Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/916E622AFB8A11F0A03435B8556F56BC.roa
File:                     916E622AFB8A11F0A03435B8556F56BC.roa (raw, json)
Hash identifier:          Iebk6ILmCSfbJ1DrvF9DOcVVKbQq+nPdw3EpDt5lvKQ=
Subject key identifier:   42:A4:BD:BF:71:1B:36:9E:5C:FD:97:1E:65:2A:E6:E3:D9:7A:A6:6D
Certificate issuer:       /CN=A915DE6C/serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
Certificate serial:       8E
Authority key identifier: 50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/916E622AFB8A11F0A03435B8556F56BC.roa
Signing time:             Sun 01 Mar 2026 08:09:50 +0000
ROA not before:           Tue 27 Jan 2026 14:15:01 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153947
IP address blocks:        165.99.218.0/24 maxlen: 24
                          165.99.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl
                          rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE6C, serialNumber=50AAFC6A3EF75B22B7683CAB63D84BE4291954B4
        Validity
            Not Before: Jan 27 14:15:01 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3f44e-59dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:36:47:06:ec:40:7e:8f:ca:00:45:98:93:fb:
                    89:1b:d6:34:8d:01:02:b3:96:cd:e5:4a:2a:d4:66:
                    8f:d1:de:b9:9d:cb:f0:e0:24:49:0b:bf:28:08:fb:
                    7a:f1:a9:20:ef:2a:8f:6d:a2:e8:07:05:20:ee:48:
                    77:46:54:83:05:8d:f2:d1:dd:04:e9:51:60:3f:37:
                    8b:9f:b7:97:08:5c:7a:74:9a:39:ed:5a:5a:55:ce:
                    17:cb:d7:c0:bf:00:0e:1c:05:dc:dd:0c:84:4d:a2:
                    1f:f9:93:b4:95:59:4a:75:c6:8f:48:88:f2:e3:51:
                    af:5d:f2:fa:15:a7:f1:a4:af:bf:00:f0:9f:32:b7:
                    93:13:1a:bc:35:18:fb:45:53:ea:13:29:2a:88:08:
                    25:4b:72:4f:0c:8c:1f:9f:75:f4:82:cc:a4:25:4d:
                    7d:8c:4a:d2:1f:19:df:70:26:d9:11:81:f1:35:82:
                    7f:b7:c2:22:e2:fd:34:0d:f5:6d:e6:7a:94:4e:fd:
                    f4:24:f0:b7:11:dd:90:2f:34:c3:10:f9:60:ab:29:
                    55:41:73:71:17:ef:14:97:12:b3:e8:fa:23:13:a9:
                    c2:7d:85:12:e8:c9:a1:3e:19:bc:7b:dd:16:0d:8a:
                    f1:da:75:bf:f3:4b:3a:1f:61:44:ec:c2:b8:df:2d:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A4:BD:BF:71:1B:36:9E:5C:FD:97:1E:65:2A:E6:E3:D9:7A:A6:6D
            X509v3 Authority Key Identifier:
                keyid:50:AA:FC:6A:3E:F7:5B:22:B7:68:3C:AB:63:D8:4B:E4:29:19:54:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/UKr8aj73WyK3aDyrY9hL5CkZVLQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UKr8aj73WyK3aDyrY9hL5CkZVLQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE6C/6BC375B043D411F090B47668C4F9AE02/916E622AFB8A11F0A03435B8556F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:6b:28:56:ca:9c:86:4c:c0:e4:71:49:05:9a:e0:b1:83:a1:
         a5:c3:fb:98:b7:42:1f:e6:26:d9:51:d9:d5:74:4b:ec:27:7a:
         07:40:b1:82:83:ba:09:b2:d6:da:3d:1b:29:40:f2:38:97:0e:
         0a:27:59:40:8d:85:d8:f0:28:88:11:5d:1f:a8:86:07:7a:b2:
         9a:65:c1:71:d6:17:84:78:4f:73:ab:11:9f:a5:39:f6:45:e4:
         15:62:40:e1:01:0b:ac:1e:8f:30:7c:7c:24:dd:b5:88:0b:a9:
         6c:1c:84:01:34:1b:8a:61:29:4a:a6:7a:98:ef:c9:24:6a:ec:
         7f:59:2e:50:6c:a6:d1:e0:aa:c8:61:55:1d:fc:7f:3b:40:41:
         36:58:49:24:46:e0:d5:cf:56:8a:c6:f4:ee:ae:ec:e1:b1:57:
         30:8a:a1:49:ab:17:82:8a:3b:0e:cf:92:87:95:81:21:bd:98:
         f9:ba:de:05:c5:4e:b7:85:b3:a3:43:57:10:c6:3b:d4:49:98:
         43:eb:26:10:c2:c9:39:ac:6d:a7:ce:80:76:5a:13:f2:b1:b7:
         af:8c:b5:1a:37:6a:fe:c8:3d:f9:9c:52:6c:91:d6:ce:50:9f:
         4f:11:0e:6c:43:4e:cc:69:e4:1c:cf:cf:e3:43:aa:fb:40:75:
         98:e9:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:23:20 2026 by rpki-client