Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/146766F4A47B11E9867CBF58C4F9AE02.roa
File:                     146766F4A47B11E9867CBF58C4F9AE02.roa (raw, json)
Hash identifier:          Uh2S60yWKTmm2Qb90d4nnPWXxzqNf1Hs/lAeQzk6ZVY=
Subject key identifier:   29:63:6D:58:F2:64:F8:0E:3E:00:E3:C9:7D:33:F7:B9:A1:EC:CD:59
Certificate issuer:       /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial:       361D
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/146766F4A47B11E9867CBF58C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 15:11:02 +0000
ROA not before:           Tue 30 Jun 2026 15:11:02 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     9911
IP address blocks:        165.21.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13853 (0x361d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
        Validity
            Not Before: Jun 30 15:11:02 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a43dc86-9e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:ea:6e:6b:15:7c:84:71:6a:97:f9:73:ca:
                    70:40:82:4c:c0:11:91:c4:e2:89:a0:b0:a3:ed:48:
                    ca:b3:f4:0b:93:c6:bc:7d:db:bd:bf:6e:3f:d2:35:
                    ff:a3:09:3d:9a:50:3e:6b:0f:fa:39:45:77:4f:2a:
                    d2:e8:88:db:e6:50:3d:36:5c:ed:49:a2:1c:9e:43:
                    b2:4f:23:d0:ba:c7:17:0c:1f:51:1e:7b:f5:23:18:
                    32:35:7c:80:ab:8f:bc:ac:67:b0:02:ac:80:87:e7:
                    f3:85:1f:b3:10:02:90:b2:d0:5a:fd:ce:d1:77:99:
                    a8:99:84:e2:7f:45:aa:a3:13:c7:d2:a3:b9:83:64:
                    9b:15:4a:c4:37:c3:1e:93:36:d4:15:5d:77:dd:f9:
                    ea:e3:fa:33:26:15:af:c2:bd:5c:4c:d0:57:8f:1c:
                    68:3f:5e:48:8c:ba:e1:de:be:b1:06:f3:65:fe:12:
                    8c:dd:37:3a:8a:c0:02:2f:f8:f8:80:e9:17:5e:48:
                    10:8d:76:d1:5a:09:fc:79:a5:4a:ef:da:65:4b:f9:
                    29:91:58:39:74:4f:f6:1d:d1:2d:d1:14:3b:d1:21:
                    30:6d:1a:0f:02:94:df:88:9a:42:71:46:86:3c:2e:
                    62:d4:89:c1:46:8f:68:e5:84:44:6b:d5:e5:d1:19:
                    80:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:63:6D:58:F2:64:F8:0E:3E:00:E3:C9:7D:33:F7:B9:A1:EC:CD:59
            X509v3 Authority Key Identifier:
                keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/146766F4A47B11E9867CBF58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.21.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:da:56:6f:23:ba:f5:dc:70:0d:4f:49:23:eb:1e:77:25:
         04:3c:1d:37:9a:e1:53:fa:48:cc:7c:26:bc:e0:d7:1e:bd:78:
         cc:b2:72:c6:92:80:14:0a:a6:64:4a:ff:19:ef:4b:16:d0:8b:
         ed:81:ca:d3:36:39:84:1c:33:40:42:e2:ba:e4:b9:fa:71:bb:
         14:18:7b:12:6d:10:bd:92:b0:b6:18:b9:df:6b:3e:c7:49:a7:
         fa:93:61:4c:5f:9a:9a:38:d5:f5:62:4c:6f:9c:da:2d:91:45:
         28:03:6d:a7:e4:a3:0b:b1:7f:8f:36:16:03:76:4b:26:34:18:
         3f:20:70:09:f0:c9:a9:e0:19:46:a7:19:58:ce:3c:35:c6:d6:
         49:49:0e:d9:9e:19:56:0a:1f:bb:1c:0f:16:39:6e:30:49:1b:
         25:f2:86:f2:be:28:56:3d:c9:d5:5c:58:3f:cf:0b:7c:90:d2:
         db:65:f9:e6:bb:fe:16:45:67:9f:a4:f7:27:66:a5:e2:a8:54:
         00:17:ff:f2:2a:a1:2e:79:0c:37:61:c2:9b:f9:b3:87:6f:81:
         ce:33:26:4a:20:78:8f:67:21:0b:3b:e2:8e:cc:49:0b:41:35:
         4f:ac:72:d1:0f:5d:62:aa:eb:80:99:a9:b0:21:c2:f8:37:eb:
         77:af:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:47:08 2026 by rpki-client