Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/E798D1FC8C7C11F1935F28C96511F970.roa
File:                     E798D1FC8C7C11F1935F28C96511F970.roa (raw, json)
Hash identifier:          MmfMKjzryKAERgtdM3KI0fHay6JKngE1MhsrksxyP6M=
Subject key identifier:   4F:31:0A:FB:FC:14:E6:A9:17:B7:8A:09:41:8A:7C:B1:91:2E:BE:E2
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       0120
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/E798D1FC8C7C11F1935F28C96511F970.roa
Signing time:             Fri 31 Jul 2026 01:12:32 +0000
ROA not before:           Fri 31 Jul 2026 01:12:31 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     219105
IP address blocks:        163.8.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 23:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Jul 31 01:12:31 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a6bf67f-0c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a1:08:2c:32:2c:1e:22:0e:e3:cc:2a:20:a2:
                    02:20:ef:ea:6f:da:df:0b:a9:6f:54:05:8e:6b:ac:
                    ab:64:92:cb:10:19:3e:e7:5f:b1:0b:0e:e2:03:5b:
                    6b:02:9d:ae:0e:5a:a1:77:6e:e6:c9:0f:82:00:37:
                    19:64:67:1d:79:ca:51:eb:93:95:77:d5:b7:bd:b6:
                    1b:aa:1a:f2:1b:f2:d8:ee:1e:b3:e3:ac:2a:b6:c3:
                    f2:66:be:95:42:d1:41:bc:72:4a:a7:c4:3f:70:29:
                    0a:c4:9c:d1:73:fb:5b:f5:e3:a9:c3:70:c2:fc:84:
                    cb:b6:9c:63:68:8b:f6:83:04:0c:9a:89:8e:06:9e:
                    b6:96:e0:af:9c:7d:df:f7:50:dc:e9:8d:67:b8:6f:
                    9d:b6:85:70:80:cc:d8:cb:c6:64:eb:62:84:66:86:
                    b3:ba:a7:96:22:97:fb:8b:81:ad:e9:52:72:cd:5b:
                    2b:4b:33:2c:3b:77:42:25:ce:93:88:05:e5:5e:1d:
                    65:0f:de:dd:66:17:b0:2a:7d:06:6c:8d:a6:a6:cb:
                    37:a8:0b:75:54:e3:ec:23:ee:30:07:7d:b5:49:2d:
                    f3:72:f4:06:61:3c:90:d9:c2:9b:00:7e:f1:fb:50:
                    e5:b8:eb:aa:40:1a:51:0e:5f:3f:20:14:e8:bf:dc:
                    fc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:31:0A:FB:FC:14:E6:A9:17:B7:8A:09:41:8A:7C:B1:91:2E:BE:E2
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/E798D1FC8C7C11F1935F28C96511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:26:4a:f1:15:fc:42:b0:76:02:74:67:19:96:38:0c:6a:bd:
         bc:86:0a:b1:05:0a:09:0b:29:bd:25:b7:c6:70:bc:cd:9c:f5:
         7a:0b:53:bc:1c:11:e6:c5:82:e5:b5:8a:c7:eb:7a:95:a7:09:
         60:76:f4:aa:8a:19:e2:6d:56:89:0c:2b:8c:3e:48:11:77:10:
         26:cf:e8:63:f7:74:db:85:5b:b1:47:99:ba:fa:0c:c8:d0:c1:
         70:b8:2c:0f:b1:3f:42:11:c2:9a:8d:d8:39:0c:e4:9b:dc:82:
         c0:0e:b9:c2:72:cc:6e:56:06:10:14:9f:5c:9c:5e:d4:1e:64:
         2c:31:e0:15:e9:6f:9d:0b:60:40:2a:bd:99:38:08:d3:fb:a8:
         5a:fd:6f:71:8a:c8:63:f1:28:04:b8:19:a8:e3:f3:0b:69:64:
         dc:cb:e4:72:74:19:f2:85:ed:28:26:75:a0:28:5a:cc:3c:7e:
         01:e4:95:71:2b:c1:c4:d2:b0:f7:67:c2:a4:9a:79:28:5b:08:
         28:dd:1d:df:d0:5e:68:50:8a:16:af:fc:20:19:c0:c3:a6:a0:
         2e:50:eb:3e:1b:f3:9f:12:2e:32:83:27:b9:84:0c:ea:3e:40:
         48:ac:0e:6e:21:9d:5f:e4:4d:f4:af:d9:64:97:52:be:aa:1e:
         79:a9:31:92
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEwMDk3NzVEOTFC
QTQxMkI2M0QwHhcNMjYwNzMxMDExMjMxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZiZjY3Zi0wYzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApaEILDIsHiIO48wqIKICIO/qb9rfC6lvVAWOa6yrZJLLEBk+51+xCw7iA1tr
Ap2uDlqhd27myQ+CADcZZGcdecpR65OVd9W3vbYbqhryG/LY7h6z46wqtsPyZr6V
QtFBvHJKp8Q/cCkKxJzRc/tb9eOpw3DC/ITLtpxjaIv2gwQMmomOBp62luCvnH3f
91Dc6Y1nuG+dtoVwgMzYy8Zk62KEZoazuqeWIpf7i4Gt6VJyzVsrSzMsO3dCJc6T
iAXlXh1lD97dZhewKn0GbI2mpss3qAt1VOPsI+4wB321SS3zcvQGYTyQ2cKbAH7x
+1DluOuqQBpRDl8/IBTov9z8NQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE8xCvv8
FOapF7eKCUGKfLGRLr7iMB8GA1UdIwQYMBaAFLVOCEZbVFzu8eLhAJd12RukErY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0Ni8wODg3MDFCOEFC
QjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0VVhPN3g0dUVBbDNYWkc2UVN0
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3RqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzJCNDYvMDg4NzAxQjhBQkI0MTFGMEFCRjIwOTQwQzRGOUFFMDIvRTc5OEQxRkM4
QzdDMTFGMTkzNUYyOEM5NjUxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAowjcMA0GCSqGSIb3DQEBCwUAA4IBAQBzJkrxFfxCsHYCdGcZljgM
ar28hgqxBQoJCym9JbfGcLzNnPV6C1O8HBHmxYLltYrH63qVpwlgdvSqihnibVaJ
DCuMPkgRdxAmz+hj93TbhVuxR5m6+gzI0MFwuCwPsT9CEcKajdg5DOSb3ILADrnC
csxuVgYQFJ9cnF7UHmQsMeAV6W+dC2BAKr2ZOAjT+6ha/W9xishj8SgEuBmo4/ML
aWTcy+RydBnyhe0oJnWgKFrMPH4B5JVxK8HE0rD3Z8KkmnkoWwgo3R3f0F5oUIoW
r/wgGcDDpqAuUOs+G/OfEi4ygye5hAzqPkBIrA5uIZ1f5E30r9lkl1K+qh55qTGS
-----END CERTIFICATE-----
Generated at Sat Aug 29 08:23:56 2026 by rpki-client