Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/9F931B1659B811F19C535564C0833773.roa
File:                     9F931B1659B811F19C535564C0833773.roa (raw, json)
Hash identifier:          z60HaqbZ1jka7OwRTI9VVn3xZaeALK+nzTOo1/Reyl8=
Subject key identifier:   3F:86:A0:C2:61:20:F0:07:06:00:CD:8C:0F:15:30:3F:AB:37:06:2E
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       D0
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/9F931B1659B811F19C535564C0833773.roa
Signing time:             Wed 27 May 2026 10:41:31 +0000
ROA not before:           Wed 27 May 2026 10:41:31 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     211759
IP address blocks:        74.52.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 20:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: May 27 10:41:31 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a16ca5b-7943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:0e:9f:36:80:5c:1e:90:b7:2c:ba:45:19:
                    80:43:3b:ae:d8:58:24:71:ed:a7:6b:12:76:f8:b7:
                    05:9d:96:38:77:4a:fb:04:f0:83:7b:d0:fe:97:c0:
                    c1:66:1f:ff:3a:8a:cf:93:3a:3e:45:ea:75:aa:51:
                    c9:7a:83:9f:5d:12:7d:4d:32:40:bb:5e:50:2e:a2:
                    41:3c:0b:56:74:ea:63:47:d1:0b:fc:48:2c:b2:68:
                    2b:f1:49:a6:c9:8a:50:21:29:e2:2d:5d:28:fe:69:
                    ab:a5:c3:e2:24:09:b2:42:91:bf:e8:01:6c:7f:ac:
                    72:43:9a:6b:91:c7:37:f5:3a:4e:2f:a2:0f:fd:2c:
                    f4:3c:de:77:27:88:f3:ea:f4:b1:f9:10:9f:0f:45:
                    65:a7:c4:04:ba:8d:b6:e7:a0:63:91:37:c4:e0:07:
                    51:68:82:49:db:e7:15:94:94:1e:61:ad:56:be:57:
                    df:09:3b:e3:11:af:0b:11:41:d3:90:ad:ad:0a:97:
                    f8:e7:60:c8:cf:72:fd:e8:35:13:b9:86:e7:11:ed:
                    b4:06:23:f5:48:28:90:fc:fb:d7:4e:e1:92:a0:30:
                    d9:dd:bb:69:6a:87:f7:ad:ec:dd:b1:fe:56:0f:49:
                    a0:61:2b:40:f0:8c:1e:90:a6:ff:35:ec:60:ae:05:
                    74:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:86:A0:C2:61:20:F0:07:06:00:CD:8C:0F:15:30:3F:AB:37:06:2E
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/9F931B1659B811F19C535564C0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:26:68:57:53:5e:9a:ee:85:d4:21:50:de:28:47:8a:ee:f2:
         29:33:0b:dc:78:ac:4c:ba:f9:85:f4:ea:fa:32:f9:22:23:da:
         19:2e:2b:cd:66:21:53:62:98:a1:cd:10:dd:f9:3b:51:41:f7:
         71:10:fa:da:a1:f6:d6:d3:34:d6:71:0c:64:8f:12:10:ee:b5:
         21:cd:82:4e:82:37:3e:d0:0e:6b:c7:61:10:6d:06:76:81:df:
         19:b4:e7:e6:1b:6c:ac:5f:96:17:5b:70:cd:f8:4b:b6:b4:ed:
         9a:fa:c9:0b:5f:56:30:f3:f6:5e:48:6f:47:f9:ed:73:0d:c6:
         ea:41:63:da:58:2c:06:9e:72:ee:83:af:65:65:b1:7c:e1:ff:
         66:9e:ba:1b:e8:0e:5b:de:93:72:df:73:45:01:d4:1a:46:17:
         fc:58:61:31:c2:af:c6:f4:14:5a:9b:60:79:f4:f2:81:d7:44:
         05:e4:a1:b1:fd:0e:43:dd:fe:42:53:47:fe:b7:15:41:0c:1c:
         ca:08:4b:39:a5:3a:28:dc:bb:34:da:94:3a:f1:15:d4:03:62:
         4d:eb:2d:06:fe:66:5f:a5:88:fc:90:79:b6:84:da:7e:08:f5:
         3b:4b:f5:95:b1:53:bf:9a:fa:3d:c6:b0:85:57:42:29:86:56:
         25:bd:ed:6a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG
Mzc2OUI0REUwHhcNMjYwNTI3MTA0MTMxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE2Y2E1Yi03OTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuOUOnzaAXB6Qtyy6RRmAQzuu2Fgkce2naxJ2+LcFnZY4d0r7BPCDe9D+l8DB
Zh//OorPkzo+Rep1qlHJeoOfXRJ9TTJAu15QLqJBPAtWdOpjR9EL/Egssmgr8Umm
yYpQISniLV0o/mmrpcPiJAmyQpG/6AFsf6xyQ5prkcc39TpOL6IP/Sz0PN53J4jz
6vSx+RCfD0Vlp8QEuo2256BjkTfE4AdRaIJJ2+cVlJQeYa1WvlffCTvjEa8LEUHT
kK2tCpf452DIz3L96DUTuYbnEe20BiP1SCiQ/PvXTuGSoDDZ3btpaof3rezdsf5W
D0mgYStA8IwekKb/NexgrgV0wwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD+GoMJh
IPAHBgDNjA8VMD+rNwYuMB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz
NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvOUY5MzFCMTY1
OUI4MTFGMTlDNTM1NTY0QzA4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQASjQOMA0GCSqGSIb3DQEBCwUAA4IBAQChJmhXU16a7oXUIVDeKEeK
7vIpMwvceKxMuvmF9Or6MvkiI9oZLivNZiFTYpihzRDd+TtRQfdxEPraofbW0zTW
cQxkjxIQ7rUhzYJOgjc+0A5rx2EQbQZ2gd8ZtOfmG2ysX5YXW3DN+Eu2tO2a+skL
X1Yw8/ZeSG9H+e1zDcbqQWPaWCwGnnLug69lZbF84f9mnrob6A5b3pNy33NFAdQa
Rhf8WGExwq/G9BRam2B59PKB10QF5KGx/Q5D3f5CU0f+txVBDBzKCEs5pToo3Ls0
2pQ68RXUA2JN6y0G/mZfpYj8kHm2hNp+CPU7S/WVsVO/mvo9xrCFV0IphlYlve1q
-----END CERTIFICATE-----
Generated at Wed Jun 3 04:35:37 2026 by rpki-client