Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/DB303ECE6F9811F1B69CA1B570A30FBC.roa
File:                     DB303ECE6F9811F1B69CA1B570A30FBC.roa (raw, json)
Hash identifier:          2i/RmVuau13EAza6ETcekxJOwQ/J9el6roQeii9jaLo=
Subject key identifier:   14:89:40:E9:BE:4A:92:4A:40:57:A8:EA:C2:46:5C:99:43:3E:6E:B5
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       DB
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/DB303ECE6F9811F1B69CA1B570A30FBC.roa
Signing time:             Wed 24 Jun 2026 06:49:33 +0000
ROA not before:           Wed 24 Jun 2026 06:49:33 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149287
IP address blocks:        165.99.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 08:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Jun 24 06:49:33 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a3b7dfd-e161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:83:3e:f5:97:15:09:24:6a:8c:b9:48:5e:0f:
                    fe:2f:83:f3:80:44:2d:c1:12:9e:35:be:34:e9:38:
                    f4:d1:37:c6:06:2b:2d:45:e2:39:81:96:6e:65:0e:
                    b4:79:c2:a5:45:9b:47:ca:91:bf:6f:d2:7b:1b:2a:
                    cd:34:06:5e:bc:77:cf:2a:a3:c3:e0:ad:ce:e0:88:
                    ec:d6:96:c1:3c:99:3f:a2:5f:63:49:18:2c:64:4a:
                    46:6d:03:ef:d3:a7:de:a8:70:f6:12:0c:c5:ce:b3:
                    78:3a:2d:82:73:f1:3f:7a:9f:56:b8:1f:e0:d3:5b:
                    df:b8:d3:f9:d6:ee:ae:78:56:26:0e:08:f1:3c:ab:
                    da:45:90:b4:a7:60:a3:83:c8:ed:80:c7:0c:0b:fc:
                    cd:a4:64:77:62:e0:29:51:fa:e6:9f:da:0c:67:0e:
                    8b:d3:18:59:ed:4a:f8:a6:61:26:1a:a9:c3:d8:b8:
                    e4:a0:36:7a:45:5b:ae:72:5f:24:ab:e2:ca:fc:07:
                    24:5a:af:10:2e:c1:0a:04:ec:83:93:81:c9:a4:36:
                    10:31:d7:3f:43:78:ac:a5:65:6e:0e:bd:19:41:0c:
                    88:f7:af:c8:07:4e:8b:a1:8c:c0:b8:00:a9:43:0c:
                    2e:34:f3:b3:ce:89:37:23:02:ff:23:de:a8:54:4d:
                    ec:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:89:40:E9:BE:4A:92:4A:40:57:A8:EA:C2:46:5C:99:43:3E:6E:B5
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/DB303ECE6F9811F1B69CA1B570A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:5a:72:7d:d1:96:4f:1f:7d:f0:e5:6e:37:f6:1b:2a:b9:
         38:c7:06:a2:46:7e:c6:45:62:eb:7f:9e:22:68:35:56:bd:f3:
         34:12:1d:92:ed:47:0f:e2:b4:a8:95:7a:68:cf:4a:ca:e4:a4:
         ca:c2:ee:d2:9e:b6:46:86:c1:9b:c4:19:b0:aa:8b:bd:50:24:
         d2:f7:bb:ca:bd:dd:62:33:cd:5a:24:56:89:0a:81:e7:a6:7a:
         1b:2f:d5:37:62:7d:c4:98:ad:65:21:ae:a9:c0:a6:4d:75:4e:
         58:11:86:e5:e3:0b:22:4b:5b:ee:88:49:a0:d7:1e:4e:7b:f9:
         71:4b:b8:7c:d4:8a:06:b0:c9:32:ec:63:33:b5:01:28:4b:54:
         41:4b:05:2f:ea:cc:63:f4:b1:c6:1f:8a:c5:ca:44:e9:ec:9a:
         88:8a:e4:99:48:fc:df:0a:85:24:01:6d:00:73:f7:cb:8c:82:
         12:52:98:fc:bf:a8:c3:fb:64:c4:ad:1a:c9:76:24:df:69:bc:
         39:ff:96:dc:f1:38:f6:fc:34:b0:fd:90:6b:cd:5d:80:a6:c2:
         06:df:8f:57:21:7a:91:66:65:57:ff:49:40:48:65:cf:9d:03:
         6e:6c:d9:21:c2:8b:58:5a:56:f5:ca:be:fc:ab:96:39:70:c2:
         60:12:60:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 01:51:53 2026 by rpki-client