Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/0F05CF767A6011F1976E05638BA30FBC.roa
File:                     0F05CF767A6011F1976E05638BA30FBC.roa (raw, json)
Hash identifier:          7B1bqD+6h9jyiiQRYsB8Q16/B9nLv79GenM8klf3G4g=
Subject key identifier:   79:8B:E6:AB:76:2F:E9:8C:DB:1F:3D:D0:D1:8E:39:71:77:13:3A:F1
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       F6
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/0F05CF767A6011F1976E05638BA30FBC.roa
Signing time:             Wed 08 Jul 2026 00:00:41 +0000
ROA not before:           Wed 08 Jul 2026 00:00:41 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        163.8.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 01:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Jul  8 00:00:41 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a4d9329-9ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ce:e5:0c:5a:f7:e5:40:5e:79:4e:57:26:a9:
                    99:04:52:bb:87:b4:95:98:31:2d:af:5b:ce:05:4f:
                    1f:e3:1a:71:18:16:35:99:34:c8:7f:92:ef:fc:d7:
                    44:77:69:53:64:e3:7f:b8:33:a7:36:9f:8e:ce:6d:
                    d8:2e:62:25:31:a6:5e:79:8d:b8:ba:a5:4c:92:cd:
                    0d:42:c4:15:77:97:ec:39:c7:97:3a:3d:8a:b9:ab:
                    4b:73:a7:0b:94:08:86:5a:a4:4b:59:e5:ba:c6:2c:
                    c8:b7:cd:8c:79:03:cd:40:d7:40:8c:98:73:b5:60:
                    9e:3f:68:69:fc:67:92:0f:3e:f7:ca:7a:6a:4e:1f:
                    74:99:9c:58:e3:f8:33:45:8d:1d:15:d6:b5:3f:84:
                    fc:04:9e:21:06:34:b3:bc:b2:0c:52:e2:de:e8:d7:
                    65:ee:dc:c1:63:e3:4f:d3:f0:51:96:c3:e7:f7:e8:
                    63:ee:29:99:b2:36:7e:a2:dd:70:d2:16:12:5b:c8:
                    65:d5:f4:aa:86:06:36:f2:28:24:b6:49:3c:0d:da:
                    2c:6a:ec:7e:9d:5f:a7:f2:92:1a:c9:db:a0:9a:fe:
                    e2:e5:3f:7c:42:24:64:71:2a:96:36:2d:11:1a:5a:
                    ea:33:18:5a:1d:38:a6:7f:77:97:ce:dd:a2:f4:51:
                    da:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8B:E6:AB:76:2F:E9:8C:DB:1F:3D:D0:D1:8E:39:71:77:13:3A:F1
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/0F05CF767A6011F1976E05638BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:4e:2b:35:82:c9:72:bf:95:a9:2c:c8:b0:c9:bb:15:37:71:
         f5:c2:4c:fe:ba:05:75:93:4b:21:a3:13:31:c0:5c:2e:b4:5c:
         16:ec:4f:81:ae:fe:45:59:c4:40:7d:21:74:a5:1e:fe:2a:0a:
         8d:37:64:a7:4a:09:42:81:4b:9b:0b:d3:13:4e:78:98:a2:55:
         db:39:30:c1:e8:c4:e7:3f:5f:47:82:78:95:10:d1:b2:43:83:
         72:3f:b5:fc:1e:bc:f4:31:c0:9c:34:06:9c:7e:41:bd:b9:8f:
         89:39:ca:e9:7e:f9:bb:97:e4:95:c3:19:72:d4:8f:75:41:62:
         59:61:c1:99:5e:bd:13:d5:22:70:fe:bc:aa:a4:1f:2c:80:69:
         c5:77:c8:15:48:dc:14:c7:09:9a:5e:9d:45:4d:9a:c1:a4:48:
         3b:0b:66:cb:df:a5:5e:7f:53:d0:68:0e:fd:a8:7d:dd:c4:d2:
         08:fa:74:e3:6d:a6:2f:b2:6d:ce:fb:88:06:68:7b:cc:0e:31:
         47:48:c3:89:9f:ec:59:a4:e6:c5:ad:46:b6:30:ce:ca:c4:d6:
         b3:a2:46:42:38:8c:12:6c:d9:59:2c:da:80:03:c2:09:cc:89:
         80:95:1c:46:6d:53:65:d2:00:80:01:e4:97:6b:b7:04:5a:b3:
         c1:b9:39:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:31:29 2026 by rpki-client