Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/B36100BE958F11F1853404D43611F970.roa
File:                     B36100BE958F11F1853404D43611F970.roa (raw, json)
Hash identifier:          9pM1C/xo1Jb93spuccqhJ/7kFPLqovbuJiBp15FDz8U=
Subject key identifier:   20:25:19:EB:26:FC:06:47:5E:DB:D4:51:C4:5D:F5:D5:FA:48:EA:C2
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       0152
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/B36100BE958F11F1853404D43611F970.roa
Signing time:             Sun 04 Oct 2026 20:40:42 +0000
ROA not before:           Sun 04 Oct 2026 20:40:42 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     18013
IP address blocks:        74.52.30.0/24 maxlen: 24
                          74.52.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 20:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Oct  4 20:40:42 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac2b9ca-ec57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e1:37:81:88:06:4f:d4:f7:96:95:51:7b:bb:
                    6f:b0:07:21:ce:ff:1b:56:e3:b4:72:05:17:5d:4d:
                    fb:cf:ef:81:17:46:64:87:a2:0b:eb:56:1f:11:12:
                    bf:19:2c:51:91:57:0c:50:4d:98:a9:56:ff:d5:f4:
                    95:f2:c5:2e:bf:49:97:db:70:1a:11:34:7e:89:a8:
                    cc:09:e0:92:33:18:d4:4b:8b:55:e4:7b:dc:8e:ed:
                    d5:fe:04:d1:25:1d:20:cf:83:92:ea:89:17:51:91:
                    40:18:af:67:37:6b:9e:9b:01:d2:15:ec:50:9a:bd:
                    d8:84:13:84:f6:e1:74:61:d0:25:3d:c6:4d:19:61:
                    f0:7a:e8:e8:a5:43:27:5e:5f:78:ea:67:58:6e:56:
                    bb:f0:15:3c:b1:11:e4:02:9e:e2:31:21:11:c1:c5:
                    39:91:05:00:a1:1f:a8:63:2a:f1:c3:47:78:f1:83:
                    66:a0:39:f6:0a:9c:0f:1f:18:a3:7a:b6:aa:42:2f:
                    89:49:10:57:63:26:d8:0c:f5:20:5f:96:88:72:05:
                    c8:1d:19:88:d8:07:bc:86:95:26:b9:37:2d:2a:9c:
                    34:08:81:19:d8:d3:7f:92:a1:df:1a:30:ec:90:09:
                    27:96:6d:bf:03:39:d4:83:3c:0d:60:81:98:f8:3d:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:25:19:EB:26:FC:06:47:5E:DB:D4:51:C4:5D:F5:D5:FA:48:EA:C2
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/B36100BE958F11F1853404D43611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:49:d5:fc:24:32:10:fe:1c:a0:e3:c6:09:1c:e4:04:35:b4:
         12:e8:20:9d:11:24:29:4a:da:e9:a2:c5:25:bf:a2:db:12:06:
         32:42:9d:a2:f3:58:b9:3d:f4:42:bb:07:45:67:4e:4d:85:5a:
         aa:27:d6:87:32:df:d7:fa:6f:d3:20:a1:f2:26:70:41:03:a8:
         ee:dd:6c:31:5a:6d:0e:21:4b:bf:10:31:55:db:44:12:c7:14:
         e6:3b:48:cd:f5:77:54:51:27:6f:01:92:8d:ab:7c:cf:bc:bb:
         4c:2e:db:e4:e2:30:0f:20:35:f7:ec:b3:f2:78:9d:c7:80:d0:
         1a:86:f6:ba:27:76:17:f8:87:d4:a3:5c:2e:f7:ad:9b:d7:66:
         ef:01:80:ab:cb:a7:2f:d0:14:b0:77:7a:fc:90:8a:84:5e:0f:
         8e:46:08:57:d1:85:3d:ba:d9:15:17:f6:4e:fa:dc:ec:2e:8b:
         22:6a:8b:2d:1e:c3:1d:2c:d0:97:d7:fd:d0:d7:24:92:21:7f:
         7d:87:24:88:df:17:31:df:0c:e5:ea:99:ef:3e:4f:64:40:e6:
         43:76:ee:1c:07:54:6b:ab:07:cd:be:c6:ff:c7:92:c2:02:67:
         b4:47:a3:61:67:d0:6b:02:12:c2:97:95:74:8f:cd:b5:41:d2:
         de:db:9c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:15:31 2026 by rpki-client