Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/E51B21C4965311F1B6AAEF027011F970.roa
File:                     E51B21C4965311F1B6AAEF027011F970.roa (raw, json)
Hash identifier:          biq88vO9CEHjMnLulBtUgawpd/kQwxBTdW+v2csmjzk=
Subject key identifier:   43:1C:FB:86:B7:E9:61:17:75:03:E3:50:F4:A8:36:C3:DA:4F:60:26
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       0119
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/E51B21C4965311F1B6AAEF027011F970.roa
Signing time:             Wed 12 Aug 2026 13:44:10 +0000
ROA not before:           Wed 12 Aug 2026 13:44:10 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154047
IP address blocks:        74.52.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Sep 2026 20:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Aug 12 13:44:10 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a7c78a9-3481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:27:9c:f6:62:0f:8b:53:63:39:d6:99:dc:
                    e6:cd:98:f9:1e:b5:8d:0e:97:41:8c:f9:fc:2d:05:
                    b6:45:35:6f:e0:e0:98:fb:86:49:d7:f3:d6:36:86:
                    56:30:bc:f1:f0:d2:d6:06:89:7a:0b:59:fe:8a:92:
                    d3:07:6d:9a:ff:b8:6f:cb:20:c9:4e:9d:af:96:fd:
                    2b:3a:88:16:51:0f:33:8b:9d:86:12:70:be:2c:6f:
                    54:90:87:dc:03:8e:ad:5e:d6:d4:21:51:8e:fd:61:
                    80:41:5b:5e:6c:e9:09:cb:51:78:a4:1e:9f:61:1b:
                    7a:31:20:db:54:51:22:c1:ac:76:c4:d6:3a:67:a4:
                    19:a8:22:7c:71:68:f0:4b:5f:e8:71:ab:79:93:f1:
                    22:e1:f6:70:d0:07:50:96:28:a8:e5:60:f5:6a:b1:
                    dc:20:f5:51:aa:1f:81:2c:87:d0:ce:77:4b:3a:d3:
                    8b:81:b5:2c:e6:b3:54:3d:3b:20:90:65:e4:8f:91:
                    1c:ee:e8:07:d0:4b:80:23:6b:c4:6d:94:df:20:73:
                    4c:ec:5e:e5:25:0f:2b:32:00:6f:c6:cb:15:30:67:
                    90:e5:21:4a:34:84:2d:d6:13:16:6b:c3:5a:98:bc:
                    3b:1f:57:5b:f4:4c:ed:ef:6a:0b:a1:fd:3b:14:93:
                    90:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1C:FB:86:B7:E9:61:17:75:03:E3:50:F4:A8:36:C3:DA:4F:60:26
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/E51B21C4965311F1B6AAEF027011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:88:13:35:4e:3a:d9:31:df:15:6c:fb:7c:59:80:69:3f:5b:
         4f:9c:88:dc:9a:db:1b:17:35:db:37:63:44:21:66:30:cc:7a:
         ed:3a:9a:05:35:c4:c8:b7:bd:fc:97:81:64:ab:46:4a:05:1e:
         08:31:90:ad:59:84:af:89:6c:bf:be:d8:9c:74:20:5b:70:e3:
         32:d5:30:55:1a:89:35:c5:61:8b:df:03:25:f2:76:d4:52:56:
         6f:78:55:f1:c9:47:4e:ef:72:a7:be:4d:98:14:5a:28:88:50:
         b1:4d:31:a0:0a:f6:11:a9:e1:59:a4:70:51:8d:36:0f:2b:a2:
         38:e0:cb:7c:77:2f:8f:49:a2:ea:f6:3b:5b:f6:13:82:ca:f0:
         2a:63:d8:0a:52:5c:a3:33:51:50:ff:2f:32:79:74:e0:f3:08:
         96:b4:bc:90:be:47:98:08:cd:fe:79:8b:74:49:78:5a:f4:dc:
         cc:3d:c8:e9:4b:52:92:fd:e8:34:5b:e8:c0:7b:84:3f:e8:68:
         f4:de:94:24:37:e5:ed:90:b0:6b:25:b6:1f:5f:f4:80:47:aa:
         28:d1:bf:7b:25:ba:d6:7b:01:ee:02:1d:62:7c:65:78:05:c5:
         72:48:35:fa:78:97:54:e4:8f:95:f3:b1:27:a4:00:91:b1:69:
         09:48:1f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:56 2026 by rpki-client