Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/0E6E84F47A6011F1976E05638BA30FBC.roa
File:                     0E6E84F47A6011F1976E05638BA30FBC.roa (raw, json)
Hash identifier:          HtUuAkol0mHQrD42lO6MoPJ+Ejb03iZZDhqfCwpcfTY=
Subject key identifier:   D9:9E:87:4B:20:89:AD:70:96:38:1E:5C:5F:43:07:B4:E3:88:A5:6B
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       F5
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/0E6E84F47A6011F1976E05638BA30FBC.roa
Signing time:             Wed 08 Jul 2026 00:00:40 +0000
ROA not before:           Wed 08 Jul 2026 00:00:40 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        163.8.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 01:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Jul  8 00:00:40 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a4d9328-4b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2f:52:6b:d2:ff:7d:c8:62:94:34:8c:60:19:
                    1a:80:95:8e:93:f4:07:03:d8:e6:7a:87:b8:19:ae:
                    b4:d6:3b:d5:4f:38:9c:f9:14:f7:c2:8b:e7:09:72:
                    56:5c:da:02:f3:ba:53:6a:d4:29:d4:44:5a:95:3c:
                    f4:64:dc:51:79:64:31:38:d4:d3:ba:ec:a2:09:49:
                    b9:9f:74:71:19:09:88:81:4c:92:5c:a8:8c:87:7e:
                    78:fd:6e:94:14:ca:62:3c:98:0e:59:4a:7c:7a:30:
                    76:1a:40:48:75:49:4c:92:ed:e8:75:cd:2d:a8:8b:
                    ac:81:a1:eb:81:3d:71:76:9f:47:94:3d:2a:1a:a2:
                    c5:10:6e:69:d4:83:34:a1:2a:16:1c:68:13:1a:c7:
                    20:af:ff:e7:d8:42:93:18:7b:c1:7f:10:b0:fc:a7:
                    84:1e:49:c4:8b:4a:13:e1:3e:9e:b5:3b:08:df:e6:
                    ac:a2:74:93:6c:d8:2f:c0:c7:97:ac:e1:31:1b:04:
                    14:49:32:4a:8c:c0:f4:8c:28:b6:75:01:0a:40:b3:
                    f9:8c:36:22:73:2e:b0:aa:6f:13:32:20:4b:f0:e5:
                    09:76:de:9f:43:ed:e4:33:db:82:91:d6:c6:bf:13:
                    d3:27:1b:8e:5b:71:ac:df:2f:13:ec:35:e5:08:85:
                    12:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9E:87:4B:20:89:AD:70:96:38:1E:5C:5F:43:07:B4:E3:88:A5:6B
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/0E6E84F47A6011F1976E05638BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:ef:63:7d:d8:8c:73:25:66:73:75:35:bb:1c:6c:19:2a:56:
         a6:3d:48:fa:4d:a5:81:3d:88:82:21:2c:a7:8c:2e:9c:b8:11:
         7e:90:09:47:83:00:88:eb:99:0b:89:72:28:86:20:a2:ed:1e:
         b5:1d:5e:f1:33:8e:5c:d7:71:c4:2a:11:78:96:f9:dd:3f:92:
         de:ce:2d:27:dd:07:97:f3:02:95:bf:66:16:f1:0c:47:2a:53:
         df:e1:02:74:c8:7b:ae:36:be:08:91:d5:c7:46:48:d3:b2:68:
         c8:cc:54:ad:11:32:62:a5:bc:65:00:97:3c:c8:9c:05:d3:d3:
         02:15:e1:a9:0b:f0:f7:a2:2c:6c:19:4f:67:89:2d:f8:b5:31:
         c1:1e:1e:3d:7c:37:b6:05:09:8d:a9:9a:c1:a3:5b:95:e8:6b:
         93:a6:38:0a:4e:3e:51:ce:d0:06:ee:15:3f:bd:cf:77:99:68:
         f2:ef:fd:98:3e:fd:80:6c:c5:ef:a8:25:10:73:9f:99:4b:03:
         c2:91:fb:ec:78:64:26:1d:3a:ff:33:ee:24:36:e0:b8:19:05:
         30:5f:d2:23:14:63:b8:51:4f:86:7b:46:94:0a:1a:c1:62:36:
         e1:6a:0d:2b:57:f5:e3:02:14:a8:58:3e:30:25:d8:78:ed:aa:
         e2:07:2a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:31:43 2026 by rpki-client