Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/DF3E21307BFE11F198B5A8F78EA30FBC.roa
File:                     DF3E21307BFE11F198B5A8F78EA30FBC.roa (raw, json)
Hash identifier:          NT30pur8xhY9PcKqmg6IwjPQmddy3T3G46Qh5vdQmt8=
Subject key identifier:   0C:A4:A3:AD:CC:31:D4:77:2A:12:1F:01:5D:FC:21:71:2E:CC:01:0C
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       FC
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/DF3E21307BFE11F198B5A8F78EA30FBC.roa
Signing time:             Fri 10 Jul 2026 01:30:02 +0000
ROA not before:           Fri 10 Jul 2026 01:30:02 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     212238
IP address blocks:        163.8.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 01:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Jul 10 01:30:02 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a504b1a-ac0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:cb:2b:f8:bc:5a:d7:b9:17:db:15:23:0b:
                    79:32:60:37:ff:77:55:b2:cc:77:5a:ee:a1:61:a7:
                    ac:d2:7e:c2:64:46:80:db:54:08:30:5b:cf:74:13:
                    03:df:f1:25:0e:f8:50:af:d6:8d:49:b8:d0:cb:65:
                    46:54:f0:fe:2d:43:56:0d:c2:da:17:a1:a2:38:b9:
                    da:7e:bb:a4:13:db:fb:a8:cc:34:46:25:36:2a:3f:
                    91:c3:4f:47:4f:55:0d:59:8e:51:75:06:c5:4e:f8:
                    2b:51:49:9c:7f:91:db:52:a3:cc:b1:48:cd:91:77:
                    5b:34:53:90:2f:37:93:20:59:5a:8b:0f:4a:3a:7e:
                    1c:bb:2a:4c:54:91:5d:06:43:ed:da:fe:14:1c:03:
                    4e:67:34:c7:80:5f:87:21:37:26:e9:77:3c:72:c0:
                    7d:da:b0:f6:68:23:fa:8e:ee:f7:3e:5b:4c:75:87:
                    72:f4:fb:66:47:45:c7:97:10:35:43:29:99:b0:54:
                    ca:3a:af:7d:d8:8e:c7:9e:bf:3d:fc:ad:b0:f3:d6:
                    3e:b4:98:b1:7e:73:1d:a2:22:60:76:2f:1d:9b:c6:
                    14:76:d9:ee:ca:8a:59:2e:32:95:d2:6d:0e:91:9c:
                    2c:39:7d:18:09:8e:c0:61:f2:44:57:6e:87:80:86:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A4:A3:AD:CC:31:D4:77:2A:12:1F:01:5D:FC:21:71:2E:CC:01:0C
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/DF3E21307BFE11F198B5A8F78EA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:b9:f8:29:13:4d:0f:8a:b9:50:df:3e:94:29:48:3b:d7:
         ca:aa:58:67:72:45:06:2e:de:8b:b0:7d:63:88:a8:58:e0:df:
         17:fc:6f:99:33:c0:9c:70:e6:4b:d1:64:c1:b9:40:15:11:49:
         19:43:2a:47:0a:6c:a4:b7:bd:45:bf:87:8b:d2:b1:35:df:d4:
         48:71:fe:f9:c4:1f:e7:24:1b:7c:e7:bc:59:1c:aa:e4:7d:4b:
         62:c1:b7:da:d1:65:38:d1:22:96:1e:92:43:78:b5:31:59:b3:
         fb:87:d2:29:f8:e2:a2:f1:ab:fe:f9:59:6e:96:4e:8d:49:bd:
         0f:d3:06:cb:ba:7d:bc:0b:14:2a:ba:0a:ae:7f:3f:2e:6b:4d:
         f4:36:6e:74:b7:96:fb:ed:54:c1:07:3c:d1:e6:e8:54:a8:62:
         82:51:31:31:95:dd:1e:a8:83:81:8b:41:a3:46:54:45:1d:06:
         5a:ad:83:67:35:72:0b:01:59:c8:b6:e7:94:82:e4:28:87:8d:
         03:97:e4:e3:d5:6d:94:2c:01:83:77:10:2e:58:1f:0c:ab:6a:
         ae:52:0b:c5:b7:ad:27:7a:6c:0a:59:30:d2:08:2e:2b:3f:df:
         7d:c4:af:5e:05:59:2e:bb:6f:ad:c0:b8:f9:bd:b6:7b:ff:5b:
         20:a2:a2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:31:27 2026 by rpki-client