Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/47142068221311EFB680F113C4F9AE02.roa
File:                     47142068221311EFB680F113C4F9AE02.roa (raw, json)
Hash identifier:          R9+W9Vd8vNJv6BZYi/psQ14Bv23TuvOa9qtjBXGBpmg=
Subject key identifier:   F2:DC:8D:9B:E9:55:4E:2F:7B:04:55:C1:40:06:91:CC:7A:30:18:FF
Certificate issuer:       /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial:       01CC
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/47142068221311EFB680F113C4F9AE02.roa
Signing time:             Sun 19 Jul 2026 05:30:55 +0000
ROA not before:           Sun 19 Jul 2026 05:30:55 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38195
IP address blocks:        155.144.54.0/23 maxlen: 23
                          155.144.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 05:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
        Validity
            Not Before: Jul 19 05:30:55 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5c610e-c05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:7c:40:bf:be:6b:25:b2:ba:8a:2d:79:a6:
                    08:7e:52:da:5a:d1:fb:5a:76:99:13:f0:c1:fe:18:
                    e8:65:cb:06:d7:64:30:eb:e6:53:8b:ff:e4:fc:fc:
                    d8:52:2d:2a:f4:5d:53:9f:7d:98:fe:73:89:b0:2d:
                    85:ac:c7:54:04:1b:7f:1d:4d:d2:58:cb:97:4d:fd:
                    cd:93:0e:cb:28:04:00:9b:41:8d:53:2f:4c:84:50:
                    bd:38:e5:69:ab:50:b0:06:08:56:0b:d6:f9:2a:0b:
                    4e:92:c4:7d:d4:a3:97:41:0e:44:ce:9b:e1:2b:9a:
                    0b:1f:58:78:e0:91:b2:53:15:c3:c3:9a:4d:80:10:
                    71:4d:4d:50:b9:cd:9c:88:07:13:9b:1e:27:67:59:
                    68:35:5d:e5:01:46:1d:29:36:bc:2e:84:6c:8a:f9:
                    07:2f:71:91:f0:78:4e:1a:6c:dd:2d:57:57:fc:28:
                    0b:83:c5:df:b3:a7:1c:3e:81:07:fe:4f:33:7b:1a:
                    58:74:f7:92:a8:e6:44:03:3c:33:aa:50:31:03:9f:
                    28:23:88:36:f3:e0:54:66:ae:9c:29:50:38:16:85:
                    21:ac:60:1b:76:2a:f8:06:f4:87:21:5d:4d:9c:17:
                    7e:f6:c5:3a:a7:f5:f1:14:5a:3b:d2:d2:8e:1b:d9:
                    95:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DC:8D:9B:E9:55:4E:2F:7B:04:55:C1:40:06:91:CC:7A:30:18:FF
            X509v3 Authority Key Identifier:
                keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/47142068221311EFB680F113C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.144.54.0-155.144.57.255

    Signature Algorithm: sha256WithRSAEncryption
         53:25:2c:27:e6:71:cf:a5:f3:0f:cc:db:be:56:71:83:bc:87:
         fa:75:3b:fa:de:46:86:75:7e:61:3a:27:b0:6a:e2:fd:f1:e3:
         67:db:f2:59:fc:da:b4:52:74:bd:4b:93:1d:1f:e8:5c:89:68:
         56:f2:ee:b1:f4:33:2d:47:ec:6c:f4:31:74:d8:81:c7:7a:05:
         1f:34:1f:c8:da:08:3e:fc:d8:c6:42:c6:1e:a1:d7:20:42:76:
         03:ce:43:3d:29:90:3b:c5:3d:31:58:15:e5:e3:29:c8:06:50:
         b7:b6:9e:3a:90:62:a2:18:92:43:ac:34:d7:40:c2:00:ff:ef:
         6b:c1:a2:fa:4d:7f:bb:5b:ac:af:92:a7:18:21:32:ad:29:16:
         62:28:5f:0f:d8:32:ef:dd:4f:84:74:8b:47:dd:6d:79:13:09:
         85:f1:d1:b6:e3:5d:05:23:a9:99:e9:4f:b6:ba:c7:8b:cd:e3:
         8b:02:d3:47:6e:da:aa:ca:95:47:54:2d:da:c7:29:bf:92:ed:
         55:db:23:53:95:9c:55:19:c8:1b:50:91:a2:ea:9c:4a:da:a1:
         15:86:d7:81:18:59:0a:fa:3d:d9:cc:c6:3b:08:e6:d8:d7:33:
         c9:a9:de:42:22:45:ca:72:2a:b9:02:b6:da:34:90:6b:4b:90:
         2e:fd:9a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:57 2026 by rpki-client