Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/72FB25AECCD511F184B941B53066CEF9.roa
File:                     72FB25AECCD511F184B941B53066CEF9.roa (raw, json)
Hash identifier:          oCPJuUCYDKdGxkAfdWLB/gOAz05utkltUtRskCQb1/k=
Subject key identifier:   ED:62:BE:E5:65:58:A5:E7:79:5F:0D:A3:74:C1:0F:47:56:38:A0:B9
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       01CC
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/72FB25AECCD511F184B941B53066CEF9.roa
Signing time:             Tue 20 Oct 2026 22:27:36 +0000
ROA not before:           Tue 20 Oct 2026 22:27:36 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     218911
IP address blocks:        163.8.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 21:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Oct 20 22:27:36 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6ad7ead7-a35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:3e:ee:d7:ea:1c:5f:da:83:01:8b:f3:a1:
                    20:d8:cc:e8:ae:7a:8a:12:e9:5e:c6:d3:50:cd:01:
                    3e:0d:29:37:c8:92:e2:61:68:4e:f5:a8:c1:d7:40:
                    b7:ae:e5:c8:10:d0:a4:71:bb:9d:b8:dc:42:29:46:
                    b3:4b:12:9d:49:ce:58:d2:01:46:e9:2b:e0:dc:cb:
                    40:b6:37:5f:fe:c8:a0:fb:79:c3:98:49:0c:02:14:
                    b2:1a:e6:23:ed:c9:fe:42:31:7d:27:d1:55:b6:92:
                    e1:2b:55:9e:d9:fd:9f:42:2a:24:46:98:7a:67:90:
                    34:60:33:67:2d:b6:63:f4:ba:c3:31:64:05:d7:af:
                    69:dd:2b:68:67:47:5e:d3:0c:52:07:15:05:5e:fc:
                    ff:79:d0:23:d9:ee:bd:e9:32:ba:37:33:65:35:c4:
                    17:07:52:5e:66:00:a0:54:fc:91:29:cf:48:9d:1d:
                    7b:e4:23:12:c0:26:fc:16:61:a2:1a:7b:1e:61:0e:
                    ca:b8:26:50:fc:f8:f4:13:ca:26:96:71:7c:b2:3e:
                    22:ce:84:73:09:50:1c:2a:75:a8:77:a7:ea:e1:91:
                    c2:51:ee:e3:65:34:4e:79:47:aa:11:57:ce:a8:91:
                    d8:06:f5:dc:87:0a:18:a5:e1:ed:25:4e:14:fd:09:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:62:BE:E5:65:58:A5:E7:79:5F:0D:A3:74:C1:0F:47:56:38:A0:B9
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/72FB25AECCD511F184B941B53066CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:08:7b:77:14:c3:1b:33:16:2a:f4:0c:11:b5:c2:51:f1:0d:
         e0:78:f0:a7:f7:0d:57:15:be:aa:f7:2b:29:46:59:bc:62:15:
         54:58:1f:62:d9:cb:d5:a2:de:86:2d:05:64:9f:5b:39:36:fc:
         ea:03:4d:d9:74:3d:7d:8f:ac:d0:ba:27:f5:5a:6f:56:68:0a:
         1e:4d:fd:c1:bf:fb:41:22:3b:83:a8:b2:c0:cf:36:fe:58:8d:
         3c:93:76:ff:89:38:fd:ab:47:1d:39:d6:53:cd:f4:b3:64:e4:
         7e:a8:35:73:25:ec:fe:58:0e:12:ae:b2:13:7d:7d:7f:98:f2:
         2d:5b:6c:bc:44:9a:f8:2e:77:71:45:19:70:c3:d0:1c:6d:cb:
         ec:62:97:33:f4:44:b5:b9:b2:db:75:86:9f:bf:0d:b3:53:3a:
         20:e4:db:de:cf:01:c9:7f:6a:2d:4a:17:0b:d8:3e:fb:42:75:
         62:bb:9d:7b:fd:f9:0c:84:e9:e2:8b:11:00:9e:82:35:e2:72:
         d1:94:d5:4b:90:5b:39:ab:54:bf:b2:40:19:e8:62:fe:98:1e:
         86:37:77:e4:66:df:e6:ad:68:01:dd:55:c7:e1:15:4d:ea:d1:
         2b:e6:a9:23:76:25:26:6f:d4:fa:12:db:15:2d:01:db:47:89:
         f3:18:c2:56
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEwMDk3NzVEOTFC
QTQxMkI2M0QwHhcNMjYxMDIwMjIyNzM2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQ3ZWFkNy1hMzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zk+7tfqHF/agwGL86Eg2MzornqKEulextNQzQE+DSk3yJLiYWhO9ajB10C3
ruXIENCkcbuduNxCKUazSxKdSc5Y0gFG6Svg3MtAtjdf/sig+3nDmEkMAhSyGuYj
7cn+QjF9J9FVtpLhK1We2f2fQiokRph6Z5A0YDNnLbZj9LrDMWQF169p3StoZ0de
0wxSBxUFXvz/edAj2e696TK6NzNlNcQXB1JeZgCgVPyRKc9InR175CMSwCb8FmGi
GnseYQ7KuCZQ/Pj0E8omlnF8sj4izoRzCVAcKnWod6fq4ZHCUe7jZTROeUeqEVfO
qJHYBvXchwoYpeHtJU4U/Qm0rwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO1ivuVl
WKXneV8No3TBD0dWOKC5MB8GA1UdIwQYMBaAFLVOCEZbVFzu8eLhAJd12RukErY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0Ni8wODg3MDFCOEFC
QjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0VVhPN3g0dUVBbDNYWkc2UVN0
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3RqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzJCNDYvMDg4NzAxQjhBQkI0MTFGMEFCRjIwOTQwQzRGOUFFMDIvNzJGQjI1QUVD
Q0Q1MTFGMTg0Qjk0MUI1MzA2NkNFRjkucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAowjGMA0GCSqGSIb3DQEBCwUAA4IBAQBQCHt3FMMbMxYq9AwRtcJR
8Q3gePCn9w1XFb6q9yspRlm8YhVUWB9i2cvVot6GLQVkn1s5NvzqA03ZdD19j6zQ
uif1Wm9WaAoeTf3Bv/tBIjuDqLLAzzb+WI08k3b/iTj9q0cdOdZTzfSzZOR+qDVz
Jez+WA4SrrITfX1/mPItW2y8RJr4LndxRRlww9AcbcvsYpcz9ES1ubLbdYafvw2z
Uzog5NvezwHJf2otShcL2D77QnViu517/fkMhOniixEAnoI14nLRlNVLkFs5q1S/
skAZ6GL+mB6GN3fkZt/mrWgB3VXH4RVN6tEr5qkjdiUmb9T6EtsVLQHbR4nzGMJW
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:12:34 2026 by rpki-client