Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/7755D5B2FADD11EE880BF37DC4F9AE02.roa
File:                     7755D5B2FADD11EE880BF37DC4F9AE02.roa (raw, json)
Hash identifier:          tow/qmOQ/9yiGU7J1jkBreLst3yXf8HbYJ89yXWzR5w=
Subject key identifier:   C2:FC:E9:A3:DD:5A:8C:D5:8B:03:6A:E3:EA:B1:0E:68:D9:F5:DB:5A
Certificate issuer:       /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial:       0286
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/7755D5B2FADD11EE880BF37DC4F9AE02.roa
Signing time:             Thu 09 Apr 2026 02:36:17 +0000
ROA not before:           Thu 09 Apr 2026 02:36:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        155.60.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
                          rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
        Validity
            Not Before: Apr  9 02:36:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d710a1-54c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:a4:39:56:5d:29:3b:f6:40:94:f4:32:43:
                    a0:44:33:e1:8e:fb:ba:63:a0:86:9b:5d:5f:25:2d:
                    64:ed:d8:1f:4e:bc:a4:c9:b6:77:1e:a1:e3:37:16:
                    40:a5:49:fa:96:a2:cf:14:d1:05:5f:39:e1:87:59:
                    5a:03:aa:7a:9a:fc:e5:96:65:5d:35:fa:3d:c7:3d:
                    ce:ea:26:85:74:b5:0e:6e:b1:32:ad:17:ed:71:bc:
                    87:6a:eb:c8:19:fa:ca:50:02:53:f2:f6:35:f1:76:
                    8e:66:11:98:d7:5c:d1:38:da:8d:d7:01:05:31:64:
                    a8:aa:d4:a4:c2:81:46:e0:24:be:23:81:b8:b2:f3:
                    d1:da:06:ae:3f:58:bd:d0:32:0e:90:e8:5f:bf:81:
                    46:4f:09:89:77:91:75:02:09:91:83:d6:8a:7e:63:
                    56:3d:7a:3f:7d:99:0a:5e:df:36:e9:c8:bc:01:70:
                    ac:c0:59:48:75:38:9b:9e:b3:25:da:b4:c8:fc:5f:
                    fc:75:91:6b:3f:d5:af:12:7a:22:62:4d:b6:07:ec:
                    35:70:c6:10:12:91:2e:ac:b3:57:b1:06:da:59:b0:
                    07:b7:9e:b6:02:6a:bf:6d:39:dc:8d:3e:90:1f:c4:
                    d4:59:35:65:7b:2e:51:e8:69:69:bf:ea:74:7b:25:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FC:E9:A3:DD:5A:8C:D5:8B:03:6A:E3:EA:B1:0E:68:D9:F5:DB:5A
            X509v3 Authority Key Identifier:
                keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/7755D5B2FADD11EE880BF37DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.60.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:f6:cb:58:58:3d:59:49:a4:70:a3:e6:f0:67:67:be:e8:
         6e:20:55:07:9d:08:53:73:61:a4:4b:34:c8:5c:2f:5d:ba:27:
         da:b4:e6:49:29:d0:b4:9e:ba:7a:57:7d:1e:a2:1f:dc:61:c6:
         63:27:c3:e3:34:e0:ec:bc:e2:bc:35:5b:e3:03:4b:c0:80:41:
         0c:c6:2b:e4:46:d7:7d:3d:5e:c6:dd:3e:12:e3:09:da:00:97:
         d6:5a:de:3c:7f:6a:8f:6e:19:c7:e2:2b:a4:0b:40:c6:9c:f6:
         70:a8:69:21:e3:d0:12:43:05:da:1b:be:7b:98:ec:80:ab:b1:
         18:61:ef:2a:a7:a7:83:30:06:33:cc:e3:17:a7:fc:f8:23:fb:
         8f:95:0c:62:4f:02:3b:3e:87:3a:15:90:52:3c:76:e4:30:01:
         bc:d1:1b:46:1c:99:ef:e9:0f:ac:36:30:c0:4e:5f:33:a0:1e:
         90:48:21:fd:d6:5e:4a:45:a8:bc:7f:48:25:08:9d:d9:26:05:
         e6:79:03:39:25:47:92:b2:d7:d6:f8:b7:03:d7:33:47:d3:ab:
         39:66:9c:b7:0a:f4:42:bd:d5:eb:c6:90:92:a7:f5:d3:9c:fd:
         bb:21:9e:15:9f:ed:d9:b5:e3:30:dc:66:34:de:d1:0b:5c:c6:
         15:95:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:21 2026 by rpki-client