Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/F5B4E5A0997E11F190B827626411F970.roa
File:                     F5B4E5A0997E11F190B827626411F970.roa (raw, json)
Hash identifier:          lZ9ga1JlhgTuJE+sDHtBRl1RAezAeE+MSwEko6B+lYU=
Subject key identifier:   24:9D:78:B7:2D:54:A8:48:E0:98:B4:36:C0:B6:C0:B3:64:0F:52:02
Certificate issuer:       /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial:       0159
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/F5B4E5A0997E11F190B827626411F970.roa
Signing time:             Sun 04 Oct 2026 20:40:57 +0000
ROA not before:           Sun 04 Oct 2026 20:40:57 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     22160
IP address blocks:        74.52.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
                          rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 20:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
        Validity
            Not Before: Oct  4 20:40:57 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac2b9d9-bf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:2c:20:16:36:bf:82:c8:88:b7:cd:52:ae:
                    2b:3b:83:62:d1:b0:2a:2a:32:b7:bc:45:32:af:be:
                    cf:31:bc:2c:07:85:a9:be:4c:2b:e6:73:3d:80:1e:
                    87:f4:cf:55:97:09:6f:2a:5e:41:39:ae:75:1d:53:
                    9a:9a:f9:54:4e:60:fb:f8:37:89:2e:2e:c1:ef:c5:
                    37:e1:6f:18:4a:52:e9:be:61:c9:72:d7:a0:8d:f4:
                    94:74:99:f2:aa:0c:13:5b:3b:63:77:7b:77:b8:af:
                    65:40:e6:21:d4:d0:3c:4b:a6:2f:66:c5:26:5b:b1:
                    69:b0:a6:db:5f:75:a5:ea:09:7b:95:8e:d4:92:1b:
                    40:e5:aa:c3:b7:ce:14:70:9a:b9:47:45:64:19:fe:
                    88:6e:25:7b:6b:14:2f:3d:b6:60:99:90:88:4c:88:
                    56:f9:3a:15:52:59:ee:d2:03:f1:f4:7a:ff:91:49:
                    42:86:2f:c3:d2:c7:fa:6b:fc:6a:ed:10:f6:37:d3:
                    c1:26:d7:a7:cf:ff:90:40:b8:dd:90:1b:7f:fc:70:
                    6f:97:4f:56:17:a6:30:f8:23:0d:c1:9b:cb:ca:53:
                    6b:ee:95:42:67:bc:11:e3:e6:2b:7d:d6:49:d9:33:
                    48:22:e4:65:53:c6:27:46:13:6f:92:4d:1f:1d:1c:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9D:78:B7:2D:54:A8:48:E0:98:B4:36:C0:B6:C0:B3:64:0F:52:02
            X509v3 Authority Key Identifier:
                keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/F5B4E5A0997E11F190B827626411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.52.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:4d:4f:86:ea:4e:9d:93:2a:f9:39:f8:09:af:49:21:a1:
         ae:48:3e:bc:10:dd:96:c2:06:41:c9:42:80:4e:77:6e:f2:44:
         71:88:c8:6e:72:10:99:47:0f:9a:b7:54:32:16:55:f8:e4:86:
         e1:da:3b:7f:76:83:cb:db:1f:a7:37:11:01:83:c6:12:5d:2a:
         65:cb:49:2e:22:72:2b:53:cc:7d:09:fe:41:9c:fa:08:2b:60:
         1e:62:86:6d:eb:70:40:ea:46:58:48:c0:c4:3c:39:72:33:9f:
         17:75:a2:e4:2b:31:88:96:08:36:71:8a:00:ad:ad:f5:49:d2:
         3d:3e:b0:72:16:fa:33:ef:d1:1d:ba:fa:05:9f:d1:38:0d:bb:
         a6:40:85:27:56:7a:22:16:67:b6:a5:2d:82:e7:0e:e8:02:1f:
         7c:7b:ab:00:3d:0b:1e:e9:28:68:82:20:4b:5f:ce:c6:8e:5c:
         ad:b0:b9:67:45:dc:24:c7:f2:2a:e4:69:6d:e5:e9:f7:c3:a3:
         af:6f:10:a1:6e:34:f3:e9:57:97:05:7d:d4:ae:95:31:03:6c:
         c9:11:2e:ea:e8:19:27:ec:87:f6:81:3a:19:32:40:14:a5:11:
         7a:0e:9d:d1:55:6f:a1:d0:07:16:a6:0a:60:b3:dc:47:4c:cd:
         4d:de:94:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:57:23 2026 by rpki-client