:b5:86:f1:2f:
                    7c:09:7e:91:b2:4a:46:4e:6b:a7:95:19:7f:de:ba:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C6:A1:66:59:24:A3:9A:0A:2D:A6:A2:12:6F:F1:5F:37:F0:C1:29
            X509v3 Authority Key Identifier:
                keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/BBB1B36C387911F18844C9F1B7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:9d:ac:39:20:d0:19:81:6e:c5:1b:d9:f4:c5:d1:80:65:a5:
         d6:eb:e9:0c:f6:bc:86:5f:f6:ac:9e:ea:86:cf:18:d3:5c:78:
         cc:7b:7a:4a:2c:86:55:3e:4c:29:ea:72:8a:c3:9b:b3:db:50:
         f5:84:29:5f:d6:c5:69:ed:ee:a7:2d:d0:14:85:be:ac:c6:05:
         91:6c:1c:28:a4:9e:ba:93:6b:c5:10:5d:46:6f:69:2f:0b:59:
         82:fd:e9:73:b2:4b:af:d1:d5:a5:22:cc:29:01:86:3e:00:0f:
         2f:e4:83:95:8c:92:22:65:2c:20:a1:05:60:48:a4:b4:8a:74:
         65:e7:70:d6:d7:35:b8:75:39:8e:50:a8:4c:de:1d:84:4e:d7:
         14:cc:8f:f6:e5:00:7d:3d:8a:44:53:fd:de:96:fc:9c:04:f5:
         fb:47:08:9f:fe:9c:67:6f:84:2a:8e:ea:76:9c:ae:e9:f2:4a:
         99:bb:5c:50:00:4b:94:79:26:c8:d8:40:c3:52:f7:15:ad:45:
         b0:9d:9a:d9:ad:78:e5:c0:8f:1d:51:9e:f7:7e:3d:9c:dd:74:
         6c:b0:d1:6d:27:5f:24:0d:cf:18:29:c5:b1:1f:4a:91:17:86:
         2a:09:0a:4a:98:50:c9:c5:2e:5f:3d:03:31:75:ef:99:21:c1:
         d2:c8:22:8e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MwOUExMTAvBgNVBAUTKDQxRUQxMTdGMUEwREQ0MjQ1N0Q0OTQ3OEY3NUNEQ0Iy
ODY1M0E3MUYwHhcNMjYxMDA5MDg1NjQxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM4YWM0OS04NjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0LNha9Zubc2ZkWOte9Q4P8haNEM/3AyeLTQsn2iLDon6QGrYBUGRQiIVcSjW
KQo88r5aTaLlfvJMRayySQYxrTArByXPes++qKPYwTiIcGw63RMVzgqlPfMUMQbr
s2Ob7ylA52Im6oifkJwkcLoScRNBjzSV02YCwyTGV6vJcqHpohgpDlwwguZEAXbY
Rc74rKAdyyhMsDh0tKaIWUDosMaNiL0s+GIfjR4O7juNAVTymKTWLTjI6WgQPQi9
Y2ID+dcwP5Fa2Y207fYoX+47pf3Gs28a5Pzpz6UUi2l6IRkuplM3sMdQvKIl17WG
8S98CX6RskpGTmunlRl/3rouFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDfGoWZZ
JKOaCi2mohJv8V838MEpMB8GA1UdIwQYMBaAFEHtEX8aDdQkV9SUePdc3LKGU6cf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzA5QS9CMjk2NkQ5RUVB
RDcxMUYwQjlDQkZCRTY2NDZGNTZCQy9RZTBSZnhvTjFDUlgxSlI0OTF6Y3NvWlRw
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FlMFJmeG9OMUNSWDFKUjQ5MXpjc29aVHB4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0MwOUEvQjI5NjZEOUVFQUQ3MTFGMEI5Q0JGQkU2NjQ2RjU2QkMvQkJCMUIzNkMz
ODc5MTFGMTg4NDRDOUYxQjc4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoB7eMA0GCSqGSIb3DQEBCwUAA4IBAQAZnaw5INAZgW7FG9n0xdGA
ZaXW6+kM9ryGX/asnuqGzxjTXHjMe3pKLIZVPkwp6nKKw5uz21D1hClf1sVp7e6n
LdAUhb6sxgWRbBwopJ66k2vFEF1Gb2kvC1mC/elzskuv0dWlIswpAYY+AA8v5IOV
jJIiZSwgoQVgSKS0inRl53DW1zW4dTmOUKhM3h2ETtcUzI/25QB9PYpEU/3elvyc
BPX7Rwif/pxnb4Qqjup2nK7p8kqZu1xQAEuUeSbI2EDDUvcVrUWwnZrZrXjlwI8d
UZ73fj2c3XRssNFtJ18kDc8YKcWxH0qRF4YqCQpKmFDJxS5fPQMxde+ZIcHSyCKO
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:32:39 2026 by rpki-client