Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/FB82DC8A6A1C11F1881DA3A97247A888.roa
File:                     FB82DC8A6A1C11F1881DA3A97247A888.roa (raw, json)
Hash identifier:          FJDR9Q0fg7oHU187h+yL9+qMxbc318Uq6tNh6JulIUM=
Subject key identifier:   AD:F4:0F:42:F1:3B:14:A6:DF:D7:EA:C4:B8:D4:28:09:12:CA:06:81
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       0103
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/FB82DC8A6A1C11F1881DA3A97247A888.roa
Signing time:             Thu 16 Jul 2026 06:15:17 +0000
ROA not before:           Thu 16 Jul 2026 06:15:17 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     214432
IP address blocks:        163.8.209.0/24 maxlen: 24
                          163.8.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Jul 16 06:15:17 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a5876f5-45f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d3:5e:2c:7d:ad:c4:d1:69:06:f9:04:74:bd:
                    0d:f7:f2:46:66:b0:01:1e:f9:72:ab:ca:2c:90:af:
                    ec:79:0e:7c:a4:0b:a5:25:f4:0a:e5:4d:0d:8a:06:
                    e2:3c:35:61:99:0a:60:08:7f:68:c5:fa:53:82:68:
                    86:0e:38:44:21:b8:06:b3:c0:2d:fa:94:2f:0a:2f:
                    a0:df:62:f0:45:e5:d1:e5:9c:1c:c9:d3:b5:8d:07:
                    34:86:18:af:de:fb:26:1b:06:84:2c:1d:c4:0a:77:
                    29:b3:6d:0a:8b:7e:5a:e1:57:21:f9:bf:4c:95:05:
                    45:2b:40:5c:21:46:bb:a2:ee:93:6b:3c:34:9d:c9:
                    c3:22:96:60:bb:25:79:4a:75:84:17:05:96:a2:46:
                    0f:20:4e:6c:ce:3b:f3:2c:93:29:06:94:ad:2f:9b:
                    1f:ab:3c:31:e1:6f:1e:b4:92:18:cc:23:98:e2:c3:
                    ca:07:9e:ca:99:8f:ff:21:b1:50:e4:dc:ee:03:9a:
                    da:88:ba:47:c6:4a:e6:b9:8a:33:8b:f8:cd:da:3f:
                    3a:9c:f9:3c:dc:44:3f:82:e7:24:de:f8:7f:10:29:
                    e3:c7:8c:a2:5d:4e:9a:aa:b9:fe:fc:85:51:07:a6:
                    48:f8:01:58:b2:70:61:8b:7c:0c:c3:a0:bc:ba:fe:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F4:0F:42:F1:3B:14:A6:DF:D7:EA:C4:B8:D4:28:09:12:CA:06:81
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/FB82DC8A6A1C11F1881DA3A97247A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.8.209.0/24
                  163.8.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:7d:67:b0:ad:3f:9c:d8:14:24:5f:71:4c:5c:97:93:0d:d9:
         3c:7a:10:92:04:39:c6:66:0e:87:f7:6d:03:f5:81:75:b5:94:
         b5:82:1b:9e:25:69:9b:62:4a:77:10:38:73:66:3f:05:73:56:
         50:36:0c:b1:cd:af:ad:2d:70:75:68:c9:76:d0:38:fe:96:0e:
         c2:f9:67:0f:0e:4b:e2:fd:12:e0:b1:c8:29:ae:b7:c1:3a:6b:
         94:69:43:3e:66:2b:1b:0a:7f:30:cd:f2:29:e2:b5:29:2e:b4:
         96:1e:03:a4:05:a0:f0:a6:5f:98:62:98:a4:df:df:84:f8:ff:
         9a:0c:ce:da:0b:22:28:2b:8b:a1:31:39:88:23:a3:ff:a1:89:
         12:21:c6:b6:c2:57:c7:b5:d7:2f:51:6c:f6:ea:a9:ab:a8:43:
         55:bf:51:11:a2:7d:bc:19:ad:44:83:59:35:23:9f:db:1b:1f:
         f1:89:0c:b2:c9:47:8e:b3:47:96:e9:67:1f:f2:8b:aa:05:73:
         1e:b1:b3:7d:3a:c2:13:35:f1:2f:b7:85:33:91:be:9e:e7:21:
         a8:b1:8f:4a:96:fb:c9:60:96:18:67:01:ae:47:39:79:77:e1:
         ad:89:9b:e9:62:5b:6f:e6:19:9d:22:c1:68:2f:51:66:71:5d:
         bd:3b:6a:61
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJCNDYxMTAvBgNVBAUTKEI1NEUwODQ2NUI1NDVDRUVGMUUyRTEwMDk3NzVEOTFC
QTQxMkI2M0QwHhcNMjYwNzE2MDYxNTE3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU4NzZmNS00NWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5dNeLH2txNFpBvkEdL0N9/JGZrABHvlyq8oskK/seQ58pAulJfQK5U0Nigbi
PDVhmQpgCH9oxfpTgmiGDjhEIbgGs8At+pQvCi+g32LwReXR5ZwcydO1jQc0hhiv
3vsmGwaELB3ECncps20Ki35a4Vch+b9MlQVFK0BcIUa7ou6Tazw0ncnDIpZguyV5
SnWEFwWWokYPIE5szjvzLJMpBpStL5sfqzwx4W8etJIYzCOY4sPKB57KmY//IbFQ
5NzuA5raiLpHxkrmuYozi/jN2j86nPk83EQ/guck3vh/ECnjx4yiXU6aqrn+/IVR
B6ZI+AFYsnBhi3wMw6C8uv4BAQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFK30D0Lx
OxSm39fqxLjUKAkSygaBMB8GA1UdIwQYMBaAFLVOCEZbVFzu8eLhAJd12RukErY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI0Ni8wODg3MDFCOEFC
QjQxMUYwQUJGMjA5NDBDNEY5QUUwMi90VTRJUmx0VVhPN3g0dUVBbDNYWkc2UVN0
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RVNElSbHRVWE83eDR1RUFsM1haRzZRU3RqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzJCNDYvMDg4NzAxQjhBQkI0MTFGMEFCRjIwOTQwQzRGOUFFMDIvRkI4MkRDOEE2
QTFDMTFGMTg4MURBM0E5NzI0N0E4ODgucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAowjRAwQAowjfMA0GCSqGSIb3DQEBCwUAA4IBAQASfWewrT+c2BQk
X3FMXJeTDdk8ehCSBDnGZg6H920D9YF1tZS1ghueJWmbYkp3EDhzZj8Fc1ZQNgyx
za+tLXB1aMl20Dj+lg7C+WcPDkvi/RLgscgprrfBOmuUaUM+ZisbCn8wzfIp4rUp
LrSWHgOkBaDwpl+YYpik39+E+P+aDM7aCyIoK4uhMTmII6P/oYkSIca2wlfHtdcv
UWz26qmrqENVv1ERon28Ga1Eg1k1I5/bGx/xiQyyyUeOs0eW6Wcf8ouqBXMesbN9
OsITNfEvt4Uzkb6e5yGosY9KlvvJYJYYZwGuRzl5d+GtiZvpYltv5hmdIsFoL1Fm
cV29O2ph
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:49 2026 by rpki-client