Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/A4BC6B5699C811F19653C7033B11F970.roa
File:                     A4BC6B5699C811F19653C7033B11F970.roa (raw, json)
Hash identifier:          DqYOnXpwLmKKYMjJJokS/b8klmENEW8C0tDont5K9Pw=
Subject key identifier:   97:E3:BA:AB:0F:43:0B:93:0C:64:F0:69:C2:77:1D:44:FE:BD:AC:3A
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       015E
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/A4BC6B5699C811F19653C7033B11F970.roa
Signing time:             Sun 16 Aug 2026 23:17:26 +0000
ROA not before:           Sun 16 Aug 2026 23:17:26 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     147003
IP address blocks:        163.8.34.0/23 maxlen: 24
                          163.8.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 23:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Aug 16 23:17:26 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a824506-7970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:ef:2e:26:4c:86:25:ad:27:a0:64:2b:f0:
                    ea:5c:81:d1:f8:da:21:26:98:6d:98:73:23:16:aa:
                    36:dc:3c:86:1f:80:bb:7f:96:c4:cf:9c:2c:15:32:
                    6a:f4:93:c1:07:0c:00:b7:fb:bf:89:ab:54:77:50:
                    d5:0f:22:9a:80:68:7b:ac:6d:ab:33:c1:be:ab:c7:
                    21:45:86:6d:6f:78:ef:9d:71:de:7d:e1:86:ad:9b:
                    16:40:23:eb:e5:ba:e0:36:99:f8:d5:1a:7b:05:bc:
                    af:a4:f5:ee:fd:5b:e1:6c:d6:9e:ef:0e:a5:29:65:
                    a3:71:54:18:4f:18:ee:ce:02:ff:1e:9c:c5:32:05:
                    77:85:2d:1c:a8:63:d4:3a:bc:5c:38:e2:e7:d1:b4:
                    03:fb:92:a9:dd:d0:eb:33:25:35:84:56:80:6f:74:
                    9e:e7:30:d1:9b:df:db:d2:60:d7:e8:aa:ea:cb:40:
                    c3:3b:0c:57:d3:de:d4:04:d4:62:9f:0c:cb:5c:ec:
                    24:7e:92:14:c8:11:10:f1:1e:66:35:0f:31:c3:ed:
                    3a:72:b2:03:03:d7:4e:5a:19:41:df:d7:37:c3:34:
                    e3:d0:6a:54:94:84:d3:69:26:26:09:55:06:c0:fa:
                    34:83:79:ee:63:79:5d:14:e2:1c:61:42:8d:d5:0d:
                    5c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E3:BA:AB:0F:43:0B:93:0C:64:F0:69:C2:77:1D:44:FE:BD:AC:3A
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/A4BC6B5699C811F19653C7033B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.34.0-163.8.37.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:96:09:98:88:85:ad:6d:ea:8b:67:22:10:50:51:d0:56:27:
         0e:5f:0e:1a:5c:c6:64:a5:cd:2c:79:75:1d:28:2f:ba:09:15:
         26:15:b2:cd:18:80:d4:9a:62:56:dd:9f:81:61:76:c7:d4:34:
         8a:43:6a:7d:9d:37:11:e9:a3:45:10:02:69:82:b2:29:e5:f4:
         18:6f:de:36:8d:8f:02:73:7d:ea:72:91:a2:0f:95:f6:a2:90:
         5e:d5:e5:39:97:ba:8c:79:d6:fd:0d:78:76:ca:0a:5f:c6:48:
         58:ca:e1:3f:d8:a1:cd:83:54:2e:33:27:fc:c9:ef:99:7e:b7:
         35:3e:4f:dd:06:96:10:4f:50:c6:18:fe:a1:32:21:4a:21:ff:
         72:2c:04:27:4d:f0:86:1e:22:f0:16:dc:4e:1e:09:16:80:02:
         69:2f:2a:ac:a7:65:8f:25:2f:30:d2:b7:30:c2:95:65:e4:f3:
         2b:19:1a:48:cd:0c:17:ce:6e:16:fd:28:d0:8e:7b:af:9f:b5:
         02:16:34:8f:28:de:3a:a8:29:0f:8b:74:fc:76:4e:64:2f:c5:
         dd:d9:f8:53:f6:67:7b:53:fa:3a:4d:c9:70:10:6a:26:f2:48:
         f9:e0:14:83:8b:0f:d8:fd:95:a8:42:b3:61:1e:cb:65:9d:6d:
         63:91:ca:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 08:23:57 2026 by rpki-client