Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/D1D5C8C0A59011F193111DFE6011F970.roa
File:                     D1D5C8C0A59011F193111DFE6011F970.roa (raw, json)
Hash identifier:          qCJvwBrlqKx5E3VgjdWqgEUqcE6G1sCbDQGpoZR3Wb0=
Subject key identifier:   CB:09:A4:43:31:6F:61:0B:54:6A:D8:BC:02:1D:1E:F6:80:03:EF:E2
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       0189
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/D1D5C8C0A59011F193111DFE6011F970.roa
Signing time:             Mon 31 Aug 2026 23:08:05 +0000
ROA not before:           Mon 31 Aug 2026 23:08:05 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        163.8.44.0/24 maxlen: 24
                          163.8.200.0/24 maxlen: 24
                          163.8.202.0/24 maxlen: 24
                          163.8.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Sep 2026 06:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Aug 31 23:08:05 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a960954-fb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:b4:4a:2d:fd:03:dd:60:f3:14:fa:69:c5:
                    a5:6d:95:cf:54:2e:7a:c6:17:97:ba:70:45:5e:41:
                    f0:18:0f:c0:40:53:64:9c:85:da:07:9b:50:ab:8d:
                    58:f4:af:be:9e:5a:03:a8:80:a4:4e:eb:74:61:d9:
                    33:18:54:b1:15:89:54:c3:1c:f0:3a:c8:f2:0e:f4:
                    49:93:d6:c4:23:69:a0:ae:bf:6d:3d:58:bf:bf:3b:
                    92:63:13:76:78:a1:df:6e:4d:f7:3c:8d:2b:7b:6a:
                    0c:9c:e6:e8:ad:f3:d4:88:ef:d0:57:0a:10:6d:7f:
                    90:f0:1e:b8:0a:f0:b1:2d:6a:82:5d:59:b5:05:dc:
                    03:ae:92:3e:93:1e:d3:60:ce:d5:3c:e1:b8:1f:e4:
                    e5:bd:c8:b4:af:15:49:fb:40:30:22:6b:8e:05:60:
                    5d:a1:5a:2a:b5:81:77:f5:17:cf:16:9b:b4:eb:0e:
                    57:c3:67:bd:70:30:be:14:06:1e:81:0c:4d:8a:2a:
                    37:8e:0e:a4:a5:58:ac:23:1e:40:1a:7b:39:68:69:
                    e9:3d:bf:7a:b3:12:e9:b0:09:c2:77:6c:3a:72:29:
                    5b:8c:69:b4:e0:ae:96:22:5b:6f:71:0b:0b:d9:97:
                    63:fd:c1:f9:6e:8b:da:55:05:c6:15:ce:f8:bf:63:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:09:A4:43:31:6F:61:0B:54:6A:D8:BC:02:1D:1E:F6:80:03:EF:E2
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/D1D5C8C0A59011F193111DFE6011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.44.0/24
                  163.8.200.0/24
                  163.8.202.0/24
                  163.8.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ef:d4:06:67:4e:cf:d3:60:cd:13:15:ae:c2:73:fc:09:c5:
         65:c1:70:d3:9d:4c:45:b5:81:5f:a3:de:6a:d2:3c:56:1f:2f:
         de:21:91:6b:ad:4e:7d:1f:eb:eb:c9:ca:88:38:46:12:ba:ed:
         35:c7:60:db:64:d0:09:1f:1a:a2:1f:56:27:30:1e:71:64:33:
         81:6b:33:a4:62:de:2d:69:2d:4d:76:7e:0a:e6:09:a9:45:9b:
         b8:37:9f:a8:44:79:13:66:f9:91:68:68:f6:e4:49:9e:08:d2:
         1b:1f:99:ce:a8:34:c1:84:e2:fe:13:6a:db:64:1a:71:47:48:
         f2:43:33:43:8c:41:90:cb:98:5f:2b:d6:a3:c4:0a:47:2f:85:
         65:c9:05:88:76:2c:e4:4e:4e:ea:92:46:29:9a:c1:53:05:98:
         e8:18:48:bc:c8:1d:a2:1f:42:3e:ce:35:23:ca:7f:2c:fc:c1:
         39:e0:38:7f:e8:d8:36:97:ff:8a:58:b7:ee:59:be:9c:05:70:
         59:45:a4:87:cf:b6:fc:bd:c9:f3:14:ae:1d:5a:de:8f:d2:76:
         cc:51:30:fd:8d:92:dd:21:4f:97:2d:6f:6f:6e:41:11:44:b0:
         49:73:c7:f7:6f:7f:0e:9f:e9:9a:5b:1e:e1:7a:86:db:1b:a9:
         44:79:83:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:48:47 2026 by rpki-client