Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/5493E832AF1511F09DB9CB78C4F9AE02.roa
File:                     5493E832AF1511F09DB9CB78C4F9AE02.roa (raw, json)
Hash identifier:          uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=
Subject key identifier:   D4:90:C3:B8:F8:17:09:CD:6A:A1:14:32:D3:0D:EC:E3:97:E8:90:09
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       54
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/5493E832AF1511F09DB9CB78C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 08:44:39 +0000
ROA not before:           Tue 03 Mar 2026 08:44:39 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     45589
IP address blocks:        163.8.48.0/21 maxlen: 21
                          163.8.48.0/22 maxlen: 22
                          163.8.64.0/19 maxlen: 20
                          163.8.160.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Mar  3 08:44:39 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a69f77-7e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b0:f5:ab:58:e8:b5:b7:7c:90:db:6e:fb:4a:
                    2e:fe:20:c7:86:2e:05:b1:f4:df:c9:86:59:44:2b:
                    68:df:ac:43:22:2f:90:56:12:17:64:31:58:fd:de:
                    eb:64:2c:76:9c:50:bb:3e:ec:79:1c:ad:3a:fb:1d:
                    79:c6:75:ca:64:be:07:9b:01:3f:3a:15:3b:94:52:
                    1e:71:61:14:c5:09:70:e5:3a:d2:f0:5c:54:db:1b:
                    51:b9:ba:0c:fd:84:89:9e:ea:74:66:c8:bc:fd:83:
                    fd:0d:2a:88:59:8d:f3:25:c2:5b:23:55:0d:4e:2d:
                    91:92:cb:0f:e0:a7:51:82:2d:ce:a1:95:2c:3f:4e:
                    4b:37:d7:88:e6:52:0c:5e:61:35:68:2e:16:87:72:
                    f6:a0:5b:0a:63:ae:c3:36:de:2c:54:2b:bc:72:92:
                    46:fa:26:b0:c8:4e:bc:12:00:b1:2f:66:5e:9a:49:
                    9e:5b:60:a8:a0:0c:d8:5a:32:27:2b:0e:97:30:4d:
                    6d:17:08:19:9b:59:12:5d:f0:20:72:71:e8:45:57:
                    3e:42:a8:12:a6:f8:40:2d:7b:2a:be:ff:6d:db:20:
                    4e:26:f6:e4:f5:6a:e3:a0:38:32:a5:6e:c2:1a:ff:
                    dc:39:be:22:4a:5c:09:e3:f7:74:41:f2:24:d9:47:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:90:C3:B8:F8:17:09:CD:6A:A1:14:32:D3:0D:EC:E3:97:E8:90:09
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/5493E832AF1511F09DB9CB78C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.48.0/21
                  163.8.64.0/19
                  163.8.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:d6:e2:ab:95:3e:9d:5a:24:01:cd:85:48:2a:b9:7d:59:63:
         cd:0a:ad:da:19:c5:a0:ba:77:e7:b7:ae:df:a3:2d:51:9b:2d:
         42:e2:eb:7a:0d:6a:e9:b3:58:a2:72:13:93:5c:70:1b:46:d4:
         15:e0:c0:ba:97:5f:b6:8c:c5:bb:d3:c9:dd:33:1e:5b:a1:92:
         d0:33:ba:19:fd:73:ca:81:c0:37:29:78:cb:8f:0d:3b:1a:7b:
         48:30:2e:11:27:95:ca:6f:b6:79:c6:81:d7:c8:ed:55:5f:c2:
         f1:f5:77:37:0a:00:ce:fa:7b:43:58:a2:f1:d8:b0:da:9c:42:
         51:59:b6:45:5a:47:9d:53:94:fe:46:08:96:53:ab:ac:0f:f5:
         f7:65:89:4c:36:3c:e3:5e:20:13:ab:cc:59:64:b7:4e:8f:09:
         d5:2e:39:85:80:5d:ae:17:28:62:93:a7:93:4c:2a:2d:2b:2b:
         33:1e:42:67:fa:7d:28:f5:d7:59:53:84:b4:99:bb:1d:b3:9d:
         e7:92:3b:28:06:d2:83:6f:59:8e:c6:43:1d:81:92:c8:93:54:
         3c:cf:c0:ba:33:9c:14:13:4a:b7:e9:ce:c4:ef:5c:04:b6:82:
         98:8d:9c:1d:9c:f0:a6:bf:97:fa:a1:ec:9e:77:77:6d:68:95:
         09:c1:f5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:37 2026 by rpki-client