Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/CFF23F5457FA11F1947AF89298833773.roa
File:                     CFF23F5457FA11F1947AF89298833773.roa (raw, json)
Hash identifier:          70J08+H/ExNxc8jpD+BsqCt2q0k+wbGOjpsoiz2ROjA=
Subject key identifier:   F4:1B:07:2F:82:EB:E6:93:3F:AA:6A:6F:4D:F5:58:20:6A:CE:6D:8A
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       C7
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/CFF23F5457FA11F1947AF89298833773.roa
Signing time:             Mon 25 May 2026 05:30:17 +0000
ROA not before:           Mon 25 May 2026 05:30:17 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     40178
IP address blocks:        163.8.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: May 25 05:30:17 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a13de69-16a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:68:d5:46:f4:8a:17:b3:e3:27:bc:3a:f2:
                    cd:16:63:09:e5:38:03:cf:58:f9:bd:e7:4d:8d:ef:
                    83:a5:6b:e0:44:ab:3a:39:eb:f9:36:aa:98:37:bf:
                    53:66:1b:6e:2a:64:4d:40:5e:bf:a4:f9:c6:ae:97:
                    fa:81:c9:05:55:f9:d0:43:61:95:36:63:e2:aa:c9:
                    c1:95:b2:b2:c0:c3:60:3c:f0:be:7f:79:4d:4e:27:
                    ca:29:d7:46:0b:33:97:22:b4:38:cc:56:7d:45:64:
                    ad:9f:4c:2a:95:60:21:18:1e:c8:c7:16:4e:18:59:
                    ea:54:f8:7b:78:f2:a8:8d:9f:00:3f:df:65:4c:63:
                    88:1f:e4:61:36:04:ff:3d:ee:f7:d2:9f:de:98:2d:
                    ad:78:0f:a3:b8:5f:ac:7d:98:63:b2:ce:1c:e4:00:
                    bf:de:9e:96:91:02:41:bd:ea:e2:ec:39:82:e5:b4:
                    9b:41:3b:4e:a5:3d:16:8a:23:29:e3:fb:71:2a:4b:
                    f5:56:ec:44:38:73:58:0a:d9:98:8c:e7:24:6e:fa:
                    49:ba:d0:08:6b:2f:07:a8:d6:3a:fe:f0:95:41:13:
                    74:1b:2f:cf:34:11:94:a5:ee:fa:0d:02:e3:e5:33:
                    fd:b9:0e:30:da:55:ae:1e:3f:da:28:4e:58:e4:f4:
                    ef:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1B:07:2F:82:EB:E6:93:3F:AA:6A:6F:4D:F5:58:20:6A:CE:6D:8A
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/CFF23F5457FA11F1947AF89298833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:e8:d1:78:b5:6e:cc:04:ff:84:3a:77:d3:85:c8:58:d1:5a:
         95:43:cb:75:d6:51:60:bb:62:8c:db:69:93:ad:8d:a4:3a:58:
         37:58:fd:0a:60:c6:40:42:d5:ee:8d:0e:f7:5b:fd:58:d3:68:
         f6:0b:e5:bf:97:30:4c:58:79:8c:03:da:63:3b:a7:6c:c1:5e:
         57:c5:83:26:7d:8e:be:66:50:64:c6:79:02:9e:8a:97:12:f0:
         34:27:fb:b3:f2:9d:d3:6a:4e:a1:f3:6c:4f:bf:79:80:00:44:
         5f:e4:ce:ab:4b:05:c5:a9:36:c0:cd:8d:df:5c:8a:78:80:65:
         38:24:27:cc:e6:07:a4:2a:f5:38:d9:e4:bc:55:fc:4e:99:de:
         96:fc:50:95:ca:9d:76:e9:61:aa:3f:9c:52:e4:ad:b1:e4:0b:
         f9:62:75:65:02:c7:27:00:9a:48:6e:90:b6:9a:ba:cc:8c:49:
         a2:36:7f:48:2f:44:43:7c:41:07:1e:df:fc:3c:62:94:11:8f:
         26:ff:b4:a2:f8:ea:f2:b3:13:15:36:2c:4f:07:8c:7f:57:3e:
         3b:95:1f:6b:79:ca:c0:1b:4e:1e:bb:6a:81:02:5e:85:3a:5b:
         fc:33:ca:6d:84:f2:62:5e:9a:29:79:a8:d4:2b:ba:c8:4f:e6:
         ca:79:a8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:01:16 2026 by rpki-client