Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/36B69F0C218F11F19319393A0D3D8C67.roa
File:                     36B69F0C218F11F19319393A0D3D8C67.roa (raw, json)
Hash identifier:          Rqu5d6Iyt5RvWg05t+Bs6MR1vP48lOt2FAst15Iu7bg=
Subject key identifier:   99:B4:5D:F3:BE:DB:C6:94:7F:88:A3:BB:13:FB:F5:59:98:53:D8:16
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       0139
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/36B69F0C218F11F19319393A0D3D8C67.roa
Signing time:             Wed 05 Aug 2026 06:22:46 +0000
ROA not before:           Wed 05 Aug 2026 06:22:46 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     213607
IP address blocks:        163.8.32.0/24 maxlen: 24
                          163.8.194.0/24 maxlen: 24
                          163.8.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 23:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Aug  5 06:22:46 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a72d6b6-deb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:33:a2:9d:9a:d7:3c:79:9b:71:fc:2b:df:
                    7c:6a:b3:89:c5:2d:fd:b8:21:42:7c:50:2b:e9:af:
                    33:a3:64:0f:76:53:15:b2:10:33:c5:15:64:16:c8:
                    34:2d:11:62:5a:d7:ad:76:4b:94:c2:90:1e:3f:21:
                    2b:d6:f0:f5:1f:5a:9f:15:ba:e9:02:cb:f0:d9:42:
                    0b:5a:d6:f4:03:ff:4f:65:99:98:5a:5a:59:d3:6d:
                    27:b6:95:69:fd:49:9b:7d:50:d3:1a:df:8f:8a:b0:
                    33:99:6f:a3:16:6d:b6:33:ba:31:24:eb:bd:3e:db:
                    4d:95:be:e1:d8:21:a5:09:e8:73:1e:3a:2b:40:8f:
                    41:ac:93:58:7d:d7:8d:fd:54:38:6a:38:91:25:9c:
                    3b:9b:82:e1:b6:11:72:18:e7:a7:47:d9:af:e3:df:
                    d9:a6:49:0e:ac:76:a7:e7:61:fa:bb:1c:cb:f0:a0:
                    b6:6f:28:a4:62:ae:21:f2:2d:fa:9e:f3:a9:95:c3:
                    33:4a:0a:10:df:0e:79:2d:eb:55:a0:c6:42:37:51:
                    33:ef:83:3c:4d:42:47:7f:e3:bb:41:bf:8e:92:61:
                    70:a6:51:86:af:e2:0e:22:64:fb:6b:21:7e:1a:f6:
                    8d:7f:00:92:a9:22:59:cb:1d:97:d1:01:01:05:c2:
                    f5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B4:5D:F3:BE:DB:C6:94:7F:88:A3:BB:13:FB:F5:59:98:53:D8:16
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/36B69F0C218F11F19319393A0D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.32.0/24
                  163.8.194.0/24
                  163.8.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:6c:d6:9a:bf:24:e9:c9:22:b3:44:07:e2:a1:99:da:71:69:
         fe:f5:bc:79:72:8e:34:31:31:6a:e5:ca:b5:db:a0:dd:1d:16:
         d9:54:5a:7c:22:1e:81:25:be:53:6c:0d:4c:2e:77:42:6b:c1:
         97:c0:fa:b6:c5:5d:a0:11:36:9a:83:9a:27:37:64:fc:66:e2:
         b1:6e:03:d3:4f:c6:09:9b:fd:7b:40:f5:66:b4:a0:27:6a:04:
         c8:93:c6:ff:aa:64:f6:ab:67:95:35:b4:85:9c:57:a7:6f:19:
         30:c7:65:f1:08:72:c4:68:0a:60:f0:d9:e8:9c:d8:dd:a9:c7:
         86:4a:7e:c4:fe:13:a9:5c:1b:fe:75:ad:76:7b:41:ff:31:72:
         5f:5b:a1:ab:a4:61:47:58:6f:b1:7d:3d:11:d7:bb:b6:a5:61:
         e6:a2:6c:e1:ac:a4:3b:84:c3:84:2d:64:ad:12:67:de:8c:8d:
         b4:97:1f:fa:5f:bc:6b:27:2e:25:ea:b7:74:54:6a:f7:d7:2c:
         3e:45:cf:35:91:ed:6b:c2:ac:4e:74:e6:44:55:13:27:b6:54:
         98:8d:87:3c:a1:dc:9b:23:eb:31:4b:5a:da:7b:39:de:0a:7c:
         f5:a7:04:e6:33:2d:7b:84:88:84:be:88:d4:1b:c2:21:8f:8a:
         ed:79:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 08:24:52 2026 by rpki-client