Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/616950CE619411F1AAF641588347A888.roa
File:                     616950CE619411F1AAF641588347A888.roa (raw, json)
Hash identifier:          Q5OnOyZ8aZ6DKOOyK7ATolb6jgn99ZZfecxkyoOAqnk=
Subject key identifier:   58:9A:91:5A:EF:7C:A7:8F:24:C1:6D:AB:FC:D7:F2:6B:B7:CE:5C:ED
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       028B
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/616950CE619411F1AAF641588347A888.roa
Signing time:             Sat 06 Jun 2026 10:42:14 +0000
ROA not before:           Sat 06 Jun 2026 10:42:14 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     45173
IP address blocks:        87.124.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 651 (0x28b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun  6 10:42:14 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a23f986-e02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:09:6b:48:3e:0c:b8:e7:04:7e:09:00:17:
                    0d:86:22:24:31:bf:9d:bf:ec:e3:15:01:b5:97:ff:
                    ac:45:7b:68:6f:c3:88:5e:15:98:f4:d3:9c:d6:b1:
                    59:cb:73:a0:ee:9e:b8:f6:81:d1:4d:f6:a8:21:59:
                    ed:ed:e0:e8:e0:7b:8a:f1:83:83:27:e7:3c:77:54:
                    23:dc:f5:45:0d:9e:29:9f:9a:c9:58:fc:27:84:05:
                    ba:d9:50:f9:c8:2a:0a:29:8a:42:66:79:d7:f8:56:
                    1f:38:eb:41:73:a3:3d:fe:b1:83:c3:5d:c1:71:a8:
                    77:6e:8c:de:56:07:49:3f:1a:71:03:2d:a5:ef:08:
                    dd:ed:8b:5f:7e:66:48:9f:7e:d6:22:61:99:02:f6:
                    6c:57:c9:c2:af:e0:b6:14:e5:b2:7f:40:d4:ab:12:
                    15:d1:60:e1:d2:6d:3a:7b:06:cd:44:04:ce:39:01:
                    b5:04:3d:d2:28:00:69:1c:4f:a7:b2:1e:a7:99:97:
                    eb:02:9d:b0:f9:85:bd:ce:ce:50:14:7d:6c:0f:4e:
                    db:6f:e0:e5:96:42:72:19:64:2d:b6:c0:28:38:45:
                    1b:d5:cc:c9:65:74:ae:c1:f4:cb:04:99:8c:17:55:
                    96:22:8d:2f:62:a3:65:36:4b:9b:c3:e3:62:3e:80:
                    0f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9A:91:5A:EF:7C:A7:8F:24:C1:6D:AB:FC:D7:F2:6B:B7:CE:5C:ED
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/616950CE619411F1AAF641588347A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.124.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:85:7a:30:a0:20:da:58:a0:43:96:07:11:cc:2f:6a:30:3f:
         0b:6d:29:ef:f9:ab:e1:9a:2b:4f:e9:ce:3e:6d:b0:32:31:eb:
         4e:11:69:73:97:73:1f:8f:7c:1f:27:16:44:11:a7:ba:1e:52:
         fb:95:20:39:02:24:c4:b6:fa:d4:40:d0:68:e6:59:81:7e:83:
         39:21:83:fb:a6:2b:25:17:58:98:c5:5a:81:b5:c9:c2:76:2e:
         66:ab:3b:bf:e3:c5:f8:1b:69:88:1f:5a:2f:54:6d:e1:84:db:
         24:4b:52:30:87:1e:35:17:63:d0:30:b3:30:21:b6:2f:37:6f:
         4b:7d:2c:df:06:ee:d6:de:52:65:eb:88:44:bd:d0:f6:41:1e:
         75:c6:0d:47:c4:b0:90:06:67:31:5a:26:e0:08:1e:21:79:04:
         dd:a9:ac:6f:ae:83:3c:1f:f1:06:02:2f:d4:c6:d4:9a:45:55:
         6c:c9:f0:5a:67:54:8d:a6:f2:a2:9e:16:7f:83:36:38:9d:97:
         95:d7:dd:db:ff:2f:9c:46:8a:a0:aa:b0:16:6d:4e:d4:5b:85:
         43:f9:4c:ad:a5:d9:8e:de:77:b2:d7:7b:50:72:98:ac:1f:16:
         ff:34:92:f3:b3:f4:54:a9:69:41:70:fc:d1:b9:d1:d7:88:4d:
         19:6d:d6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:24:41 2026 by rpki-client