Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/BF01726E6F9211F1935110B76CA30FBC.roa
File:                     BF01726E6F9211F1935110B76CA30FBC.roa (raw, json)
Hash identifier:          gMZEnHabfRo33laszE3RJWZJy7WOCeRlZbtsz0VXszU=
Subject key identifier:   26:D2:15:81:E2:B4:F7:C3:AC:0C:DE:AF:2A:72:B2:A9:23:E5:89:14
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       D9
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/BF01726E6F9211F1935110B76CA30FBC.roa
Signing time:             Wed 24 Jun 2026 06:05:49 +0000
ROA not before:           Wed 24 Jun 2026 06:05:49 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136396
IP address blocks:        165.99.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 08:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Jun 24 06:05:49 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a3b73bc-b44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:02:fb:9d:7c:80:0f:9c:e8:9b:28:f1:31:
                    ee:89:0c:13:dc:cb:41:eb:a8:19:94:31:a7:16:a0:
                    c8:66:f0:15:a2:ca:d9:f4:2f:ce:50:71:17:91:92:
                    0e:63:e0:b1:dc:8d:a7:72:9c:78:b9:02:eb:c9:fa:
                    20:41:e3:e7:86:ad:46:e1:f9:2c:7b:37:9b:74:1b:
                    17:f5:bd:ef:4e:96:09:78:33:63:25:75:c0:64:4c:
                    81:3e:5e:2c:20:dc:fc:f6:3b:80:60:7f:ae:04:c7:
                    77:27:5c:b1:d3:fd:95:eb:db:bf:e4:08:e3:55:19:
                    cd:7d:6e:ea:29:46:23:87:92:92:66:e5:81:6b:1c:
                    3d:80:00:2e:8c:de:67:08:a0:3f:06:a9:e9:b0:91:
                    a0:ae:46:d3:1d:dd:ef:c8:82:97:7c:fd:eb:83:53:
                    36:c2:28:cb:f4:74:ac:84:3c:4c:e6:3e:35:bc:b1:
                    f9:11:55:e4:c7:84:3a:5f:80:88:76:8d:36:97:c3:
                    06:6b:23:bb:f5:e6:0e:9d:b8:d1:06:d7:fe:43:87:
                    8c:fb:9b:fa:43:59:49:e6:48:9f:a1:e9:02:7a:36:
                    85:e0:ca:09:2d:50:65:9f:ab:98:a6:6d:23:a5:31:
                    cc:d6:c6:3f:45:bc:4a:9e:9f:d6:e7:16:fd:c3:1c:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D2:15:81:E2:B4:F7:C3:AC:0C:DE:AF:2A:72:B2:A9:23:E5:89:14
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/BF01726E6F9211F1935110B76CA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:16:45:56:e9:cc:83:fc:02:bf:7c:ab:b9:eb:49:a3:69:75:
         c9:30:c5:d7:6c:6d:91:9f:cf:13:99:ba:4e:bb:83:d3:7d:cd:
         ea:c1:75:af:d0:38:1c:8e:cf:34:53:ee:41:71:33:ce:07:99:
         08:c4:41:cd:a7:9c:a8:e3:7b:5e:f4:ea:66:1d:74:c2:58:3a:
         5a:1c:a8:cb:bf:62:5b:a8:84:70:23:96:62:be:fd:55:31:7a:
         af:af:94:fb:ee:d0:c0:a5:03:6f:a9:32:e3:34:1c:5f:8a:20:
         da:61:9b:27:6b:4d:ec:8d:06:54:20:c6:f0:8c:05:13:3f:1a:
         fc:15:a7:49:a4:aa:a5:84:5c:d1:3d:59:21:89:0d:77:a3:cf:
         ce:db:5e:46:5f:61:cd:cb:30:c9:56:ed:28:ef:f2:dd:01:6e:
         fd:cc:f7:be:f8:7e:44:13:2c:da:51:ac:00:8a:7d:e1:20:52:
         b9:3d:43:c8:a0:c7:51:87:8d:4c:39:c7:da:92:e7:73:02:80:
         17:6b:13:5c:9f:88:7a:92:91:31:62:8c:c2:f7:2b:8b:50:2c:
         bd:da:0f:cf:af:0f:1c:57:da:e2:38:92:ec:bf:df:a6:9c:d5:
         33:33:67:7d:b2:43:a2:7c:ea:f1:62:74:c8:05:71:55:4b:9d:
         5a:34:32:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 23:38:24 2026 by rpki-client