Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6A32721CAD9511EFAA7B4C1AC4F9AE02.roa
File:                     6A32721CAD9511EFAA7B4C1AC4F9AE02.roa (raw, json)
Hash identifier:          dPjccPbPM+XHsqo/BRn7a/ZCtan5yEOQUw1j9eDuCJk=
Subject key identifier:   F5:49:AA:06:86:16:7D:8D:D1:D2:54:A1:FF:61:AD:7A:59:4F:87:6B
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       024F
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6A32721CAD9511EFAA7B4C1AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:31:20 +0000
ROA not before:           Mon 23 Jun 2025 03:22:01 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150300
IP address blocks:        87.124.91.0/24 maxlen: 24
                          87.124.92.0/24 maxlen: 24
                          87.124.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 23 03:22:01 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a485f8-43b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:57:61:54:1b:f5:bf:d6:fc:61:13:4b:d3:
                    92:d7:90:0f:10:68:a4:55:be:72:06:b2:66:ef:84:
                    3f:1f:03:b5:2b:43:94:85:a8:05:54:50:74:94:8d:
                    b6:47:e7:a3:5a:5d:9d:25:d4:f9:8f:7c:c2:fe:ae:
                    fd:e7:08:95:39:d0:7e:8f:b2:67:c8:c6:37:20:e2:
                    32:ab:b7:2f:16:6f:fa:f9:ae:a8:2a:95:a2:06:3c:
                    1c:cf:19:d0:11:da:55:b4:ac:9d:cd:cf:dd:02:58:
                    0a:67:e6:bd:10:0e:2b:5e:a6:b1:1c:5a:be:b2:1b:
                    e1:98:e3:09:b3:d0:48:1c:f1:38:05:47:d8:8f:b1:
                    a8:fe:5c:60:98:0d:86:a8:3c:87:35:4a:9d:ba:f8:
                    9a:f8:a3:91:a0:5c:93:9e:a3:7d:16:c9:07:b2:78:
                    d8:50:20:2e:96:43:b4:95:51:fd:66:4e:7a:95:cd:
                    a1:79:2b:e2:07:a8:3f:f7:1f:80:94:95:06:fd:5e:
                    05:a0:8e:f4:b0:7e:50:80:d4:51:67:33:84:c1:d2:
                    01:17:82:3f:22:7a:97:95:92:d1:6d:ba:65:b7:ff:
                    ce:c3:52:cc:11:89:54:cc:68:c5:55:12:f6:2e:67:
                    bd:61:6c:f2:2e:c2:56:2c:b2:0b:54:00:4b:3c:77:
                    45:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:49:AA:06:86:16:7D:8D:D1:D2:54:A1:FF:61:AD:7A:59:4F:87:6B
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6A32721CAD9511EFAA7B4C1AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.124.91.0-87.124.93.255

    Signature Algorithm: sha256WithRSAEncryption
         80:fa:61:cc:d6:05:93:ec:2e:17:92:01:71:19:d6:48:cf:e8:
         6a:7b:67:9f:4f:be:05:a1:5c:9f:1b:61:23:3f:05:14:37:10:
         2f:5a:f2:33:1b:e2:14:7b:6d:5e:aa:e3:f3:5a:13:56:54:e6:
         61:6e:b2:7d:81:8a:30:e3:36:3a:a8:33:b0:16:f2:8a:f2:8e:
         0d:6c:33:3c:f2:82:e4:ca:2d:ee:20:3f:eb:3c:dc:0c:c8:be:
         38:bb:22:f8:1f:d0:39:b5:53:31:b6:9a:ab:8c:cc:fd:c5:8d:
         b6:28:c6:f6:89:34:27:67:2e:02:4a:30:65:11:b3:80:1f:9a:
         c2:58:ec:a2:6b:26:7c:b8:9f:04:01:01:43:52:10:86:72:70:
         ad:0c:6a:81:0d:65:7c:cd:c4:a3:92:08:2e:82:7a:4b:63:2d:
         51:e7:7b:26:67:84:d3:1d:96:56:de:e6:50:67:91:ee:e5:00:
         87:08:9e:53:38:df:82:23:cd:b9:6f:08:6e:44:a6:60:93:18:
         5d:7e:fc:ca:df:b8:c7:c2:57:be:90:d4:2d:94:eb:20:60:75:
         96:75:e9:b4:cb:2e:c6:4e:18:30:7f:34:c0:ba:76:f6:a6:31:
         21:78:ea:82:c7:41:cf:06:ad:f0:13:2c:1e:c5:f3:7f:77:0d:
         63:1c:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:40 2026 by rpki-client