Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/781637A8FADD11EE880BF37DC4F9AE02.roa
File:                     781637A8FADD11EE880BF37DC4F9AE02.roa (raw, json)
Hash identifier:          4a4u/xLVk8tTHuUdy65eUm/BUELFx7fyNoPG/ykC6/c=
Subject key identifier:   5F:EE:9F:F4:43:E0:A7:2A:42:DF:87:97:7E:D2:8B:C9:5C:44:C4:19
Certificate issuer:       /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial:       0265
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/781637A8FADD11EE880BF37DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:19:27 +0000
ROA not before:           Fri 11 Apr 2025 03:38:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        155.60.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
                          rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
        Validity
            Not Before: Apr 11 03:38:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a5aa7f-222d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:b7:91:24:75:18:17:9e:95:34:11:71:9b:
                    b3:b7:c1:ce:d8:bf:f4:f3:11:5c:67:32:bf:89:e0:
                    18:a7:c6:b1:29:48:23:0b:ad:d7:de:fd:1a:e2:f2:
                    fa:e2:43:c8:6c:5d:7d:e0:1c:74:22:e8:46:bb:2c:
                    0f:32:f2:cd:a2:dc:1e:38:e5:18:c1:83:d9:27:96:
                    07:ee:50:32:d2:55:9d:8e:77:fc:fb:4a:87:89:59:
                    54:ba:61:3d:05:16:f3:ee:ce:a4:67:cb:8d:6b:5a:
                    07:57:e5:5c:a6:ba:1c:0a:11:4e:51:9d:82:8e:e0:
                    91:f4:e6:c6:71:17:21:1f:a4:f6:53:21:13:31:66:
                    05:ed:08:a1:b8:0e:16:77:f6:79:e1:10:4a:49:02:
                    a0:6b:d6:d6:ac:3d:84:23:b6:7e:fd:ff:3d:23:00:
                    ff:87:d6:b9:a9:7f:d6:b1:0e:d1:a8:05:87:00:02:
                    38:4b:1b:95:9a:f4:1e:eb:25:34:66:a7:11:8d:e4:
                    a1:94:dd:43:03:55:dc:e7:cb:e7:6f:a8:7a:7e:60:
                    4a:76:bd:17:f1:33:54:9e:6d:47:31:e7:5b:fd:67:
                    dd:8c:be:c5:3f:18:ab:32:24:7b:57:82:b6:c4:87:
                    bc:92:a4:54:dd:68:98:dd:54:3c:2b:94:1b:df:5c:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EE:9F:F4:43:E0:A7:2A:42:DF:87:97:7E:D2:8B:C9:5C:44:C4:19
            X509v3 Authority Key Identifier:
                keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/781637A8FADD11EE880BF37DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.60.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:2d:65:5b:f2:c9:d0:6c:71:30:09:7a:2e:57:22:f0:ea:53:
         e1:6c:15:ee:be:7f:a9:8e:fd:32:d8:2b:a6:37:d9:62:db:4c:
         c8:d2:57:95:fd:c2:60:1b:51:43:96:7c:9e:02:0b:b4:11:a2:
         b9:5a:d6:ae:4e:46:6e:40:a9:eb:d0:84:1c:53:45:e4:5e:74:
         9f:c9:ed:16:10:66:df:f5:5d:23:4c:f5:7f:34:b0:74:ab:eb:
         87:e7:42:c7:31:11:7e:3f:09:57:97:20:d8:62:d9:d4:08:2b:
         57:e0:3a:82:a7:9e:cd:1f:45:de:db:8b:c6:90:97:ac:60:5f:
         97:93:b2:95:dd:3a:9c:3d:52:e6:13:0a:c4:0c:52:46:7e:d3:
         57:08:a3:ce:28:1a:2a:51:0d:1e:62:99:da:81:08:bc:3d:89:
         02:d4:a0:48:57:f3:25:59:69:a1:1b:f3:7b:f8:a0:5a:38:2b:
         00:9f:8d:36:15:2b:a7:69:db:52:10:ee:32:f7:8a:27:c3:55:
         4c:16:07:ac:42:ef:9e:d0:33:d1:3c:20:8b:ab:39:a2:2a:0f:
         4d:c1:f9:89:07:bd:4e:72:71:f9:84:9c:3a:4e:bf:65:7f:e4:
         b4:10:9e:6a:13:47:1c:0d:4b:e5:34:aa:01:70:03:e8:1c:4a:
         1a:16:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:19 2026 by rpki-client