Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/DF86A79EAA4711F18D6FC91D5811F970.roa
File:                     DF86A79EAA4711F18D6FC91D5811F970.roa (raw, json)
Hash identifier:          di6G4Ok2YL2ICDAjJ+SX840gtU1xkz52o/rsk7i69L0=
Subject key identifier:   DD:7B:97:4F:96:53:E2:B0:32:EE:78:16:C1:BF:9E:87:9E:15:85:90
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       0193
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/DF86A79EAA4711F18D6FC91D5811F970.roa
Signing time:             Sun 06 Sep 2026 23:08:30 +0000
ROA not before:           Sun 06 Sep 2026 23:08:30 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     401362
IP address blocks:        163.8.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Sep  6 23:08:30 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a9df26d-7195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:0d:85:3c:fc:5c:cd:87:69:09:fc:6f:0e:
                    f2:02:eb:71:be:90:77:70:1a:4a:58:26:62:05:74:
                    6d:53:f3:0c:a6:e1:c0:ae:42:3a:c5:75:28:ef:13:
                    68:7f:74:27:7b:b4:ee:3e:d7:94:98:ee:5a:be:11:
                    bf:16:de:cb:60:dc:5f:02:0d:2e:08:5a:bb:4c:39:
                    8f:a7:e5:f0:af:e4:98:ee:62:c1:f6:b5:dc:e5:18:
                    2f:7c:9a:fb:b6:c4:20:1a:9f:d4:20:c1:c9:5a:21:
                    6e:c0:13:1d:54:58:4d:c7:08:c4:89:f2:67:97:f6:
                    bd:5a:70:0a:66:6c:a4:95:5e:31:d3:c0:49:6b:4f:
                    5c:cd:df:3b:f1:dc:46:92:19:75:2a:31:39:1f:9f:
                    35:06:06:e8:d6:26:96:c5:43:a4:f0:b3:17:ac:65:
                    b3:f2:b7:b6:4e:77:02:77:83:c1:74:ec:4a:41:62:
                    93:f2:b0:16:80:aa:af:54:2f:2f:73:dc:8e:42:33:
                    0f:34:80:38:ed:e8:43:85:6d:5c:7c:7d:f8:0b:54:
                    c6:67:f0:25:50:c7:5e:a9:f2:3e:40:d1:46:40:8d:
                    a5:1d:da:f5:60:ca:22:c2:47:3d:e0:44:b2:40:f5:
                    74:8e:85:84:cc:06:96:79:72:e2:0f:39:b9:86:15:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7B:97:4F:96:53:E2:B0:32:EE:78:16:C1:BF:9E:87:9E:15:85:90
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/DF86A79EAA4711F18D6FC91D5811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:24:56:6f:af:b0:07:71:c5:e8:3f:9a:20:f6:98:f3:36:7a:
         38:87:93:44:49:0f:d0:fb:8b:08:9c:06:dc:47:f9:a1:9b:3b:
         c1:1c:ad:9d:94:84:c7:42:6b:c5:93:67:f6:64:ad:f3:b3:cd:
         32:95:a4:b8:de:28:7a:e8:3b:09:a1:dc:cd:53:a7:fc:7e:0c:
         62:b7:0f:29:7e:12:94:bf:2a:f6:98:b9:13:28:2c:4f:6f:9e:
         c1:67:e0:41:1d:40:e7:c2:b4:d9:7d:98:be:57:20:0a:69:79:
         0d:27:26:36:38:8d:38:0e:02:e4:d7:59:28:54:3b:cc:9c:a2:
         f3:68:99:43:aa:cc:5c:44:dc:fb:3c:59:8f:82:66:9b:56:a0:
         ec:b0:fb:c0:ae:be:a4:c7:ba:57:fe:ba:f4:11:da:ee:40:9f:
         61:d7:42:4f:7a:6f:7c:57:23:4b:9d:ac:93:71:e2:ec:4d:9a:
         ba:49:28:7e:52:2f:cc:9a:c4:6a:55:c5:08:a4:92:cf:f1:88:
         57:82:3e:97:3f:8d:b2:93:34:28:1e:34:5b:a2:50:2d:d8:81:
         66:d7:ef:04:14:96:41:67:af:bc:41:9c:8b:f2:20:9a:96:db:
         a5:9f:1e:b9:03:50:0a:8c:6a:90:98:a8:90:2e:fb:78:f4:ed:
         c0:5d:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:21 2026 by rpki-client