Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/1DAE236CC9D411F0A61E0021C4F9AE02.roa
File:                     1DAE236CC9D411F0A61E0021C4F9AE02.roa (raw, json)
Hash identifier:          YRHH5nZoVAmge8XNxMsiH7rw0Qw1yObz1y1Uguq4Ays=
Subject key identifier:   0E:10:1C:31:CB:C2:E1:C0:C4:5A:70:7A:4B:B5:0F:C4:F2:2A:11:6E
Certificate issuer:       /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial:       025B
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/1DAE236CC9D411F0A61E0021C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:07:15 +0000
ROA not before:           Tue 25 Nov 2025 07:55:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        155.60.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
                          rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 603 (0x25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
        Validity
            Not Before: Nov 25 07:55:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a45622-4742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7e:a7:c8:2d:3a:b0:42:d4:e0:af:ac:50:77:
                    a1:81:15:fc:a3:38:0a:d5:d9:81:3a:85:31:44:5a:
                    42:d5:3a:72:a2:5b:09:bf:66:5e:42:dd:db:35:eb:
                    87:17:33:5c:d7:e9:40:57:d7:d8:63:39:bf:a1:b8:
                    b2:90:89:08:35:f9:ae:ec:c3:cf:eb:ca:17:8e:fd:
                    8a:c4:66:b2:87:a9:d7:0e:a5:5a:ff:91:77:de:a2:
                    ff:6e:d5:20:c3:85:24:d7:26:5c:8a:c1:50:d9:6f:
                    2b:c0:f2:8c:e5:67:21:70:27:4f:fd:ce:31:fd:42:
                    89:ee:27:f6:3c:0d:53:54:9c:b6:43:05:bc:34:7c:
                    62:a6:bb:8b:b4:d8:92:ef:22:bc:f4:96:93:e4:c3:
                    67:74:8d:7a:3f:7e:54:da:1c:c4:a1:54:4b:f8:44:
                    33:e3:f5:e2:e8:6f:40:90:95:51:9e:c6:7d:f1:87:
                    37:95:aa:2d:54:7b:c2:4c:78:13:ca:62:af:a7:f2:
                    58:4c:13:c7:33:58:81:9d:00:a2:53:94:71:fa:e0:
                    69:8f:bf:f8:0a:ae:e1:1a:c8:80:d4:58:31:12:51:
                    f3:93:12:ac:9b:b0:a5:71:ea:19:04:07:10:63:f8:
                    f5:69:c1:ba:08:53:60:97:53:b4:3d:ec:0c:5f:a6:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:10:1C:31:CB:C2:E1:C0:C4:5A:70:7A:4B:B5:0F:C4:F2:2A:11:6E
            X509v3 Authority Key Identifier:
                keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/1DAE236CC9D411F0A61E0021C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.60.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:d3:a1:3d:ee:1f:8e:90:26:b2:de:1d:a5:de:06:fc:e5:66:
         5f:94:e7:0e:20:d6:7b:31:aa:4d:85:c9:78:be:6f:f2:65:6c:
         b0:c5:0e:b0:4e:8b:6c:cb:b3:4e:39:86:47:b2:a1:9e:2e:c2:
         51:12:66:dd:88:95:d3:ed:95:02:08:36:01:0d:5c:68:1f:2a:
         34:44:88:21:31:0b:af:b4:87:be:7c:eb:86:d3:23:ea:82:22:
         64:a8:25:aa:43:dd:ea:8e:c8:c7:06:45:4e:6d:bc:23:83:09:
         d4:21:3a:f5:ae:ce:41:8e:ed:49:c7:08:16:30:ce:93:a1:fa:
         cc:d7:64:35:d7:b1:f0:9a:fc:4b:02:42:43:7b:53:b0:fa:03:
         48:85:8b:ba:c5:90:bf:1a:c7:6a:2c:fc:51:ba:4a:b7:28:7e:
         03:49:01:5a:d7:59:d4:54:31:b4:99:8e:de:49:e0:44:e1:b7:
         88:f4:96:1d:27:c6:0a:ab:56:a2:fa:03:b5:09:12:55:e1:30:
         c2:1b:65:3c:3b:bb:f5:22:6a:a3:64:7a:56:c1:65:c6:fb:59:
         a8:f0:2f:cc:95:af:81:e8:6c:27:c6:71:66:b6:3a:dc:cc:33:
         04:07:c0:92:23:41:86:11:13:6c:c2:9b:d3:65:8f:dc:a9:8c:
         8e:33:ee:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:05 2026 by rpki-client