Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/59555A30CE4611F195338DE22466CEF9.roa
File:                     59555A30CE4611F195338DE22466CEF9.roa (raw, json)
Hash identifier:          NgYU1nlZIYM2w9kR/M2RnzGyWTtnruWlMf3AVLA8PCM=
Subject key identifier:   97:8E:92:47:B5:92:29:C3:E3:64:87:49:A3:CD:4A:5D:43:5A:CF:30
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       0136
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/59555A30CE4611F195338DE22466CEF9.roa
Signing time:             Thu 22 Oct 2026 18:30:03 +0000
ROA not before:           Thu 22 Oct 2026 18:30:03 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     153947
IP address blocks:        165.99.218.0/24 maxlen: 24
                          165.99.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 06:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Oct 22 18:30:03 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ada562a-4247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:11:de:48:71:d1:50:dd:dd:83:f9:91:f6:
                    69:30:c4:61:c7:83:43:fb:67:0f:73:c3:6c:77:47:
                    12:61:5a:39:72:c3:22:9e:0a:8e:05:d0:b9:2d:e4:
                    c9:69:c2:eb:da:cf:70:73:65:1d:4a:02:8d:2d:c2:
                    7e:8c:74:7f:d1:42:bc:28:37:a6:08:b0:a3:8c:c0:
                    8d:09:76:47:d3:ec:b2:0d:a3:be:e2:32:bb:5f:5e:
                    2c:1f:2a:57:96:46:ac:77:c2:5e:7f:8e:f4:fb:63:
                    5a:1d:fd:9b:34:88:1f:e4:c2:cd:b0:65:a7:2d:b9:
                    f7:bc:9e:30:41:b5:23:d6:7d:5d:d3:c7:ea:65:38:
                    36:6e:e7:43:1b:a4:cb:82:91:b8:73:5a:bf:aa:2c:
                    6c:69:38:f1:1c:c0:0f:ca:c8:a7:1b:90:1b:d6:53:
                    bc:c3:8c:b0:b6:2d:24:c3:98:91:85:93:f8:88:52:
                    d8:fa:40:4d:bf:17:b1:b6:d5:74:33:54:6b:75:f3:
                    af:d4:92:bc:be:1b:80:23:c9:43:9b:ed:04:34:32:
                    d0:41:10:a6:c4:05:d2:3d:0b:58:e2:3f:ef:04:9e:
                    15:f0:f4:9a:15:c0:dc:f6:1e:e0:18:cc:6f:44:88:
                    91:45:cb:f5:8a:c1:21:e6:ad:63:4a:89:2a:77:8c:
                    76:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8E:92:47:B5:92:29:C3:E3:64:87:49:A3:CD:4A:5D:43:5A:CF:30
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/59555A30CE4611F195338DE22466CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:c4:62:b6:cf:7a:ef:99:0a:1b:2c:b1:0e:6e:2f:0e:ba:4b:
         5f:e4:69:74:77:81:7d:e6:6d:73:9a:49:8a:9d:41:99:dd:c2:
         f2:a3:01:d4:ec:68:88:d6:0e:67:bb:1b:79:a8:19:f3:c0:b2:
         02:1c:d4:a5:f5:64:c4:04:1e:98:1a:99:b7:4d:65:a4:01:68:
         a5:a1:64:b8:48:4e:8b:67:4d:9c:bb:a8:d6:f4:44:97:be:5b:
         0c:c1:f2:10:2d:0b:a7:b4:61:23:b8:88:cd:68:00:7d:cb:aa:
         ae:7e:ef:aa:cb:0d:fa:98:f3:73:d6:07:ba:45:b6:61:ba:cf:
         42:48:56:ef:27:56:8f:47:c4:c2:49:ab:04:e8:2e:c1:04:5f:
         2e:6f:78:02:57:d7:43:26:85:43:97:3c:ac:9f:bf:11:44:e5:
         05:bf:90:25:7f:41:c1:4e:a9:7c:22:8c:a2:1e:d3:28:48:4f:
         d6:8f:72:4d:31:5f:b2:76:d9:79:f8:33:99:73:eb:3f:3e:15:
         74:e8:f6:d9:62:c0:de:51:5c:a3:a8:7d:cd:6f:c8:fd:f9:03:
         1b:40:27:77:77:72:cb:f3:44:2a:55:2b:32:1c:68:69:5d:65:
         40:2f:79:20:4f:ce:3d:03:5b:f5:78:71:1d:3e:2e:f0:cd:89:
         f0:84:0f:44
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURFNkMxMTAvBgNVBAUTKDUwQUFGQzZBM0VGNzVCMjJCNzY4M0NBQjYzRDg0QkU0
MjkxOTU0QjQwHhcNMjYxMDIyMTgzMDAzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWRhNTYyYS00MjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0uMR3khx0VDd3YP5kfZpMMRhx4ND+2cPc8Nsd0cSYVo5csMingqOBdC5LeTJ
acLr2s9wc2UdSgKNLcJ+jHR/0UK8KDemCLCjjMCNCXZH0+yyDaO+4jK7X14sHypX
lkasd8Jef470+2NaHf2bNIgf5MLNsGWnLbn3vJ4wQbUj1n1d08fqZTg2budDG6TL
gpG4c1q/qixsaTjxHMAPysinG5Ab1lO8w4ywti0kw5iRhZP4iFLY+kBNvxexttV0
M1RrdfOv1JK8vhuAI8lDm+0ENDLQQRCmxAXSPQtY4j/vBJ4V8PSaFcDc9h7gGMxv
RIiRRcv1isEh5q1jSokqd4x2OQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJeOkke1
kinD42SHSaPNSl1DWs8wMB8GA1UdIwQYMBaAFFCq/Go+91sit2g8q2PYS+QpGVS0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REU2Qy82QkMzNzVCMDQz
RDQxMUYwOTBCNDc2NjhDNEY5QUUwMi9VS3I4YWo3M1d5SzNhRHlyWTloTDVDa1pW
TFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1VLcjhhajczV3lLM2FEeXJZOWhMNUNrWlZMUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NURFNkMvNkJDMzc1QjA0M0Q0MTFGMDkwQjQ3NjY4QzRGOUFFMDIvNTk1NTVBMzBD
RTQ2MTFGMTk1MzM4REUyMjQ2NkNFRjkucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWPaMA0GCSqGSIb3DQEBCwUAA4IBAQCaxGK2z3rvmQobLLEObi8O
uktf5Gl0d4F95m1zmkmKnUGZ3cLyowHU7GiI1g5nuxt5qBnzwLICHNSl9WTEBB6Y
Gpm3TWWkAWiloWS4SE6LZ02cu6jW9ESXvlsMwfIQLQuntGEjuIjNaAB9y6qufu+q
yw36mPNz1ge6RbZhus9CSFbvJ1aPR8TCSasE6C7BBF8ub3gCV9dDJoVDlzysn78R
ROUFv5Alf0HBTql8IoyiHtMoSE/Wj3JNMV+ydtl5+DOZc+s/PhV06PbZYsDeUVyj
qH3Nb8j9+QMbQCd3d3LL80QqVSsyHGhpXWVAL3kgT849A1v1eHEdPi7wzYnwhA9E
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:17:51 2026 by rpki-client