Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/80CB68A68EC811F1946CF5105A11F970.roa
File:                     80CB68A68EC811F1946CF5105A11F970.roa (raw, json)
Hash identifier:          Ow3UmxXOic3HNzm9LDvmvAwHX174ghnh0IzFZYxiFW0=
Subject key identifier:   FF:2D:D9:42:20:5F:8D:9B:B5:55:CB:17:B0:D3:39:A1:29:6B:E6:57
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       0126
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/80CB68A68EC811F1946CF5105A11F970.roa
Signing time:             Sun 02 Aug 2026 23:18:43 +0000
ROA not before:           Sun 02 Aug 2026 23:18:43 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     401776
IP address blocks:        163.8.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 23:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Aug  2 23:18:43 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a6fd053-8cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:73:27:e8:3d:ea:b1:ec:bd:4c:3d:1e:12:
                    c6:06:ab:9e:d1:42:b3:98:66:1e:00:37:0b:54:4b:
                    76:b6:22:a8:09:41:17:7a:81:34:7e:e8:97:19:63:
                    87:c4:b5:fc:2a:f7:f3:67:c0:4f:ad:ff:4e:f5:11:
                    d2:8f:1d:e7:e3:86:9f:07:67:af:97:cb:dc:25:8b:
                    1a:32:cb:7a:5c:da:4c:cd:2f:bd:e0:00:d6:b0:9b:
                    b8:08:44:73:0a:d3:53:5c:c8:e8:26:ef:0d:68:82:
                    18:1d:01:74:f4:25:50:61:25:01:23:86:7f:fc:42:
                    63:b4:5f:14:2a:d1:f5:98:4a:38:a9:52:d2:9d:32:
                    51:c6:17:85:6f:85:28:e2:ec:14:99:0a:7a:be:20:
                    6c:d3:b0:20:02:9f:98:ed:0b:f9:fd:28:82:85:cd:
                    c3:ff:a2:36:fd:0c:31:8b:c1:c0:40:8a:2d:8b:f8:
                    98:4c:4e:33:b9:6d:ef:e3:6d:73:8e:1a:b6:5f:62:
                    d4:14:f9:67:7b:83:ce:66:af:92:5f:f0:e0:b0:fb:
                    4a:bd:d5:ee:38:40:20:41:73:91:71:23:6a:f2:39:
                    4f:d4:6f:a2:99:0d:85:04:54:dd:60:0f:68:e0:e9:
                    13:91:f4:e7:44:55:89:1a:91:f1:51:d4:98:37:d1:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2D:D9:42:20:5F:8D:9B:B5:55:CB:17:B0:D3:39:A1:29:6B:E6:57
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/80CB68A68EC811F1946CF5105A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:c5:c1:33:71:84:41:58:c8:72:95:e2:42:f1:de:f2:7a:68:
         79:58:6a:fe:de:56:ae:7b:61:74:b8:b9:1f:82:89:de:d1:e6:
         04:42:38:dc:6c:ba:29:ee:ef:0e:a1:64:d2:5a:58:40:df:07:
         bb:81:e8:56:0a:d0:22:75:65:24:4e:44:9b:cb:e2:3b:d0:74:
         fc:27:cb:ac:23:5c:59:d7:fe:0e:5f:2d:df:e4:54:00:de:91:
         8f:3b:33:1d:51:06:f0:6b:49:40:66:eb:51:2a:53:59:ac:95:
         8e:45:16:6c:f4:df:41:76:2a:aa:97:ca:79:80:57:dd:5d:86:
         80:59:1d:c9:7c:fd:24:f4:23:cf:a0:40:ec:f7:40:8b:56:43:
         0d:22:b0:41:48:99:68:cc:69:80:06:30:cf:1a:8c:e6:3e:ba:
         7d:08:4a:63:47:6f:a2:b0:20:ea:28:c8:eb:7d:ac:7d:52:9a:
         85:69:dc:de:a1:8c:7b:3b:07:84:3b:15:d4:df:40:11:54:ad:
         6b:fe:2a:3c:11:ca:24:69:15:89:3c:22:8a:fc:85:69:b1:d3:
         77:65:7a:5a:27:2e:8a:ac:be:81:7e:4c:d4:e7:22:62:5f:38:
         d7:57:8d:dd:39:bd:6d:7e:76:c5:4f:3a:29:de:e9:3d:c4:03:
         a7:c4:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 08:23:51 2026 by rpki-client