Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/A2517D166EAD11F18743D71861A30FBC.roa
File:                     A2517D166EAD11F18743D71861A30FBC.roa (raw, json)
Hash identifier:          EXYW07HU+PDuF2Sjxw7qGLvDdb4Ds1WxfwmESxYCYx4=
Subject key identifier:   4F:D2:C1:D4:55:D5:A3:1A:8C:A6:E6:EC:70:82:D6:27:54:F0:8F:8C
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       E9
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/A2517D166EAD11F18743D71861A30FBC.roa
Signing time:             Tue 23 Jun 2026 02:45:46 +0000
ROA not before:           Tue 23 Jun 2026 02:45:46 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137409
IP address blocks:        163.8.200.0/24 maxlen: 24
                          163.8.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 01:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Jun 23 02:45:46 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a39f35a-50cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:b9:cc:1c:e7:bc:bf:b3:03:5a:c6:28:65:
                    27:04:f2:a9:99:28:60:b8:7b:a9:97:e6:92:9a:c4:
                    a9:0d:22:f7:86:fb:90:5b:9e:7c:ff:d4:8d:82:0d:
                    b1:00:63:b2:6c:f4:32:04:4a:73:b6:d6:1e:02:ca:
                    90:e7:12:f4:2d:99:eb:dd:7f:0f:d6:28:88:24:dd:
                    85:3d:c4:e9:54:68:b5:ca:43:9d:26:6f:c8:84:48:
                    ec:cc:a0:b5:e3:07:fa:0a:88:1c:2b:e8:57:88:4e:
                    73:21:b3:08:2f:bd:c1:1b:54:e4:b4:58:34:b4:b5:
                    2a:48:e1:33:c4:3f:1f:8c:ac:3c:99:de:76:26:c3:
                    a5:eb:c5:64:32:5a:12:11:92:6c:1f:85:f4:07:94:
                    84:1f:43:a4:29:0a:cd:c6:c7:de:50:94:38:42:73:
                    9f:b7:c4:97:8b:d9:e4:16:01:75:40:0c:1e:c9:3f:
                    a9:9c:92:d7:ba:dc:03:cc:d8:78:2b:7f:00:0d:38:
                    55:83:2c:0c:eb:43:1a:05:bc:ed:45:5d:03:50:2d:
                    18:e5:56:b6:ba:56:5d:43:b5:a3:da:1f:68:57:50:
                    41:df:fc:b4:55:eb:5c:5d:f5:58:5c:a1:99:9d:dd:
                    cc:58:33:41:f2:db:e2:b7:de:63:78:c4:be:56:e0:
                    69:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D2:C1:D4:55:D5:A3:1A:8C:A6:E6:EC:70:82:D6:27:54:F0:8F:8C
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/A2517D166EAD11F18743D71861A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.200.0/24
                  163.8.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:83:61:16:2c:f1:23:46:5f:89:1c:f3:fe:e1:f8:19:96:cd:
         3e:c0:20:e5:20:36:78:dc:e5:60:e5:d2:ab:d9:61:1d:6f:9b:
         23:e0:ae:5c:fc:09:b0:00:dc:35:08:9e:3a:29:33:fa:60:46:
         0e:bd:8c:3b:4a:af:28:89:dc:c7:67:3e:d5:09:94:65:ca:62:
         4f:0e:0a:6d:04:04:53:a1:d5:25:57:ce:37:ec:b3:0a:48:ec:
         fc:ee:56:cb:8a:80:e6:19:99:cf:73:55:c0:d8:66:e5:1a:c4:
         36:88:c9:2c:e9:d1:06:c4:31:95:66:42:90:b4:2c:e2:27:21:
         19:c0:6d:46:77:52:ca:d2:d4:13:c9:82:0c:f6:e9:32:7c:d6:
         69:dd:f7:e0:10:f7:e5:d3:fa:b4:51:29:86:f9:4d:48:54:13:
         49:3e:3e:80:95:97:08:88:50:96:7e:17:51:36:90:2a:ae:6c:
         5b:16:c1:af:59:5a:9d:97:57:c8:11:8e:b1:f7:a0:02:bf:9f:
         bc:8c:c1:aa:c2:68:d6:ad:a0:9d:50:83:db:e3:5c:24:68:29:
         84:25:66:2f:65:a0:76:b0:c4:05:36:74:65:df:bf:1f:28:dd:
         74:b4:7c:28:b7:36:9b:e2:72:1e:05:76:39:be:d2:cc:3d:49:
         86:c8:6d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:31:43 2026 by rpki-client