Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/23967BF24A7711F1A7BED77BA6833773.roa
File:                     23967BF24A7711F1A7BED77BA6833773.roa (raw, json)
Hash identifier:          Fp0dYx6TPqms3ShBwcnNza2eQIEhSvJF0hdWgmkuGzo=
Subject key identifier:   F1:5E:A4:B5:BA:70:68:4B:6D:A9:FB:E1:ED:6E:E8:06:BA:96:3D:32
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       AF
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/23967BF24A7711F1A7BED77BA6833773.roa
Signing time:             Fri 08 May 2026 00:44:58 +0000
ROA not before:           Fri 08 May 2026 00:44:58 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153347
IP address blocks:        163.8.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: May  8 00:44:58 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69fd320a-431d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:a1:a8:d2:2a:ac:aa:4d:bf:29:e9:cd:7c:
                    3b:73:e7:c3:12:6b:14:bb:42:af:f6:60:de:a7:d7:
                    2f:ba:e5:6c:f8:b8:85:e2:e8:22:ec:6d:3c:0c:fc:
                    4b:d6:81:ff:f7:9f:53:bb:4e:bf:09:98:7f:c1:6f:
                    93:87:84:55:b6:a8:ed:97:1b:9d:c3:b4:e4:1e:ea:
                    1a:38:da:96:59:d1:cd:b6:3f:81:d7:67:cc:f4:b2:
                    c7:f1:99:9f:50:32:44:bf:65:76:e9:0b:8a:67:ce:
                    ca:62:2f:2c:91:01:63:85:2f:f4:e0:24:b5:98:9b:
                    b8:71:94:a4:db:a5:8e:6a:b4:cd:c7:dc:5f:50:0f:
                    c0:19:9c:76:6a:e6:d6:ea:da:42:89:6c:95:8b:99:
                    32:9c:41:a0:9a:02:6c:cf:a4:1f:03:23:91:b5:2a:
                    38:cc:0e:8c:9e:00:42:10:58:ad:0c:68:17:79:17:
                    46:f2:7d:f5:a6:9f:88:1b:05:d5:0e:d8:df:b4:a9:
                    4e:47:91:84:fd:5e:31:6d:0c:e6:15:fc:88:81:39:
                    e0:3d:ed:c4:60:1a:b8:46:26:9d:35:51:a0:d1:a9:
                    0e:d5:63:26:22:61:49:7b:70:5d:66:3c:e1:b9:05:
                    f7:0d:88:c6:fc:2a:db:ca:00:9d:d0:b0:2a:4c:b9:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5E:A4:B5:BA:70:68:4B:6D:A9:FB:E1:ED:6E:E8:06:BA:96:3D:32
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/23967BF24A7711F1A7BED77BA6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:bf:27:fd:17:78:d3:e5:db:24:2d:ce:cb:47:1b:c1:8b:a3:
         aa:cf:f2:b2:eb:fe:0f:7b:41:93:99:b0:40:1e:a5:9c:17:9a:
         83:11:1e:4d:6d:79:73:32:45:6d:ba:34:77:41:5b:a2:c7:b6:
         3e:19:dd:68:c7:5b:d8:a3:53:a6:cf:51:09:6c:42:08:14:de:
         be:29:47:ee:53:a0:49:b3:29:13:33:35:34:28:ce:52:f1:1e:
         cd:80:7b:3a:b1:d9:d5:1c:44:78:59:ca:af:2c:0f:93:eb:e5:
         6f:e2:09:aa:d5:e6:45:13:be:e2:5d:0c:ae:b6:1a:2d:20:63:
         a7:9a:11:42:86:e3:55:50:f8:ff:11:b4:5d:2e:c9:59:1c:89:
         23:55:ad:52:3e:06:fe:cb:d1:c1:e0:3e:7f:8b:79:c9:cc:3e:
         e0:26:4e:1d:09:40:fe:08:38:ef:b1:74:73:ee:f7:ac:fb:8a:
         28:ef:f1:71:76:85:67:90:a3:a0:37:cf:0a:92:5b:f2:a8:c9:
         4d:45:ec:bb:d4:c0:63:04:76:48:a8:fa:89:2e:e3:39:a7:d7:
         20:dc:0c:55:ac:81:eb:16:cf:10:28:b1:4e:d4:51:46:7b:61:
         d4:c3:c4:85:86:46:93:7b:6d:05:f6:ff:42:b7:60:be:16:a6:
         43:c6:79:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:12 2026 by rpki-client