Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/E5B24FEA965311F1B6AAEF027011F970.roa
File:                     E5B24FEA965311F1B6AAEF027011F970.roa (raw, json)
Hash identifier:          n1QXap4Fv0KEAuEDKj5UHRpvTy9j5PeOJxNRqTfJs3M=
Subject key identifier:   F8:14:D3:54:5D:9B:89:1F:E3:0A:CA:CB:85:35:1F:A8:8D:34:FF:56
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       011A
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/E5B24FEA965311F1B6AAEF027011F970.roa
Signing time:             Wed 12 Aug 2026 13:44:11 +0000
ROA not before:           Wed 12 Aug 2026 13:44:11 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     45474
IP address blocks:        74.52.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Sep 2026 20:38:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Aug 12 13:44:11 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a7c78aa-9304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bb:6a:00:56:ed:65:a2:d2:00:6d:39:e2:f7:
                    02:58:18:11:d1:01:92:63:8d:58:73:db:fd:d1:3e:
                    7f:99:5f:ec:79:01:9d:e9:a3:c7:80:8f:55:94:83:
                    1a:ef:e5:ac:79:5f:8a:8c:b8:cc:7e:a5:de:e5:c0:
                    8e:4d:3d:f1:5a:17:fb:80:af:fc:27:cf:f7:0c:1e:
                    e9:a1:ce:f4:a5:dc:40:30:e3:7f:eb:26:66:49:42:
                    e0:02:fc:fe:91:58:d4:a5:73:2b:6c:fb:02:a9:e2:
                    ea:06:ae:83:25:7d:7f:b7:02:1c:26:f1:d3:ae:5c:
                    21:c2:b7:9a:e0:1e:71:b1:12:be:69:63:f9:9b:14:
                    33:66:94:60:33:e6:3c:4e:73:c1:4f:31:37:82:1b:
                    01:96:ef:d5:bf:cb:33:ce:ef:9b:f5:66:6f:df:cb:
                    21:b6:b8:18:35:22:02:1b:5b:e5:6a:e3:eb:a5:fa:
                    dd:c2:d4:e9:be:e4:0d:1d:30:c0:9a:e8:15:56:2b:
                    2c:f0:3f:b7:cc:84:04:7a:0c:ad:05:df:82:76:2d:
                    ae:e7:4f:3b:41:d4:21:53:77:4d:f2:a0:8a:08:b3:
                    4b:7d:fb:4c:ec:e5:24:75:41:fd:f8:ef:4b:f1:de:
                    da:44:82:7f:d5:c6:5b:0b:14:e4:5a:af:c1:97:be:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:14:D3:54:5D:9B:89:1F:E3:0A:CA:CB:85:35:1F:A8:8D:34:FF:56
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/E5B24FEA965311F1B6AAEF027011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:10:59:25:2b:b7:1d:7f:9c:dc:15:30:9e:9d:13:ba:15:14:
         36:8f:6c:c5:68:4a:c6:d2:56:c1:d1:52:c9:22:99:64:eb:6f:
         d9:4d:bf:95:b7:9b:09:b9:ef:34:53:17:aa:f1:69:9e:98:5b:
         a1:f3:03:df:18:b4:e7:41:54:7e:06:72:ff:82:41:e0:cc:9b:
         5e:a6:d7:e2:d3:44:87:97:41:3b:3e:ec:17:32:71:14:2a:3d:
         c6:4e:f3:be:19:be:cf:fd:a2:12:29:e3:91:af:e5:8d:2c:71:
         f0:35:fa:7d:1e:b8:2c:78:4f:df:26:c5:8f:d6:d5:cc:37:0e:
         85:e1:14:ca:16:2e:60:c7:6e:2f:e4:41:eb:d7:3d:3b:38:4b:
         e5:1d:dc:b8:de:1b:55:82:ce:86:d3:6e:b8:53:93:dc:af:6b:
         f7:b9:a3:3c:d6:5d:89:5b:b7:ed:ae:8b:69:fc:cc:8d:9d:00:
         e6:66:c3:15:ae:03:c4:9d:06:f3:5b:84:b4:f4:de:3a:21:38:
         cc:ba:38:be:d5:df:c4:37:57:92:fd:cb:24:7f:5f:2a:c4:bc:
         fe:cb:36:69:f7:79:0f:d1:cf:58:7f:7d:8f:c9:0a:4a:23:9d:
         b4:a1:cf:50:72:bf:98:d0:34:01:61:85:0c:eb:0d:e4:19:e9:
         3d:d1:b9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:16 2026 by rpki-client