Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/12D3C456798D11F18BD54AEC8BA30FBC.roa
File:                     12D3C456798D11F18BD54AEC8BA30FBC.roa (raw, json)
Hash identifier:          iqjwxBM/xPRItizIfkoRZ8d39s+vsumVsT3NzLhc768=
Subject key identifier:   E9:75:34:41:E4:83:E3:33:7C:AF:1A:A5:5E:93:9D:C3:AA:7B:3F:26
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       F2
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/12D3C456798D11F18BD54AEC8BA30FBC.roa
Signing time:             Mon 06 Jul 2026 22:50:25 +0000
ROA not before:           Mon 06 Jul 2026 22:50:25 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        163.8.32.0/24 maxlen: 24
                          163.8.34.0/24 maxlen: 24
                          163.8.36.0/24 maxlen: 24
                          163.8.39.0/24 maxlen: 24
                          163.8.41.0/24 maxlen: 24
                          163.8.43.0/24 maxlen: 24
                          163.8.44.0/24 maxlen: 24
                          163.8.200.0/24 maxlen: 24
                          163.8.202.0/24 maxlen: 24
                          163.8.210.0/24 maxlen: 24
                          163.8.212.0/24 maxlen: 24
                          163.8.214.0/24 maxlen: 24
                          163.8.220.0/24 maxlen: 24
                          163.8.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 01:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Jul  6 22:50:25 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a4c3130-7d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:f5:ad:10:19:53:6b:35:9e:a3:14:c6:c0:
                    9c:37:0e:6e:68:fb:c3:23:6e:b2:1c:19:63:97:31:
                    32:6a:40:af:53:50:fa:64:82:35:1d:9a:f4:ca:31:
                    50:24:6a:6b:7a:c6:b3:07:d1:fe:33:d2:06:67:71:
                    82:23:bb:68:b3:dc:51:04:2f:c7:97:6e:e3:85:51:
                    62:6e:6c:f9:b2:5c:7d:44:70:68:43:0e:ae:3a:62:
                    16:69:af:66:36:c1:55:42:2a:64:d0:eb:7e:e1:0e:
                    2f:be:41:a3:f1:c3:46:0b:14:34:85:f8:a1:8d:90:
                    2c:db:75:45:41:36:89:06:c8:f3:c8:44:40:fc:39:
                    8b:6b:02:47:d5:12:34:11:62:c9:99:ab:3b:48:bf:
                    0c:9e:ce:d2:70:22:28:85:c7:fd:75:70:78:d1:e0:
                    38:2b:82:c5:87:66:f1:99:90:99:a2:18:55:75:17:
                    a6:39:75:43:7c:6f:a1:f9:1e:91:80:d7:18:d2:6c:
                    e2:e2:0f:5c:79:e4:0c:67:68:13:cd:2b:95:0b:7f:
                    ab:48:c6:53:da:7f:b1:79:da:49:4e:84:d8:2a:48:
                    66:65:69:a0:bf:4a:22:e6:bf:7d:fa:b0:71:3c:f1:
                    d2:ed:7a:ea:9f:07:c7:9a:03:b7:4c:c3:0d:00:0f:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:75:34:41:E4:83:E3:33:7C:AF:1A:A5:5E:93:9D:C3:AA:7B:3F:26
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/12D3C456798D11F18BD54AEC8BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.32.0/24
                  163.8.34.0/24
                  163.8.36.0/24
                  163.8.39.0/24
                  163.8.41.0/24
                  163.8.43.0-163.8.44.255
                  163.8.200.0/24
                  163.8.202.0/24
                  163.8.210.0/24
                  163.8.212.0/24
                  163.8.214.0/24
                  163.8.220.0/24
                  163.8.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:18:8a:e2:90:ec:bc:66:c5:4b:c8:66:00:9b:78:ea:36:f8:
         4e:90:75:29:9b:d5:b7:9d:70:4e:4d:f9:d6:39:da:e0:10:44:
         bc:5b:55:b3:06:35:c4:e9:57:9f:e0:ab:fc:6d:30:3e:3e:b1:
         74:b2:e8:a6:75:6a:74:6a:e8:5e:56:02:7a:88:ab:b5:97:56:
         13:45:e9:11:bb:61:2a:9b:ef:dc:fc:99:76:99:08:8d:73:97:
         08:ac:cd:97:d2:c3:36:37:08:7b:b1:e6:d8:53:84:78:00:9b:
         fe:c1:18:44:96:fc:1b:cb:45:5b:13:13:cf:a5:9c:fd:ea:fa:
         77:cd:2f:22:ce:5f:51:00:73:04:ca:5d:58:9b:f9:4b:de:a6:
         01:04:4b:de:5f:74:8f:30:75:8f:91:c4:84:04:26:c4:5d:1d:
         e8:ec:80:d9:04:4a:c3:5c:1c:f5:09:82:d0:59:fd:84:d4:58:
         18:b7:90:65:5c:12:c8:c4:b9:c2:ae:e8:ae:6a:76:dd:5f:66:
         48:0e:a7:d2:0b:1a:23:49:15:fb:9d:99:ba:85:ef:9f:4a:08:
         fa:15:a2:20:1a:0b:5a:21:0b:e8:e7:10:80:c1:a7:74:7b:7f:
         06:d4:56:27:91:6d:bc:bf:36:e8:aa:02:29:ca:4e:07:e0:d5:
         95:e9:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:31:29 2026 by rpki-client