Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/BB17221E211611F08D31C34DC4F9AE02.roa
File:                     BB17221E211611F08D31C34DC4F9AE02.roa (raw, json)
Hash identifier:          ECHAhZZ0CVyTf5Z6KxlgeILhQqidZfMXf11w6LMS5Rw=
Subject key identifier:   24:A2:CD:DB:73:67:03:17:59:51:DD:32:7E:98:1C:75:11:F1:04:97
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       023B
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/BB17221E211611F08D31C34DC4F9AE02.roa
Signing time:             Fri 07 Aug 2026 03:52:45 +0000
ROA not before:           Fri 07 Aug 2026 03:52:45 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137897
IP address blocks:        2403:27c0:c02::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 03:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Aug  7 03:52:45 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a75568d-a8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:49:50:2b:13:f7:d2:ae:47:87:56:0d:c3:6e:
                    e0:0a:c6:17:8e:82:94:92:ef:85:a6:17:2e:c7:33:
                    65:8f:72:f2:7e:cd:d0:97:84:0b:6d:d8:4c:a4:bc:
                    6c:81:1f:72:09:3a:44:ed:6e:13:7e:7e:5c:40:44:
                    65:b8:7f:cc:08:04:12:2c:ac:35:8f:cf:8c:cc:46:
                    51:0e:72:d0:8c:4c:72:2f:00:30:8f:e9:8f:6f:6e:
                    d2:fe:51:88:e5:c2:09:73:e7:23:a9:2c:15:7d:68:
                    ed:0b:d6:5e:46:f0:71:03:5d:4f:98:c5:3c:5d:85:
                    c1:da:10:b8:b8:69:4d:5f:88:61:fb:76:76:c5:4f:
                    b5:18:ad:52:74:da:4a:75:ce:1a:02:69:0c:8f:59:
                    63:98:c5:16:5c:09:43:ba:98:89:ea:7a:ec:ad:22:
                    24:f3:2c:3c:4d:98:32:b1:38:50:5b:ab:e5:6e:3b:
                    66:2d:8d:c4:55:80:a0:a7:3f:38:68:c6:2c:66:75:
                    0b:ae:17:50:e6:b0:f3:2a:0a:0a:7d:67:60:fc:b0:
                    43:0a:7d:89:e7:ee:e6:a4:13:eb:27:c8:de:af:be:
                    54:80:10:20:fe:29:de:0a:b9:f6:de:d5:c1:09:34:
                    f9:10:43:95:35:4e:39:15:e8:5c:2b:d2:91:46:86:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A2:CD:DB:73:67:03:17:59:51:DD:32:7E:98:1C:75:11:F1:04:97
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/BB17221E211611F08D31C34DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:27c0:c02::/47

    Signature Algorithm: sha256WithRSAEncryption
         53:12:b5:f4:47:a4:a3:97:6b:fe:aa:8a:23:d8:63:d7:c4:a2:
         c0:7d:1a:04:70:8b:85:3a:76:4e:a1:78:5c:86:f2:4e:4d:27:
         a9:4b:59:8e:7a:9e:32:59:da:e1:b9:85:6b:ff:95:5a:26:2e:
         de:af:d5:ec:62:60:5c:80:d6:7e:a6:19:dc:28:18:43:c1:78:
         29:85:5b:b5:e6:d2:ef:73:1b:80:f3:4c:af:b2:97:59:40:5c:
         64:69:48:4b:ac:e0:67:75:90:27:89:29:c3:75:24:5e:a8:91:
         6d:73:7c:ce:67:ab:8f:d4:8c:12:ff:ee:f6:62:93:14:24:96:
         75:d1:da:d2:87:a1:e5:45:2e:5f:93:c6:7d:de:a6:1c:43:7f:
         df:b9:b5:62:28:ed:6d:49:b6:e3:6f:de:4f:bb:3d:95:56:71:
         c3:f9:5c:fe:eb:14:55:89:66:e6:80:6a:db:26:2a:56:6a:3f:
         6d:f3:4c:f0:d3:f9:58:78:8c:d2:47:f1:e8:6b:cd:27:ba:cf:
         c7:07:d0:4f:1a:69:d1:3d:b5:4d:fb:96:3b:f1:1d:90:ae:d3:
         b1:6c:d2:d2:7e:f5:a9:d5:48:5a:20:6b:1f:fe:0b:dd:a4:de:
         68:23:f1:7d:9b:30:37:82:45:a7:41:2f:3c:02:87:98:35:bd:
         65:d0:25:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:22:12 2026 by rpki-client