Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/CF09016006A611EAA8819441C4F9AE02.roa
File:                     CF09016006A611EAA8819441C4F9AE02.roa (raw, json)
Hash identifier:          aLy3UYb1s64X3fVXJwzt92qrAAdq2cWmcZlKO0vt51o=
Subject key identifier:   6B:1C:7F:A5:E4:61:B7:84:7B:63:72:65:A7:4A:BD:64:E0:39:60:84
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       396F
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/CF09016006A611EAA8819441C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 15:11:06 +0000
ROA not before:           Tue 30 Jun 2026 15:11:06 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134515
IP address blocks:        203.126.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14703 (0x396f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Jun 30 15:11:06 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a43dc8a-bec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:2e:ba:80:ec:ce:c0:3c:2e:64:e2:c2:6f:
                    39:a5:06:85:a4:13:49:31:e6:21:32:32:11:9f:1a:
                    12:1c:7b:a7:e2:e0:9a:ca:57:42:83:de:57:04:60:
                    df:d9:08:de:73:27:7e:35:3e:34:a5:c5:d6:13:a9:
                    e0:b5:a2:91:34:7e:8c:96:eb:a0:b8:08:a3:f4:01:
                    e8:9b:2f:51:c9:14:0b:23:f4:ac:01:5c:20:0f:f3:
                    e5:54:8c:49:34:43:ea:4a:cf:0d:6e:73:9c:04:cf:
                    8c:36:75:ee:35:b6:4d:d5:05:a0:0f:02:40:ef:bf:
                    36:ee:0a:ad:75:89:c7:70:19:f9:dc:6c:c6:cd:0e:
                    1c:0c:10:59:9c:c9:54:6d:a1:ad:ae:af:f1:ee:b2:
                    9e:b9:93:13:75:ec:76:cd:76:98:1b:2a:65:88:21:
                    c4:03:6e:49:f0:27:1c:15:08:aa:83:fd:96:05:80:
                    6d:d3:1d:da:92:bf:04:49:d1:34:e4:dd:fe:b8:94:
                    c2:5e:5a:27:a9:de:28:9f:0c:37:ea:0b:0e:6b:c1:
                    02:ad:d9:88:49:ad:f1:6f:36:89:24:08:00:19:08:
                    af:a8:6f:74:8b:ce:e8:9f:90:93:75:d0:bd:b6:75:
                    19:a6:32:7d:f7:22:49:d3:d7:df:54:a2:17:ca:6c:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1C:7F:A5:E4:61:B7:84:7B:63:72:65:A7:4A:BD:64:E0:39:60:84
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/CF09016006A611EAA8819441C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.126.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:e7:92:26:ee:4e:0c:3b:75:a2:7d:72:63:f2:62:d8:14:1b:
         d6:ef:6b:38:86:6f:90:c3:2f:ca:7a:88:32:df:38:77:c4:c2:
         29:65:52:00:a0:58:e4:4a:c2:c9:f0:43:03:3f:2d:3c:8a:5f:
         ed:50:82:1e:ca:5d:73:bf:d2:93:a0:3a:26:13:dc:8c:0b:37:
         9f:84:4f:2d:f4:63:cd:f0:9f:bb:ca:ab:8a:1f:00:41:db:7d:
         46:4a:70:aa:77:c8:17:21:2f:1f:9b:79:5d:f6:a1:90:73:b8:
         92:93:5d:6e:96:89:13:99:36:6f:3c:b2:1c:0e:29:dc:35:b3:
         31:c9:8e:f4:43:ff:46:61:e1:7d:fa:e1:dc:a3:6a:de:a0:5a:
         2e:cb:2e:a3:8c:ca:6f:2d:dc:0e:a5:e7:20:e6:65:0b:bf:75:
         98:ee:54:6e:6f:f2:01:1b:b6:29:f1:67:3f:66:f0:fc:2d:24:
         17:24:55:28:1f:cf:11:1e:0d:93:a0:75:8d:1c:d9:cb:49:b5:
         f5:85:5e:ea:c5:2b:8c:bd:e0:db:fe:46:3a:82:1c:83:33:6f:
         ab:55:ad:87:69:df:a2:ee:ed:68:bc:06:64:42:ef:38:fd:9a:
         b8:88:c9:98:b3:49:11:64:17:2d:05:de:ef:6b:4b:ff:a8:ad:
         f0:36:3e:1a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICOW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0
MkI1MDUxQ0UwHhcNMjYwNjMwMTUxMTA2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQzZGM4YS1iZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudouuoDszsA8LmTiwm85pQaFpBNJMeYhMjIRnxoSHHun4uCayldCg95XBGDf
2Qjecyd+NT40pcXWE6ngtaKRNH6MluuguAij9AHomy9RyRQLI/SsAVwgD/PlVIxJ
NEPqSs8NbnOcBM+MNnXuNbZN1QWgDwJA77827gqtdYnHcBn53GzGzQ4cDBBZnMlU
baGtrq/x7rKeuZMTdex2zXaYGypliCHEA25J8CccFQiqg/2WBYBt0x3akr8ESdE0
5N3+uJTCXlonqd4onww36gsOa8ECrdmISa3xbzaJJAgAGQivqG90i87on5CTddC9
tnUZpjJ99yJJ09ffVKIXymzAdwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGscf6Xk
YbeEe2NyZadKvWTgOWCEMB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE
ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUY4OUMvNjkwN0MzRTIxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvQ0YwOTAxNjAw
NkE2MTFFQUE4ODE5NDQxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy37jMA0GCSqGSIb3DQEBCwUAA4IBAQAb55Im7k4MO3WifXJj8mLY
FBvW72s4hm+Qwy/Keogy3zh3xMIpZVIAoFjkSsLJ8EMDPy08il/tUIIeyl1zv9KT
oDomE9yMCzefhE8t9GPN8J+7yquKHwBB231GSnCqd8gXIS8fm3ld9qGQc7iSk11u
lokTmTZvPLIcDincNbMxyY70Q/9GYeF9+uHco2reoFouyy6jjMpvLdwOpecg5mUL
v3WY7lRub/IBG7Yp8Wc/ZvD8LSQXJFUoH88RHg2ToHWNHNnLSbX1hV7qxSuMveDb
/kY6ghyDM2+rVa2Had+i7u1ovAZkQu84/Zq4iMmYs0kRZBctBd7va0v/qK3wNj4a
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:14:42 2026 by rpki-client