Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/CF8B8B1213F611F198102FE6173D8C67.roa
File:                     CF8B8B1213F611F198102FE6173D8C67.roa (raw, json)
Hash identifier:          UAQ7ZvVFK4liaRqYWzpazKPTAxINMGHBslB3/QcYJjI=
Subject key identifier:   18:09:47:9D:ED:39:81:89:60:2F:29:91:72:DA:D9:A6:F8:1E:6E:4C
Certificate issuer:       /CN=A9176302/serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4
Certificate serial:       EA
Authority key identifier: 6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/CF8B8B1213F611F198102FE6173D8C67.roa
Signing time:             Fri 31 Jul 2026 05:53:29 +0000
ROA not before:           Fri 31 Jul 2026 05:53:29 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     133098
IP address blocks:        165.99.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl
                          rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 03:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176302, serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4
        Validity
            Not Before: Jul 31 05:53:29 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6c3858-f6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:54:82:18:f3:d3:18:5a:0e:6e:94:04:70:8f:
                    e3:29:97:5c:f4:69:52:6f:d8:8b:12:ab:3f:32:27:
                    89:4c:17:f6:f1:83:5e:2a:38:e1:40:e3:77:c1:a9:
                    83:e0:61:4e:01:4e:a1:24:40:7a:d0:34:67:d4:f2:
                    e4:a1:7d:e3:d5:8d:ab:de:f3:04:c6:51:4b:37:ad:
                    3e:30:e9:02:28:5c:79:16:2e:1c:89:6e:56:5d:fe:
                    99:b0:8e:29:d0:fc:90:59:67:51:e5:5a:19:0d:fb:
                    21:f9:25:4e:1f:f3:56:ff:df:a8:7f:03:ab:32:68:
                    f8:99:09:35:d7:a8:fe:5c:ee:f5:a6:cd:43:32:03:
                    0e:21:08:79:13:d7:ae:c3:59:fd:0a:a6:f8:ae:7c:
                    c1:f8:91:71:f1:02:ce:eb:5a:d5:05:49:57:8d:47:
                    50:13:9b:ac:d8:a2:86:72:3b:05:58:25:16:9a:ae:
                    1c:ed:e8:86:a2:3a:7a:56:a1:09:3a:cf:62:7c:f0:
                    d6:c0:53:91:a6:ce:80:52:15:a9:b7:8c:81:12:46:
                    0f:fb:59:7e:f3:1a:b3:ed:50:3e:be:ac:f8:84:0f:
                    31:76:5e:61:42:cf:3e:0c:55:24:64:18:3d:52:ea:
                    99:00:ea:9d:41:0c:63:45:12:7a:a7:8e:ab:28:51:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:09:47:9D:ED:39:81:89:60:2F:29:91:72:DA:D9:A6:F8:1E:6E:4C
            X509v3 Authority Key Identifier:
                keyid:6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/CF8B8B1213F611F198102FE6173D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:33:da:bd:c0:62:32:3a:cf:80:fd:94:3e:c6:aa:d1:9f:79:
         39:91:12:33:96:12:b4:66:28:a3:25:f9:66:07:72:bf:53:86:
         8c:4c:08:67:cc:05:fa:20:1c:8d:b4:87:6e:23:a9:ef:6a:51:
         aa:b5:76:eb:5f:bd:18:e0:bd:74:df:c6:3f:23:b0:ce:20:6c:
         71:96:2e:11:54:91:1e:e8:74:60:c8:2a:ef:b3:1a:f6:a8:ca:
         d0:d3:92:ac:c4:35:20:06:8f:9f:5e:98:05:49:04:37:04:a3:
         82:46:79:10:6f:8e:fe:ac:fa:a6:81:c4:d8:29:7f:ad:e1:0b:
         cf:9e:06:c0:6c:af:1a:0d:51:6c:f4:26:9d:a2:db:5b:05:e0:
         05:f6:81:95:8d:b1:e7:fc:5d:09:12:be:99:aa:1f:e7:8f:35:
         5f:17:d2:1d:5c:b7:a6:56:2b:ea:0a:df:4c:a1:a8:05:ef:35:
         27:3a:ee:ff:e3:72:7f:7e:5d:bf:d8:59:f9:7d:45:61:0e:1a:
         80:33:cf:b8:e6:ad:70:f7:ae:56:74:fc:4c:12:54:39:84:a9:
         c3:3a:cd:83:02:41:3b:af:94:c6:0c:d8:18:b6:ca:4a:01:53:
         92:a1:90:c8:13:4a:b8:59:5a:e0:42:26:f3:06:ab:a8:22:e3:
         d3:fb:b4:47
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYzMDIxMTAvBgNVBAUTKDZFMzc1NzI5NDVBM0U5N0JBOTY0NTk5RkE1NTVDNERC
NDI2M0MwRTQwHhcNMjYwNzMxMDU1MzI5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZjMzg1OC1mNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8FSCGPPTGFoObpQEcI/jKZdc9GlSb9iLEqs/MieJTBf28YNeKjjhQON3wamD
4GFOAU6hJEB60DRn1PLkoX3j1Y2r3vMExlFLN60+MOkCKFx5Fi4ciW5WXf6ZsI4p
0PyQWWdR5VoZDfsh+SVOH/NW/9+ofwOrMmj4mQk116j+XO71ps1DMgMOIQh5E9eu
w1n9Cqb4rnzB+JFx8QLO61rVBUlXjUdQE5us2KKGcjsFWCUWmq4c7eiGojp6VqEJ
Os9ifPDWwFORps6AUhWpt4yBEkYP+1l+8xqz7VA+vqz4hA8xdl5hQs8+DFUkZBg9
UuqZAOqdQQxjRRJ6p46rKFHubQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBgJR53t
OYGJYC8pkXLa2ab4Hm5MMB8GA1UdIwQYMBaAFG43VylFo+l7qWRZn6VVxNtCY8Dk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi8zNjI3MkRFODMw
NjUxMUYwOEU4MkEyMTRDNEY5QUUwMi9iamRYS1VXajZYdXBaRm1mcFZYRTIwSmp3
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2JqZFhLVVdqNlh1cFpGbWZwVlhFMjBKandPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzYzMDIvMzYyNzJERTgzMDY1MTFGMDhFODJBMjE0QzRGOUFFMDIvQ0Y4QjhCMTIx
M0Y2MTFGMTk4MTAyRkU2MTczRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWMwMA0GCSqGSIb3DQEBCwUAA4IBAQDJM9q9wGIyOs+A/ZQ+xqrR
n3k5kRIzlhK0ZiijJflmB3K/U4aMTAhnzAX6IByNtIduI6nvalGqtXbrX70Y4L10
38Y/I7DOIGxxli4RVJEe6HRgyCrvsxr2qMrQ05KsxDUgBo+fXpgFSQQ3BKOCRnkQ
b47+rPqmgcTYKX+t4QvPngbAbK8aDVFs9CadottbBeAF9oGVjbHn/F0JEr6Zqh/n
jzVfF9IdXLemVivqCt9MoagF7zUnOu7/43J/fl2/2Fn5fUVhDhqAM8+45q1w965W
dPxMElQ5hKnDOs2DAkE7r5TGDNgYtspKAVOSoZDIE0q4WVrgQibzBquoIuPT+7RH
-----END CERTIFICATE-----
Generated at Thu Aug 27 16:52:37 2026 by rpki-client