Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/048707902E3E11F18FB4E28692833773.roa
File:                     048707902E3E11F18FB4E28692833773.roa (raw, json)
Hash identifier:          K3CKFq9dj9GC5sZcbxnP9CeuT3Ddzdh/+xr7StrmVGQ=
Subject key identifier:   10:BB:30:FE:ED:74:B4:E5:7E:E4:DF:04:9F:A4:FB:46:96:E8:C5:81
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       70
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/048707902E3E11F18FB4E28692833773.roa
Signing time:             Thu 02 Apr 2026 02:45:32 +0000
ROA not before:           Thu 02 Apr 2026 02:45:32 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137235
IP address blocks:        163.8.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Apr  2 02:45:32 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cdd84c-79c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:24:24:56:8a:5c:6c:f0:6e:8c:e8:26:88:
                    8a:d0:89:0d:3e:51:48:cb:b1:5a:ae:21:7f:e9:11:
                    35:de:cd:80:5d:34:cb:ac:11:6e:b2:ec:72:f0:ba:
                    58:da:06:f9:ae:da:c9:88:e3:d3:6e:98:fc:30:68:
                    d1:c5:a2:08:fd:ac:7f:26:af:7a:66:b0:00:26:2d:
                    9e:49:11:bb:0f:88:9a:ff:e5:50:51:67:08:36:aa:
                    54:d7:1f:90:f1:00:c4:94:49:81:ed:38:5d:77:e4:
                    7c:88:53:80:09:61:cd:90:b0:d7:43:53:ce:34:27:
                    60:93:28:83:7f:92:20:d1:03:8a:ff:05:22:a1:5b:
                    31:b0:28:26:69:d2:2d:c0:f0:e6:5c:b4:17:96:a3:
                    e2:f1:10:86:d0:dc:ce:40:30:17:03:9f:21:89:3f:
                    1b:83:07:d0:2e:75:10:f2:87:90:04:0a:e7:66:db:
                    85:9e:d6:71:9d:99:a0:be:35:05:ad:b7:6a:50:fb:
                    09:f1:91:09:93:e6:bf:08:15:0b:93:e8:8e:e3:f0:
                    e5:7b:16:c7:08:29:f0:92:f7:b4:2c:b1:51:7c:eb:
                    09:11:d2:4c:8f:60:2a:8f:b7:7f:c7:e9:e4:db:bf:
                    85:5e:11:a9:81:b8:97:29:71:fa:3f:51:7c:7d:a1:
                    00:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BB:30:FE:ED:74:B4:E5:7E:E4:DF:04:9F:A4:FB:46:96:E8:C5:81
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/048707902E3E11F18FB4E28692833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:1c:2c:c2:35:15:a9:d6:d0:cc:bb:1d:b4:66:4c:7d:de:5a:
         21:3f:d3:dd:79:30:81:8e:e9:cc:80:1e:3f:5a:c6:8b:17:fb:
         e9:91:0d:10:5a:4c:43:83:03:69:ce:a6:4c:f7:cf:ce:86:ba:
         ac:24:5a:c2:63:19:a2:f7:a1:a2:da:5e:d3:ec:4c:1f:61:9a:
         76:f3:06:9f:d3:40:7d:eb:ba:fe:23:0e:ae:f6:fd:1c:1c:6e:
         14:02:e7:64:5a:7a:69:9a:c2:e2:01:35:bc:0c:99:3f:66:55:
         5e:d0:fd:87:6d:d6:93:09:b0:82:bb:11:e6:f8:53:a2:24:c8:
         86:1f:5e:7b:ae:db:7a:2b:4f:45:78:a6:1c:30:00:51:8e:25:
         d6:90:96:8e:6f:71:0c:16:88:8d:d3:ba:c7:96:3b:4a:4b:a6:
         b6:cc:b0:2f:7d:c5:3e:fb:a3:d2:24:e6:b5:46:f0:70:78:0f:
         1f:54:18:26:7c:c9:ae:2b:d0:3f:09:23:9c:93:17:96:ef:af:
         dd:52:f0:88:ef:7c:b5:9b:a4:53:84:cf:bd:80:19:5d:78:82:
         fc:d0:0f:ca:7b:da:e3:54:79:25:ae:1a:fb:0a:97:e1:01:b5:
         5f:c9:e3:4b:19:36:3d:21:5a:61:97:95:ca:c7:10:3d:6a:c5:
         e2:be:59:70
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MkI0NjExMC8GA1UEBRMoQjU0RTA4NDY1QjU0NUNFRUYxRTJFMTAwOTc3NUQ5MUJB
NDEyQjYzRDAeFw0yNjA0MDIwMjQ1MzJaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5Y2RkODRjLTc5YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+JCQkVopcbPBujOgmiIrQiQ0+UUjLsVquIX/pETXezYBdNMusEW6y7HLwulja
Bvmu2smI49NumPwwaNHFogj9rH8mr3pmsAAmLZ5JEbsPiJr/5VBRZwg2qlTXH5Dx
AMSUSYHtOF135HyIU4AJYc2QsNdDU840J2CTKIN/kiDRA4r/BSKhWzGwKCZp0i3A
8OZctBeWo+LxEIbQ3M5AMBcDnyGJPxuDB9AudRDyh5AECudm24We1nGdmaC+NQWt
t2pQ+wnxkQmT5r8IFQuT6I7j8OV7FscIKfCS97QssVF86wkR0kyPYCqPt3/H6eTb
v4VeEamBuJcpcfo/UXx9oQDPAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUELsw/u10
tOV+5N8En6T7RpboxYEwHwYDVR0jBBgwFoAUtU4IRltUXO7x4uEAl3XZG6QStj0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQjQ2LzA4ODcwMUI4QUJC
NDExRjBBQkYyMDk0MEM0RjlBRTAyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3Rq
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdFU0SVJsdFVYTzd4NHVFQWwzWFpHNlFTdGowLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkI0Ni8wODg3MDFCOEFCQjQxMUYwQUJGMjA5NDBDNEY5QUUwMi8wNDg3MDc5MDJF
M0UxMUYxOEZCNEUyODY5MjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACjCCowDQYJKoZIhvcNAQELBQADggEBAG4cLMI1FanW0My7HbRmTH3e
WiE/0915MIGO6cyAHj9axosX++mRDRBaTEODA2nOpkz3z86GuqwkWsJjGaL3oaLa
XtPsTB9hmnbzBp/TQH3ruv4jDq72/RwcbhQC52RaemmawuIBNbwMmT9mVV7Q/Ydt
1pMJsIK7Eeb4U6IkyIYfXnuu23orT0V4phwwAFGOJdaQlo5vcQwWiI3TuseWO0pL
prbMsC99xT77o9Ik5rVG8HB4Dx9UGCZ8ya4r0D8JI5yTF5bvr91S8IjvfLWbpFOE
z72AGV14gvzQD8p72uNUeSWuGvsKl+EBtV/J40sZNj0hWmGXlcrHED1qxeK+WXA=
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:41 2026 by rpki-client