Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/8732879E95BA11F1B9CA092C4311F970.roa
File:                     8732879E95BA11F1B9CA092C4311F970.roa (raw, json)
Hash identifier:          MEGlRUYhB4SHO0VLh+MIz2x8hOoJV3bR04uKQvrICwE=
Subject key identifier:   41:DA:E4:FA:E5:CB:2F:C4:76:D2:8E:5A:BD:05:78:66:8A:5E:DB:A1
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       FD
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/8732879E95BA11F1B9CA092C4311F970.roa
Signing time:             Tue 11 Aug 2026 19:26:19 +0000
ROA not before:           Tue 11 Aug 2026 19:26:19 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     150142
IP address blocks:        165.99.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 04:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Aug 11 19:26:19 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7b775b-4601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:8b:24:c6:2f:0c:c9:cb:5e:41:0a:8f:03:
                    32:27:a7:35:41:b0:19:2c:7a:c9:cf:e1:49:cb:32:
                    7a:ab:fc:5d:22:ad:2f:4a:f5:cc:6e:28:05:39:61:
                    60:c7:71:fd:cd:c7:eb:da:f3:60:33:09:af:87:a2:
                    63:f7:b7:00:be:26:bb:b7:2a:11:10:e2:60:75:5c:
                    31:2c:7d:4c:10:fb:27:ac:62:0b:8e:53:84:40:80:
                    ce:0e:33:8a:06:f6:40:42:39:80:d3:99:74:f5:04:
                    44:7b:89:4f:60:e5:a0:c6:e4:75:81:b0:ff:4c:a0:
                    d9:6d:1d:15:16:18:11:7b:92:fe:27:b8:f7:66:b2:
                    d2:9a:2b:59:69:bd:c4:40:3b:59:15:42:9e:98:c2:
                    a0:f2:93:c1:44:f7:cc:8c:19:6e:ca:e0:49:80:07:
                    8d:d9:2d:e0:dd:ef:38:1b:e3:c4:a6:cc:58:b6:5f:
                    32:8b:ab:ed:cf:b3:a0:57:fa:f3:9e:6a:6c:3d:7f:
                    2a:9f:72:e2:b1:75:bc:e3:60:a4:52:68:be:ac:fc:
                    b8:42:e3:36:0d:53:36:c1:42:61:09:41:ce:67:74:
                    a5:e6:4b:11:bb:bc:1c:14:c7:ab:f2:6e:fb:0b:ef:
                    03:dd:5e:00:10:d2:5c:be:ac:3d:f6:21:56:48:b9:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DA:E4:FA:E5:CB:2F:C4:76:D2:8E:5A:BD:05:78:66:8A:5E:DB:A1
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/8732879E95BA11F1B9CA092C4311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ba:0f:aa:64:cf:77:e8:68:fb:5a:a7:10:5b:29:2a:a8:ac:
         cd:10:a7:b2:ee:cc:25:44:37:e4:bf:e9:0f:d7:a5:c8:11:fd:
         ed:a4:ba:ca:da:cc:2e:eb:f6:64:1a:03:5e:be:78:d7:42:d6:
         b0:1e:40:91:f1:07:96:83:0d:90:5e:61:1c:20:7b:4e:37:44:
         83:c6:d5:f0:ca:4b:f4:36:a5:47:96:45:66:9c:52:13:15:50:
         29:2c:a8:13:ea:5a:93:e2:4e:aa:73:06:87:22:d5:27:5b:f5:
         0e:27:c8:20:17:ca:2e:6c:35:d1:a4:c8:ed:35:1c:18:d7:87:
         37:fe:a4:ca:06:a2:c1:5a:26:f0:03:2d:54:de:29:41:33:f5:
         89:b2:c1:2f:61:84:e5:5c:6a:96:57:9f:7f:02:db:bf:8b:dd:
         9c:0a:67:d6:f1:92:07:a1:d8:2c:2b:4b:54:00:d0:ef:f0:a6:
         ff:c5:9d:98:84:50:54:c6:75:53:bd:2a:0d:24:b2:e3:4a:d7:
         38:58:96:06:af:30:3d:88:3f:ac:4a:c1:10:79:38:6d:7c:1b:
         c8:81:5b:fc:96:cf:28:e0:34:ae:49:8f:78:43:f8:98:a0:1d:
         af:cb:08:17:20:83:5b:fb:9d:ab:eb:e1:ef:5b:e4:c8:8b:77:
         e2:4c:99:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:22:55 2026 by rpki-client