Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/781637A8FADD11EE880BF37DC4F9AE02.roa
File:                     781637A8FADD11EE880BF37DC4F9AE02.roa (raw, json)
Hash identifier:          CcUbFuf1lNiH/+6gAJiToEGq81cMwH8NK/XgCCC726g=
Subject key identifier:   8B:A8:86:5C:7B:8A:A2:5B:47:C7:EC:CE:B8:CD:BB:5B:6C:BB:5C:DC
Certificate issuer:       /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial:       0287
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/781637A8FADD11EE880BF37DC4F9AE02.roa
Signing time:             Thu 09 Apr 2026 02:36:19 +0000
ROA not before:           Thu 09 Apr 2026 02:36:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        155.60.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
                          rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
        Validity
            Not Before: Apr  9 02:36:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d710a2-4ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:40:bc:8f:7c:f7:14:c9:f1:b2:dc:2b:ca:
                    20:cf:5d:07:6d:fd:3e:37:c5:98:56:88:f8:32:41:
                    cf:26:c1:d5:93:ce:05:50:d4:e2:9a:1f:92:08:df:
                    45:4a:b3:ed:bd:2f:64:09:0a:7d:c0:fb:46:21:97:
                    b3:8e:9d:b6:22:42:c2:9a:4e:cc:ea:62:36:32:9d:
                    4f:a1:a7:6a:f0:29:31:f5:74:32:d8:d6:f5:6f:71:
                    c9:bd:07:97:07:1a:d3:c2:85:0a:88:b4:5f:72:c0:
                    e8:b6:f0:d4:60:a2:76:70:5e:51:90:a3:02:8b:ee:
                    46:24:72:07:63:2b:c2:a5:58:82:18:95:e2:52:dc:
                    e1:29:fc:50:b5:b5:01:cc:3b:90:b0:db:67:e8:75:
                    ea:29:39:ff:ca:0c:13:8a:47:8a:b5:c3:a6:65:80:
                    58:14:cc:fc:03:aa:e7:16:63:81:a8:e8:d2:ab:63:
                    15:f0:12:05:a7:89:c7:50:b4:bb:a5:4b:d4:43:ea:
                    cb:22:40:54:24:f9:c7:e7:7c:fe:ee:ad:76:21:ad:
                    65:b9:fd:91:d0:a5:58:3d:e5:48:f5:bf:57:0a:e7:
                    e8:f8:a5:c3:84:ed:da:40:99:27:a2:c7:5c:26:92:
                    a0:c8:c9:24:fe:5a:49:00:32:e4:81:15:f6:ae:42:
                    f0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A8:86:5C:7B:8A:A2:5B:47:C7:EC:CE:B8:CD:BB:5B:6C:BB:5C:DC
            X509v3 Authority Key Identifier:
                keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/781637A8FADD11EE880BF37DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.60.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b0:27:1e:12:1a:23:f5:36:bc:97:72:5b:26:40:a3:d6:3e:27:
         33:19:ce:e5:5f:7f:a8:a8:c3:8b:16:13:af:e4:55:9f:01:63:
         5d:d5:ed:26:a2:c0:39:d1:4f:60:0d:ff:b2:b0:c4:ac:f1:d8:
         5e:78:ae:c6:04:45:58:5e:fa:71:4d:91:e6:8d:de:d6:1d:57:
         24:45:48:b3:83:7b:31:0d:85:df:30:3e:ac:56:3c:23:ef:ee:
         14:16:89:25:b4:aa:ba:83:23:c3:a4:f3:e5:7d:56:bd:88:af:
         cd:69:a4:e9:2c:50:4d:a0:64:d8:02:c1:90:56:15:8a:09:e2:
         de:07:56:71:cd:67:0f:78:55:e2:19:07:3f:0c:b0:ae:2d:89:
         6f:12:17:98:65:74:35:47:40:4f:98:96:8b:65:52:7e:30:82:
         8f:4b:64:8d:54:48:52:75:72:3b:58:a8:df:75:cc:d0:3f:90:
         e6:30:4b:49:73:06:83:b5:f2:b4:54:7a:e2:ae:ba:24:74:55:
         19:6f:f9:28:ac:7c:3e:e8:73:6b:02:14:bc:13:a1:c1:eb:f8:
         a0:89:4e:39:c9:24:ad:b6:e8:5a:59:1a:7c:0c:35:93:e2:ba:
         11:58:2c:4d:59:47:0d:3d:77:7a:d9:fc:37:9e:0b:ae:21:fe:
         92:33:fc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:15 2026 by rpki-client