Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/7755D5B2FADD11EE880BF37DC4F9AE02.roa
File:                     7755D5B2FADD11EE880BF37DC4F9AE02.roa (raw, json)
Hash identifier:          7c9RXUhll7RjmfKdCACTxBkSEfUtF0muR2dkJbiSbMQ=
Subject key identifier:   E6:85:D6:05:FE:0B:FD:97:53:08:05:19:15:C1:C0:DC:AE:E2:92:7F
Certificate issuer:       /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial:       01AC
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/7755D5B2FADD11EE880BF37DC4F9AE02.roa
Signing time:             Fri 11 Apr 2025 03:38:58 +0000
ROA not before:           Fri 11 Apr 2025 03:38:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        155.60.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
                          rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
        Validity
            Not Before: Apr 11 03:38:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f88ed2-b888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:54:ec:c5:cb:3a:9d:fd:9e:ab:eb:6a:ac:df:
                    8e:e1:f8:60:bd:28:4a:3c:65:d1:25:82:fb:d2:d9:
                    bc:94:be:cf:4b:90:0f:25:de:77:0f:53:f6:ef:c1:
                    50:fb:ad:01:23:53:c9:92:aa:0d:2b:7f:6b:3b:2e:
                    c7:ca:cc:c3:b5:ef:82:c8:a9:5f:88:62:f9:32:27:
                    2a:90:47:7d:7a:3c:49:51:e0:a7:8e:de:ab:57:52:
                    f9:38:38:64:1f:6c:c6:b2:2c:0b:76:99:2e:39:d6:
                    0d:90:b1:fd:43:0d:eb:a8:82:14:98:9f:26:c5:3a:
                    67:8d:67:ad:54:54:4b:b4:e5:95:ba:c6:17:8f:c7:
                    c1:55:70:13:17:41:a7:b8:ba:51:6a:4f:ab:33:94:
                    71:ea:43:2a:18:56:34:2f:58:93:cf:ff:00:53:d1:
                    52:5d:98:6e:17:17:10:23:6b:93:01:ae:a8:0a:4e:
                    44:03:bd:69:23:5a:06:af:ed:da:1c:1a:f8:8b:d8:
                    11:e5:58:24:3b:71:91:94:55:7f:e0:93:89:06:da:
                    ed:ec:2b:83:8a:7a:19:e7:a3:65:eb:79:bf:a4:64:
                    81:0c:ec:b2:24:6e:07:92:8f:da:e7:f5:5b:0c:60:
                    80:4a:69:37:7a:bc:4d:0e:7b:c9:86:3c:0e:67:68:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:85:D6:05:FE:0B:FD:97:53:08:05:19:15:C1:C0:DC:AE:E2:92:7F
            X509v3 Authority Key Identifier:
                keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/7755D5B2FADD11EE880BF37DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.60.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:f1:38:cb:da:06:6d:61:45:cb:3d:4f:45:d1:f1:9e:8a:14:
         54:7d:b3:ff:2e:d7:5f:7c:c9:80:2f:f0:19:2d:e0:f3:5e:a2:
         3a:7d:6e:36:2c:54:a3:47:15:21:de:de:51:b0:4f:64:ff:d7:
         5c:c9:35:95:78:ab:e4:e5:d7:b5:26:7f:f2:a2:df:e9:44:31:
         dc:0e:93:f9:7e:0e:7a:4c:8c:32:fc:95:6a:78:8c:5d:33:db:
         65:a9:da:07:0d:0e:fe:dc:cc:7f:2f:43:e4:db:fa:8a:72:e4:
         fb:f5:bb:aa:4b:3b:16:cb:ed:1c:8c:0f:fb:7d:c0:64:1e:63:
         8c:f5:75:86:de:cd:60:06:8b:e2:ef:01:c6:ca:4b:d4:ac:22:
         9b:92:a6:09:a2:6a:fb:69:84:41:70:7e:e3:cf:13:ef:b5:2d:
         30:61:44:5a:12:85:c9:91:ed:0d:3d:35:ac:df:d9:54:ff:2d:
         46:39:b1:62:39:ca:5f:95:04:e4:7b:c7:20:07:7c:91:a9:f2:
         08:e5:9c:ba:2c:55:b9:f0:f8:fc:7a:46:a1:bc:1b:4a:6d:61:
         2b:ec:d2:b3:7d:87:b7:f7:ff:1d:f8:ef:05:5d:ce:bf:33:39:
         16:1b:7b:c7:3f:09:1a:74:3a:27:2c:92:89:d9:e8:0d:7d:b9:
         db:5d:a6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:47:13 2025 by rpki-client