Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/DB303ECE6F9811F1B69CA1B570A30FBC.roa
File:                     DB303ECE6F9811F1B69CA1B570A30FBC.roa (raw, json)
Hash identifier:          XFNNeelaHq9NO2Z7h8a7z57DLRA2ynbSaBlRbBBa/TU=
Subject key identifier:   01:E0:78:C9:33:63:7D:6E:FC:44:5B:27:0C:25:53:BD:E2:47:AB:2C
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       F9
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/DB303ECE6F9811F1B69CA1B570A30FBC.roa
Signing time:             Fri 07 Aug 2026 06:56:24 +0000
ROA not before:           Fri 07 Aug 2026 06:56:24 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     149287
IP address blocks:        165.99.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 06:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Aug  7 06:56:24 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a758198-11a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:08:ac:0a:88:4b:2f:3f:9a:39:ba:07:d5:
                    b1:07:d6:db:14:f7:ea:af:08:8c:b2:f3:a6:87:5d:
                    87:ef:e7:93:77:6a:a8:e6:13:0b:4e:8e:b4:18:44:
                    e1:1a:51:1c:7c:00:26:5f:95:bd:39:64:6a:f1:35:
                    d5:1c:69:2e:29:bf:60:35:c3:ed:92:bd:fc:31:40:
                    7a:4d:e1:0b:5b:15:3a:3a:cb:aa:c0:94:d6:99:36:
                    45:a5:5c:29:dd:99:22:9d:5a:e6:6b:11:0a:99:00:
                    bb:fa:b1:11:e1:76:32:2e:3a:03:f9:0b:51:41:92:
                    69:8d:4e:f7:2a:01:6e:dc:c1:9e:d0:e2:1c:c5:e6:
                    39:00:6a:1b:aa:53:1f:8f:b2:69:36:d5:dd:a2:da:
                    00:86:3c:c6:b2:a1:6c:8c:11:e4:7e:89:91:34:09:
                    c3:e7:83:c0:5a:ac:e5:6b:8d:df:86:25:65:bc:0a:
                    ec:f1:45:e1:6b:23:c7:65:a4:72:f3:47:34:5b:26:
                    34:c0:dc:32:14:a6:75:bb:f9:a3:48:04:d5:e8:72:
                    1e:91:70:12:45:ec:44:eb:1d:f8:f5:8c:5c:47:e2:
                    d2:48:8a:d4:02:be:46:ef:9d:06:68:aa:33:3e:bd:
                    b4:d7:ce:50:e1:f6:f4:24:d9:31:ad:ec:9c:02:ef:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E0:78:C9:33:63:7D:6E:FC:44:5B:27:0C:25:53:BD:E2:47:AB:2C
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/DB303ECE6F9811F1B69CA1B570A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:4b:bd:8c:e6:30:3b:63:53:70:cf:17:6a:90:8c:8d:30:29:
         f7:8b:c3:0a:4a:1f:dd:35:9b:f7:ea:37:a4:51:ac:dd:51:b8:
         62:15:cd:34:70:6f:13:a6:39:f1:16:cf:48:5a:a8:6d:ad:78:
         6c:2e:e8:7e:14:8b:8b:f5:ca:b8:ec:64:af:bb:7d:ae:4d:53:
         e0:2a:91:80:0e:29:6a:77:1a:d9:a7:be:6e:46:a1:28:91:5d:
         37:6b:fb:10:13:5d:44:21:51:98:59:94:ef:b0:f3:f5:e7:78:
         fa:fa:8e:8c:a1:39:e9:18:9b:dd:fb:10:73:4c:a6:ac:90:8c:
         3c:42:06:10:5b:9c:3f:b8:c2:f7:2d:2f:4b:7e:d1:f5:b3:c7:
         0a:41:85:96:8c:2b:ee:26:b7:f7:96:86:7b:71:07:14:ba:d0:
         76:63:f5:51:78:39:a9:c7:08:ef:9c:36:8b:1c:c3:4d:fe:c1:
         bf:05:70:d8:1d:fa:b2:df:69:9b:ea:14:b3:6c:d9:ed:b1:95:
         40:46:89:16:98:dc:41:05:41:f6:d9:49:cd:3a:3e:d7:41:11:
         a1:4e:8f:4a:66:56:c5:61:04:61:1c:d6:df:3b:aa:e1:a6:7a:
         2d:12:5e:d0:e8:86:08:3b:8d:40:7f:99:d3:3c:05:fc:10:0b:
         65:d5:35:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:23:43 2026 by rpki-client