Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/EC39CCB479B911F19EDAB94259A30FBC.roa
File:                     EC39CCB479B911F19EDAB94259A30FBC.roa (raw, json)
Hash identifier:          /nPdTpPq5UDEumxLQj4O8mM0ae+/XLWju2fFQo05p0w=
Subject key identifier:   69:03:5C:6C:A0:4A:7E:61:07:E3:99:87:D0:DA:B5:F1:06:04:87:9C
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       0164
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/EC39CCB479B911F19EDAB94259A30FBC.roa
Signing time:             Sun 04 Oct 2026 20:41:20 +0000
ROA not before:           Sun 04 Oct 2026 20:41:20 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        74.52.2.0/24 maxlen: 24
                          74.52.7.0/24 maxlen: 24
                          74.52.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Oct  4 20:41:20 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac2b9f0-722a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f3:d1:20:6d:f3:02:01:11:c1:ee:14:2e:25:
                    00:59:1d:fa:61:32:d4:b0:ae:90:6b:1b:d0:fe:94:
                    f8:93:ff:85:4f:a8:9d:cb:eb:f5:1a:c6:d7:2f:99:
                    81:0f:0b:da:41:2e:41:d6:c1:99:70:8f:43:55:a7:
                    23:16:23:fc:65:fa:3c:e9:65:5d:8a:e9:8d:b1:62:
                    41:0c:76:18:46:08:e1:b3:1c:ba:a2:0a:cf:bd:78:
                    e4:ad:b8:76:c4:26:96:0a:24:de:a9:ad:af:7d:fd:
                    e6:a6:b1:c4:c1:21:2a:d0:20:ee:1b:8e:c2:60:63:
                    5a:06:8b:28:82:50:0d:68:86:df:35:0a:71:f9:bb:
                    1d:4a:23:7d:ca:46:a4:15:b8:23:bd:a6:5b:a5:f9:
                    a1:9b:19:7a:14:7a:b7:12:92:ff:83:39:5f:48:c9:
                    70:ac:1b:95:2e:b4:39:7f:fa:60:ec:ac:a1:23:ae:
                    86:af:cd:ad:a3:b9:13:6d:7a:ae:22:c2:4b:c7:08:
                    86:53:72:50:91:f8:48:93:f8:d1:1e:3f:51:03:28:
                    a8:47:32:59:7c:b7:33:0b:54:15:f3:2d:bc:27:b8:
                    b8:6e:d9:07:28:ca:08:46:57:72:91:98:a9:a0:82:
                    8e:09:ef:17:9f:56:a5:64:9d:e4:03:05:ff:45:39:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:03:5C:6C:A0:4A:7E:61:07:E3:99:87:D0:DA:B5:F1:06:04:87:9C
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/EC39CCB479B911F19EDAB94259A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.2.0/24
                  74.52.7.0-74.52.11.255

    Signature Algorithm: sha256WithRSAEncryption
         50:21:41:a9:32:1d:8b:aa:7f:03:da:1b:2b:64:78:17:80:4a:
         ba:10:98:1f:ab:a9:64:79:ee:5f:87:6e:b5:a0:59:01:e0:a7:
         0f:47:de:a5:bb:35:fe:2b:de:f5:7b:43:38:69:72:30:a7:e6:
         a7:71:2d:73:7b:e4:34:ec:75:59:e0:fe:c8:f6:3d:f2:e4:c8:
         c0:9e:fb:70:9b:a8:20:f7:53:ef:bd:4e:e0:a0:24:24:36:cf:
         5b:7a:11:a8:0c:46:7f:51:60:b6:5e:c1:63:ac:02:22:6d:98:
         27:ee:01:24:82:45:d4:ca:93:25:d6:8d:04:a4:2d:21:a0:b1:
         cb:17:8d:88:c5:44:a6:d4:20:76:2d:47:ee:05:b9:7c:ba:79:
         80:3e:3d:22:be:5e:f6:46:23:64:84:09:fc:1f:e3:91:8e:0b:
         45:c9:cd:8c:ed:e9:06:a4:5f:4f:de:5a:27:97:82:7b:07:23:
         38:f1:04:3d:fd:74:05:ec:ce:ec:86:a8:e9:e9:b4:e9:7c:07:
         9d:8f:db:14:e3:73:f8:82:3e:b8:0a:01:a8:51:ef:35:85:05:
         fe:7c:27:13:1c:83:2b:e4:de:75:e3:e2:d4:a2:ca:06:b2:73:
         22:bc:32:73:8d:36:8c:ef:76:3f:5d:55:57:f8:bf:51:6a:ce:
         29:4b:2f:39
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG
Mzc2OUI0REUwHhcNMjYxMDA0MjA0MTIwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMyYjlmMC03MjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw/PRIG3zAgERwe4ULiUAWR36YTLUsK6QaxvQ/pT4k/+FT6idy+v1GsbXL5mB
DwvaQS5B1sGZcI9DVacjFiP8Zfo86WVdiumNsWJBDHYYRgjhsxy6ogrPvXjkrbh2
xCaWCiTeqa2vff3mprHEwSEq0CDuG47CYGNaBosoglANaIbfNQpx+bsdSiN9ykak
FbgjvaZbpfmhmxl6FHq3EpL/gzlfSMlwrBuVLrQ5f/pg7KyhI66Gr82to7kTbXqu
IsJLxwiGU3JQkfhIk/jRHj9RAyioRzJZfLczC1QV8y28J7i4btkHKMoIRldykZip
oIKOCe8Xn1alZJ3kAwX/RTlcnwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFGkDXGyg
Sn5hB+OZh9DatfEGBIecMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz
NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvRUMzOUNDQjQ3
OUI5MTFGMTlFREFCOTQyNTlBMzBGQkMucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQASjQCMAwDBABKNAcDBAJKNAgwDQYJKoZIhvcNAQELBQADggEBAFAh
QakyHYuqfwPaGytkeBeASroQmB+rqWR57l+HbrWgWQHgpw9H3qW7Nf4r3vV7Qzhp
cjCn5qdxLXN75DTsdVng/sj2PfLkyMCe+3CbqCD3U++9TuCgJCQ2z1t6EagMRn9R
YLZewWOsAiJtmCfuASSCRdTKkyXWjQSkLSGgscsXjYjFRKbUIHYtR+4FuXy6eYA+
PSK+XvZGI2SECfwf45GOC0XJzYzt6QakX0/eWieXgnsHIzjxBD39dAXszuyGqOnp
tOl8B52P2xTjc/iCPrgKAahR7zWFBf58JxMcgyvk3nXj4tSiygaycyK8MnONNozv
dj9dVVf4v1FqzilLLzk=
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:57:52 2026 by rpki-client