Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/A7349B8A499E11F19CE2905A97833773.roa
File:                     A7349B8A499E11F19CE2905A97833773.roa (raw, json)
Hash identifier:          tv8Ttyi8smlY2FRZQxJdaalHWRaIZpl5MIGpz7txhiY=
Subject key identifier:   6C:2E:90:BA:7D:B5:52:21:D0:3A:9F:66:7D:6D:67:70:69:D0:07:24
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       A6
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/A7349B8A499E11F19CE2905A97833773.roa
Signing time:             Wed 06 May 2026 23:08:56 +0000
ROA not before:           Wed 06 May 2026 23:08:56 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     401783
IP address blocks:        163.8.204.0/24 maxlen: 24
                          163.8.206.0/24 maxlen: 24
                          163.8.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 03:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: May  6 23:08:56 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69fbca08-5026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f1:04:8b:0f:90:20:2f:92:e7:cd:c9:c3:7e:
                    66:9b:de:67:1d:d6:3b:e5:a6:5f:cd:0d:55:48:e9:
                    ac:fb:8f:54:33:2b:53:e5:27:bd:68:82:99:ee:91:
                    d0:b8:3c:bd:bb:d4:1a:d0:93:55:09:40:02:46:9e:
                    bd:bb:43:f0:c6:ea:16:ba:66:b0:9c:d6:94:6a:c5:
                    ea:97:10:16:01:8a:40:b5:61:b7:93:96:1a:27:01:
                    cb:05:6b:f6:af:ee:38:0d:51:26:e1:e6:d2:31:4d:
                    99:eb:6e:88:a6:81:75:b7:b4:dc:e9:8f:40:fb:e0:
                    d0:63:6b:89:e8:c2:da:a8:57:83:23:16:d6:1e:1a:
                    f0:1c:40:c3:60:16:72:b1:94:20:29:b9:53:1f:1e:
                    09:4e:46:1e:df:27:44:aa:36:7f:e7:13:70:06:ea:
                    ec:de:2b:41:b2:a4:08:aa:48:48:cb:b0:a9:f3:45:
                    d8:1e:8a:07:7d:f8:d2:f2:94:5f:8a:31:c2:f9:e8:
                    f2:06:f4:00:b3:30:f4:37:c7:cf:6d:51:2b:03:77:
                    17:c1:b6:d2:5e:36:1e:49:40:8b:00:22:05:a1:82:
                    ca:34:df:bd:a7:4e:a1:3c:ba:87:1c:3e:80:ba:8e:
                    75:1b:6f:62:24:91:9b:c6:98:55:4c:98:b7:56:22:
                    bf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2E:90:BA:7D:B5:52:21:D0:3A:9F:66:7D:6D:67:70:69:D0:07:24
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/A7349B8A499E11F19CE2905A97833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.204.0/24
                  163.8.206.0/24
                  163.8.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:10:a7:03:de:49:d2:e7:4f:ce:40:66:6c:9b:9b:d9:ba:70:
         53:9c:b3:b1:8a:be:62:ba:45:17:78:9f:61:bb:ff:1e:38:c8:
         c9:7b:f4:8b:9c:17:b8:b4:70:6f:48:c6:0d:67:a8:a3:1b:28:
         00:35:b3:ab:2a:80:26:1e:6e:07:a1:ed:3f:0f:14:bb:c5:4c:
         67:f7:7a:c4:be:44:86:fc:bb:38:ee:bc:61:01:7e:25:41:79:
         aa:1f:45:ce:f9:f4:43:6a:6f:bc:68:8c:0c:d8:37:26:19:49:
         35:ac:ae:2e:25:b3:bc:a1:a0:ca:15:81:e3:c5:03:82:a8:6d:
         0f:ca:80:94:51:d5:24:51:4f:79:f4:28:f0:47:79:1d:9f:16:
         3d:a3:fa:88:46:5a:19:ad:6e:cf:60:87:4f:96:4f:72:42:5d:
         6b:1e:04:9c:6c:e6:12:6c:b9:83:9a:41:29:03:bf:c5:c4:d5:
         19:f7:f8:12:41:0d:8a:76:47:b8:9e:9f:17:77:c2:5b:df:83:
         53:75:7f:f8:81:95:ec:4a:31:03:35:b5:25:f0:f2:81:1c:98:
         90:d2:c4:0f:c4:11:93:bb:bd:68:1c:9b:dc:a7:f1:6b:73:d7:
         56:09:23:44:fe:b7:ab:85:6b:09:99:c8:1a:78:1d:81:cd:cd:
         f5:43:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:18 2026 by rpki-client