Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/5B9CF7B8541011F193006E3293833773.roa
File:                     5B9CF7B8541011F193006E3293833773.roa (raw, json)
Hash identifier:          UEPdDUTRui+ayW3AbcnrWggT880Cdd6becbTRiUrqEI=
Subject key identifier:   CC:7D:2A:25:E3:2C:29:76:F8:60:2B:8B:50:6C:47:22:11:59:1D:95
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       C1
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/5B9CF7B8541011F193006E3293833773.roa
Signing time:             Wed 20 May 2026 05:54:26 +0000
ROA not before:           Wed 20 May 2026 05:54:26 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153371
IP address blocks:        163.8.197.0/24 maxlen: 24
                          163.8.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: May 20 05:54:26 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a0d4c92-2e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:58:4b:58:c9:9e:1a:9b:d0:02:cf:20:1a:
                    7e:32:93:55:7d:e8:ab:a0:3c:17:26:e8:39:3f:72:
                    a5:62:7b:a7:3c:bf:a5:a4:81:97:5d:c8:2a:e9:8c:
                    f2:a5:73:73:f3:2c:9f:02:8f:7e:d6:3a:f4:47:f5:
                    fc:eb:52:16:3a:96:5b:4b:e5:57:1e:39:d1:19:4c:
                    c1:03:cd:76:3d:65:9a:58:c5:54:15:3b:63:a4:12:
                    ff:5f:00:e4:51:f3:b1:b5:7a:aa:13:05:bf:40:4d:
                    40:0d:e9:03:97:60:ce:cc:b9:9e:89:73:a7:18:ba:
                    25:5c:39:68:d6:75:f5:f6:fd:19:cb:af:00:6e:5f:
                    a9:b9:de:07:6b:88:e8:01:14:72:ff:92:fe:69:c3:
                    6c:bc:15:ca:c0:73:86:52:dd:92:71:7e:37:e0:88:
                    6c:04:27:4d:86:95:3d:51:21:9c:44:3f:6d:ad:29:
                    17:8f:18:2c:a9:3f:50:2d:65:93:9a:c7:3d:97:6a:
                    89:00:19:3d:f5:a8:0e:71:ae:17:5c:61:b0:6d:f0:
                    8b:16:2c:55:9b:68:40:3e:4f:1c:1f:bb:73:bd:3e:
                    7f:1e:29:ae:1c:73:85:83:68:33:c6:0d:6d:34:9d:
                    47:15:a6:9a:a6:39:f2:9c:bb:f9:37:85:9b:4a:c6:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7D:2A:25:E3:2C:29:76:F8:60:2B:8B:50:6C:47:22:11:59:1D:95
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/5B9CF7B8541011F193006E3293833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.197.0/24
                  163.8.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:5d:85:95:7b:ee:8c:b6:52:59:f0:58:d0:dc:ce:b5:7c:4a:
         fe:13:95:8c:80:0a:b5:70:e9:b0:b2:40:51:45:97:12:b6:c6:
         1d:a3:b9:84:fa:9d:4a:58:ce:1d:e2:46:40:61:37:e0:7e:07:
         20:80:26:e3:eb:da:b6:21:41:1c:d3:a5:35:4d:b6:bb:85:01:
         bf:54:c2:a3:49:8a:71:04:7b:95:f1:95:95:0c:27:1c:c8:9d:
         ba:75:e6:88:67:0a:ce:71:44:73:5d:10:ab:29:4f:6c:d7:52:
         b4:0b:c3:ca:b2:66:67:9c:fd:fd:04:43:95:b1:47:d9:f7:1b:
         44:42:84:02:5e:64:32:77:27:9b:0e:86:b5:67:15:4a:9d:5f:
         85:f5:d7:56:16:aa:7a:0a:b8:12:38:a8:03:54:9d:b3:00:c6:
         5d:88:c8:e4:24:18:2a:d0:3c:d3:ad:67:a1:26:83:4a:69:24:
         1d:73:5b:02:2f:21:ff:7b:f8:61:25:06:0c:65:83:1c:d2:64:
         32:c0:e9:a2:c8:42:e2:55:c5:cf:b8:69:ec:73:3c:f5:39:57:
         06:91:19:27:c1:e0:ab:19:d0:2b:11:d3:31:15:d2:1f:97:df:
         47:06:a1:db:11:18:fb:f9:36:0a:43:3b:09:2f:35:5c:1a:c4:
         e4:29:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 04:11:13 2026 by rpki-client