Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57D03776541A11F1A6DC56E096833773.roa
File:                     57D03776541A11F1A6DC56E096833773.roa (raw, json)
Hash identifier:          1/ly3gbzzHsEredH3SCX4WT410rNWOV5BE86E0PdOpo=
Subject key identifier:   02:17:EC:AB:E2:78:AF:8D:67:2C:6D:FE:F4:2F:6C:C0:3D:DD:CD:DD
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       C5
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57D03776541A11F1A6DC56E096833773.roa
Signing time:             Wed 20 May 2026 07:05:54 +0000
ROA not before:           Wed 20 May 2026 07:05:54 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     8143
IP address blocks:        74.52.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:41:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: May 20 07:05:54 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a0d5d52-2579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:99:17:d3:98:fa:18:38:fe:cd:7b:52:9e:
                    31:b4:fc:2f:6d:45:d0:cc:99:30:59:ab:d5:d3:58:
                    9c:78:f3:85:ab:d3:e7:ef:04:61:b0:3b:96:e2:0d:
                    4b:10:60:61:52:4b:a2:4e:f6:0b:82:5c:b9:91:51:
                    a6:02:6a:d6:6f:4e:0f:26:7d:af:01:96:3d:29:42:
                    d9:82:36:02:63:c4:00:61:70:37:80:81:82:26:55:
                    18:3f:ba:b8:95:b1:80:12:60:fb:6d:f5:53:e9:ae:
                    58:7d:2d:82:72:53:85:8f:69:3d:d5:b4:2e:37:44:
                    3e:da:92:a8:18:d7:7a:2c:dc:4f:0b:6d:dc:b4:df:
                    b0:51:e7:f4:57:96:97:e0:8e:a1:84:5f:c9:75:6f:
                    d2:05:99:a4:ac:30:82:5d:12:43:f3:90:c1:73:f8:
                    28:4f:7c:1b:6b:ec:ce:ad:e8:71:69:5a:b7:81:d2:
                    f3:cc:10:ff:9b:7d:e6:8a:ad:10:86:31:e1:45:9e:
                    11:5d:4c:a3:54:45:10:64:bc:53:7f:aa:b0:10:12:
                    37:fa:5f:a6:36:63:d6:d4:85:d7:3c:5b:bb:9a:34:
                    ae:e9:15:be:df:78:72:1a:a1:ca:fa:22:a0:9b:c4:
                    a7:ee:d4:df:4a:ba:c3:dd:91:f2:ea:76:9c:55:a6:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:17:EC:AB:E2:78:AF:8D:67:2C:6D:FE:F4:2F:6C:C0:3D:DD:CD:DD
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/57D03776541A11F1A6DC56E096833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:de:fd:58:20:15:e9:b1:85:0f:6a:20:84:d8:c8:ef:b1:93:
         31:66:9c:3b:ad:f1:96:35:c5:e4:92:c4:c4:3b:07:39:92:21:
         a8:23:12:e9:47:7b:84:39:37:fa:e6:24:33:27:d4:31:33:89:
         f3:ca:b0:6f:a0:60:64:cc:1d:7a:da:2b:72:a0:64:5d:fd:ca:
         f2:ae:cd:e3:54:7b:a5:4c:2f:a1:e4:09:6d:2b:81:c0:60:2c:
         0e:9b:cd:34:bb:0d:ec:ff:91:3b:18:1b:c9:36:36:99:c2:cb:
         e3:2a:eb:b2:01:8e:b7:1f:ba:c6:f9:d4:2b:ef:25:36:04:d7:
         50:33:94:f8:6d:26:26:0c:0c:18:e3:0d:5b:b1:b4:26:b4:46:
         8b:6e:27:d4:75:b4:a9:63:33:4e:92:c4:14:17:40:a9:35:cd:
         1e:43:81:73:e2:1a:d8:ea:83:a1:20:c7:01:e8:b3:bf:ec:d0:
         1b:b2:b4:c5:36:a0:85:40:f3:cc:2b:49:b2:b5:78:2d:79:25:
         c9:c3:34:4d:78:0b:f0:ff:9c:ce:35:d8:f2:ff:64:4d:d5:0b:
         16:f9:db:d5:8f:d6:d5:8a:2d:97:fb:ba:5d:08:d3:6a:4a:17:
         e6:8a:ef:92:7c:fa:ae:c2:19:7d:9d:cb:76:35:d4:d2:7f:ce:
         95:e2:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 15:05:08 2026 by rpki-client