Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57370A4C541A11F1A6DC56E096833773.roa
File:                     57370A4C541A11F1A6DC56E096833773.roa (raw, json)
Hash identifier:          ZsVGtegTGQsj16vRj+9ULdFgvMhhwvD8FE+3MYY/pa0=
Subject key identifier:   DD:53:D0:4A:E2:D2:2B:1E:77:47:8E:69:6F:5D:8D:52:9E:61:B9:B6
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       C4
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57370A4C541A11F1A6DC56E096833773.roa
Signing time:             Wed 20 May 2026 07:05:54 +0000
ROA not before:           Wed 20 May 2026 07:05:53 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     200772
IP address blocks:        74.52.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: May 20 07:05:53 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a0d5d51-0a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:e2:53:43:c8:f4:9c:2f:bf:7b:87:84:72:
                    10:d2:a4:da:51:c6:3a:15:86:1f:a9:5c:9f:bd:84:
                    be:ed:52:9a:b5:59:53:8e:8d:0e:0c:77:35:45:ed:
                    78:6a:8d:98:5d:21:a8:89:c8:13:17:04:4c:a9:a5:
                    5a:ee:3c:ce:f6:ed:6f:31:11:63:7f:cd:63:26:8d:
                    41:83:51:48:86:34:23:9d:ea:88:14:b6:5a:d3:10:
                    67:39:9a:ed:d4:1f:e0:24:36:3a:19:22:27:8f:e6:
                    ba:a9:ac:9f:65:39:7f:fe:90:2c:98:ad:05:0d:82:
                    2b:39:ed:fa:76:cb:74:9f:12:b5:f3:06:41:dc:ef:
                    f7:74:8b:1d:b8:85:ee:24:17:5e:0a:43:a1:1e:9d:
                    4c:1d:2a:ec:d0:f6:4c:e4:81:2d:6a:f2:ad:4d:2c:
                    3c:c7:0f:76:86:ba:95:33:48:2a:85:02:00:c3:2f:
                    05:ca:75:df:37:30:0d:5d:34:bf:d4:99:db:69:65:
                    3c:af:82:95:41:5a:06:98:f7:ce:3b:bd:54:8e:95:
                    a9:41:2d:4e:23:00:41:ac:f6:bc:67:5d:df:35:c6:
                    12:80:05:98:2d:56:78:d2:3c:51:ae:af:e1:e1:eb:
                    e1:26:e4:42:2e:d8:0e:89:b8:23:04:7d:72:53:17:
                    04:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:53:D0:4A:E2:D2:2B:1E:77:47:8E:69:6F:5D:8D:52:9E:61:B9:B6
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57370A4C541A11F1A6DC56E096833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:ce:87:44:c6:ed:e7:86:60:09:db:c4:0c:30:8e:b1:f0:5b:
         8b:5d:0e:ab:0e:2f:97:4f:55:d7:58:a5:2f:1d:ae:a4:ca:d6:
         57:cc:c7:9b:ea:fc:aa:0c:88:ee:7c:77:6e:40:8a:db:0f:4e:
         e6:db:ff:20:35:58:08:f3:7a:ca:5a:98:13:04:5f:e6:05:2a:
         de:fa:9e:7f:8d:30:a3:57:1c:bd:cf:7e:18:5f:12:69:d5:ee:
         a8:f8:03:d2:e2:3f:fb:de:c1:18:cf:6f:ba:3d:f3:c4:fc:4e:
         0f:d2:00:9e:dc:5e:46:88:ca:fb:67:c4:a4:00:e6:82:37:cd:
         8b:ac:2f:57:8a:4a:4b:28:d3:f2:80:01:04:12:6e:a9:7d:3c:
         f6:8f:2b:c0:0a:3a:bd:61:30:5b:95:31:61:f9:3f:b5:09:07:
         a8:f3:ca:ec:fe:21:fb:87:78:eb:6b:85:cb:93:e1:9e:e8:76:
         7c:f5:e7:48:a5:58:ec:42:90:92:ea:72:76:cb:2c:a8:b4:0f:
         53:53:42:4b:93:82:2f:99:49:b2:1f:0e:6c:fe:f2:79:69:6c:
         64:d6:61:5d:9d:ae:31:1a:4f:31:04:ad:7c:c3:e7:f9:3b:d1:
         ab:43:ff:51:13:03:00:c0:2e:4b:76:05:28:f0:24:d8:b1:6e:
         e6:b8:04:2e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4RTcxMTAvBgNVBAUTKDNENjIxNkQ1NUNCNTRGQzlCNTcwRjlGMjVGOUFERDBG
Mzc2OUI0REUwHhcNMjYwNTIwMDcwNTUzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTBkNWQ1MS0wYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvW7iU0PI9Jwvv3uHhHIQ0qTaUcY6FYYfqVyfvYS+7VKatVlTjo0ODHc1Re14
ao2YXSGoicgTFwRMqaVa7jzO9u1vMRFjf81jJo1Bg1FIhjQjneqIFLZa0xBnOZrt
1B/gJDY6GSInj+a6qayfZTl//pAsmK0FDYIrOe36dst0nxK18wZB3O/3dIsduIXu
JBdeCkOhHp1MHSrs0PZM5IEtavKtTSw8xw92hrqVM0gqhQIAwy8FynXfNzANXTS/
1JnbaWU8r4KVQVoGmPfOO71UjpWpQS1OIwBBrPa8Z13fNcYSgAWYLVZ40jxRrq/h
4evhJuRCLtgOibgjBH1yUxcEvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN1T0Eri
0ised0eOaW9djVKeYbm2MB8GA1UdIwQYMBaAFD1iFtVctU/JtXD58l+a3Q83abTe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzhFNy9DNjJCMjk4Njkz
NDIxMUYwQTk4Nzc4M0JDNEY5QUUwMi9QV0lXMVZ5MVQ4bTFjUG55WDVyZER6ZHB0
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BXSVcxVnkxVDhtMWNQbnlYNXJkRHpkcHRONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM4RTcvQzYyQjI5ODY5MzQyMTFGMEE5ODc3ODNCQzRGOUFFMDIvNTczNzBBNEM1
NDFBMTFGMUE2REM1NkUwOTY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBSjQMMA0GCSqGSIb3DQEBCwUAA4IBAQAszodExu3nhmAJ28QMMI6x
8FuLXQ6rDi+XT1XXWKUvHa6kytZXzMeb6vyqDIjufHduQIrbD07m2/8gNVgI83rK
WpgTBF/mBSre+p5/jTCjVxy9z34YXxJp1e6o+APS4j/73sEYz2+6PfPE/E4P0gCe
3F5GiMr7Z8SkAOaCN82LrC9XikpLKNPygAEEEm6pfTz2jyvACjq9YTBblTFh+T+1
CQeo88rs/iH7h3jra4XLk+Ge6HZ89edIpVjsQpCS6nJ2yyyotA9TU0JLk4IvmUmy
Hw5s/vJ5aWxk1mFdna4xGk8xBK18w+f5O9GrQ/9REwMAwC5LdgUo8CTYsW7muAQu
-----END CERTIFICATE-----
Generated at Thu May 28 18:28:23 2026 by rpki-client