Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/B83FA29680DD11F1836EF1645EA30FBC.roa
File:                     B83FA29680DD11F1836EF1645EA30FBC.roa (raw, json)
Hash identifier:          w2ElC61/vAQm+7bnyJttAYhounZrV79k5+yvdBXVa+s=
Subject key identifier:   8B:88:99:2D:C8:D6:76:6A:4E:4A:8C:CD:1F:71:2D:28:B4:8A:CE:4D
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       010B
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/B83FA29680DD11F1836EF1645EA30FBC.roa
Signing time:             Mon 20 Jul 2026 00:42:51 +0000
ROA not before:           Mon 20 Jul 2026 00:42:51 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     834
IP address blocks:        163.8.32.0/24 maxlen: 24
                          163.8.34.0/24 maxlen: 24
                          163.8.36.0/24 maxlen: 24
                          163.8.39.0/24 maxlen: 24
                          163.8.41.0/24 maxlen: 24
                          163.8.42.0/24 maxlen: 24
                          163.8.43.0/24 maxlen: 24
                          163.8.59.0/24 maxlen: 24
                          163.8.210.0/24 maxlen: 24
                          163.8.212.0/24 maxlen: 24
                          163.8.214.0/24 maxlen: 24
                          163.8.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Jul 20 00:42:51 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a5d6f0b-4b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:e6:37:4d:eb:24:6f:89:4a:29:e3:2b:14:
                    46:e3:c6:f9:11:6b:0c:5c:cf:76:ce:4f:86:78:3c:
                    64:9f:4d:ce:00:06:e7:20:da:90:6f:e4:6f:2f:35:
                    fc:fc:59:2d:27:52:68:3d:b5:8e:25:82:82:61:e1:
                    de:88:a7:9a:c9:8f:c6:ef:b8:16:94:61:90:51:b2:
                    ff:d8:a6:f9:06:2f:ba:09:0b:ca:24:41:62:c1:c7:
                    b6:7f:63:b4:85:5b:67:35:b1:67:f3:b6:49:87:4d:
                    34:3b:d2:29:ac:0a:6f:ac:83:6b:99:f5:48:5e:d5:
                    70:dc:36:5a:24:fd:5c:84:de:f5:6f:c5:9c:22:10:
                    5f:e8:c1:c5:1c:0d:3c:a8:3d:fc:ee:56:d1:c4:ba:
                    8c:7a:52:31:07:c0:de:57:d5:07:8a:ac:9f:1a:9f:
                    ca:60:d6:0e:c8:d7:e2:1e:0f:a5:90:10:4f:0b:88:
                    c3:68:2a:dd:1c:70:13:72:14:ff:47:62:b9:37:55:
                    1e:81:ef:91:0b:5a:fe:0e:6a:c7:54:2b:80:ab:04:
                    56:f4:14:86:d7:44:04:93:f4:fe:86:f8:9b:3a:c5:
                    c1:7f:50:0e:13:50:4d:28:31:ee:d1:d5:97:1b:e3:
                    72:f6:85:87:79:a4:58:e3:e8:a5:b1:fc:92:2e:3a:
                    c7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:88:99:2D:C8:D6:76:6A:4E:4A:8C:CD:1F:71:2D:28:B4:8A:CE:4D
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/B83FA29680DD11F1836EF1645EA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.32.0/24
                  163.8.34.0/24
                  163.8.36.0/24
                  163.8.39.0/24
                  163.8.41.0-163.8.43.255
                  163.8.59.0/24
                  163.8.210.0/24
                  163.8.212.0/24
                  163.8.214.0/24
                  163.8.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:2e:27:8e:50:83:53:2c:da:6d:c2:bb:f5:53:e1:e0:87:4b:
         c8:a5:04:ee:f5:9d:07:96:76:c0:1f:b3:36:83:17:c4:e3:8f:
         a3:3e:6b:a5:2d:97:a6:7b:3d:c0:b4:7d:de:32:7e:58:e2:cf:
         db:c9:16:8a:48:7a:40:ae:94:c9:13:45:40:e5:15:6c:42:81:
         64:c2:45:fb:47:60:3b:52:43:dc:e1:e9:48:62:80:7d:ce:ed:
         dd:7a:b6:81:be:12:ee:9e:f8:ba:d0:d2:5c:4f:64:c8:b5:c1:
         09:ef:ef:92:12:dc:df:15:e7:e3:4f:51:57:76:f2:b6:44:b6:
         79:e4:02:31:01:2b:62:09:cc:ef:84:d9:6b:ec:b6:45:45:fe:
         5e:93:d8:27:7b:6c:28:c1:c4:fb:f9:14:4a:73:ae:f8:f3:22:
         3f:b6:82:cc:db:60:04:e8:79:13:af:7c:e5:c5:da:33:81:a7:
         3e:82:9c:9d:22:6c:1f:a3:68:39:05:19:5b:8e:2c:fb:3a:3b:
         a5:de:bf:ff:7d:cb:61:ad:bc:e7:41:cd:0a:b0:80:84:c6:fe:
         ac:4f:d1:93:93:94:f6:52:47:65:43:e9:7e:36:59:e7:51:5e:
         88:8b:16:ed:ad:18:3b:65:b3:8d:67:43:28:0a:d5:f1:31:80:
         b0:ef:40:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:33 2026 by rpki-client