Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/1DAE236CC9D411F0A61E0021C4F9AE02.roa
File:                     1DAE236CC9D411F0A61E0021C4F9AE02.roa (raw, json)
Hash identifier:          UMbEQFIpkJvqmK0HuzuHRzu+g80Gef2sVvm2DbI4gV0=
Subject key identifier:   CA:55:7E:27:D6:77:D9:12:4D:1C:E4:27:34:5F:4E:8C:3C:F5:B8:70
Certificate issuer:       /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial:       0288
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/1DAE236CC9D411F0A61E0021C4F9AE02.roa
Signing time:             Thu 09 Apr 2026 02:36:21 +0000
ROA not before:           Thu 09 Apr 2026 02:36:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        155.60.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
                          rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
        Validity
            Not Before: Apr  9 02:36:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d710a5-afac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:12:9a:d4:d2:2a:2e:36:94:98:98:58:53:
                    00:fd:a2:6f:ff:3e:3c:70:86:b4:63:33:e4:b4:5c:
                    78:a2:f5:0a:6b:3e:b5:3a:fb:22:26:3b:fa:e5:20:
                    87:bd:3d:f9:47:df:dd:e4:3d:4a:04:99:c1:62:02:
                    ba:85:66:99:fd:19:80:68:b8:ef:91:9f:60:a2:6f:
                    fc:0e:81:83:06:22:dc:c6:38:f6:7f:f0:6d:d8:00:
                    8f:d3:8e:ad:f3:e5:38:81:ce:96:d8:1c:69:45:1c:
                    d2:75:da:44:dd:f6:2c:43:1b:2d:f0:50:e8:53:b4:
                    b6:10:4f:fd:5a:04:91:9e:0d:8e:95:34:3f:59:c5:
                    ef:4d:1d:5e:47:41:c0:a1:c5:1e:8e:db:83:a9:a3:
                    ce:99:2e:08:58:ed:39:6b:5c:79:c7:9a:c9:2f:16:
                    8d:1f:fa:76:48:44:8c:5a:f1:60:84:7d:58:d9:bf:
                    a2:b2:0d:12:a6:1e:c5:be:a8:79:31:7b:73:5a:6b:
                    0d:77:71:06:ba:bd:fb:e1:76:b0:13:54:23:aa:a8:
                    d2:4c:d7:c8:8c:4f:76:45:7a:1e:5d:5d:8e:97:ef:
                    04:1a:43:64:f3:2c:46:e4:8d:11:a4:84:7c:a6:4b:
                    5c:83:46:ad:b3:a0:30:a2:c7:89:08:1d:d7:e0:81:
                    1d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:55:7E:27:D6:77:D9:12:4D:1C:E4:27:34:5F:4E:8C:3C:F5:B8:70
            X509v3 Authority Key Identifier:
                keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/1DAE236CC9D411F0A61E0021C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.60.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         33:92:95:77:32:3e:73:82:0a:08:fe:a5:17:94:0c:af:fe:be:
         87:f4:6f:8a:79:97:1b:47:95:88:74:b8:58:e4:f1:73:12:33:
         29:e7:87:c2:71:04:94:87:a9:5d:5b:2c:81:dd:4f:f9:c3:35:
         44:df:b7:cf:08:a5:69:2e:1a:80:2d:bf:8b:d8:5a:aa:39:9f:
         7a:80:68:25:9d:6d:86:6c:7f:2e:52:38:05:22:9d:89:d4:e7:
         94:de:63:86:8e:74:75:ff:80:9b:3b:88:80:5a:f0:49:c7:68:
         0c:cf:90:8f:f8:fe:8b:43:e0:85:08:cb:5e:01:94:e8:51:24:
         59:8d:8e:0e:b0:c9:d7:e8:d9:93:10:db:73:e2:31:1d:b1:d6:
         44:b6:3c:04:f7:c6:f5:60:15:dc:44:4f:0b:d7:ad:1e:9e:c3:
         66:b0:b2:4a:3a:41:a1:74:23:c6:5a:50:c5:e5:68:38:23:4b:
         a0:39:dd:b3:1e:c9:57:fd:b6:19:98:88:eb:ac:3f:5d:cc:57:
         be:4f:fc:c1:2c:8d:35:a1:30:89:ee:4c:27:46:f4:10:bc:1f:
         5c:8e:d7:19:40:00:d8:7e:c3:04:1b:43:1d:be:b8:9e:87:6b:
         f1:d1:7b:64:b5:12:d3:a0:82:35:4a:df:95:fc:ea:a9:bb:ec:
         76:02:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:34 2026 by rpki-client