Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57D03776541A11F1A6DC56E096833773.roa
File:                     57D03776541A11F1A6DC56E096833773.roa (raw, json)
Hash identifier:          A2v8NAnwAzbLDkyi0y+lIweB6j1Ghwt4S+YU870nMSI=
Subject key identifier:   82:54:88:DA:A0:3D:8D:72:C6:E1:7B:67:B2:0A:F5:F1:F1:79:40:2F
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       D4
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57D03776541A11F1A6DC56E096833773.roa
Signing time:             Fri 29 May 2026 07:51:36 +0000
ROA not before:           Fri 29 May 2026 07:51:36 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     8143
IP address blocks:        74.52.12.0/23 maxlen: 23
                          74.52.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: May 29 07:51:36 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a194588-ad07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:68:17:da:4c:01:90:33:3d:30:1e:c3:4a:02:
                    5e:a1:a3:ef:ce:9a:b8:16:a3:7a:a7:fc:e0:4d:07:
                    63:6b:69:33:ea:2a:95:08:f7:c4:63:b4:42:fc:19:
                    43:c5:9d:31:89:aa:ce:bb:7e:7d:12:96:ee:ca:61:
                    ba:be:44:c0:5a:b5:30:e8:fd:0b:fa:3a:13:d3:ce:
                    37:4e:44:44:45:87:34:6b:d2:da:d8:bd:7e:1a:46:
                    47:47:64:8d:f4:53:73:bb:e9:c4:b6:4b:ea:dc:7a:
                    45:f5:9b:0b:b7:1d:43:54:0c:45:2a:1d:5e:cb:bd:
                    e6:e0:76:ba:88:8e:10:8e:72:5b:44:9b:8d:66:ea:
                    2a:d1:f6:db:d5:6d:e0:0f:2e:85:a4:eb:4d:69:e7:
                    ed:7b:a6:42:f7:f5:0d:89:7c:ee:e9:ef:9e:53:56:
                    ed:4a:bb:2b:c2:ec:e7:b6:e4:e8:40:a3:f8:aa:62:
                    22:46:7e:89:21:a3:20:e8:f3:ed:d0:c4:d5:da:47:
                    e3:1a:6e:21:c9:60:da:c6:cf:2a:8c:d7:32:b5:e3:
                    86:b9:8d:93:3e:fe:fe:16:b3:72:8b:55:75:af:fa:
                    c9:16:98:da:80:4b:2c:e1:25:bd:79:dd:73:8a:72:
                    cc:c2:11:6b:40:c2:f9:3b:19:19:f1:8e:67:6b:6d:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:54:88:DA:A0:3D:8D:72:C6:E1:7B:67:B2:0A:F5:F1:F1:79:40:2F
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57D03776541A11F1A6DC56E096833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.12.0/23
                  74.52.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:e3:51:ba:79:3c:ae:55:79:80:1b:87:94:cf:b2:4a:65:
         77:0c:1d:ec:ad:b8:b3:c8:7d:76:0b:02:af:07:58:f9:b8:33:
         08:15:97:88:6e:2c:9f:45:b2:6e:ba:4e:6f:60:c9:a7:60:c9:
         2b:e0:54:98:9f:3e:41:46:a6:56:fc:5f:3b:80:f0:cc:23:c4:
         9d:0d:61:a8:d4:89:fc:2c:3d:d3:89:52:86:f8:79:d9:b1:2e:
         99:ed:2d:81:fb:5e:6d:5d:f1:97:fe:3c:bd:84:8e:1f:6a:c2:
         ed:a3:25:53:d0:fc:4e:f9:42:6b:6e:1d:49:4b:49:4d:69:e6:
         78:b8:68:42:56:fc:19:86:53:ac:78:8c:6f:7c:12:0c:1e:7a:
         da:57:ce:a5:69:86:92:03:9a:e5:36:0d:56:af:c5:76:fd:1c:
         0e:d6:e3:2a:cc:da:3e:13:fd:6f:d7:a4:1d:27:98:f3:ba:3a:
         d5:ba:83:e1:3e:a6:9e:2c:89:fb:b6:da:86:47:53:4f:ae:af:
         b5:fd:51:d6:ca:3e:02:a2:6c:57:1d:f6:e6:8f:7e:3d:46:2d:
         1a:01:99:d1:89:29:a2:1e:2e:4d:77:d6:4e:d5:ed:b6:db:a6:
         cc:b9:09:c2:1a:0c:0c:19:d3:0b:39:0a:d1:6d:44:37:dc:c4:
         7f:c2:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:13:16 2026 by rpki-client