Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/E51B21C4965311F1B6AAEF027011F970.roa
File:                     E51B21C4965311F1B6AAEF027011F970.roa (raw, json)
Hash identifier:          PFj7XOgfVJJX1PHud4r6mM9JB2B33xHihqLF3mywRiA=
Subject key identifier:   16:FE:88:42:AD:EC:AB:0C:2A:DA:DA:08:34:5B:A6:29:7F:F5:C5:C6
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       014F
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/E51B21C4965311F1B6AAEF027011F970.roa
Signing time:             Sun 04 Oct 2026 20:40:36 +0000
ROA not before:           Sun 04 Oct 2026 20:40:36 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     154047
IP address blocks:        74.52.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 13:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Oct  4 20:40:36 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac2b9c4-dbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:99:fb:fd:14:00:13:2e:28:dd:02:87:a9:
                    e7:f3:2c:51:f7:65:ef:49:64:02:30:14:37:1e:83:
                    89:21:77:bf:3b:ce:af:46:86:05:1a:ce:4d:6d:7f:
                    15:06:3f:18:5f:d0:8b:f1:42:a0:6d:54:bd:9d:8f:
                    c4:2c:e8:7c:a1:5b:6d:e3:62:78:7e:4a:6c:98:a2:
                    0b:a3:68:d1:d4:7c:0f:58:98:6f:db:16:f3:a8:64:
                    66:02:66:c9:14:d1:e0:3b:56:57:2d:b9:c4:b3:6c:
                    a0:07:b1:7a:7a:ae:b5:e9:e9:f9:b5:61:70:f0:47:
                    8c:e8:6c:f5:52:02:3f:0b:50:18:f1:db:e6:af:01:
                    6b:a3:43:fe:f6:1d:90:b6:7e:4b:8c:9f:21:20:49:
                    1d:dd:dc:8a:1a:18:9b:34:bd:0a:c0:05:f8:35:dc:
                    b7:db:e2:4f:09:05:0c:f0:57:43:45:73:c4:2f:a4:
                    d9:66:94:59:c3:b9:66:d0:0f:e2:9a:62:e5:6b:7c:
                    ed:a2:53:c0:ae:5f:07:9a:7f:1d:30:de:a2:a0:31:
                    d5:e0:e8:44:7e:77:50:92:e8:6b:bc:d5:7c:44:fc:
                    82:ea:3c:1f:02:9e:65:28:90:ed:47:b1:69:6f:8a:
                    2c:9f:0a:d0:f9:49:a3:3b:9c:af:45:8e:6a:ea:e1:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FE:88:42:AD:EC:AB:0C:2A:DA:DA:08:34:5B:A6:29:7F:F5:C5:C6
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/E51B21C4965311F1B6AAEF027011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:88:c4:11:50:82:43:29:d5:50:cd:25:5d:b1:a2:f9:9e:88:
         c6:2b:1c:87:12:43:31:84:17:16:bf:2d:a8:b3:cb:d9:18:5f:
         bb:5a:20:82:21:f8:85:30:4f:32:03:d0:2e:1a:c2:44:19:4f:
         35:d9:8c:98:d2:59:9d:75:c0:de:9e:cf:d1:e3:6e:a0:cb:2b:
         3f:79:8d:ec:c3:cb:99:07:98:33:a7:ad:32:b4:68:a4:a9:80:
         b4:f5:71:36:b7:e5:89:a0:a0:b5:a3:fb:58:53:44:73:ed:4b:
         6c:8b:d0:f6:0c:32:b0:34:3c:67:4b:4b:9e:73:2f:92:e6:3f:
         a5:18:8a:db:fb:36:a2:e4:9f:69:2f:94:01:b4:7a:c3:0e:c5:
         cd:70:c0:43:eb:fd:47:99:bc:f9:5b:73:82:30:2a:c9:30:8d:
         a9:26:f4:a6:58:69:29:7b:0a:0e:bb:39:45:1c:ad:e8:10:01:
         b9:84:f2:08:ae:8d:32:9b:28:08:ce:9a:6c:a6:35:25:f8:a2:
         fc:8b:19:ba:d2:ee:c3:24:45:72:05:dd:8e:3f:2b:17:01:81:
         25:79:39:51:ef:8c:65:fb:fe:14:55:66:f4:f4:db:db:5b:8a:
         52:48:3c:08:2f:c5:08:0a:6d:6a:c5:40:58:2f:ad:21:4a:1d:
         bb:ab:6b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:22:22 2026 by rpki-client