Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/03E9601C2E3E11F18FB4E28692833773.roa
File:                     03E9601C2E3E11F18FB4E28692833773.roa (raw, json)
Hash identifier:          KBDF+qCnvbkS3zAFCAW3rveKS8qVa82y4wo236YyG7M=
Subject key identifier:   E2:4D:AE:7F:52:53:10:AD:38:C9:2D:04:EB:68:7C:0B:AF:6C:C2:99
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       6F
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/03E9601C2E3E11F18FB4E28692833773.roa
Signing time:             Thu 02 Apr 2026 02:45:31 +0000
ROA not before:           Thu 02 Apr 2026 02:45:31 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     135402
IP address blocks:        163.8.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Apr  2 02:45:31 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cdd84b-7e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:46:e5:6e:e7:3a:fc:34:81:ff:ad:b0:07:b1:
                    8c:f9:8d:72:ec:e4:9f:7f:e8:f2:0d:cb:97:be:3c:
                    d5:88:e7:be:ae:71:c2:2e:53:92:ae:1a:c4:de:27:
                    d9:8c:fc:83:32:72:e6:fe:85:07:51:45:71:16:83:
                    da:74:4f:16:0b:01:a2:50:30:69:e4:a1:9a:b3:2b:
                    55:e1:63:82:34:29:c5:52:ea:c4:fa:3a:ce:12:12:
                    9e:be:e8:87:c2:a0:c3:03:45:4e:1f:9a:a6:86:9e:
                    40:0a:2c:ee:c6:2d:13:9c:ea:5a:41:fc:40:ce:3c:
                    83:eb:03:13:55:d8:da:7a:86:1a:c9:c4:e9:e2:fa:
                    bb:c9:72:2c:33:1e:d5:6a:c3:da:27:b5:92:07:d6:
                    63:37:2d:74:68:83:8f:cb:f8:38:4e:03:fe:3b:7e:
                    00:88:f5:8a:c7:79:a6:9f:64:f6:43:06:5b:1d:a4:
                    ff:42:7e:0d:28:f3:ab:48:c0:2f:09:51:45:64:74:
                    84:ed:28:98:7f:07:e1:92:07:42:90:f5:41:2f:55:
                    2b:0b:7e:ad:6f:0c:f6:48:b8:79:dd:06:a7:2f:d3:
                    66:6f:83:a4:8a:1b:57:4e:ee:08:45:d9:51:19:b4:
                    1d:83:7a:85:e2:37:c3:12:6e:88:c0:2e:d1:e0:8b:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4D:AE:7F:52:53:10:AD:38:C9:2D:04:EB:68:7C:0B:AF:6C:C2:99
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/03E9601C2E3E11F18FB4E28692833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:23:63:81:73:c8:cc:cd:38:ed:bf:52:3a:11:7d:62:f5:9d:
         b2:88:f4:6e:a0:57:9e:fd:e1:dc:d7:2a:df:60:7f:02:18:6f:
         26:ed:e5:da:1d:f4:3a:98:e7:39:de:e5:c7:1d:ff:14:6a:b5:
         70:99:25:b2:51:f6:f6:6a:9c:9f:78:72:6e:59:da:0c:e9:f8:
         d8:c3:01:64:16:88:2d:07:2a:70:4f:c4:db:1d:10:c8:68:7d:
         65:10:d8:1d:02:d8:09:d3:6b:47:9a:62:4c:12:81:6f:0a:3f:
         7b:0f:15:1a:4e:c3:e5:4c:62:13:20:e9:64:eb:89:7f:83:37:
         17:11:11:8e:26:2b:f1:07:02:de:ec:3d:8d:6f:45:03:09:c6:
         fb:fc:e3:66:e6:dd:0d:9d:e3:ae:bb:29:4b:f7:8b:91:e8:9d:
         6d:7f:4a:bd:8d:c9:c3:17:c1:0d:14:18:85:9e:e5:32:ea:67:
         56:57:26:4a:36:8c:e7:9c:81:d0:dc:e3:7e:98:63:79:2f:10:
         cc:d6:36:d8:78:02:cf:c6:ba:8b:77:24:3d:3c:61:2b:d7:52:
         1f:50:7b:c6:83:5b:ac:4e:67:bb:db:72:3f:08:fe:ba:1c:5a:
         2b:5f:00:2d:83:6a:ca:69:64:46:3a:9e:61:92:0e:f6:04:2c:
         b7:54:16:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:42 2026 by rpki-client