Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/9FA8D4DCA50411F18265DE6C3311F970.roa
File:                     9FA8D4DCA50411F18265DE6C3311F970.roa (raw, json)
Hash identifier:          ncxhXez+ge66tRuP9GlI5BQTNpxBURFVOTzkOlVAARM=
Subject key identifier:   12:AF:FD:25:7E:8D:31:FF:06:02:CC:0F:D0:6F:36:5D:9C:0B:23:B7
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       0183
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/9FA8D4DCA50411F18265DE6C3311F970.roa
Signing time:             Mon 31 Aug 2026 06:24:30 +0000
ROA not before:           Mon 31 Aug 2026 06:24:30 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153736
IP address blocks:        163.8.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Aug 31 06:24:30 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a951e1e-57fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:aa:fe:32:76:66:f6:ab:83:61:e5:bb:ac:
                    d4:e7:c8:70:e5:7c:7e:35:0a:8e:3b:1f:7b:0a:7f:
                    fe:38:e3:f3:75:ad:91:54:a5:f2:4e:ec:0c:90:be:
                    13:4c:8f:2d:74:d0:2d:89:d2:96:b6:87:c5:09:60:
                    e5:d3:4a:1d:f4:5e:13:3c:d9:03:64:15:92:9f:75:
                    04:32:be:55:e2:81:58:49:1c:b2:98:14:72:1f:0a:
                    7f:77:6e:fb:02:39:8f:06:87:b0:6d:91:cf:8f:a8:
                    1e:17:5f:21:be:1e:42:43:c7:af:ce:5f:23:87:1b:
                    c5:d0:ad:28:5f:04:0d:00:bc:62:68:a6:8d:88:95:
                    c8:17:31:38:c4:51:a9:3f:22:18:9c:db:70:25:52:
                    55:2c:e5:6b:8a:87:a2:1a:6d:a3:50:b4:d1:68:65:
                    39:52:49:c3:56:53:b4:c0:07:a3:37:0e:08:74:79:
                    12:67:41:2e:fd:1e:42:60:6d:c7:0a:ca:e1:6e:de:
                    4d:08:a9:14:c6:d7:3b:a4:38:2e:ce:6a:6b:23:74:
                    45:3a:0e:01:fe:de:6f:cc:62:e1:e8:7e:2f:da:09:
                    30:8f:3a:5b:3d:73:a6:50:46:87:16:46:c6:a8:7a:
                    ca:4f:2d:9a:b2:09:a6:e5:b4:a6:37:13:5b:e2:f4:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AF:FD:25:7E:8D:31:FF:06:02:CC:0F:D0:6F:36:5D:9C:0B:23:B7
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/9FA8D4DCA50411F18265DE6C3311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:60:d3:e0:35:fa:d8:f9:e6:0a:fc:45:98:eb:62:ce:94:
         fb:3d:99:45:60:db:3f:7a:6b:dc:02:68:a9:9e:8d:3a:36:c9:
         cf:cd:e0:c5:73:bd:da:0a:22:02:f4:0d:a1:c3:27:60:e7:38:
         e7:1d:f9:cb:37:6f:1a:5c:3b:76:e2:eb:0a:3f:9e:c5:46:de:
         5a:96:86:c1:9b:3f:ee:a4:24:28:6a:ef:39:2d:37:8a:bc:38:
         86:42:f5:9f:7f:e5:8a:09:2f:a6:a2:c9:3d:05:3d:6c:34:3d:
         dd:e9:25:07:84:e3:2a:d6:aa:c9:f6:09:d7:c7:0e:9a:64:20:
         53:ed:1f:f0:a8:28:85:d2:93:2c:5d:06:4d:7a:49:ad:13:2f:
         6b:7e:e8:a6:b9:7d:46:22:57:23:91:15:75:21:19:54:87:e6:
         20:fe:73:3b:21:c1:a8:cf:c8:00:ab:50:01:ac:b1:95:fa:41:
         98:b0:48:26:e7:52:79:7c:b9:bd:d9:ca:ef:b7:d0:20:4b:5e:
         07:a8:7c:92:9b:9a:e2:a7:ca:dd:4d:80:bf:23:f2:79:4e:bf:
         f1:4d:6e:08:ee:18:c6:d2:1d:b7:1a:cb:0c:76:56:c3:3e:68:
         c1:c1:83:3a:f4:a4:d7:9c:46:ed:96:eb:43:17:a1:60:0e:fe:
         4f:84:11:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:49:02 2026 by rpki-client