Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57370A4C541A11F1A6DC56E096833773.roa
File:                     57370A4C541A11F1A6DC56E096833773.roa (raw, json)
Hash identifier:          ruJ2EGjt6cNHDhgKXoRYEJ4KK5GoIqPdnFk7GEdFDwY=
Subject key identifier:   53:92:8C:2B:FA:83:AC:0B:3A:A5:F5:A0:69:0D:B4:61:94:EA:E9:4B
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       D3
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57370A4C541A11F1A6DC56E096833773.roa
Signing time:             Fri 29 May 2026 07:51:34 +0000
ROA not before:           Fri 29 May 2026 07:51:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     200772
IP address blocks:        74.52.12.0/23 maxlen: 23
                          74.52.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: May 29 07:51:34 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a194585-637d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0f:6e:71:8f:e8:27:53:9f:d2:5c:5f:b2:96:
                    8e:d5:c2:25:9f:d0:eb:c1:f9:c5:f6:57:14:7a:58:
                    44:f4:36:75:84:5d:8e:c5:d3:7f:10:6e:61:4c:87:
                    f4:46:eb:51:fc:3b:16:90:7f:96:a8:b9:94:15:d8:
                    fe:fc:68:f6:87:09:ac:ad:aa:a3:10:28:16:05:0a:
                    99:b2:1c:43:a7:08:06:74:29:2d:7d:61:84:92:54:
                    ec:f9:36:3c:f7:f5:27:9a:d0:ca:08:05:9f:2f:34:
                    30:ce:84:9c:63:4e:b6:19:45:2a:f8:68:94:23:2d:
                    79:58:2c:8a:ad:fd:82:91:57:41:2d:14:61:9d:bb:
                    2f:35:8d:69:74:6f:19:d9:cf:05:8d:a1:66:e5:db:
                    53:2c:99:49:c6:2e:52:88:72:9f:83:12:cd:65:74:
                    f4:a1:22:b5:e5:dd:20:61:34:c6:a8:97:6b:f3:3f:
                    cf:b8:9a:8e:3d:06:f0:bc:a5:c7:0e:82:a8:d2:dc:
                    e3:40:57:55:1b:ba:0e:df:2e:e1:8b:39:ab:d2:5b:
                    c5:23:f7:f0:d6:d0:76:60:4f:f7:e0:aa:37:a4:45:
                    78:f3:63:72:18:7f:26:1f:00:3f:2a:61:d1:c0:2c:
                    84:56:4b:71:ec:98:89:cd:d2:fb:43:5e:17:4b:dc:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:92:8C:2B:FA:83:AC:0B:3A:A5:F5:A0:69:0D:B4:61:94:EA:E9:4B
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57370A4C541A11F1A6DC56E096833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.12.0/23
                  74.52.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:59:ad:a8:14:6b:ce:97:c5:55:db:3d:67:7e:eb:77:a8:5c:
         88:79:ca:99:ad:ac:fb:25:42:0d:4a:12:5e:9a:c3:1f:78:c6:
         4e:61:9e:15:27:a0:ff:b9:70:5f:09:5f:20:b8:97:5f:52:fe:
         06:45:6b:38:02:f0:9a:51:04:94:51:d6:8a:6d:0c:ec:16:95:
         5c:18:4d:c9:fb:24:af:1c:b4:66:88:e0:57:8c:ba:f3:e2:e7:
         dc:a6:c0:1a:ca:32:54:9c:90:60:c2:67:f0:7e:47:9f:c3:21:
         a9:e2:33:c4:52:52:fc:1d:f9:02:4c:e9:4f:46:2f:60:3d:1a:
         f4:ae:10:a0:5b:81:e7:a3:60:ce:83:33:a3:cd:57:d8:0e:3c:
         c9:dd:a5:9c:f6:da:f0:f4:38:9a:0d:ee:16:9c:6a:f2:a7:10:
         f4:77:3a:5c:33:ae:7d:b1:57:5d:48:d2:a6:a3:71:50:b4:34:
         e3:e0:6c:64:c5:e8:76:77:7d:27:d1:0c:16:b3:da:b4:41:1c:
         ed:8a:f1:56:15:a8:12:8a:c6:da:0b:fd:ef:0c:8f:33:fc:db:
         b8:22:e5:ba:c9:00:7c:ea:8c:58:78:85:60:f7:ae:db:93:82:
         89:95:2a:34:2c:3d:4f:9e:69:21:20:a2:aa:ca:24:6c:a3:2b:
         5a:3d:69:39
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG
Mzc2OUI0REUwHhcNMjYwNTI5MDc1MTM0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE5NDU4NS02MzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5A9ucY/oJ1Of0lxfspaO1cIln9DrwfnF9lcUelhE9DZ1hF2OxdN/EG5hTIf0
RutR/DsWkH+WqLmUFdj+/Gj2hwmsraqjECgWBQqZshxDpwgGdCktfWGEklTs+TY8
9/UnmtDKCAWfLzQwzoScY062GUUq+GiUIy15WCyKrf2CkVdBLRRhnbsvNY1pdG8Z
2c8FjaFm5dtTLJlJxi5SiHKfgxLNZXT0oSK15d0gYTTGqJdr8z/PuJqOPQbwvKXH
DoKo0tzjQFdVG7oO3y7hizmr0lvFI/fw1tB2YE/34Ko3pEV482NyGH8mHwA/KmHR
wCyEVktx7JiJzdL7Q14XS9xb8QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFOSjCv6
g6wLOqX1oGkNtGGU6ulLMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz
NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvNTczNzBBNEM1
NDFBMTFGMUE2REM1NkUwOTY4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBSjQMAwQBSjQWMA0GCSqGSIb3DQEBCwUAA4IBAQB/Wa2oFGvOl8VV
2z1nfut3qFyIecqZraz7JUINShJemsMfeMZOYZ4VJ6D/uXBfCV8guJdfUv4GRWs4
AvCaUQSUUdaKbQzsFpVcGE3J+ySvHLRmiOBXjLrz4ufcpsAayjJUnJBgwmfwfkef
wyGp4jPEUlL8HfkCTOlPRi9gPRr0rhCgW4Hno2DOgzOjzVfYDjzJ3aWc9trw9Dia
De4WnGrypxD0dzpcM659sVddSNKmo3FQtDTj4Gxkxeh2d30n0QwWs9q0QRztivFW
FagSisbaC/3vDI8z/Nu4IuW6yQB86oxYeIVg967bk4KJlSo0LD1PnmkhIKKqyiRs
oytaPWk5
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:17:31 2026 by rpki-client