Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6A32721CAD9511EFAA7B4C1AC4F9AE02.roa
File:                     6A32721CAD9511EFAA7B4C1AC4F9AE02.roa (raw, json)
Hash identifier:          gpZAC3B4cf0P/imDYdwj9wYrl+UznoKvZqgWUfxAVec=
Subject key identifier:   FD:BA:3D:7D:6E:3B:18:50:92:1D:5C:11:B9:0B:75:9A:54:24:91:56
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       02B2
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6A32721CAD9511EFAA7B4C1AC4F9AE02.roa
Signing time:             Mon 22 Jun 2026 06:32:41 +0000
ROA not before:           Mon 22 Jun 2026 06:32:41 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     150300
IP address blocks:        87.124.91.0/24 maxlen: 24
                          87.124.92.0/24 maxlen: 24
                          87.124.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 22 06:32:41 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a38d709-69ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:90:7b:8f:45:4c:c5:1a:2e:d1:14:05:22:
                    55:86:72:5b:ce:1f:56:ba:a0:f1:4b:d7:56:57:3e:
                    20:8f:dd:d2:d9:67:ad:d0:6a:ec:86:31:14:5d:ed:
                    12:fd:00:54:f3:63:c7:d0:af:f0:30:b0:c4:cb:78:
                    66:e7:82:c7:9a:1f:40:57:db:4a:4f:32:8a:90:22:
                    2c:bd:96:82:cd:52:d6:92:92:9c:cf:dc:92:18:cb:
                    c9:ea:be:77:5a:70:f7:45:de:f0:90:66:d6:cb:78:
                    aa:22:ea:30:dc:41:b3:f7:18:a9:83:97:12:a5:31:
                    e9:63:ce:4d:38:90:a1:cd:99:81:28:13:6d:0e:e9:
                    2c:ad:8d:60:bc:22:31:a1:0b:90:10:27:af:bc:d6:
                    84:dc:4a:b7:c4:76:89:18:aa:3a:74:13:3a:e4:a5:
                    6f:e3:99:b8:fd:1a:27:9e:86:0b:fa:9d:43:74:83:
                    ba:b4:06:bf:f8:db:64:e1:f4:22:f3:28:f0:ff:52:
                    76:00:15:6d:b7:ca:82:89:54:f5:10:00:c8:7c:f5:
                    f6:51:7a:4a:db:d2:b9:63:0f:c7:85:5d:e0:ea:4f:
                    31:4b:d9:e9:65:1e:f9:27:1e:eb:40:2d:ba:93:ae:
                    0a:56:3e:43:d5:b3:02:f8:bf:10:94:65:9c:2f:c8:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BA:3D:7D:6E:3B:18:50:92:1D:5C:11:B9:0B:75:9A:54:24:91:56
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6A32721CAD9511EFAA7B4C1AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.124.91.0-87.124.93.255

    Signature Algorithm: sha256WithRSAEncryption
         af:ab:97:c0:02:28:35:ce:7e:69:bd:80:03:b3:3f:ba:78:3d:
         f9:59:f4:84:0e:7d:a4:aa:c9:32:65:3b:94:c4:72:cc:b9:52:
         44:f7:eb:3a:4f:62:2e:e6:22:db:1b:04:51:7b:4f:da:ee:aa:
         54:88:8b:9b:af:38:3a:1d:51:e6:40:76:9e:bb:c9:9b:a3:47:
         70:02:c8:f0:49:25:68:34:54:b0:fd:ba:55:07:53:d9:4f:a7:
         1b:d2:cc:cf:c3:c4:37:b3:36:09:97:5d:2b:a8:97:a4:35:4d:
         2f:63:75:56:58:51:91:cb:aa:17:b8:b3:0d:aa:6c:4a:ac:7a:
         19:94:e0:c1:a5:17:ee:10:3e:0f:5b:5b:79:4a:70:b1:37:4d:
         46:48:65:c2:6b:22:fd:74:a2:9f:88:fb:10:b1:3a:a2:0e:88:
         90:c9:10:93:0b:40:aa:cc:c8:ef:52:f0:12:13:a5:a8:46:ec:
         49:11:7e:6c:6e:2b:43:01:c0:97:4a:56:24:81:71:06:90:84:
         8b:f2:a1:69:bb:7c:92:c4:b5:9d:de:29:64:e5:be:e3:97:3c:
         60:21:e0:a4:61:51:f5:23:0c:d9:c9:49:bb:da:0d:3a:d4:bb:
         f6:8e:3b:ee:63:64:b4:73:9f:34:6b:f7:d3:13:83:e3:f1:17:
         f0:b7:f4:90
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKDcxRjQwMjE4QzFBRjQ3QzVFOTkzQTIxQTJCMjkyODRF
NEMzMkM5MzQwHhcNMjYwNjIyMDYzMjQxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM4ZDcwOS02OWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArtiQe49FTMUaLtEUBSJVhnJbzh9WuqDxS9dWVz4gj93S2Wet0GrshjEUXe0S
/QBU82PH0K/wMLDEy3hm54LHmh9AV9tKTzKKkCIsvZaCzVLWkpKcz9ySGMvJ6r53
WnD3Rd7wkGbWy3iqIuow3EGz9xipg5cSpTHpY85NOJChzZmBKBNtDuksrY1gvCIx
oQuQECevvNaE3Eq3xHaJGKo6dBM65KVv45m4/RonnoYL+p1DdIO6tAa/+Ntk4fQi
8yjw/1J2ABVtt8qCiVT1EADIfPX2UXpK29K5Yw/HhV3g6k8xS9npZR75Jx7rQC26
k64KVj5D1bMC+L8QlGWcL8gWGwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFP26PX1u
OxhQkh1cEbkLdZpUJJFWMB8GA1UdIwQYMBaAFHH0AhjBr0fF6ZOiGispKE5MMsk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy82REUzQ0U3QzM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4WHBrNklhS3lrb1Rrd3l5
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2NmUUNHTUd2UjhYcGs2SWFLeWtvVGt3eXlUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvNkRFM0NFN0MzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvNkEzMjcyMUNB
RDk1MTFFRkFBN0I0QzFBQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABXfFsDBAFXfFwwDQYJKoZIhvcNAQELBQADggEBAK+rl8ACKDXO
fmm9gAOzP7p4PflZ9IQOfaSqyTJlO5TEcsy5UkT36zpPYi7mItsbBFF7T9ruqlSI
i5uvODodUeZAdp67yZujR3ACyPBJJWg0VLD9ulUHU9lPpxvSzM/DxDezNgmXXSuo
l6Q1TS9jdVZYUZHLqhe4sw2qbEqsehmU4MGlF+4QPg9bW3lKcLE3TUZIZcJrIv10
op+I+xCxOqIOiJDJEJMLQKrMyO9S8BITpahG7EkRfmxuK0MBwJdKViSBcQaQhIvy
oWm7fJLEtZ3eKWTlvuOXPGAh4KRhUfUjDNnJSbvaDTrUu/aOO+5jZLRznzRr99MT
g+PxF/C39JA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:19:13 2026 by rpki-client