Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/C05133CA7BFE11F1B1FDF1F38EA30FBC.roa
File:                     C05133CA7BFE11F1B1FDF1F38EA30FBC.roa (raw, json)
Hash identifier:          sON07Xmszv6tMVxnscl8FXCGzQ5QM890dEvXynJ/axE=
Subject key identifier:   CB:FB:56:3C:3B:D6:37:C8:D4:94:72:A8:BD:00:39:1E:DD:3E:E3:82
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       FA
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/C05133CA7BFE11F1B1FDF1F38EA30FBC.roa
Signing time:             Fri 10 Jul 2026 01:29:10 +0000
ROA not before:           Fri 10 Jul 2026 01:29:10 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     834
IP address blocks:        163.8.32.0/24 maxlen: 24
                          163.8.34.0/24 maxlen: 24
                          163.8.36.0/24 maxlen: 24
                          163.8.39.0/24 maxlen: 24
                          163.8.41.0/24 maxlen: 24
                          163.8.42.0/24 maxlen: 24
                          163.8.43.0/24 maxlen: 24
                          163.8.209.0/24 maxlen: 24
                          163.8.210.0/24 maxlen: 24
                          163.8.212.0/24 maxlen: 24
                          163.8.214.0/24 maxlen: 24
                          163.8.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 01:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Jul 10 01:29:10 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a504ae6-eb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:90:70:c3:a4:5e:08:b9:19:b0:c3:08:02:
                    c6:36:d2:8e:82:d1:68:db:ee:f8:81:53:71:6a:e7:
                    60:b8:67:ce:d5:15:5a:30:d3:7e:c2:cf:b5:49:83:
                    b0:43:85:e2:e1:c9:c6:e0:4b:25:37:f4:e5:d8:d4:
                    51:61:46:7f:09:1a:8f:7e:52:7f:ca:26:ee:74:c4:
                    c1:8f:70:21:c9:36:8f:47:39:74:4c:fb:b4:40:49:
                    bd:8f:9a:53:49:b1:2b:8f:6b:4b:27:83:7c:63:ce:
                    36:4b:6c:68:df:46:b8:f7:17:2f:c8:8d:59:9a:1c:
                    4c:bf:eb:f1:99:3e:32:cb:cc:95:cd:df:93:67:48:
                    20:74:d3:a1:3c:1e:d4:ae:6f:d2:b7:41:13:23:5c:
                    df:28:71:41:97:b1:63:51:fd:b8:f0:e2:7d:09:24:
                    5c:99:a7:1d:9d:06:f0:64:45:6d:d1:00:59:81:47:
                    ea:e3:5a:72:9c:6c:df:96:a2:f6:a7:e4:a6:b4:23:
                    b0:bd:b5:89:94:1a:60:5b:d6:b5:ad:dc:30:d3:aa:
                    4d:87:f4:c6:48:7c:f5:bc:ac:a2:a2:eb:17:37:aa:
                    bf:a3:26:f9:98:0d:cb:83:57:79:2f:56:9f:32:ae:
                    e6:a7:f3:1b:30:68:f5:0b:ee:7d:85:32:cb:d3:c5:
                    6f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FB:56:3C:3B:D6:37:C8:D4:94:72:A8:BD:00:39:1E:DD:3E:E3:82
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/C05133CA7BFE11F1B1FDF1F38EA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.32.0/24
                  163.8.34.0/24
                  163.8.36.0/24
                  163.8.39.0/24
                  163.8.41.0-163.8.43.255
                  163.8.209.0-163.8.210.255
                  163.8.212.0/24
                  163.8.214.0/24
                  163.8.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:ae:58:83:24:67:82:e8:48:c8:f2:de:06:ea:99:9d:2b:b1:
         28:b2:5f:3b:ef:c9:f2:66:f1:40:80:c6:ff:d3:ec:13:22:1a:
         98:39:74:24:e0:25:51:f5:4f:6a:3b:16:7b:49:bb:c0:89:ac:
         fb:33:6a:ac:68:89:bb:a2:8f:d1:bc:5f:91:41:e8:40:fa:4c:
         cf:d8:5f:4d:75:7a:6b:31:9e:b1:29:47:07:f7:05:ca:a2:df:
         72:fb:f6:90:dd:55:c4:c5:38:36:48:85:00:ca:d7:20:8b:48:
         44:3d:30:46:d8:ec:6f:60:a7:c0:bc:1f:00:09:e1:8f:a7:ac:
         e9:58:79:f8:06:0e:f2:31:1d:00:91:3d:03:77:4e:f1:12:ea:
         23:13:70:ce:ab:3e:b5:4e:d9:9e:64:10:fb:c4:50:39:3b:38:
         6a:58:9f:c0:70:05:63:15:ce:1c:39:46:84:75:7d:47:e8:31:
         08:e3:f0:a6:dc:6b:d1:64:19:eb:7a:25:f5:ce:98:ca:27:62:
         1a:11:c0:26:0f:ed:e8:66:2f:99:30:af:5f:0b:b9:4b:c3:af:
         8f:18:be:59:6a:80:ee:19:28:d0:f9:45:af:c9:94:33:86:f6:
         b6:5e:20:3e:65:f1:81:a6:26:73:0d:cd:cb:e5:41:9a:61:1b:
         f0:dc:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:31:30 2026 by rpki-client