Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57370A4C541A11F1A6DC56E096833773.roa
File:                     57370A4C541A11F1A6DC56E096833773.roa (raw, json)
Hash identifier:          IABEco6g6kBAmcmXHzYKqdz7mGq0emkEIyAj4S82Cn4=
Subject key identifier:   5D:B3:BA:CB:91:DA:1A:B9:61:71:F7:85:81:2D:41:DD:22:64:40:14
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       0155
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57370A4C541A11F1A6DC56E096833773.roa
Signing time:             Sun 04 Oct 2026 20:40:48 +0000
ROA not before:           Sun 04 Oct 2026 20:40:48 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     200772
IP address blocks:        74.52.12.0/23 maxlen: 23
                          74.52.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 20:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Oct  4 20:40:48 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac2b9d0-331e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:9c:ef:0f:69:c0:93:fc:e4:94:d9:57:0d:
                    7f:cf:c9:96:56:e4:55:d3:72:d9:23:a2:fb:a9:6e:
                    8b:76:4b:9b:4f:a1:81:75:9a:63:4d:72:4b:7f:ed:
                    d3:57:cf:0a:59:03:58:df:fd:8e:62:59:29:0d:a3:
                    91:79:c4:eb:d3:54:6b:93:59:08:ec:48:06:ba:45:
                    0a:d5:a0:a0:2e:a2:9d:7d:10:a2:c8:4a:75:9a:c9:
                    e3:e5:a0:24:e6:8c:16:56:cc:43:4d:a5:b2:2b:27:
                    06:da:d6:33:ff:69:7f:ad:5c:c8:89:33:8f:6e:ec:
                    b7:54:18:26:6c:60:76:d0:c8:80:5d:20:c7:d2:e7:
                    64:5e:44:7a:34:2e:58:ba:57:ab:d7:ad:15:f8:d2:
                    d6:43:43:06:6c:e2:f3:5b:e1:f8:b2:1b:21:ee:ab:
                    9a:94:32:87:9b:f5:ff:25:28:a1:36:31:9c:93:64:
                    cb:05:33:e4:3e:39:c9:ce:b9:83:17:d0:97:33:55:
                    66:45:cc:2b:6f:b5:ea:53:30:62:ac:98:2e:bd:4f:
                    b9:d9:de:90:76:78:14:b1:c6:7d:7c:51:36:77:61:
                    6d:12:64:a9:03:3b:6a:2b:1a:d5:fd:83:99:05:0f:
                    be:53:32:52:01:32:e8:4f:2e:b0:6b:90:52:f4:ce:
                    17:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B3:BA:CB:91:DA:1A:B9:61:71:F7:85:81:2D:41:DD:22:64:40:14
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57370A4C541A11F1A6DC56E096833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.12.0/23
                  74.52.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:63:01:c1:75:21:3c:78:fb:fe:94:25:26:10:a8:3a:1b:40:
         37:e4:55:b3:e5:f9:a8:e4:d2:e5:be:62:01:2e:a7:04:d3:db:
         ff:0a:08:fd:22:39:6c:95:6f:88:5f:6f:fe:3f:8d:14:dd:01:
         e8:df:2e:fe:2e:05:a2:ed:c6:e2:7f:a9:74:02:e6:0d:43:c2:
         34:f0:17:a4:a3:84:88:81:26:1e:a2:7c:dc:84:64:88:0a:49:
         d9:9a:40:94:64:3d:e4:82:2f:65:43:03:22:37:72:8c:86:c5:
         ff:c1:a8:df:7e:e1:92:46:e0:2d:61:72:dd:e0:9d:a4:45:c8:
         2e:93:82:86:aa:a7:34:13:19:c0:e9:7c:cd:e0:78:f1:0c:d4:
         57:c7:f2:b7:05:d5:c9:03:d3:0b:e1:a3:d2:e6:bf:49:25:d9:
         75:9f:ae:5e:ae:68:ed:aa:f6:9c:2c:08:bf:99:51:b3:87:88:
         73:9e:68:2f:56:35:e6:f0:24:a1:bb:ef:13:9d:41:8b:65:20:
         16:c5:29:22:d7:97:cb:79:7c:22:c2:ec:46:4c:23:e3:9c:d8:
         58:d4:df:a8:3b:1d:8b:39:04:e2:97:5e:b3:23:75:c5:2b:f9:
         11:cf:a3:3a:44:a4:73:cb:dd:68:91:fe:bf:d6:b1:a2:ff:33:
         7c:cd:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:27:10 2026 by rpki-client