Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/21364F844F9C11F1B46382DC98833773.roa
File:                     21364F844F9C11F1B46382DC98833773.roa (raw, json)
Hash identifier:          n/OInjim29mwNTmUQyu6+nqP7xx4ud4IopjoPJfXB2Q=
Subject key identifier:   C8:9B:9D:5F:A4:EE:D1:01:75:3E:CA:45:E6:07:40:14:9F:56:2D:D9
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       C1
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/21364F844F9C11F1B46382DC98833773.roa
Signing time:             Thu 14 May 2026 13:52:22 +0000
ROA not before:           Thu 14 May 2026 13:52:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     213549
IP address blocks:        165.99.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: May 14 13:52:22 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a05d395-a187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:e1:f0:49:cb:69:7d:26:34:70:88:02:13:
                    56:41:19:f5:e1:a3:55:ad:06:f7:37:e5:dd:b0:b1:
                    85:26:72:bd:ea:47:64:a7:d7:0e:1a:de:02:d1:50:
                    c0:11:0e:21:f2:f6:dd:35:e8:4c:a8:17:2f:9e:30:
                    6e:6b:46:f6:a9:0a:47:0c:81:af:8c:a9:02:14:9d:
                    f3:a9:d3:74:0e:45:cb:6f:d3:f3:59:bf:96:c8:48:
                    69:4e:0f:99:16:c4:e1:a0:de:b4:c3:fc:e7:b8:02:
                    c5:b9:17:d2:e1:dc:60:7c:d4:3e:ec:97:17:40:46:
                    5d:c8:8b:d0:ac:95:29:d7:8e:57:9a:f9:cd:e9:b7:
                    f1:52:34:1f:de:e0:b8:a7:26:d4:28:78:88:d4:11:
                    ee:98:9a:c4:dd:95:d3:d3:6f:4e:ae:21:c5:49:6d:
                    a7:da:ad:76:24:02:b4:ae:2b:65:1e:4f:ae:e5:62:
                    24:c4:55:f5:40:e3:c8:db:b0:41:13:8f:22:c1:f3:
                    77:c7:5d:e0:0e:cf:ce:37:e0:b6:0c:63:0d:78:53:
                    41:9a:c3:eb:51:87:80:21:29:2e:1a:1e:ea:3c:84:
                    d2:2d:2a:10:51:29:a7:a2:73:99:e7:59:59:86:b7:
                    49:a3:8f:2e:5e:65:b0:8c:0d:a0:e0:ad:ab:22:9c:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9B:9D:5F:A4:EE:D1:01:75:3E:CA:45:E6:07:40:14:9F:56:2D:D9
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/21364F844F9C11F1B46382DC98833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e3:f2:d6:1c:f9:5f:f2:f2:28:7e:8f:84:5a:0c:d8:13:16:
         d0:4b:b9:9e:8e:b0:3e:d4:2d:bd:0a:4f:d5:a2:1f:2b:4f:d9:
         81:55:bc:60:39:04:ab:33:c8:88:e8:04:70:24:17:3a:52:36:
         d4:8a:f7:a2:9d:79:a0:9d:1c:c9:d0:cf:4e:8e:d4:98:d8:b5:
         fd:41:63:3b:e5:f2:ef:27:91:03:18:40:d4:48:79:80:ad:05:
         0f:91:68:22:5b:f5:aa:d0:a7:8a:65:b6:f4:d0:96:0d:93:95:
         8f:04:b5:6e:53:78:f6:84:dc:f1:66:c5:9d:4c:2d:7b:5a:fd:
         1e:73:5d:63:f7:4f:7f:31:42:d9:a7:6e:26:ce:6b:d4:76:b6:
         a2:5f:71:a7:75:ed:4b:91:86:0b:c7:4e:91:b6:d5:b7:9f:7c:
         6c:fe:78:45:66:c0:20:a8:0c:70:72:bd:3f:71:30:71:a5:58:
         10:02:ba:4a:b6:94:65:22:99:77:1b:1b:69:5a:3d:18:7f:a9:
         97:2b:aa:b4:81:d2:16:07:97:c7:a9:e4:73:30:24:02:2c:e2:
         01:38:ac:e6:ff:d6:53:3c:c8:81:85:6c:ff:70:62:3c:a9:2e:
         e1:73:4f:36:2c:8c:21:0f:5c:11:88:e6:38:b7:cc:94:66:89:
         f5:b8:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 12:43:02 2026 by rpki-client