Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/050E38E62E3E11F18FB4E28692833773.roa
File:                     050E38E62E3E11F18FB4E28692833773.roa (raw, json)
Hash identifier:          /JFZwhWSwSdVNSAIA2VslFfJ0mFpMyrPcYB8jKhIelI=
Subject key identifier:   64:5A:3A:19:7F:1F:73:BC:D3:EB:93:3A:62:3F:9E:F6:36:74:E9:69
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       71
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/050E38E62E3E11F18FB4E28692833773.roa
Signing time:             Thu 02 Apr 2026 02:45:33 +0000
ROA not before:           Thu 02 Apr 2026 02:45:33 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     31715
IP address blocks:        163.8.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Apr  2 02:45:33 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cdd84d-a45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:1d:1c:20:09:dd:c2:f7:2f:52:77:6a:62:
                    f5:21:55:ad:e3:9d:ec:f0:17:e3:a1:fc:3f:76:e3:
                    3a:9c:25:80:f3:5a:77:de:a3:58:03:ba:be:72:99:
                    2f:e7:35:03:ce:70:d5:a5:64:14:c7:2b:fc:8b:dc:
                    d2:e1:fb:12:43:ac:39:d1:89:1c:72:c9:3f:93:3e:
                    7b:99:7b:24:a6:69:39:39:58:c8:56:4b:ea:1e:34:
                    20:43:32:3e:71:3c:a4:62:99:2b:3b:6d:e1:0f:47:
                    a9:eb:e0:bb:32:b0:75:e0:da:b4:7f:ad:94:4e:69:
                    17:f5:bc:61:0e:cf:ce:ce:17:66:dd:07:cb:bd:38:
                    38:52:6d:00:b3:07:7a:cd:9d:b7:09:e8:fc:6b:f6:
                    e4:06:27:de:84:ff:68:8a:c6:f6:27:fd:3d:90:e0:
                    d6:11:72:25:f7:1a:b6:34:9c:7e:79:cb:5d:c9:4e:
                    56:cd:92:b8:47:35:fc:64:ed:1d:4b:89:ed:1d:15:
                    cb:90:c7:29:4c:31:45:17:5a:d3:04:0c:62:fa:6d:
                    91:a4:1c:26:b8:0d:dc:fb:ce:89:cd:06:30:91:17:
                    86:e0:36:b3:27:1e:ba:e4:a0:f2:ff:5d:84:25:22:
                    a3:db:7e:05:7f:0b:e9:05:55:14:db:35:97:c1:28:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5A:3A:19:7F:1F:73:BC:D3:EB:93:3A:62:3F:9E:F6:36:74:E9:69
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/050E38E62E3E11F18FB4E28692833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:d8:5a:ce:c9:ce:fc:b7:d8:3e:dd:aa:92:0c:2c:81:ba:db:
         6e:61:f4:35:7d:ea:2e:8f:20:34:b9:b6:4e:33:1f:0f:ee:68:
         cc:70:4b:c0:2e:eb:1a:29:cf:1f:25:87:e7:32:11:43:62:ca:
         28:35:5a:36:45:c0:d4:e7:d8:ba:38:4f:84:43:d2:e7:cb:67:
         61:79:52:11:65:6f:05:11:8d:70:ba:6b:33:32:69:72:b0:08:
         ab:9f:cb:81:4d:21:53:dd:4a:d0:04:41:35:87:48:df:12:bc:
         17:24:c5:d2:b9:e1:b0:8d:27:1d:ef:24:e9:59:f9:82:02:35:
         91:72:1f:65:ee:52:62:37:5b:60:8e:c0:85:23:1b:e4:1b:a1:
         6a:e1:5f:ad:92:e2:ca:8c:c9:86:dc:96:c0:48:48:e0:56:4c:
         60:48:ed:30:12:6f:ad:e4:d3:8b:54:ea:95:96:41:95:05:15:
         07:55:59:89:2e:9c:f8:2d:a2:47:fe:56:e8:07:5f:77:ad:ee:
         27:7b:05:dc:84:2c:a1:5e:51:9d:22:74:e1:3b:e1:d7:cd:67:
         ba:04:d3:c5:3f:ec:33:70:77:cc:d8:d8:0e:ea:1a:54:5c:17:
         b6:60:74:d1:91:0f:3c:a0:32:14:e4:55:81:f0:a1:e1:9a:f1:
         99:f2:c8:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:28 2026 by rpki-client