Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/48635696486311F19B06CCBAA3833773.roa
File:                     48635696486311F19B06CCBAA3833773.roa (raw, json)
Hash identifier:          dqfljBalhMq2AZ99tvFoEo5fOXil9RHFdoZ+aUnfUXQ=
Subject key identifier:   37:63:07:6F:E0:9F:52:12:E7:1E:BC:F2:1F:F6:A3:A1:35:4C:3C:82
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       015D
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/48635696486311F19B06CCBAA3833773.roa
Signing time:             Sun 04 Oct 2026 20:41:06 +0000
ROA not before:           Sun 04 Oct 2026 20:41:06 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     399870
IP address blocks:        74.52.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 20:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Oct  4 20:41:06 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac2b9e2-d4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0f:ef:c7:73:da:48:88:85:77:bc:22:50:67:
                    9b:ce:6d:c7:33:49:06:73:eb:ad:58:33:31:f9:59:
                    4d:47:56:a8:b9:1f:0b:51:05:1f:61:c5:74:d3:e0:
                    1d:9e:86:a3:40:d5:c7:c0:a9:d3:e3:8e:e9:02:e4:
                    87:83:91:88:37:c0:e3:17:8f:e4:0e:54:7d:69:40:
                    36:dc:eb:c5:f5:65:ab:bc:de:5e:da:71:5f:0f:44:
                    82:1d:48:21:f1:e4:e6:4e:ae:d5:bc:92:16:bb:4e:
                    85:66:b8:92:6c:d4:37:e0:de:0a:a9:1b:af:67:d0:
                    bc:80:4d:ef:ed:37:46:8c:57:c4:67:6e:77:38:0a:
                    38:30:b7:05:a0:22:a2:45:a3:51:96:29:5a:15:3d:
                    a6:1e:91:a4:d3:ec:66:16:13:5e:88:17:66:81:e2:
                    4b:f1:b3:4d:63:d3:4c:9e:a3:01:09:1d:9b:a9:9f:
                    19:1d:2b:2f:d4:15:3b:ea:25:6e:74:de:88:9d:f8:
                    9b:4c:fd:54:c3:a2:d4:76:e2:b9:2f:f7:94:55:28:
                    29:82:9c:1a:5e:ba:5d:ac:63:7c:5a:1f:34:fd:c7:
                    16:d4:4d:f8:ed:1d:10:43:a6:dc:9f:06:a5:76:1c:
                    40:f5:88:ea:44:e0:85:6d:c6:37:ab:58:d6:67:0c:
                    4a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:63:07:6F:E0:9F:52:12:E7:1E:BC:F2:1F:F6:A3:A1:35:4C:3C:82
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/48635696486311F19B06CCBAA3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:e1:41:ad:16:04:2b:f2:d9:d3:c3:12:27:4a:55:94:17:fe:
         0c:9a:53:b4:8c:19:37:65:5c:8d:5f:c4:9e:21:08:38:d8:e2:
         5c:4d:58:a8:61:09:bd:e5:13:8e:df:59:08:f4:40:d8:2b:0e:
         43:86:04:a6:db:61:11:4d:c4:a8:69:94:f2:ac:f2:3c:cd:c2:
         d7:36:0e:3c:41:98:44:ed:f8:27:12:19:d1:0f:0b:86:7f:bd:
         53:45:44:5f:5f:d0:f3:f0:1d:6b:50:98:84:7d:da:53:be:78:
         2e:57:b1:fc:a1:80:c1:ba:8b:81:b3:6e:43:05:ed:7a:f1:4d:
         42:6b:bc:02:8f:3a:75:08:20:0f:2b:fa:30:d0:1b:94:9f:fc:
         3b:1b:dd:db:09:98:9b:80:97:63:b5:20:90:6b:19:3e:78:8c:
         1c:09:db:cf:a8:7a:f9:19:d8:b6:98:65:eb:ef:6d:de:f3:7b:
         71:71:b7:ef:91:07:28:c5:92:7a:5b:d8:e0:c9:ea:f8:22:e0:
         9c:4f:1a:2b:f3:5f:08:62:93:fa:61:64:d0:90:bf:a1:e7:69:
         6d:e5:88:66:15:a7:81:11:68:06:c4:41:9b:d5:9b:3b:bf:60:
         88:68:e2:6a:06:4b:40:79:c1:27:63:60:08:22:7c:27:d6:0d:
         4e:b7:64:7f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG
Mzc2OUI0REUwHhcNMjYxMDA0MjA0MTA2WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMyYjllMi1kNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5g/vx3PaSIiFd7wiUGebzm3HM0kGc+utWDMx+VlNR1aouR8LUQUfYcV00+Ad
noajQNXHwKnT447pAuSHg5GIN8DjF4/kDlR9aUA23OvF9WWrvN5e2nFfD0SCHUgh
8eTmTq7VvJIWu06FZriSbNQ34N4KqRuvZ9C8gE3v7TdGjFfEZ253OAo4MLcFoCKi
RaNRlilaFT2mHpGk0+xmFhNeiBdmgeJL8bNNY9NMnqMBCR2bqZ8ZHSsv1BU76iVu
dN6InfibTP1Uw6LUduK5L/eUVSgpgpwaXrpdrGN8Wh80/ccW1E347R0QQ6bcnwal
dhxA9YjqROCFbcY3q1jWZwxKZQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDdjB2/g
n1IS5x688h/2o6E1TDyCMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz
NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvNDg2MzU2OTY0
ODYzMTFGMTlCMDZDQ0JBQTM4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQASjQBMA0GCSqGSIb3DQEBCwUAA4IBAQBn4UGtFgQr8tnTwxInSlWU
F/4MmlO0jBk3ZVyNX8SeIQg42OJcTVioYQm95ROO31kI9EDYKw5DhgSm22ERTcSo
aZTyrPI8zcLXNg48QZhE7fgnEhnRDwuGf71TRURfX9Dz8B1rUJiEfdpTvnguV7H8
oYDBuouBs25DBe168U1Ca7wCjzp1CCAPK/ow0BuUn/w7G93bCZibgJdjtSCQaxk+
eIwcCdvPqHr5Gdi2mGXr723e83txcbfvkQcoxZJ6W9jgyer4IuCcTxor818IYpP6
YWTQkL+h52lt5YhmFaeBEWgGxEGb1Zs7v2CIaOJqBktAecEnY2AIInwn1g1Ot2R/
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:50:37 2026 by rpki-client