Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/2D01B33649CE11F1962271F3A6833773.roa
File:                     2D01B33649CE11F1962271F3A6833773.roa (raw, json)
Hash identifier:          fE3u6ug0IGHQpJAT/PUe02heuwmqk8tqifUw2JFm9XE=
Subject key identifier:   69:70:FA:0D:B0:9F:14:F6:CB:F6:2A:7C:A9:DD:79:97:8D:2C:65:F3
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       CC
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/2D01B33649CE11F1962271F3A6833773.roa
Signing time:             Sun 31 May 2026 02:21:35 +0000
ROA not before:           Sun 31 May 2026 02:21:35 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        163.8.32.0/24 maxlen: 24
                          163.8.34.0/24 maxlen: 24
                          163.8.36.0/24 maxlen: 24
                          163.8.39.0/24 maxlen: 24
                          163.8.41.0/24 maxlen: 24
                          163.8.43.0/24 maxlen: 24
                          163.8.44.0/24 maxlen: 24
                          163.8.198.0/24 maxlen: 24
                          163.8.200.0/24 maxlen: 24
                          163.8.202.0/24 maxlen: 24
                          163.8.210.0/24 maxlen: 24
                          163.8.212.0/24 maxlen: 24
                          163.8.214.0/24 maxlen: 24
                          163.8.220.0/24 maxlen: 24
                          163.8.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: May 31 02:21:35 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a1b9b2f-c7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:80:50:7b:cb:ea:db:e9:a9:15:c9:34:84:2a:
                    ac:43:d3:97:a7:f8:a8:f3:d4:93:fc:0c:cf:6d:30:
                    32:76:b2:f5:eb:a5:51:52:0c:53:d8:84:86:0c:5d:
                    c7:33:ec:e4:38:80:dd:f8:9f:73:08:c5:01:2e:20:
                    a8:3e:c2:15:23:f7:5f:c5:2f:b7:35:05:ed:40:0e:
                    d9:61:f0:bc:c4:d1:68:2e:f3:93:56:4c:d6:d4:8f:
                    ba:99:e2:8a:fa:38:6b:da:88:65:c9:e4:b7:94:7e:
                    fa:7d:94:32:38:59:91:81:6b:9a:ad:17:83:b3:40:
                    08:4f:c3:84:d7:5a:b6:8f:87:b5:89:86:30:aa:0e:
                    30:d7:38:f8:e6:d6:1d:64:69:de:57:a3:22:6c:b6:
                    de:80:03:72:8c:bd:23:eb:08:ce:05:0a:8e:42:3b:
                    b0:6a:c7:b1:68:e6:f6:fc:7e:35:a8:8e:af:4f:28:
                    bb:32:45:de:06:4d:bf:bb:4c:56:6f:b7:90:36:7e:
                    95:ed:b1:c0:b3:65:f9:ca:5c:43:20:82:79:11:9e:
                    e0:85:04:59:05:80:98:cc:59:c8:1f:eb:15:13:7b:
                    09:bd:ea:22:97:6f:b3:8b:a0:d5:27:1d:73:d3:dc:
                    3c:07:2c:52:79:22:26:ea:0a:39:69:e7:04:2b:01:
                    0f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:70:FA:0D:B0:9F:14:F6:CB:F6:2A:7C:A9:DD:79:97:8D:2C:65:F3
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/2D01B33649CE11F1962271F3A6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.32.0/24
                  163.8.34.0/24
                  163.8.36.0/24
                  163.8.39.0/24
                  163.8.41.0/24
                  163.8.43.0-163.8.44.255
                  163.8.198.0/24
                  163.8.200.0/24
                  163.8.202.0/24
                  163.8.210.0/24
                  163.8.212.0/24
                  163.8.214.0/24
                  163.8.220.0/24
                  163.8.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:76:7f:f2:0a:28:92:af:2d:31:5a:6c:02:cb:85:16:06:95:
         5c:77:11:a5:84:bc:70:ee:69:dc:1c:0e:0b:20:22:9f:34:99:
         6c:5a:c0:00:0b:fb:ae:38:dc:c7:2b:5c:8e:51:af:4b:e2:14:
         67:10:16:3b:3f:c4:a6:a4:71:e7:88:6a:1b:44:56:0b:66:d3:
         02:a8:46:e8:d7:d6:03:ac:28:b0:db:f1:8f:85:ac:c1:aa:8d:
         69:2a:6e:fe:fe:70:cd:54:ee:1e:60:c8:96:04:35:63:99:0a:
         eb:a0:e3:49:d4:90:47:ca:4a:16:fe:c6:ee:53:b3:ba:5c:90:
         c9:75:60:09:21:d1:c7:db:c9:b5:a4:23:48:c4:99:ca:0d:2c:
         16:17:86:77:d9:fd:96:76:67:2e:63:6b:0c:86:d9:42:f4:c4:
         9a:3d:5b:83:03:73:c8:7a:da:09:c5:4a:b5:45:cd:01:44:ed:
         96:3a:45:ed:d7:ce:bd:6b:c8:8f:b0:40:27:f9:57:b9:75:85:
         d0:8e:23:6a:64:3f:01:8f:7c:e0:30:f2:2d:85:70:24:7d:53:
         ef:88:1b:29:a6:e4:62:de:93:b9:65:55:a2:99:92:26:f4:0e:
         ff:a7:de:15:b7:d2:02:5c:7d:b4:41:7c:ef:62:1d:88:b9:a5:
         ad:e9:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:24 2026 by rpki-client