Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/23C65C4CCCD511F180476A3E3066CEF9.roa
File:                     23C65C4CCCD511F180476A3E3066CEF9.roa (raw, json)
Hash identifier:          NRPImf71013xmIRECXC77PFDYEJXgLhGWMDIBPB+sqs=
Subject key identifier:   E2:21:D8:EF:23:4D:A5:7B:D0:AA:D5:06:A7:37:6E:FA:7D:7D:6B:17
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       01CA
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/23C65C4CCCD511F180476A3E3066CEF9.roa
Signing time:             Tue 20 Oct 2026 22:25:23 +0000
ROA not before:           Tue 20 Oct 2026 22:25:23 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     219075
IP address blocks:        163.8.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 03:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Oct 20 22:25:23 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6ad7ea52-de50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:04:ae:7a:84:9a:e3:87:aa:de:be:80:04:
                    47:6e:7c:5c:34:0c:82:bd:91:ac:7e:ab:ce:a1:c1:
                    7e:fd:30:b5:38:cd:11:0f:ed:07:9f:1f:28:2f:b4:
                    b9:5b:68:cf:e2:4d:b7:2e:22:a3:2e:e4:b6:13:2d:
                    51:3a:5d:af:9d:ef:9e:49:c5:c4:80:07:47:b0:8f:
                    c0:99:44:40:95:97:a4:4b:75:ae:60:8e:0b:e8:c0:
                    63:1d:98:cb:5d:67:53:76:0a:d5:a2:48:06:20:6e:
                    c4:73:f1:ef:21:d0:a2:e8:4d:d5:37:18:9c:c7:2f:
                    7e:a4:d4:d4:70:bf:78:ee:7e:22:e2:cb:05:f0:f1:
                    1f:60:ba:c0:a3:07:93:a0:67:74:23:90:15:27:22:
                    60:f2:fb:81:8b:7f:af:16:bd:e7:57:ff:a0:98:19:
                    40:d5:7d:10:04:10:d8:0b:82:31:cc:86:25:03:5a:
                    92:df:46:ee:07:c4:7b:37:2f:33:fa:ae:92:af:6f:
                    7f:80:54:0a:62:2b:30:66:43:a8:98:51:b8:85:01:
                    b2:09:40:4b:f4:87:95:2d:20:dd:db:16:fd:9f:03:
                    66:93:39:5c:1e:9e:53:f3:7a:e1:59:c4:a6:4a:dc:
                    a5:e9:6e:4a:fa:5e:1a:1c:f3:cd:88:25:b9:15:60:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:21:D8:EF:23:4D:A5:7B:D0:AA:D5:06:A7:37:6E:FA:7D:7D:6B:17
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/23C65C4CCCD511F180476A3E3066CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:67:79:70:a0:f8:07:98:10:3e:6b:e5:1b:89:72:8a:b7:fa:
         ac:5f:56:93:fb:6d:db:85:e8:6d:0f:c0:bd:2d:08:e6:60:48:
         ee:a3:78:61:74:c0:7b:1e:ee:67:94:1c:92:da:7f:1d:7e:a5:
         7b:60:13:a0:93:a1:50:cc:e4:8c:96:ce:51:dc:cb:79:8a:7e:
         7b:7b:28:d5:a0:92:c4:c1:49:ca:54:27:c1:9a:e6:92:15:14:
         1b:d2:4b:01:95:d1:7d:bd:89:98:89:21:01:01:4a:72:98:55:
         61:7d:e0:f8:58:bd:94:5b:40:99:01:d1:1d:1d:0b:a3:42:ed:
         9a:a1:1d:21:3c:8b:20:91:df:5f:6e:bf:47:ea:44:e3:4d:4d:
         ea:fe:10:16:09:11:b4:9a:59:56:86:e4:b9:31:70:65:3c:b1:
         5b:77:06:43:70:2d:be:05:e3:2b:07:ac:d5:3c:97:b8:93:b1:
         21:67:54:e0:dd:7d:81:3a:7f:a6:3d:bd:a5:e6:f7:fc:4e:86:
         1a:6e:d0:8f:b3:8b:16:41:f1:67:ca:2c:74:fe:4e:8f:4d:67:
         51:52:2c:3a:f7:6b:61:0f:6f:14:b5:c1:65:13:80:d0:56:2a:
         a7:57:0a:54:1c:7e:ee:94:62:04:82:ae:3e:a3:9a:f2:ac:8e:
         24:50:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:07 2026 by rpki-client