Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/936A4548AC3A11F0A9C43F44C4F9AE02.roa
File:                     936A4548AC3A11F0A9C43F44C4F9AE02.roa (raw, json)
Hash identifier:          sVGpNa8k/xVKsIanvda8jGJL2nHzx0rMDFKMvF7hssA=
Subject key identifier:   17:37:46:2E:21:2F:B8:57:74:F3:3B:E9:F2:4B:3C:58:40:DC:6A:59
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       01E5
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/936A4548AC3A11F0A9C43F44C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:22:04 +0000
ROA not before:           Sat 18 Oct 2025 15:53:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     206675
IP address blocks:        2403:27c0:c02::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Oct 18 15:53:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a59d0c-3e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:2e:d5:a6:e2:bd:da:7c:e8:3c:24:b5:fb:
                    04:eb:db:4a:07:4b:6d:8b:b8:71:c3:b4:af:e7:d6:
                    d7:04:b5:23:c7:a8:51:67:d3:92:77:f0:01:75:12:
                    9f:cc:14:88:ea:3f:0b:35:a2:85:94:20:72:f8:4b:
                    3a:03:9c:36:4a:a2:3a:4c:e5:7d:85:0d:d3:27:33:
                    ed:71:f8:52:1f:14:c9:7c:23:57:e6:c9:b4:f7:8e:
                    e5:73:c1:81:2a:55:c5:38:e3:8d:e1:d4:14:13:ed:
                    30:11:97:eb:ca:af:73:5d:0c:b6:02:19:e4:44:0a:
                    08:d2:b0:e8:fd:4f:fb:50:50:c2:39:6f:1f:4b:03:
                    09:95:16:8c:d3:92:c6:b1:13:17:2a:92:2f:48:8b:
                    26:dd:75:0b:93:16:38:6d:ce:83:85:cb:de:85:74:
                    d4:44:97:ab:16:5b:9e:fb:ee:05:ac:86:c8:4c:6b:
                    ee:d8:b3:b1:5c:a9:89:5e:54:86:6f:e7:20:13:6f:
                    e4:ff:03:e0:e8:e6:18:de:78:9e:29:42:a0:ef:78:
                    6a:b9:a0:da:ed:d8:ad:43:8e:ad:f9:5c:b8:22:ae:
                    21:d9:f2:ba:a0:6d:01:ea:17:b6:a7:32:32:c3:7e:
                    74:c5:fc:a9:07:5e:a3:6f:b8:66:30:75:d4:6b:0e:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:37:46:2E:21:2F:B8:57:74:F3:3B:E9:F2:4B:3C:58:40:DC:6A:59
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/936A4548AC3A11F0A9C43F44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:27c0:c02::/47

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:1f:e4:0b:f8:d0:38:51:25:38:76:92:05:e5:ef:b0:ff:
         a5:be:ba:ea:ba:a3:9a:cb:4e:1b:fd:93:6a:c9:b4:e4:db:57:
         74:ac:01:de:1b:c2:55:25:c0:36:ac:0e:7f:5c:57:e0:e9:53:
         8c:4c:c3:bb:fb:45:6b:37:85:05:78:9d:1c:10:1b:7e:5a:eb:
         84:33:da:ed:ac:c5:66:46:ff:7a:a7:03:13:7e:80:17:38:0a:
         f3:80:8a:33:23:a1:15:f7:ab:21:89:7b:05:22:c0:07:e1:86:
         29:91:e9:cb:b9:01:7c:6e:1a:6d:35:d9:d2:1b:a5:73:a9:7b:
         9d:2f:cf:28:d1:9b:bd:1e:57:5b:96:b4:bb:f6:51:5f:cf:6d:
         d4:14:64:2d:ee:e2:64:68:d2:f0:d4:7f:57:59:e2:48:1e:d0:
         d9:f6:ad:5f:0f:36:58:2d:e3:a0:ad:7f:ac:79:b9:e1:7f:34:
         99:45:b1:e1:c4:35:e5:d0:d7:6f:f1:a9:66:1b:6e:b5:47:04:
         da:bf:46:b9:50:4c:6d:44:1b:c7:bd:52:50:a4:9c:30:25:43:
         61:8b:f8:bf:86:a7:1d:24:79:9b:0c:8d:d9:be:7c:1b:f4:8e:
         b1:81:f7:27:7b:2c:e0:95:f8:b7:36:81:8f:48:2c:bf:c0:b2:
         36:ba:93:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:48 2026 by rpki-client